last executing test programs: 16.234304893s ago: executing program 1 (id=462): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.010127641s ago: executing program 1 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fadvise64(r2, 0x3, 0xb1, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000380)='./file0\x00', 0x125102, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) rt_sigsuspend(0x0, 0x0) fchdir(r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x6000, @fd=r3, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='n', 0x1}, {0x0}], 0x2}) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r6, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 14.283317959s ago: executing program 2 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 13.90769439s ago: executing program 1 (id=474): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000004700000001"], 0x48) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 13.736271634s ago: executing program 1 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x41, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13.178535818s ago: executing program 2 (id=476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 13.073370397s ago: executing program 2 (id=477): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000001880)=[{&(0x7f0000000000)="89e7ee2c7cdad9", 0x7}, {&(0x7f0000001940)="147c000000000000000066c9824bb25c", 0x10}], 0x2) 7.592243699s ago: executing program 2 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x8, 0x7f49, 0x800, 0x2, {{0x5, 0x4, 0x1, 0xa, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote}}}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket$inet(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000040000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) unshare(0x2a060400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x8, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xa}, {0xfff2, 0x6}, {0x5, 0xfffa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001"], 0x28}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES16=r11, @ANYBLOB="796104000000000001007e190000"], 0x14}}, 0x0) fadvise64(0xffffffffffffffff, 0x100000000, 0xff36, 0x3) 1.096442222s ago: executing program 4 (id=517): socket$inet6(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbe8251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) 1.022813648s ago: executing program 4 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e24000000002e003a000000003a000000000000005f02000000200002000a0000000000000cff010000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 921.348256ms ago: executing program 4 (id=519): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x2, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast}, 0x10) 760.215339ms ago: executing program 4 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380"], 0xfc}}, 0x0) 518.264828ms ago: executing program 3 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) 517.732198ms ago: executing program 4 (id=522): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = timerfd_create(0x9, 0x80000) timerfd_gettime(r3, &(0x7f0000000400)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) syz_emit_ethernet(0xda, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f0000000080)='\xe3', 0xffffffffffffffff) mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0x18fed, 0xfffffffffffffff8, 0x0) 354.245491ms ago: executing program 3 (id=523): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) 142.372728ms ago: executing program 3 (id=524): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) fstat(0xffffffffffffffff, 0x0) 22.443558ms ago: executing program 1 (id=525): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x9c}}, 0x0) 0s ago: executing program 3 (id=526): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 71.492486][ T4254] cgroup: Unknown subsys name 'net' [ 71.641332][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.160976][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.277249][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.288120][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.296320][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.315896][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.325172][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.334892][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.343332][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.351726][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.352242][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.361020][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.374934][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.375981][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.382858][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.390720][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.397009][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.403265][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.411322][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.419398][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.424971][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.431930][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.445109][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.446347][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.453134][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.460006][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.468131][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.474073][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.480917][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.496091][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.521386][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.529625][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.977904][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 76.110490][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 76.133663][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 76.167173][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.174589][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.182932][ T4271] device bridge_slave_0 entered promiscuous mode [ 76.202665][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 76.216150][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.223293][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.235211][ T4271] device bridge_slave_1 entered promiscuous mode [ 76.307571][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.336415][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.354916][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 76.448586][ T4271] team0: Port device team_slave_0 added [ 76.456530][ T4271] team0: Port device team_slave_1 added [ 76.469381][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.477569][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.486133][ T4277] device bridge_slave_0 entered promiscuous mode [ 76.502130][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.509342][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.518537][ T4265] device bridge_slave_0 entered promiscuous mode [ 76.533603][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.540994][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.549734][ T4276] device bridge_slave_0 entered promiscuous mode [ 76.557516][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.564864][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.572828][ T4277] device bridge_slave_1 entered promiscuous mode [ 76.583461][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.590963][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.599178][ T4265] device bridge_slave_1 entered promiscuous mode [ 76.616356][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.623505][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.631789][ T4276] device bridge_slave_1 entered promiscuous mode [ 76.660906][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.668200][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.694808][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.735723][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.742746][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.769064][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.792683][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.813484][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.825435][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.840081][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.851296][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.890555][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.915294][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.922425][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.931146][ T4267] device bridge_slave_0 entered promiscuous mode [ 76.940196][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.947673][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.955796][ T4267] device bridge_slave_1 entered promiscuous mode [ 76.965778][ T4265] team0: Port device team_slave_0 added [ 77.005472][ T4265] team0: Port device team_slave_1 added [ 77.030161][ T4276] team0: Port device team_slave_0 added [ 77.038632][ T4277] team0: Port device team_slave_0 added [ 77.062246][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.073685][ T4276] team0: Port device team_slave_1 added [ 77.081290][ T4277] team0: Port device team_slave_1 added [ 77.091162][ T4271] device hsr_slave_0 entered promiscuous mode [ 77.098614][ T4271] device hsr_slave_1 entered promiscuous mode [ 77.125659][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.163895][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.171709][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.197725][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.238599][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.246578][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.272642][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.285238][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.292231][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.318674][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.339041][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.346203][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.372749][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.389239][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.396393][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.422669][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.434342][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.441335][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.467912][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.485819][ T4267] team0: Port device team_slave_0 added [ 77.515659][ T4267] team0: Port device team_slave_1 added [ 77.536551][ T4277] device hsr_slave_0 entered promiscuous mode [ 77.543317][ T4277] device hsr_slave_1 entered promiscuous mode [ 77.550204][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.558677][ T4277] Cannot create hsr debugfs directory [ 77.565150][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 77.571541][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 77.578499][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 77.633027][ T4276] device hsr_slave_0 entered promiscuous mode [ 77.640266][ T4276] device hsr_slave_1 entered promiscuous mode [ 77.645011][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 77.647203][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 77.659594][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.667325][ T4276] Cannot create hsr debugfs directory [ 77.717389][ T4265] device hsr_slave_0 entered promiscuous mode [ 77.725420][ T4265] device hsr_slave_1 entered promiscuous mode [ 77.732089][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.739754][ T4265] Cannot create hsr debugfs directory [ 77.745893][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.752958][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.779310][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.818328][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.825481][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.851671][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.009580][ T4267] device hsr_slave_0 entered promiscuous mode [ 78.016546][ T4267] device hsr_slave_1 entered promiscuous mode [ 78.023065][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.031022][ T4267] Cannot create hsr debugfs directory [ 78.169236][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.186157][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.211694][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.233634][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.293801][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.332367][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.354713][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.367903][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.469245][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.480286][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.491432][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.509531][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.605424][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.626373][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.642907][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.656646][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.691686][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.719955][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.772052][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.785057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.796200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.808606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.817315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.828776][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.839537][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.857903][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.865540][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.876214][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.887098][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.901165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.911397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.921100][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.928604][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.940618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.968355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.977701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.987345][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.994546][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.004041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.012158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.020291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.029603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.038677][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.045878][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.054583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.063611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.072495][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.079683][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.087773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.122801][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.137407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.150794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.161024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.171801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.200862][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.210838][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.220350][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.231778][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.240975][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.248183][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.259418][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.268894][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.277853][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.285137][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.293276][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.302659][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.312420][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.321337][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.329771][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.344526][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.363283][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.373609][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.408686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.418256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.427574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.439089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.448178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.459301][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.468840][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.480143][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.491315][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.508057][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.519661][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.538677][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.547786][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.556908][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.584301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.599496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.611053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.626439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.645480][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 79.651697][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 79.657994][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 79.690094][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.703931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.713857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.724319][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 79.731462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.740598][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 79.747921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.771657][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.790646][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.807500][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.843750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.866954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.907327][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.943137][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.956137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.968839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.006518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.025107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.044168][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.051814][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.063211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.072394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.081620][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.088839][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.098458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.108068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.140626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.155323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.184838][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.191999][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.215954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.233814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.243215][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.250475][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.260262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.308077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.321839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.345071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.375910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.385676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.405165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.420229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.429542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.438345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.488271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.500021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.509369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.520336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.529913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.538904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.548198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.557754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.566897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.574708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.582256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.591147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.616694][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.628234][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.637690][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.646549][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.655086][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.665073][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.677480][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.686011][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.737311][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.756500][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.806978][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.826582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.841637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.851837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.868353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.929124][ T4265] device veth0_vlan entered promiscuous mode [ 80.945351][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.960361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.978491][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.988407][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.002133][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.013895][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.023784][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.033127][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.049582][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.058293][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.069266][ T4271] device veth0_vlan entered promiscuous mode [ 81.089921][ T4265] device veth1_vlan entered promiscuous mode [ 81.123334][ T4277] device veth0_vlan entered promiscuous mode [ 81.159547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.180473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.205436][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.215852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.241522][ T4271] device veth1_vlan entered promiscuous mode [ 81.270667][ T4277] device veth1_vlan entered promiscuous mode [ 81.341013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.350396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.362874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.372210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.382313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.391294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.401246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.410100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.420162][ T4265] device veth0_macvtap entered promiscuous mode [ 81.432641][ T4271] device veth0_macvtap entered promiscuous mode [ 81.448265][ T4271] device veth1_macvtap entered promiscuous mode [ 81.461484][ T4265] device veth1_macvtap entered promiscuous mode [ 81.478025][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.492634][ T4277] device veth0_macvtap entered promiscuous mode [ 81.523575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.532241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.541559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.551780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.560428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.570550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.583755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.601368][ T4277] device veth1_macvtap entered promiscuous mode [ 81.617418][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.629804][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.643620][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.660496][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.676734][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.685877][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.702097][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.711588][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.720760][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.726323][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 81.730172][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 81.735098][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 81.760386][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.773832][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.788265][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.800091][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.814674][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 81.816002][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 81.828998][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.853067][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.867859][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.878844][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.890538][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.901457][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.917298][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.929774][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.939846][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.956956][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.978164][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.989044][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.998053][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.007206][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.016515][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.027509][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.038539][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.049738][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.060569][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.073732][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.119570][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.135994][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.151114][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.164065][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.185144][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.201173][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.220126][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.253912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.263929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.291179][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.301281][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.310506][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.319551][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.333504][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.343698][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.427609][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.437250][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.483859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.493511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.502755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.510862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.532643][ T4267] device veth0_vlan entered promiscuous mode [ 82.554336][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.569160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.591675][ T4267] device veth1_vlan entered promiscuous mode [ 82.599667][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.612987][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.622759][ T4276] device veth0_vlan entered promiscuous mode [ 82.630693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.640046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.650313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.659771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.711237][ T4276] device veth1_vlan entered promiscuous mode [ 82.735458][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.743605][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.760290][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.776849][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.789055][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.793623][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.805669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.813452][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.815050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.823292][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.845166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.853189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.863414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.872193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.881574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.890489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.902162][ T4267] device veth0_macvtap entered promiscuous mode [ 82.950322][ T4267] device veth1_macvtap entered promiscuous mode [ 82.987184][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.997914][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.012511][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.025922][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.040956][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.052444][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.063115][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.073991][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.087666][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.097181][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.108140][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.116913][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.126734][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.135030][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.143803][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.160269][ T4276] device veth0_macvtap entered promiscuous mode [ 83.179354][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.192883][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.209966][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.223551][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.239614][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.251000][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.283889][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.297306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.308750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.320201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.333861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.344953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.377954][ T4276] device veth1_macvtap entered promiscuous mode [ 83.400472][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.424408][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.440187][ T4386] netlink: 'syz.2.6': attribute type 3 has an invalid length. [ 83.453537][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.493334][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.643586][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.694343][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.694384][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.694400][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.694411][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.694423][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.694435][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.694447][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.704905][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.737602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.738526][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.739491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.743233][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.743252][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.743262][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.743274][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.743284][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.743295][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.743306][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.743317][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.760377][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.769046][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.769927][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.784378][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784450][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784476][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784501][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.804794][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 83.804836][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 83.804864][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 83.885178][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 83.885221][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 83.896512][ T4400] hub 6-0:1.0: USB hub found [ 83.896736][ T4400] hub 6-0:1.0: 1 port detected [ 84.080232][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.080289][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.092471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.093565][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.093616][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.095770][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.155548][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.155607][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.160773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.213580][ T4403] loop1: detected capacity change from 0 to 1024 [ 84.244586][ T4403] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 84.245465][ T4403] EXT4-fs error (device loop1): ext4_get_journal_inode:5735: inode #32: comm syz.1.2: iget: special inode unallocated [ 84.246570][ T4403] EXT4-fs (loop1): no journal found [ 84.246587][ T4403] EXT4-fs (loop1): can't get journal size [ 84.271812][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.271868][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.273401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.293219][ T4403] EXT4-fs (loop1): filesystem is read-only [ 84.293253][ T4403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.517197][ T4414] loop2: detected capacity change from 0 to 512 [ 84.584408][ T27] audit: type=1326 audit(1755392629.161:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.585858][ T27] audit: type=1326 audit(1755392629.171:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.587911][ T27] audit: type=1326 audit(1755392629.171:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.588848][ T27] audit: type=1326 audit(1755392629.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.589053][ T27] audit: type=1326 audit(1755392629.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.590154][ T27] audit: type=1326 audit(1755392629.171:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.603057][ T27] audit: type=1326 audit(1755392629.181:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.624269][ T4414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.624373][ T4414] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.625693][ T27] audit: type=1326 audit(1755392629.211:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.626535][ T27] audit: type=1326 audit(1755392629.211:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.632037][ T27] audit: type=1326 audit(1755392629.211:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 84.655535][ T4414] EXT4-fs: Ignoring removed orlov option [ 84.667694][ T4394] tty tty2: ldisc open failed (-12), clearing slot 1 [ 84.723482][ T4422] hub 6-0:1.0: USB hub found [ 84.764873][ T4414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.803808][ T4416] loop0: detected capacity change from 0 to 164 [ 84.889866][ T4422] hub 6-0:1.0: 1 port detected [ 84.919094][ T4414] EXT4-fs (loop2): can't enable nombcache during remount [ 85.217140][ T4416] Unsupported NM flag settings (8) [ 85.355326][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 85.496730][ T4431] Unsupported NM flag settings (8) [ 85.652652][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 85.747503][ T4441] device veth0 entered promiscuous mode [ 85.798179][ T4441] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 86.171754][ T4440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 86.232681][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 86.518722][ T4460] hub 6-0:1.0: USB hub found [ 86.544223][ T4460] hub 6-0:1.0: 1 port detected [ 86.658859][ T4464] loop4: detected capacity change from 0 to 1024 [ 86.705125][ T4464] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 86.723923][ T4464] EXT4-fs error (device loop4): ext4_get_journal_inode:5735: inode #32: comm syz.4.28: iget: special inode unallocated [ 86.799054][ T4464] EXT4-fs (loop4): no journal found [ 86.812695][ T4464] EXT4-fs (loop4): can't get journal size [ 86.833231][ T4464] EXT4-fs (loop4): filesystem is read-only [ 86.845569][ T14] cfg80211: failed to load regulatory.db [ 86.854532][ T4464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.127948][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 87.170793][ T4479] device geneve2 entered promiscuous mode [ 87.307286][ T4485] loop4: detected capacity change from 0 to 512 [ 87.329495][ T4485] EXT4-fs: Ignoring removed i_version option [ 87.394779][ T4485] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.36: corrupted in-inode xattr [ 87.423163][ T4485] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.36: couldn't read orphan inode 15 (err -117) [ 87.441030][ T4485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.572219][ T4485] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.36: Directory hole found for htree leaf block 0 [ 87.610551][ T4421] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 87.795011][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 87.805246][ T4497] hub 6-0:1.0: USB hub found [ 87.841410][ T4497] hub 6-0:1.0: 1 port detected [ 88.209573][ T4510] loop1: detected capacity change from 0 to 512 [ 88.216983][ T4510] EXT4-fs: Ignoring removed i_version option [ 88.227784][ T4510] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.241014][ T4510] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.519569][ T4510] EXT4-fs (loop1): 1 truncate cleaned up [ 88.526429][ T4510] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.256352][ T4525] sctp: [Deprecated]: syz.0.51 (pid 4525) Use of int in max_burst socket option deprecated. [ 89.256352][ T4525] Use struct sctp_assoc_value instead [ 89.695590][ T4534] loop4: detected capacity change from 0 to 512 [ 89.725764][ T4534] ======================================================= [ 89.725764][ T4534] WARNING: The mand mount option has been deprecated and [ 89.725764][ T4534] and is ignored by this kernel. Remove the mand [ 89.725764][ T4534] option from the mount to silence this warning. [ 89.725764][ T4534] ======================================================= [ 89.771606][ T4536] loop3: detected capacity change from 0 to 512 [ 89.860420][ T4536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.912091][ T4536] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.948745][ T4534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.990318][ T4534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.014143][ C0] sched: RT throttling activated [ 90.072775][ T4534] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.086649][ T4534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 90.097222][ T4534] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 90.107554][ T4534] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 90.116700][ T4534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.371941][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 90.383042][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 90.391761][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 90.502985][ T4544] loop0: detected capacity change from 0 to 764 [ 90.578946][ T4544] Symlink component flag not implemented [ 90.607668][ T4544] Symlink component flag not implemented (101) [ 90.609076][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 90.609091][ T27] audit: type=1326 audit(1755392635.189:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 90.696173][ T4552] hub 6-0:1.0: USB hub found [ 90.730127][ T4552] hub 6-0:1.0: 1 port detected [ 90.788584][ T27] audit: type=1326 audit(1755392635.189:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 90.895989][ T27] audit: type=1326 audit(1755392635.189:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.018076][ T4556] loop4: detected capacity change from 0 to 2048 [ 91.051344][ T27] audit: type=1326 audit(1755392635.189:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.136537][ T4556] Alternate GPT is invalid, using primary GPT. [ 91.178614][ T4556] loop4: p2 p3 p7 [ 91.180784][ T27] audit: type=1326 audit(1755392635.189:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.240898][ T27] audit: type=1326 audit(1755392635.229:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.379779][ T27] audit: type=1326 audit(1755392635.229:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.540684][ T27] audit: type=1326 audit(1755392635.229:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.643866][ T4572] loop0: detected capacity change from 0 to 512 [ 91.690214][ T4572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.697431][ T27] audit: type=1326 audit(1755392635.229:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.766515][ T4572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.789178][ T4425] udevd[4425]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 91.790577][ T4378] udevd[4378]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 91.841508][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 91.846055][ T4572] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 91.851444][ T27] audit: type=1326 audit(1755392635.229:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4546 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 91.967659][ T4572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 92.026649][ T4572] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 92.060518][ T4572] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 92.101203][ T4572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.290487][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 92.577100][ T4596] loop3: detected capacity change from 0 to 512 [ 92.618609][ T4596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.754787][ T4599] hub 6-0:1.0: USB hub found [ 92.769409][ T4596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.821224][ T4599] hub 6-0:1.0: 1 port detected [ 92.827927][ T4596] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.298271][ T4618] loop4: detected capacity change from 0 to 512 [ 93.359390][ T4618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.377535][ T4618] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.398387][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 93.406339][ T4618] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 93.424781][ T4618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 93.433804][ T4618] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 93.443719][ T4618] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 93.452673][ T4618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.526028][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 93.691955][ T4624] loop8: detected capacity change from 0 to 16384 [ 93.716257][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 94.020457][ T4632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.88'. [ 94.217314][ T4629] loop8: detected capacity change from 16384 to 16383 [ 94.495827][ T4649] loop1: detected capacity change from 0 to 512 [ 94.503136][ T4649] EXT4-fs: Ignoring removed i_version option [ 94.559491][ T4649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.766663][ T4649] EXT4-fs (loop1): 1 truncate cleaned up [ 94.772539][ T4649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.627376][ T4661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 96.760102][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 97.044062][ T4666] loop3: detected capacity change from 0 to 4096 [ 97.136140][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.213382][ T4677] loop4: detected capacity change from 0 to 2048 [ 97.299306][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 97.299322][ T27] audit: type=1800 audit(1755392641.879:163): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.105" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 97.357625][ T4677] loop4: p2 p3 p7 [ 97.438078][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 97.483036][ T4683] loop1: detected capacity change from 0 to 164 [ 97.534610][ T4683] isofs_fill_super: root inode is not a directory. Corrupted media? [ 97.585014][ T4425] udevd[4425]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 97.597426][ T4426] udevd[4426]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 97.640395][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 97.663353][ T4685] loop4: detected capacity change from 0 to 512 [ 97.710811][ T4341] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.779464][ T4341] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.800728][ T4685] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.110: casefold flag without casefold feature [ 97.872098][ T4685] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.110: couldn't read orphan inode 15 (err -117) [ 97.945505][ T4685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.612479][ T4694] fido_id[4694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.905137][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 98.991097][ T27] audit: type=1326 audit(1755392643.569:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 99.070792][ T27] audit: type=1326 audit(1755392643.609:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 99.111205][ T4706] loop1: detected capacity change from 0 to 2048 [ 99.122781][ T4708] hub 6-0:1.0: USB hub found [ 99.154346][ T27] audit: type=1326 audit(1755392643.609:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f585f18ec23 code=0x7ffc0000 [ 99.158672][ T4708] hub 6-0:1.0: 1 port detected [ 99.225218][ T4706] loop1: p1 < > p4 [ 99.234589][ T4704] loop0: detected capacity change from 0 to 8192 [ 99.242447][ T4706] loop1: p4 size 8388608 extends beyond EOD, truncated [ 99.252952][ T27] audit: type=1326 audit(1755392643.619:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f585f18d69f code=0x7ffc0000 [ 99.375282][ T27] audit: type=1326 audit(1755392643.649:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f585f18ec77 code=0x7ffc0000 [ 99.398002][ T3637] loop1: p1 < > p4 [ 99.404936][ T3637] loop1: p4 size 8388608 extends beyond EOD, truncated [ 99.474439][ T27] audit: type=1326 audit(1755392643.649:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f585f18d550 code=0x7ffc0000 [ 99.530534][ T4691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.530835][ T4277] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 99.540519][ T4395] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.540679][ T4395] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.597451][ T4691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.650784][ T27] audit: type=1326 audit(1755392643.649:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f585f18e7eb code=0x7ffc0000 [ 99.675962][ T4691] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 99.720658][ T4395] Buffer I/O error on dev loop1p4, logical block 1, async page read [ 99.735579][ T4691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.766401][ T4691] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 99.776981][ T27] audit: type=1326 audit(1755392643.719:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f585f18d84a code=0x7ffc0000 [ 99.843180][ T4691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.893494][ T4691] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 99.909064][ T27] audit: type=1326 audit(1755392643.719:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f585f18e7eb code=0x7ffc0000 [ 99.922373][ T4720] program syz.1.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.977983][ T4691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.014287][ T4691] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 100.039258][ T4691] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.074180][ T4691] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 100.110915][ T4725] netlink: 7 bytes leftover after parsing attributes in process `syz.4.123'. [ 100.171595][ T4725] netlink: 7 bytes leftover after parsing attributes in process `syz.4.123'. [ 100.221455][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 100.243521][ T4378] udevd[4378]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 100.386938][ T4378] udevd[4378]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 100.400719][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 100.632244][ T4740] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 100.646874][ T4737] loop1: detected capacity change from 0 to 4096 [ 100.702340][ T4737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.752826][ T4743] bond1: (slave bridge1): making interface the new active one [ 100.836903][ T4743] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 100.853156][ T4745] hub 6-0:1.0: USB hub found [ 100.858473][ T4745] hub 6-0:1.0: 1 port detected [ 100.895988][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 101.322056][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 101.342478][ T4761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.138'. [ 101.635748][ T4770] loop4: detected capacity change from 0 to 4096 [ 101.705638][ T4770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.723081][ T4778] hub 6-0:1.0: USB hub found [ 101.729194][ T4778] hub 6-0:1.0: 1 port detected [ 101.779844][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 102.182857][ T4790] Zero length message leads to an empty skb [ 102.301533][ T4794] loop0: detected capacity change from 0 to 128 [ 102.315400][ T27] kauditd_printk_skb: 77 callbacks suppressed [ 102.315414][ T27] audit: type=1326 audit(1755392646.899:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f740e985ba7 code=0x7ffc0000 [ 102.413678][ T27] audit: type=1326 audit(1755392646.929:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f740e92add9 code=0x7ffc0000 [ 102.542584][ T27] audit: type=1326 audit(1755392646.929:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f740e985ba7 code=0x7ffc0000 [ 102.584251][ T27] audit: type=1326 audit(1755392646.929:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f740e92add9 code=0x7ffc0000 [ 102.687752][ T4801] loop2: detected capacity change from 0 to 4096 [ 102.701947][ T27] audit: type=1326 audit(1755392646.929:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 102.760422][ T27] audit: type=1326 audit(1755392646.929:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 102.818830][ T4809] hub 9-0:1.0: USB hub found [ 102.821269][ T4801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.825702][ T4809] hub 9-0:1.0: 1 port detected [ 102.864028][ T27] audit: type=1326 audit(1755392646.929:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 102.915578][ T27] audit: type=1326 audit(1755392646.929:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 102.939977][ T27] audit: type=1326 audit(1755392646.929:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 102.962572][ T27] audit: type=1326 audit(1755392646.929:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 103.015596][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 103.870979][ T4843] syz.4.177[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.871102][ T4843] syz.4.177[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.942744][ T4845] hub 6-0:1.0: USB hub found [ 103.975948][ T4837] loop2: detected capacity change from 0 to 8192 [ 104.030404][ T4845] hub 6-0:1.0: 1 port detected [ 104.179701][ T4854] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 104.240996][ T4854] FAT-fs (loop2): Filesystem has been set read-only [ 104.300535][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 104.406379][ T4858] device team1 entered promiscuous mode [ 104.573744][ T4866] device batadv_slave_1 entered promiscuous mode [ 104.600341][ T4865] device batadv_slave_1 left promiscuous mode [ 104.711170][ T4870] loop3: detected capacity change from 0 to 512 [ 104.780377][ T4872] loop1: detected capacity change from 0 to 1024 [ 104.813672][ T4870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.824431][ T4870] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.858110][ T4872] EXT4-fs: Ignoring removed bh option [ 104.873150][ T4872] EXT4-fs: inline encryption not supported [ 104.949112][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 104.969378][ T4882] loop0: detected capacity change from 0 to 1024 [ 104.982504][ T4882] EXT4-fs: Ignoring removed bh option [ 104.989583][ T4882] EXT4-fs: inline encryption not supported [ 105.009598][ T4872] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.189: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.097113][ T4882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 105.102585][ T4872] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.189: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.143689][ T4882] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.192: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.218806][ T4872] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.189: Failed to acquire dquot type 0 [ 105.262735][ T4882] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.192: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.284772][ T4887] hub 6-0:1.0: USB hub found [ 105.295130][ T4872] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 105.319075][ T4887] hub 6-0:1.0: 1 port detected [ 105.374211][ T4872] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.189: mark_inode_dirty error [ 105.395210][ T4882] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.192: Failed to acquire dquot type 0 [ 105.460336][ T4872] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 105.471995][ T4882] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 105.501061][ T4882] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.192: mark_inode_dirty error [ 105.503701][ T4896] loop3: detected capacity change from 0 to 128 [ 105.517411][ T4872] EXT4-fs (loop1): 1 orphan inode deleted [ 105.526449][ T41] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.531819][ T4872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.560918][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 0 [ 105.561027][ T4882] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 105.621957][ T4872] EXT4-fs (loop1): unmounting filesystem. [ 105.636844][ T4882] EXT4-fs (loop0): 1 orphan inode deleted [ 105.651655][ T4882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.684514][ T4360] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.736269][ T4360] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 0 [ 105.771242][ T4882] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.192: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.791765][ T4892] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.808182][ T4872] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.189: Invalid inode table block 1 in block_group 0 [ 105.832569][ T4872] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 105.863118][ T4872] EXT4-fs error (device loop1): ext4_quota_off:7120: inode #3: comm syz.1.189: mark_inode_dirty error [ 105.975798][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 106.290108][ T4907] loop0: detected capacity change from 0 to 512 [ 106.335100][ T4909] syz.1.201[4909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.335210][ T4909] syz.1.201[4909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.348401][ T4892] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.403006][ T4907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.473417][ T4907] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.200: invalid indirect mapped block 4294967295 (level 0) [ 106.497528][ T4907] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.200: invalid indirect mapped block 4294967295 (level 1) [ 106.567406][ T4907] EXT4-fs (loop0): 1 orphan inode deleted [ 106.644720][ T4907] EXT4-fs (loop0): 1 truncate cleaned up [ 106.666417][ T4892] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.693571][ T4907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.848121][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 106.913925][ T4892] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.132197][ T4892] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.196944][ T4892] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.248944][ T4892] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.285821][ T4892] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.367052][ T4924] loop0: detected capacity change from 0 to 128 [ 107.408852][ T27] kauditd_printk_skb: 95 callbacks suppressed [ 107.408868][ T27] audit: type=1326 audit(1755392651.989:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 107.457470][ T4916] netlink: 29 bytes leftover after parsing attributes in process `syz.4.203'. [ 107.489012][ T27] audit: type=1326 audit(1755392652.019:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 107.515186][ T27] audit: type=1326 audit(1755392652.039:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 107.538496][ T27] audit: type=1326 audit(1755392652.039:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 107.566130][ T4924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.584293][ T4924] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.612206][ T27] audit: type=1326 audit(1755392652.039:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 107.709963][ T27] audit: type=1326 audit(1755392652.039:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 107.818277][ T27] audit: type=1326 audit(1755392652.039:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 107.825621][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 107.932422][ T27] audit: type=1326 audit(1755392652.039:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 108.030307][ T27] audit: type=1326 audit(1755392652.039:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 108.200531][ T4938] loop4: detected capacity change from 0 to 512 [ 108.226075][ T4938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.334426][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.352432][ T4938] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.398542][ T4939] loop2: detected capacity change from 0 to 8192 [ 108.534017][ T4946] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.213: corrupted xattr block 19 [ 108.818466][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 109.020053][ T4953] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.112978][ T4955] hub 6-0:1.0: USB hub found [ 109.130451][ T4955] hub 6-0:1.0: 1 port detected [ 109.612912][ T4971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'. [ 111.618653][ T4960] tipc: Started in network mode [ 111.623841][ T4960] tipc: Node identity 525c7c0e7cc4, cluster identity 4711 [ 111.631862][ T4960] tipc: Enabled bearer , priority 0 [ 111.651619][ T4959] tipc: Disabling bearer [ 112.139191][ T5006] hub 6-0:1.0: USB hub found [ 112.145770][ T5006] hub 6-0:1.0: 1 port detected [ 112.267037][ T27] audit: type=1326 audit(1755392656.849:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 112.281711][ T5010] loop2: detected capacity change from 0 to 512 [ 112.373605][ T4378] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.405104][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 112.415922][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 112.415938][ T27] audit: type=1326 audit(1755392656.989:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 112.460970][ T5010] device hsr_slave_0 left promiscuous mode [ 112.490053][ T5010] device hsr_slave_1 left promiscuous mode [ 112.980991][ T27] audit: type=1326 audit(1755392657.559:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 113.055664][ T27] audit: type=1326 audit(1755392657.559:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 113.109145][ T5021] loop3: detected capacity change from 0 to 4096 [ 113.236265][ T5021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.457523][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 113.674057][ T5017] IPv6: Can't replace route, no match found [ 113.695361][ T5003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.083348][ T27] audit: type=1326 audit(1755392658.659:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 114.120055][ T5054] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 114.133218][ T5054] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1 [ 114.142438][ T27] audit: type=1326 audit(1755392658.659:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 114.192368][ T27] audit: type=1326 audit(1755392658.689:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 114.216434][ T27] audit: type=1326 audit(1755392658.689:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 114.239080][ T27] audit: type=1326 audit(1755392658.689:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740e98ebe9 code=0x7ffc0000 [ 114.307650][ T5049] loop3: detected capacity change from 0 to 8192 [ 114.326424][ T27] audit: type=1107 audit(1755392658.689:414): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 114.707351][ T5070] mmap: syz.3.261 (5070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.810016][ T5070] netlink: 404 bytes leftover after parsing attributes in process `syz.3.261'. [ 115.232167][ T5081] hub 6-0:1.0: USB hub found [ 115.254469][ T5081] hub 6-0:1.0: 1 port detected [ 115.321435][ T5083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'. [ 115.660299][ T5093] process 'syz.4.271' launched '/dev/fd/3' with NULL argv: empty string added [ 115.942876][ T5101] netlink: 96 bytes leftover after parsing attributes in process `syz.4.275'. [ 115.992310][ T5097] loop0: detected capacity change from 0 to 4096 [ 116.110774][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.120744][ T5106] netlink: 56 bytes leftover after parsing attributes in process `syz.3.277'. [ 116.171935][ T5106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 116.178576][ T5097] EXT4-fs (loop0): unmounting filesystem. [ 116.344632][ T5112] hub 6-0:1.0: USB hub found [ 116.349624][ T5112] hub 6-0:1.0: 1 port detected [ 116.914773][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 117.485400][ T5122] syz.4.283 (5122) used greatest stack depth: 17728 bytes left [ 117.605398][ T27] audit: type=1326 audit(1755392662.189:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5124 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 117.735354][ T27] audit: type=1326 audit(1755392662.239:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5124 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 117.829322][ T27] audit: type=1326 audit(1755392662.239:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5124 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 117.913957][ T27] audit: type=1326 audit(1755392662.239:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5124 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 117.957248][ T5137] loop3: detected capacity change from 0 to 128 [ 117.993166][ T27] audit: type=1326 audit(1755392662.239:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5124 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 118.218982][ T5141] loop1: detected capacity change from 0 to 512 [ 118.333781][ T5141] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.390907][ T5141] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.491324][ T5141] EXT4-fs (loop1): 1 truncate cleaned up [ 118.512526][ T5141] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.604685][ T27] audit: type=1804 audit(1755392663.179:420): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.291" name="/newroot/59/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 118.608713][ T5150] netlink: 240 bytes leftover after parsing attributes in process `syz.3.285'. [ 118.770612][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 118.774028][ T5153] loop4: detected capacity change from 0 to 4096 [ 118.843383][ T5153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.073659][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 119.702489][ T5170] capability: warning: `syz.4.301' uses deprecated v2 capabilities in a way that may be insecure [ 119.963380][ T5175] ALSA: seq fatal error: cannot create timer (-22) [ 120.101022][ T27] audit: type=1326 audit(1755392664.669:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e58ebe9 code=0x7ffc0000 [ 120.139628][ T27] audit: type=1326 audit(1755392664.669:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e58ebe9 code=0x7ffc0000 [ 120.226591][ T27] audit: type=1326 audit(1755392664.669:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb23e58d550 code=0x7ffc0000 [ 120.291553][ T27] audit: type=1326 audit(1755392664.679:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb23e58d550 code=0x7ffc0000 [ 120.475329][ T5186] loop0: detected capacity change from 0 to 4096 [ 120.485657][ T5187] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.512435][ T5189] loop3: detected capacity change from 0 to 512 [ 120.543639][ T5189] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.624067][ T5186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.653839][ T5193] hub 6-0:1.0: USB hub found [ 120.659138][ T5193] hub 6-0:1.0: 1 port detected [ 120.696227][ T5189] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.829662][ T5189] EXT4-fs (loop3): 1 truncate cleaned up [ 120.850029][ T5189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.857996][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 120.960288][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 121.159882][ T5202] loop3: detected capacity change from 0 to 1024 [ 121.195217][ T5202] EXT4-fs: Ignoring removed orlov option [ 121.200951][ T5202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.292268][ T5202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.368847][ T5207] loop2: detected capacity change from 0 to 512 [ 121.404578][ T5207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.420796][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 121.507318][ T5207] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.526362][ T5207] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.609136][ T5215] netlink: 32 bytes leftover after parsing attributes in process `syz.3.318'. [ 121.776563][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 121.849200][ T5219] loop3: detected capacity change from 0 to 512 [ 121.948348][ T5223] hub 6-0:1.0: USB hub found [ 121.953956][ T5219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.971764][ T5223] hub 6-0:1.0: 1 port detected [ 121.972431][ T5219] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.210077][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 124.382431][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 124.382446][ T27] audit: type=1326 audit(1755392668.959:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 124.617361][ T27] audit: type=1326 audit(1755392668.969:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 124.640906][ T27] audit: type=1326 audit(1755392668.969:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 124.695181][ T27] audit: type=1326 audit(1755392668.969:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 124.797352][ T27] audit: type=1326 audit(1755392668.969:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 124.883794][ T27] audit: type=1326 audit(1755392668.969:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 124.958489][ T27] audit: type=1326 audit(1755392668.969:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 125.032153][ T27] audit: type=1326 audit(1755392668.969:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 125.110864][ T27] audit: type=1326 audit(1755392668.969:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 125.254176][ T27] audit: type=1326 audit(1755392668.969:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 125.404631][ T5281] hub 6-0:1.0: USB hub found [ 125.424782][ T5281] hub 6-0:1.0: 1 port detected [ 125.559322][ T5285] loop0: detected capacity change from 0 to 512 [ 125.624015][ T5285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.634416][ T5285] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.963190][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 126.020670][ T5301] netlink: 96 bytes leftover after parsing attributes in process `syz.1.349'. [ 126.130171][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 126.192465][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 126.217890][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 126.258895][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 126.605754][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 126.694064][ T5315] sd 0:0:1:0: device reset [ 126.866650][ T5320] loop0: detected capacity change from 0 to 512 [ 126.904589][ T5320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.965149][ T5320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.356: bg 0: block 4: invalid block bitmap [ 127.040055][ T5320] EXT4-fs (loop0): Remounting filesystem read-only [ 127.043166][ T5324] hub 6-0:1.0: USB hub found [ 127.074355][ T5320] EXT4-fs (loop0): 1 truncate cleaned up [ 127.080843][ T5324] hub 6-0:1.0: 1 port detected [ 127.091839][ T5320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.340839][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 127.419138][ T5337] 9pnet_fd: Insufficient options for proto=fd [ 127.442254][ T5340] syz.4.363[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.442369][ T5340] syz.4.363[5340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.630037][ T5340] loop4: detected capacity change from 0 to 512 [ 127.668479][ T5352] loop3: detected capacity change from 0 to 512 [ 127.692530][ T5340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 127.734045][ T5340] System zones: 1-12 [ 127.748867][ T5340] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.363: error while reading EA inode 32 err=-116 [ 127.788582][ T5352] EXT4-fs (loop3): filesystem is read-only [ 127.802223][ T5340] EXT4-fs (loop4): Remounting filesystem read-only [ 127.843240][ T5340] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.363: error while reading EA inode 32 err=-116 [ 127.887295][ T5352] EXT4-fs (loop3): filesystem is read-only [ 127.893189][ T5352] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.944405][ T5352] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.366: bad orphan inode 16 [ 127.957052][ T5340] EXT4-fs (loop4): Remounting filesystem read-only [ 127.967428][ T5340] EXT4-fs (loop4): 1 orphan inode deleted [ 127.981745][ T5340] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.990495][ T5352] ext4_test_bit(bit=15, block=3) = 0 [ 127.997165][ T5352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.108400][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 128.211037][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 128.231644][ T5370] program syz.4.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.654748][ T5383] hub 6-0:1.0: USB hub found [ 128.680210][ T5383] hub 6-0:1.0: 1 port detected [ 129.415571][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 129.415586][ T27] audit: type=1326 audit(1755392673.999:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e58ebe9 code=0x7ffc0000 [ 129.452204][ T27] audit: type=1326 audit(1755392673.999:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 129.476361][ T27] audit: type=1326 audit(1755392673.999:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 129.536274][ T27] audit: type=1326 audit(1755392673.999:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 129.613330][ T27] audit: type=1326 audit(1755392673.999:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 129.696841][ T5415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.383'. [ 129.714214][ T27] audit: type=1326 audit(1755392673.999:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 129.766932][ T27] audit: type=1326 audit(1755392673.999:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 129.796876][ T27] audit: type=1326 audit(1755392673.999:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 129.803050][ T5419] device batadv_slave_1 entered promiscuous mode [ 129.905375][ T5424] loop3: detected capacity change from 0 to 512 [ 129.912706][ T5424] EXT4-fs: Ignoring removed i_version option [ 129.922871][ T5424] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.984764][ T5424] EXT4-fs (loop3): 1 truncate cleaned up [ 129.990586][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.507975][ T27] audit: type=1326 audit(1755392673.999:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 130.937332][ T5423] hub 6-0:1.0: USB hub found [ 130.957128][ T5423] hub 6-0:1.0: 1 port detected [ 131.368225][ T27] audit: type=1326 audit(1755392673.999:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 131.730155][ T5418] device batadv_slave_1 left promiscuous mode [ 132.419185][ T5433] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 132.549889][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 132.842688][ T5441] loop2: detected capacity change from 0 to 512 [ 132.882178][ T5441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.928763][ T5441] EXT4-fs (loop2): 1 truncate cleaned up [ 132.934713][ T5441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.937729][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.953054][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.953483][ T5441] syz.2.396[5441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.959712][ T5441] syz.2.396[5441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.116855][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 133.688295][ T5468] device batadv_slave_1 entered promiscuous mode [ 133.718002][ T5467] tipc: Started in network mode [ 133.722942][ T5467] tipc: Node identity ., cluster identity 4711 [ 133.737058][ T5467] tipc: Enabling of bearer rejected, failed to enable media [ 133.747849][ T5468] device batadv_slave_1 left promiscuous mode [ 133.871260][ T5472] nft_compat: unsupported protocol 8 [ 134.184387][ T5479] sd 0:0:1:0: device reset [ 134.376828][ T5483] loop3: detected capacity change from 0 to 512 [ 134.391741][ T5483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.421567][ T5483] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.412: bg 0: block 4: invalid block bitmap [ 134.445602][ T5483] EXT4-fs (loop3): Remounting filesystem read-only [ 134.459452][ T5483] EXT4-fs (loop3): 1 truncate cleaned up [ 134.466386][ T5483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.495751][ T27] kauditd_printk_skb: 72 callbacks suppressed [ 134.495766][ T27] audit: type=1800 audit(1755392679.079:545): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="iou-wrk-5483" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 134.536954][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 135.676603][ T5514] device batadv_slave_1 entered promiscuous mode [ 135.740546][ T5514] device batadv_slave_1 left promiscuous mode [ 136.090167][ T5529] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.424'. [ 136.110151][ T5524] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.424'. [ 136.172205][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 136.182288][ T27] audit: type=1326 audit(1755392680.759:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.225594][ T27] audit: type=1326 audit(1755392680.759:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.288417][ T27] audit: type=1326 audit(1755392680.789:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.325933][ T5539] hub 6-0:1.0: USB hub found [ 136.331009][ T5539] hub 6-0:1.0: 1 port detected [ 136.338602][ T27] audit: type=1326 audit(1755392680.839:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.361762][ T5537] sctp: [Deprecated]: syz.1.428 (pid 5537) Use of int in max_burst socket option deprecated. [ 136.361762][ T5537] Use struct sctp_assoc_value instead [ 136.405805][ T27] audit: type=1326 audit(1755392680.839:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.431429][ T5531] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.455000][ T5531] lo speed is unknown, defaulting to 1000 [ 136.472476][ T27] audit: type=1326 audit(1755392680.839:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.505300][ T5531] lo speed is unknown, defaulting to 1000 [ 136.515333][ T5531] lo speed is unknown, defaulting to 1000 [ 136.521255][ T27] audit: type=1326 audit(1755392680.839:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.574298][ T27] audit: type=1326 audit(1755392680.839:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.621493][ T27] audit: type=1326 audit(1755392680.849:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5532 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 136.760323][ T2120] lo speed is unknown, defaulting to 1000 [ 136.769765][ T5531] infiniband syz: set active [ 136.775449][ T5531] infiniband syz: added lo [ 136.832820][ T5531] RDS/IB: syz: added [ 136.838456][ T5531] smc: adding ib device syz with port count 1 [ 136.845860][ T5531] smc: ib device syz port 1 has pnetid [ 136.854244][ T2120] lo speed is unknown, defaulting to 1000 [ 136.867989][ T5531] lo speed is unknown, defaulting to 1000 [ 136.958731][ T5550] loop3: detected capacity change from 0 to 512 [ 137.057201][ T5550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.092335][ T5550] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.152762][ T5531] lo speed is unknown, defaulting to 1000 [ 137.290292][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 137.323423][ T5531] lo speed is unknown, defaulting to 1000 [ 137.471293][ T5567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.440'. [ 137.634669][ T5571] hub 6-0:1.0: USB hub found [ 137.644765][ T5571] hub 6-0:1.0: 1 port detected [ 137.700843][ T5531] lo speed is unknown, defaulting to 1000 [ 138.044330][ T5577] tipc: Started in network mode [ 138.058102][ T5577] tipc: Node identity ., cluster identity 4711 [ 138.074308][ T5577] tipc: Enabling of bearer rejected, failed to enable media [ 138.095666][ T5579] tipc: Started in network mode [ 138.100604][ T5579] tipc: Node identity ., cluster identity 4711 [ 138.124418][ T5579] tipc: Enabling of bearer rejected, failed to enable media [ 138.144674][ T5531] lo speed is unknown, defaulting to 1000 [ 138.667740][ T5587] lo speed is unknown, defaulting to 1000 [ 139.544630][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 140.186457][ T5601] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.222723][ T5606] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 140.232364][ T5606] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 140.242157][ T5606] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 140.331623][ T27] kauditd_printk_skb: 123 callbacks suppressed [ 140.331638][ T27] audit: type=1326 audit(1755392684.909:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 140.433764][ T27] audit: type=1326 audit(1755392684.999:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 140.476365][ T5601] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.505364][ T27] audit: type=1326 audit(1755392684.999:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 140.531707][ T5617] device batadv_slave_1 entered promiscuous mode [ 140.550388][ T5616] device batadv_slave_1 left promiscuous mode [ 140.556484][ T27] audit: type=1326 audit(1755392684.999:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 140.556530][ T27] audit: type=1326 audit(1755392684.999:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585f18ebe9 code=0x7ffc0000 [ 140.556563][ T27] audit: type=1326 audit(1755392684.999:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f585f190b07 code=0x7ffc0000 [ 140.556597][ T27] audit: type=1326 audit(1755392684.999:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f585f190a7c code=0x7ffc0000 [ 140.556630][ T27] audit: type=1326 audit(1755392684.999:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f585f1909b4 code=0x7ffc0000 [ 140.556665][ T27] audit: type=1326 audit(1755392684.999:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f585f1909b4 code=0x7ffc0000 [ 140.556699][ T27] audit: type=1326 audit(1755392684.999:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f585f18d84a code=0x7ffc0000 [ 140.811637][ T5601] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.971600][ T5601] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.146587][ T5601] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.170099][ T5601] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.222032][ T5601] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.284994][ T5601] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.301199][ T5635] loop0: detected capacity change from 0 to 512 [ 141.367935][ T5635] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.466: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 141.434901][ T5635] EXT4-fs error (device loop0): ext4_quota_enable:7025: comm syz.0.466: Bad quota inode: 3, type: 0 [ 141.464415][ T5635] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 141.526863][ T5635] EXT4-fs (loop0): mount failed [ 141.573428][ T5642] loop4: detected capacity change from 0 to 512 [ 141.633305][ T5642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.699910][ T5642] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 141.771203][ T5642] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 141.825429][ T5642] EXT4-fs (loop4): Remounting filesystem read-only [ 141.864831][ T5642] EXT4-fs (loop4): 1 truncate cleaned up [ 141.870568][ T5642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.032577][ T5651] program syz.2.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.243632][ T5653] loop2: detected capacity change from 0 to 512 [ 142.327306][ T5653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.342182][ T5653] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.713350][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 144.856986][ T5619] Set syz1 is full, maxelem 65536 reached [ 144.997326][ T5675] hub 6-0:1.0: USB hub found [ 145.002209][ T5675] hub 6-0:1.0: 1 port detected [ 145.533198][ T5662] lo speed is unknown, defaulting to 1000 [ 145.919946][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 145.919962][ T27] audit: type=1326 audit(1755392690.499:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 145.949949][ T27] audit: type=1326 audit(1755392690.499:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 145.972796][ T27] audit: type=1326 audit(1755392690.529:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 146.004618][ T27] audit: type=1326 audit(1755392690.529:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 146.050729][ T27] audit: type=1326 audit(1755392690.529:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 146.090049][ T27] audit: type=1326 audit(1755392690.529:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 146.122314][ T27] audit: type=1326 audit(1755392690.529:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 146.177168][ T27] audit: type=1326 audit(1755392690.529:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 146.224426][ T27] audit: type=1326 audit(1755392690.529:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 146.262148][ T27] audit: type=1326 audit(1755392690.749:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz.4.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c898ebe9 code=0x7ffc0000 [ 149.197827][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.210759][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.220349][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.238463][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.326129][ T5697] loop0: detected capacity change from 0 to 512 [ 149.451045][ T5697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.474337][ T5697] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.528476][ T5705] hub 6-0:1.0: USB hub found [ 149.584354][ T5705] hub 6-0:1.0: 1 port detected [ 149.872164][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 150.673410][ T5719] Set syz1 is full, maxelem 65536 reached [ 152.367992][ T5742] ALSA: seq fatal error: cannot create timer (-19) [ 152.572626][ T5747] hub 6-0:1.0: USB hub found [ 152.579822][ T5747] hub 6-0:1.0: 1 port detected [ 152.790101][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 152.790160][ T27] audit: type=1326 audit(1755392697.369:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 152.912661][ T27] audit: type=1326 audit(1755392697.369:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 152.963302][ T27] audit: type=1326 audit(1755392697.369:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 152.993427][ T27] audit: type=1326 audit(1755392697.369:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 153.032036][ T27] audit: type=1326 audit(1755392697.369:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 153.059898][ T27] audit: type=1326 audit(1755392697.409:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 153.091979][ T27] audit: type=1326 audit(1755392697.409:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 153.115655][ T27] audit: type=1326 audit(1755392697.409:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a218ebe9 code=0x7ffc0000 [ 155.638510][ T27] audit: type=1326 audit(1755392700.219:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23e58ebe9 code=0x7ffc0000 [ 155.694349][ T27] audit: type=1326 audit(1755392700.249:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb23e58ebe9 code=0x7ffc0000 [ 155.966455][ T5778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 156.032029][ T5775] lo speed is unknown, defaulting to 1000 [ 156.100688][ T5782] device batadv_slave_1 entered promiscuous mode [ 156.113278][ T5781] device batadv_slave_1 left promiscuous mode [ 156.257801][ T5784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.520'. [ 156.699721][ T5793] loop3: detected capacity change from 0 to 128 [ 156.738214][ T5793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.753842][ T5793] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.838084][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 156.896426][ T5707] Set syz1 is full, maxelem 65536 reached [ 157.060976][ T5799] ------------[ cut here ]------------ [ 157.067119][ T5799] WARNING: CPU: 1 PID: 5799 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 157.077416][ T5799] Modules linked in: [ 157.081373][ T5799] CPU: 1 PID: 5799 Comm: syz.1.525 Not tainted 6.1.148-syzkaller #0 [ 157.089432][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.099590][ T5799] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 157.105856][ T5799] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ce 7d f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f7 b0 2d f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 157.125651][ T5799] RSP: 0018:ffffc900056c6d88 EFLAGS: 00010283 [ 157.131771][ T5799] RAX: ffffffff88530d69 RBX: ffffc900056c6e98 RCX: 0000000000080000 [ 157.139854][ T5799] RDX: ffffc9000c769000 RSI: 0000000000001b0d RDI: 0000000000001b0e [ 157.147906][ T5799] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215bc78 [ 157.155975][ T5799] R10: fffffbfff215bc78 R11: 1ffffffff215bc77 R12: 000000248e4aca40 [ 157.163998][ T5799] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.172071][ T5799] FS: 00007f58600d06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 157.181313][ T5799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.187971][ T5799] CR2: 00007ffff2ce0010 CR3: 000000002adcb000 CR4: 00000000003506e0 [ 157.196037][ T5799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.204068][ T5799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.212134][ T5799] Call Trace: [ 157.215481][ T5799] [ 157.218448][ T5799] taprio_change+0x3daa/0x50f0 [ 157.223272][ T5799] ? taprio_destroy+0x4b0/0x4b0 [ 157.228196][ T5799] ? qdisc_create+0x7cb/0x1090 [ 157.233011][ T5799] ? ____sys_sendmsg+0x59b/0x970 [ 157.238024][ T5799] ? ___sys_sendmsg+0x21c/0x290 [ 157.242923][ T5799] ? __se_sys_sendmsg+0x19e/0x270 [ 157.248055][ T5799] ? do_syscall_64+0x4c/0xa0 [ 157.252685][ T5799] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.258840][ T5799] ? qdisc_alloc+0x95/0xa50 [ 157.263384][ T5799] ? fifo_init+0x3ab/0x650 [ 157.267898][ T5799] ? qdisc_peek_head+0x40/0x40 [ 157.272720][ T5799] ? qdisc_alloc+0x77a/0xa50 [ 157.277408][ T5799] ? mutex_is_locked+0xe/0x40 [ 157.282143][ T5799] ? taprio_peek+0x590/0x590 [ 157.286816][ T5799] qdisc_create+0x7cb/0x1090 [ 157.291470][ T5799] ? qdisc_notify+0x370/0x370 [ 157.296289][ T5799] tc_modify_qdisc+0xb2f/0x1cc0 [ 157.301217][ T5799] ? qdisc_offload_query_caps+0x140/0x140 [ 157.307064][ T5799] ? qdisc_offload_query_caps+0x140/0x140 [ 157.312866][ T5799] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 157.318105][ T5799] rtnetlink_rcv_msg+0x79b/0xed0 [ 157.323096][ T5799] ? rtnetlink_bind+0x80/0x80 [ 157.327874][ T5799] ? __local_bh_enable_ip+0x12a/0x1b0 [ 157.333348][ T5799] ? lockdep_hardirqs_on+0x94/0x140 [ 157.338639][ T5799] ? __local_bh_enable_ip+0x12a/0x1b0 [ 157.344191][ T5799] ? _local_bh_enable+0xa0/0xa0 [ 157.349107][ T5799] ? __dev_queue_xmit+0x26f/0x3760 [ 157.354312][ T5799] ? __dev_queue_xmit+0x26f/0x3760 [ 157.359581][ T5799] ? __dev_queue_xmit+0x15c9/0x3760 [ 157.364877][ T5799] ? __dev_queue_xmit+0x26f/0x3760 [ 157.370055][ T5799] ? netdev_core_pick_tx+0x340/0x340 [ 157.375433][ T5799] ? ref_tracker_free+0x630/0x7c0 [ 157.380525][ T5799] ? refcount_inc+0x70/0x70 [ 157.385107][ T5799] ? __copy_skb_header+0x417/0x5a0 [ 157.390275][ T5799] ? __skb_clone+0x480/0x790 [ 157.394953][ T5799] netlink_rcv_skb+0x1de/0x420 [ 157.399767][ T5799] ? rtnetlink_bind+0x80/0x80 [ 157.404533][ T5799] ? netlink_ack+0x1100/0x1100 [ 157.409366][ T5799] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.414646][ T5799] netlink_unicast+0x74d/0x8d0 [ 157.419465][ T5799] netlink_sendmsg+0x89e/0xbc0 [ 157.424355][ T5799] ? netlink_getsockopt+0x540/0x540 [ 157.429606][ T5799] ? aa_sock_msg_perm+0x94/0x150 [ 157.434645][ T5799] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 157.439974][ T5799] ? security_socket_sendmsg+0x7c/0xa0 [ 157.445539][ T5799] ? netlink_getsockopt+0x540/0x540 [ 157.450793][ T5799] ____sys_sendmsg+0x59b/0x970 [ 157.455655][ T5799] ? __sys_sendmsg_sock+0x30/0x30 [ 157.460736][ T5799] ? __import_iovec+0x315/0x500 [ 157.465691][ T5799] ? import_iovec+0x6f/0xa0 [ 157.470261][ T5799] ___sys_sendmsg+0x21c/0x290 [ 157.475029][ T5799] ? __sys_sendmsg+0x270/0x270 [ 157.479925][ T5799] ? __fdget+0x17c/0x200 [ 157.484259][ T5799] __se_sys_sendmsg+0x19e/0x270 [ 157.489193][ T5799] ? __x64_sys_sendmsg+0x80/0x80 [ 157.494332][ T5799] ? trace_sys_enter+0x22/0x80 [ 157.499170][ T5799] do_syscall_64+0x4c/0xa0 [ 157.503635][ T5799] ? clear_bhb_loop+0x60/0xb0 [ 157.508400][ T5799] ? clear_bhb_loop+0x60/0xb0 [ 157.513143][ T5799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.519197][ T5799] RIP: 0033:0x7f585f18ebe9 [ 157.523669][ T5799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.543466][ T5799] RSP: 002b:00007f58600d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.551980][ T5799] RAX: ffffffffffffffda RBX: 00007f585f3b5fa0 RCX: 00007f585f18ebe9 [ 157.560129][ T5799] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 157.568212][ T5799] RBP: 00007f585f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 157.576329][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.584431][ T5799] R13: 00007f585f3b6038 R14: 00007f585f3b5fa0 R15: 00007ffd1acf5378 [ 157.592480][ T5799] [ 157.595583][ T5799] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.602914][ T5799] CPU: 1 PID: 5799 Comm: syz.1.525 Not tainted 6.1.148-syzkaller #0 [ 157.610915][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.620992][ T5799] Call Trace: [ 157.624302][ T5799] [ 157.627268][ T5799] dump_stack_lvl+0x168/0x22e [ 157.631982][ T5799] ? memcpy+0x3c/0x60 [ 157.635993][ T5799] ? show_regs_print_info+0x12/0x12 [ 157.641330][ T5799] ? load_image+0x3b0/0x3b0 [ 157.645901][ T5799] panic+0x2c9/0x710 [ 157.649935][ T5799] ? bpf_jit_dump+0xd0/0xd0 [ 157.654506][ T5799] __warn+0x2f8/0x4f0 [ 157.658536][ T5799] ? taprio_get_start_time+0x139/0x160 [ 157.664014][ T5799] ? taprio_get_start_time+0x139/0x160 [ 157.669614][ T5799] report_bug+0x2ba/0x4f0 [ 157.673980][ T5799] ? taprio_get_start_time+0x139/0x160 [ 157.679471][ T5799] handle_bug+0x3a/0x70 [ 157.683672][ T5799] exc_invalid_op+0x16/0x40 [ 157.688201][ T5799] asm_exc_invalid_op+0x16/0x20 [ 157.693076][ T5799] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 157.699178][ T5799] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2c ce 7d f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f7 b0 2d f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 157.718816][ T5799] RSP: 0018:ffffc900056c6d88 EFLAGS: 00010283 [ 157.724915][ T5799] RAX: ffffffff88530d69 RBX: ffffc900056c6e98 RCX: 0000000000080000 [ 157.732910][ T5799] RDX: ffffc9000c769000 RSI: 0000000000001b0d RDI: 0000000000001b0e [ 157.740900][ T5799] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215bc78 [ 157.748913][ T5799] R10: fffffbfff215bc78 R11: 1ffffffff215bc77 R12: 000000248e4aca40 [ 157.756925][ T5799] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.764928][ T5799] ? taprio_get_start_time+0x139/0x160 [ 157.770411][ T5799] ? taprio_get_start_time+0x139/0x160 [ 157.775888][ T5799] taprio_change+0x3daa/0x50f0 [ 157.780693][ T5799] ? taprio_destroy+0x4b0/0x4b0 [ 157.785583][ T5799] ? qdisc_create+0x7cb/0x1090 [ 157.790459][ T5799] ? ____sys_sendmsg+0x59b/0x970 [ 157.795423][ T5799] ? ___sys_sendmsg+0x21c/0x290 [ 157.800378][ T5799] ? __se_sys_sendmsg+0x19e/0x270 [ 157.805443][ T5799] ? do_syscall_64+0x4c/0xa0 [ 157.810049][ T5799] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.816145][ T5799] ? qdisc_alloc+0x95/0xa50 [ 157.820692][ T5799] ? fifo_init+0x3ab/0x650 [ 157.825221][ T5799] ? qdisc_peek_head+0x40/0x40 [ 157.830012][ T5799] ? qdisc_alloc+0x77a/0xa50 [ 157.834620][ T5799] ? mutex_is_locked+0xe/0x40 [ 157.839329][ T5799] ? taprio_peek+0x590/0x590 [ 157.843939][ T5799] qdisc_create+0x7cb/0x1090 [ 157.848568][ T5799] ? qdisc_notify+0x370/0x370 [ 157.853272][ T5799] tc_modify_qdisc+0xb2f/0x1cc0 [ 157.858158][ T5799] ? qdisc_offload_query_caps+0x140/0x140 [ 157.863917][ T5799] ? qdisc_offload_query_caps+0x140/0x140 [ 157.869654][ T5799] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 157.874788][ T5799] rtnetlink_rcv_msg+0x79b/0xed0 [ 157.879752][ T5799] ? rtnetlink_bind+0x80/0x80 [ 157.884449][ T5799] ? __local_bh_enable_ip+0x12a/0x1b0 [ 157.889893][ T5799] ? lockdep_hardirqs_on+0x94/0x140 [ 157.895119][ T5799] ? __local_bh_enable_ip+0x12a/0x1b0 [ 157.900515][ T5799] ? _local_bh_enable+0xa0/0xa0 [ 157.905391][ T5799] ? __dev_queue_xmit+0x26f/0x3760 [ 157.910546][ T5799] ? __dev_queue_xmit+0x26f/0x3760 [ 157.915685][ T5799] ? __dev_queue_xmit+0x15c9/0x3760 [ 157.920914][ T5799] ? __dev_queue_xmit+0x26f/0x3760 [ 157.926053][ T5799] ? netdev_core_pick_tx+0x340/0x340 [ 157.931372][ T5799] ? ref_tracker_free+0x630/0x7c0 [ 157.936425][ T5799] ? refcount_inc+0x70/0x70 [ 157.940962][ T5799] ? __copy_skb_header+0x417/0x5a0 [ 157.946104][ T5799] ? __skb_clone+0x480/0x790 [ 157.950715][ T5799] netlink_rcv_skb+0x1de/0x420 [ 157.955501][ T5799] ? rtnetlink_bind+0x80/0x80 [ 157.960201][ T5799] ? netlink_ack+0x1100/0x1100 [ 157.964994][ T5799] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.970310][ T5799] netlink_unicast+0x74d/0x8d0 [ 157.975113][ T5799] netlink_sendmsg+0x89e/0xbc0 [ 157.979913][ T5799] ? netlink_getsockopt+0x540/0x540 [ 157.985132][ T5799] ? aa_sock_msg_perm+0x94/0x150 [ 157.990099][ T5799] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 157.995399][ T5799] ? security_socket_sendmsg+0x7c/0xa0 [ 158.000882][ T5799] ? netlink_getsockopt+0x540/0x540 [ 158.006110][ T5799] ____sys_sendmsg+0x59b/0x970 [ 158.010937][ T5799] ? __sys_sendmsg_sock+0x30/0x30 [ 158.015982][ T5799] ? __import_iovec+0x315/0x500 [ 158.020890][ T5799] ? import_iovec+0x6f/0xa0 [ 158.025433][ T5799] ___sys_sendmsg+0x21c/0x290 [ 158.030168][ T5799] ? __sys_sendmsg+0x270/0x270 [ 158.035081][ T5799] ? __fdget+0x17c/0x200 [ 158.039398][ T5799] __se_sys_sendmsg+0x19e/0x270 [ 158.044278][ T5799] ? __x64_sys_sendmsg+0x80/0x80 [ 158.049249][ T5799] ? trace_sys_enter+0x22/0x80 [ 158.054036][ T5799] do_syscall_64+0x4c/0xa0 [ 158.058474][ T5799] ? clear_bhb_loop+0x60/0xb0 [ 158.063162][ T5799] ? clear_bhb_loop+0x60/0xb0 [ 158.067862][ T5799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.073877][ T5799] RIP: 0033:0x7f585f18ebe9 [ 158.078317][ T5799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.097946][ T5799] RSP: 002b:00007f58600d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.106379][ T5799] RAX: ffffffffffffffda RBX: 00007f585f3b5fa0 RCX: 00007f585f18ebe9 [ 158.114366][ T5799] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 158.122352][ T5799] RBP: 00007f585f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 158.130357][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.138357][ T5799] R13: 00007f585f3b6038 R14: 00007f585f3b5fa0 R15: 00007ffd1acf5378 [ 158.146395][ T5799] [ 158.149682][ T5799] Kernel Offset: disabled [ 158.154133][ T5799] Rebooting in 86400 seconds..