last executing test programs: 2.880163645s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000001400)) 2.839598775s ago: executing program 1: r0 = syz_io_uring_setup(0xd79, &(0x7f00000035c0), &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x7, &(0x7f0000000000), 0x4) 2.692335444s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x1b, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.686828732s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r1, 0x603, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x30}}, 0x0) 2.51338617s ago: executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x4000000000000) 2.472572546s ago: executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @link_id, r0}, 0x20) 2.252025631s ago: executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) 2.215460791s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x6, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x0, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) 2.109010224s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 2.042351647s ago: executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r1, 0x8, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe48) 1.966228833s ago: executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xb, 0x0, [@loopback, @loopback]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) 1.921205106s ago: executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.870086696s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca010000871611faba526a3501f1753258c767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d8201e8c4c3fda81599b7c4bf635910dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac454e1127e9c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c38937"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0xa0001f98, 0x0, 0x0, 0x0, 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.778533803s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.436470267s ago: executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001a00)=""/4096, 0x0, 0x1000, 0x0, 0x6}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071107c007f39152956dcf9be7d2ea5eb"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0x74, 0x31, 0x201, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0x7344418a1b37fbff, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r5, 0x29, 0xd2, 0x0, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) shmctl$IPC_RMID(0x0, 0x0) 1.347292407s ago: executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket(0x2a, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) r2 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(r2, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300000e000000000000000000001a05000600000000020a0000000000000b0000000000000000000000000000000100000000000000000200010000000000000000060000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r7}}]}) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) read$qrtrtun(r0, 0x0, 0x0) dup2(r0, r1) 1.251857985s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x24, 0x0, @val=@tcx={@prog_fd}}, 0x40) 1.06974047s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x6, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x0, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) 1.053523926s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x30d3, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 991.01945ms ago: executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7823d5f2fd71a6a76177920ea7e60c0ac7a4a5"}) 888.874999ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") r0 = syz_io_uring_setup(0x2cd7, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, r5]) write$binfmt_script(r3, &(0x7f00000000c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 881.631909ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffffc, 0x0, 0x8000, 0x400, 0xffffffffffffffff, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) 847.916638ms ago: executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xb, 0x0, [@loopback, @loopback]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) 745.649874ms ago: executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x1}, 0x5) 639.48558ms ago: executing program 2: r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = fsmount(r1, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0xa, 0x2, 0x3a) 499.98131ms ago: executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x48101, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$snapshot(r0, 0x0, 0x0) 446.564487ms ago: executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001a00)=""/4096, 0x0, 0x1000, 0x0, 0x6}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071107c007f39152956dcf9be7d2ea5eb"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltaction={0x74, 0x31, 0x201, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0x7344418a1b37fbff, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r5, 0x29, 0xd2, 0x0, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) shmctl$IPC_RMID(0x0, 0x0) 339.447235ms ago: executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket(0x2a, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) r2 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(r2, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300000e000000000000000000001a05000600000000020a0000000000000b0000000000000000000000000000000100000000000000000200010000000000000000060000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r7}}]}) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) read$qrtrtun(r0, 0x0, 0x0) dup2(r0, r1) 77.950248ms ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = fcntl$dupfd(r2, 0x0, r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r6, 0x0) 0s ago: executing program 3: socket(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000090000000000000000000000400000a20000000095"], &(0x7f00000036c0)='syzkaller\x00', 0xa}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. 2024/05/28 23:38:55 fuzzer started 2024/05/28 23:38:55 dialing manager at 10.128.0.169:30008 [ 55.805270][ T5080] cgroup: Unknown subsys name 'net' [ 55.978521][ T5080] cgroup: Unknown subsys name 'rlimit' 2024/05/28 23:38:57 starting 5 executor processes [ 57.079900][ T5088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.092529][ T5088] syz-executor (5088) used greatest stack depth: 18680 bytes left [ 58.212198][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.257337][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.265364][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.274166][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.281049][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.282352][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.289396][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.297351][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.304890][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.312457][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.322343][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.324845][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.338770][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.346206][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.346874][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.354485][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.362948][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.375331][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.384380][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.393095][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.393900][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.400506][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.407647][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.415118][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.421500][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.429740][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.435703][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.442835][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.451537][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.458198][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.997877][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 59.014688][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 59.159246][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 59.170207][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 59.291925][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.299619][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.307649][ T5102] bridge_slave_0: entered allmulticast mode [ 59.315052][ T5102] bridge_slave_0: entered promiscuous mode [ 59.338124][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.346775][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.356392][ T5098] bridge_slave_0: entered allmulticast mode [ 59.364159][ T5098] bridge_slave_0: entered promiscuous mode [ 59.374109][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.381237][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.389352][ T5098] bridge_slave_1: entered allmulticast mode [ 59.396417][ T5098] bridge_slave_1: entered promiscuous mode [ 59.409120][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.416543][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.423955][ T5102] bridge_slave_1: entered allmulticast mode [ 59.433291][ T5102] bridge_slave_1: entered promiscuous mode [ 59.513957][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.535085][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.553784][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.565579][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.592122][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 59.635782][ T5102] team0: Port device team_slave_0 added [ 59.686490][ T5098] team0: Port device team_slave_0 added [ 59.695439][ T5102] team0: Port device team_slave_1 added [ 59.719273][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.726458][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.733855][ T5108] bridge_slave_0: entered allmulticast mode [ 59.740616][ T5108] bridge_slave_0: entered promiscuous mode [ 59.747922][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.758460][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.766006][ T5105] bridge_slave_0: entered allmulticast mode [ 59.773749][ T5105] bridge_slave_0: entered promiscuous mode [ 59.781584][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.788804][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.796080][ T5105] bridge_slave_1: entered allmulticast mode [ 59.803698][ T5105] bridge_slave_1: entered promiscuous mode [ 59.811977][ T5098] team0: Port device team_slave_1 added [ 59.838850][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.849112][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.856592][ T5108] bridge_slave_1: entered allmulticast mode [ 59.864614][ T5108] bridge_slave_1: entered promiscuous mode [ 59.906185][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.913430][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.939845][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.987407][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.994583][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.020583][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.033978][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.040947][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.067120][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.081053][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.095535][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.107026][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.130581][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.137641][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.163888][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.201306][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.257028][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.264283][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.272138][ T5109] bridge_slave_0: entered allmulticast mode [ 60.278998][ T5109] bridge_slave_0: entered promiscuous mode [ 60.310258][ T5108] team0: Port device team_slave_0 added [ 60.323254][ T5108] team0: Port device team_slave_1 added [ 60.339760][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.347769][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.358242][ T5109] bridge_slave_1: entered allmulticast mode [ 60.365374][ T5109] bridge_slave_1: entered promiscuous mode [ 60.378259][ T5098] hsr_slave_0: entered promiscuous mode [ 60.384950][ T5098] hsr_slave_1: entered promiscuous mode [ 60.428213][ T5105] team0: Port device team_slave_0 added [ 60.456396][ T5102] hsr_slave_0: entered promiscuous mode [ 60.462806][ T5102] hsr_slave_1: entered promiscuous mode [ 60.468910][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.476880][ T5102] Cannot create hsr debugfs directory [ 60.497502][ T5105] team0: Port device team_slave_1 added [ 60.530700][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.537764][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.542793][ T5107] Bluetooth: hci4: command tx timeout [ 60.566778][ T5104] Bluetooth: hci3: command tx timeout [ 60.569704][ T5107] Bluetooth: hci0: command tx timeout [ 60.575772][ T5104] Bluetooth: hci2: command tx timeout [ 60.581636][ T5115] Bluetooth: hci1: command tx timeout [ 60.594803][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.625955][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.638652][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.664633][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.672052][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.698760][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.716216][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.723315][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.749551][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.763394][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.770378][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.796553][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.863061][ T5109] team0: Port device team_slave_0 added [ 60.909546][ T5109] team0: Port device team_slave_1 added [ 61.011182][ T5105] hsr_slave_0: entered promiscuous mode [ 61.018070][ T5105] hsr_slave_1: entered promiscuous mode [ 61.025289][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.033558][ T5105] Cannot create hsr debugfs directory [ 61.053988][ T5108] hsr_slave_0: entered promiscuous mode [ 61.061092][ T5108] hsr_slave_1: entered promiscuous mode [ 61.068382][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.076164][ T5108] Cannot create hsr debugfs directory [ 61.104155][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.111123][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.137754][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.151175][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.158532][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.184929][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.392816][ T5109] hsr_slave_0: entered promiscuous mode [ 61.399173][ T5109] hsr_slave_1: entered promiscuous mode [ 61.407512][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.415166][ T5109] Cannot create hsr debugfs directory [ 61.422755][ T5098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.460778][ T5098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.477819][ T5098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.521129][ T5098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.650124][ T5102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.689178][ T5102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.702236][ T5102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.715717][ T5102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.759405][ T5108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.790268][ T5108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.835032][ T5108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.857491][ T5108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.885635][ T5105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.898311][ T5105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.909497][ T5105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.930165][ T5105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.014388][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.050409][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.072959][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.084393][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.158927][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.216742][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.264569][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.291711][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.299627][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.338491][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.345679][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.363934][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.410568][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.471363][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.479058][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.505033][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.561098][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.588591][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.595807][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.621679][ T5115] Bluetooth: hci1: command tx timeout [ 62.621819][ T5104] Bluetooth: hci0: command tx timeout [ 62.627104][ T5117] Bluetooth: hci2: command tx timeout [ 62.632766][ T5104] Bluetooth: hci3: command tx timeout [ 62.638115][ T5107] Bluetooth: hci4: command tx timeout [ 62.653368][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.664257][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.671494][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.708255][ T5102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.721071][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.738218][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.745412][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.826074][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.867944][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.882142][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.895036][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.902244][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.912298][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.919374][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.944785][ T5108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.956107][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.985894][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.993086][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.027503][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.034716][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.080029][ T5105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.092279][ T5105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.227244][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.256660][ T5098] veth0_vlan: entered promiscuous mode [ 63.377161][ T5098] veth1_vlan: entered promiscuous mode [ 63.457053][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.567719][ T5098] veth0_macvtap: entered promiscuous mode [ 63.640806][ T5108] veth0_vlan: entered promiscuous mode [ 63.661416][ T5098] veth1_macvtap: entered promiscuous mode [ 63.700239][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.728075][ T5108] veth1_vlan: entered promiscuous mode [ 63.764877][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.806556][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.824720][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.864979][ T5098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.874946][ T5098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.884288][ T5098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.893636][ T5098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.944026][ T5102] veth0_vlan: entered promiscuous mode [ 63.952566][ T5108] veth0_macvtap: entered promiscuous mode [ 63.985464][ T5109] veth0_vlan: entered promiscuous mode [ 63.996156][ T5108] veth1_macvtap: entered promiscuous mode [ 64.007939][ T5105] veth0_vlan: entered promiscuous mode [ 64.038967][ T5102] veth1_vlan: entered promiscuous mode [ 64.059791][ T5109] veth1_vlan: entered promiscuous mode [ 64.076387][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.090837][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.103865][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.136035][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.147423][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.165667][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.185671][ T5105] veth1_vlan: entered promiscuous mode [ 64.202685][ T5108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.212069][ T5108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.220791][ T5108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.232458][ T5108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.258405][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.266898][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.346743][ T5102] veth0_macvtap: entered promiscuous mode [ 64.380165][ T5109] veth0_macvtap: entered promiscuous mode [ 64.387124][ T2788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.396123][ T2788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.427270][ T5102] veth1_macvtap: entered promiscuous mode [ 64.481855][ T5105] veth0_macvtap: entered promiscuous mode [ 64.490124][ T5109] veth1_macvtap: entered promiscuous mode [ 64.511262][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.522661][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.532791][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.543751][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.555895][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.579749][ T5105] veth1_macvtap: entered promiscuous mode [ 64.594905][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.631441][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.641283][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.663759][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.674980][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.689890][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.700632][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.712748][ T5107] Bluetooth: hci3: command tx timeout [ 64.718173][ T5107] Bluetooth: hci0: command tx timeout [ 64.721683][ T5115] Bluetooth: hci4: command tx timeout [ 64.723595][ T5117] Bluetooth: hci1: command tx timeout [ 64.729087][ T5104] Bluetooth: hci2: command tx timeout [ 64.739837][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.750624][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.762004][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.774079][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.786286][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.800219][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.811327][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.821751][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.833369][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.844987][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.855557][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.869062][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.877157][ T5187] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.894280][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.906763][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.910316][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.924199][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.933511][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.943098][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985567][ T5102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.006083][ T5102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.016734][ T5102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.028232][ T5102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.098246][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.128119][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.138098][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.154610][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.169815][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.189134][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.210088][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.220613][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.238582][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.288799][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.301114][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.312169][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.324600][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.334819][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.348147][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.364916][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.377964][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.395996][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.427333][ T5105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.436264][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.456291][ T5105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.465928][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.478743][ T5105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.489770][ T5105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.592401][ T2442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.613281][ T2442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.689512][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.707468][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.720032][ T5192] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.837639][ T5184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.866257][ T5184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.911508][ T5194] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.980112][ T5194] bond1: entered promiscuous mode [ 65.988633][ T5194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.163661][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.191782][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.282056][ T2442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.334524][ T2442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.378947][ T5154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.411823][ T5154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.791734][ T5104] Bluetooth: hci2: command tx timeout [ 66.797206][ T5104] Bluetooth: hci4: command tx timeout [ 66.807147][ T5104] Bluetooth: hci3: command tx timeout [ 66.812652][ T5117] Bluetooth: hci1: command tx timeout [ 66.812695][ T5117] Bluetooth: hci0: command tx timeout [ 67.210244][ T5230] loop0: detected capacity change from 0 to 256 [ 67.996413][ T5254] loop1: detected capacity change from 0 to 512 [ 68.060542][ T5254] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.101233][ T5254] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #2: comm syz-executor.1: corrupted xattr block 255: invalid header [ 68.144364][ T5254] EXT4-fs (loop1): Remounting filesystem read-only [ 68.151018][ T5254] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 68.180199][ T5254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.225921][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.280923][ T5259] syz-executor.0: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 68.297547][ T5259] CPU: 1 PID: 5259 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 68.308006][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 68.318100][ T5259] Call Trace: [ 68.321398][ T5259] [ 68.324349][ T5259] dump_stack_lvl+0x241/0x360 [ 68.329081][ T5259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.334314][ T5259] ? __pfx__printk+0x10/0x10 [ 68.338941][ T5259] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 68.345390][ T5259] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 68.351931][ T5259] warn_alloc+0x278/0x410 [ 68.356332][ T5259] ? stack_depot_save_flags+0x6e4/0x830 [ 68.361944][ T5259] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 68.368043][ T5259] ? __pfx_warn_alloc+0x10/0x10 [ 68.372919][ T5259] ? kasan_save_track+0x3f/0x80 [ 68.377793][ T5259] ? __kasan_kmalloc+0x98/0xb0 [ 68.382587][ T5259] ? xsk_setsockopt+0x598/0x950 [ 68.387457][ T5259] ? do_sock_setsockopt+0x3af/0x720 [ 68.392683][ T5259] ? __sys_setsockopt+0x1ae/0x250 [ 68.397730][ T5259] ? __x64_sys_setsockopt+0xb5/0xd0 [ 68.402949][ T5259] ? do_syscall_64+0xf3/0x230 [ 68.407654][ T5259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.413762][ T5259] __vmalloc_node_range_noprof+0x130/0x1460 [ 68.419726][ T5259] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.426099][ T5259] ? __kasan_kmalloc+0x98/0xb0 [ 68.430902][ T5259] ? xskq_create+0x54/0x170 [ 68.435432][ T5259] vmalloc_user_noprof+0x74/0x80 [ 68.440414][ T5259] ? xskq_create+0xb6/0x170 [ 68.444951][ T5259] xskq_create+0xb6/0x170 [ 68.449309][ T5259] xsk_init_queue+0xa1/0x100 [ 68.453925][ T5259] xsk_setsockopt+0x598/0x950 [ 68.458626][ T5259] ? __pfx_xsk_setsockopt+0x10/0x10 [ 68.463854][ T5259] ? __pfx_lock_acquire+0x10/0x10 [ 68.468904][ T5259] ? __fget_files+0x29/0x470 [ 68.473521][ T5259] ? __pfx_lock_release+0x10/0x10 [ 68.478566][ T5259] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 68.484140][ T5259] ? security_socket_setsockopt+0x87/0xb0 [ 68.489889][ T5259] ? __pfx_xsk_setsockopt+0x10/0x10 [ 68.495203][ T5259] do_sock_setsockopt+0x3af/0x720 [ 68.500268][ T5259] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 68.505856][ T5259] ? __fget_files+0x29/0x470 [ 68.510558][ T5259] ? __fget_files+0x3f6/0x470 [ 68.515272][ T5259] __sys_setsockopt+0x1ae/0x250 [ 68.520160][ T5259] __x64_sys_setsockopt+0xb5/0xd0 [ 68.525221][ T5259] do_syscall_64+0xf3/0x230 [ 68.529747][ T5259] ? clear_bhb_loop+0x35/0x90 [ 68.534447][ T5259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.540376][ T5259] RIP: 0033:0x7fbeb7e7cee9 [ 68.544816][ T5259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 68.564446][ T5259] RSP: 002b:00007fbeb8c300c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.572889][ T5259] RAX: ffffffffffffffda RBX: 00007fbeb7fb3fa0 RCX: 00007fbeb7e7cee9 [ 68.580889][ T5259] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 68.588892][ T5259] RBP: 00007fbeb7ec947f R08: 00000000000000eb R09: 0000000000000000 [ 68.596890][ T5259] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 68.604887][ T5259] R13: 000000000000000b R14: 00007fbeb7fb3fa0 R15: 00007ffe40fcf748 [ 68.612980][ T5259] [ 68.653387][ T5259] Mem-Info: [ 68.657550][ T5259] active_anon:297 inactive_anon:17773 isolated_anon:0 [ 68.657550][ T5259] active_file:3541 inactive_file:42819 isolated_file:0 [ 68.657550][ T5259] unevictable:768 dirty:8718 writeback:0 [ 68.657550][ T5259] slab_reclaimable:9095 slab_unreclaimable:94487 [ 68.657550][ T5259] mapped:18420 shmem:1336 pagetables:747 [ 68.657550][ T5259] sec_pagetables:0 bounce:0 [ 68.657550][ T5259] kernel_misc_reclaimable:0 [ 68.657550][ T5259] free:1387550 free_pcp:342 free_cma:0 [ 68.719851][ T5259] Node 0 active_anon:1188kB inactive_anon:71092kB active_file:14084kB inactive_file:171276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73680kB dirty:34848kB writeback:0kB shmem:3808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10604kB pagetables:2988kB sec_pagetables:0kB all_unreclaimable? no [ 68.770540][ T5259] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 68.814277][ T5259] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.896945][ T5259] lowmem_reserve[]: 0 2571 2571 0 0 [ 68.925661][ T5259] Node 0 DMA32 free:1584580kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:1184kB inactive_anon:70956kB active_file:13836kB inactive_file:171216kB unevictable:1536kB writepending:34844kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:576kB local_pcp:328kB free_cma:0kB [ 69.051530][ T5259] lowmem_reserve[]: 0 0 0 0 0 [ 69.084037][ T5259] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:248kB inactive_file:60kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 69.204490][ T5259] lowmem_reserve[]: 0 0 0 0 0 [ 69.258163][ T5259] Node 1 Normal free:3950760kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:1536kB writepending:24kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1108kB local_pcp:632kB free_cma:0kB [ 69.334949][ T5259] lowmem_reserve[]: 0 0 0 0 0 [ 69.335034][ T5259] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 69.335200][ T5259] Node 0 DMA32: 104*4kB (UME) 127*8kB (UM) 104*16kB (UE) 19*32kB (UME) 10*64kB (UME) 3*128kB (UE) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 383*4096kB (M) = 1583224kB [ 69.335388][ T5259] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 69.335508][ T5259] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 4*16kB (UM) 5*32kB (UM) 6*64kB (UM) 3*128kB (UM) 1*256kB (U) 2*512kB (UM) 2*1024kB (U) 1*2048kB (M) 963*4096kB (M) = 3950864kB [ 69.335701][ T5259] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.335719][ T5259] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.335735][ T5259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.335752][ T5259] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.335769][ T5259] 47747 total pagecache pages [ 69.335785][ T5259] 0 pages in swap cache [ 69.335793][ T5259] Free swap = 124996kB [ 69.335801][ T5259] Total swap = 124996kB [ 69.335810][ T5259] 2097051 pages RAM [ 69.335818][ T5259] 0 pages HighMem/MovableOnly [ 69.335827][ T5259] 400874 pages reserved [ 69.335835][ T5259] 0 pages cma reserved [ 69.344795][ T5284] loop1: detected capacity change from 0 to 512 [ 69.355722][ T5284] EXT4-fs: quotafile must be on filesystem root [ 69.478165][ T5288] loop2: detected capacity change from 0 to 512 [ 69.639795][ T5288] ======================================================= [ 69.639795][ T5288] WARNING: The mand mount option has been deprecated and [ 69.639795][ T5288] and is ignored by this kernel. Remove the mand [ 69.639795][ T5288] option from the mount to silence this warning. [ 69.639795][ T5288] ======================================================= [ 69.762290][ T5288] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 5: invalid block bitmap [ 69.807417][ T5288] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 69.831889][ T5288] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 3 (level 2) [ 69.852599][ T5288] EXT4-fs (loop2): 1 orphan inode deleted [ 69.858376][ T5288] EXT4-fs (loop2): 1 truncate cleaned up [ 69.873277][ T5288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.045198][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.995072][ T5329] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 71.021125][ T5324] syzkaller0: entered promiscuous mode [ 71.098476][ T5324] syzkaller0: entered allmulticast mode [ 71.198393][ T29] audit: type=1326 audit(1716939551.115:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 71.247669][ T29] audit: type=1326 audit(1716939551.115:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 71.331159][ T29] audit: type=1326 audit(1716939551.115:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 71.518956][ T5336] hsr_slave_0: left promiscuous mode [ 71.532797][ T29] audit: type=1326 audit(1716939551.115:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 71.569600][ T29] audit: type=1326 audit(1716939551.115:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 71.595143][ T29] audit: type=1326 audit(1716939551.115:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 71.598385][ T5336] hsr_slave_1: left promiscuous mode [ 71.618648][ T29] audit: type=1326 audit(1716939551.115:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 71.868418][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.910259][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.119722][ T29] audit: type=1326 audit(1716939551.115:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 72.357929][ T29] audit: type=1326 audit(1716939551.115:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 72.439462][ T29] audit: type=1326 audit(1716939551.115:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7e87cee9 code=0x7ffc0000 [ 74.043432][ T5378] loop1: detected capacity change from 0 to 512 [ 74.085692][ T5378] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 74.129217][ T5378] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 74.159056][ T5378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.420649][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.902045][ T5401] loop1: detected capacity change from 0 to 512 [ 74.912277][ T5401] EXT4-fs: Invalid want_extra_isize 0 [ 74.958241][ T5091] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 74.976239][ T5401] loop1: detected capacity change from 0 to 512 [ 74.976615][ T5091] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.057126][ T5401] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 75.084315][ T5401] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 75.123414][ T5401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.173333][ T5401] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 75.185687][ T5401] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 75.204017][ T5401] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 75.225561][ T5401] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 75.245094][ T5401] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 75.260417][ T5401] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #18: comm syz-executor.1: Siphash requires key [ 75.339917][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.361282][ T5370] hsr_slave_0: left promiscuous mode [ 75.426674][ T5370] hsr_slave_1: left promiscuous mode [ 75.575021][ T5408] loop2: detected capacity change from 0 to 512 [ 75.582440][ T5404] bond0: entered promiscuous mode [ 75.593249][ T5404] bond_slave_0: entered promiscuous mode [ 75.623862][ T5404] bond_slave_1: entered promiscuous mode [ 75.624235][ T5408] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 75.638418][ T5404] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.667778][ T5404] bond0: left promiscuous mode [ 75.673876][ T5404] bond_slave_0: left promiscuous mode [ 75.679635][ T5404] bond_slave_1: left promiscuous mode [ 75.750150][ T5408] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 75.828669][ T5408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.237108][ T5431] syzkaller0: entered promiscuous mode [ 76.242743][ T5431] syzkaller0: entered allmulticast mode [ 76.299746][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.342045][ T11] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x69 [ 76.386911][ T5441] hsr_slave_0: left promiscuous mode [ 76.444752][ T5441] hsr_slave_1: left promiscuous mode [ 76.800296][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 76.800312][ T29] audit: type=1326 audit(1716939556.715:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 76.869884][ T29] audit: type=1326 audit(1716939556.745:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 76.947195][ T783] cfg80211: failed to load regulatory.db [ 76.965548][ T29] audit: type=1326 audit(1716939556.755:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 77.091601][ T29] audit: type=1326 audit(1716939556.755:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 77.184873][ T29] audit: type=1326 audit(1716939556.755:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 77.301518][ T29] audit: type=1326 audit(1716939556.755:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 77.371988][ T5472] Cannot find set identified by id 0 to match [ 77.384655][ T29] audit: type=1326 audit(1716939556.755:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 77.488847][ T29] audit: type=1326 audit(1716939556.765:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 77.526820][ T29] audit: type=1326 audit(1716939556.765:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5451 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 77.701626][ T29] audit: type=1326 audit(1716939557.605:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5481 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 78.245491][ T51] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x69 [ 78.899448][ T5476] hsr_slave_0: left promiscuous mode [ 78.907372][ T5476] hsr_slave_1: left promiscuous mode [ 79.014794][ T5484] bond0: entered promiscuous mode [ 79.028300][ T5484] bond_slave_0: entered promiscuous mode [ 79.051914][ T5484] bond_slave_1: entered promiscuous mode [ 79.097805][ T5484] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.177779][ T5484] bond0: left promiscuous mode [ 79.190412][ T5484] bond_slave_0: left promiscuous mode [ 79.216869][ T5484] bond_slave_1: left promiscuous mode [ 79.710547][ T5526] syzkaller0: entered promiscuous mode [ 79.758215][ T5526] syzkaller0: entered allmulticast mode [ 79.763115][ T66] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x69 [ 81.127615][ T5581] loop3: detected capacity change from 0 to 512 [ 81.140765][ T5581] EXT4-fs: Ignoring removed nobh option [ 81.203621][ T5581] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 81.227239][ T5581] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 81.247936][ T5581] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz-executor.3: casefold flag without casefold feature [ 81.270097][ T5581] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 81.298714][ T5581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.318965][ T5581] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 81.332860][ T5581] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 81.897400][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 81.897418][ T29] audit: type=1326 audit(1716939561.805:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 81.900283][ T5108] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.930061][ T29] audit: type=1326 audit(1716939561.815:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 81.977434][ T29] audit: type=1326 audit(1716939561.855:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 82.093884][ T29] audit: type=1326 audit(1716939561.855:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 82.152644][ T29] audit: type=1326 audit(1716939561.855:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 82.186842][ T29] audit: type=1326 audit(1716939561.855:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 82.253615][ T29] audit: type=1326 audit(1716939561.855:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 82.281899][ T29] audit: type=1326 audit(1716939561.855:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 82.328025][ T29] audit: type=1326 audit(1716939561.855:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5590 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb7e7cee9 code=0x7ffc0000 [ 82.658867][ T5626] syzkaller0: entered promiscuous mode [ 82.690747][ T5626] syzkaller0: entered allmulticast mode [ 82.772164][ T29] audit: type=1326 audit(1716939562.685:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5631 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7f7e7cee9 code=0x0 [ 82.888394][ T5636] loop3: detected capacity change from 0 to 512 [ 82.912690][ T5636] EXT4-fs: Ignoring removed nobh option [ 82.956055][ T5636] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 82.968591][ T5636] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 82.983739][ T5636] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz-executor.3: casefold flag without casefold feature [ 83.043978][ T5636] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 83.080436][ T5636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.114208][ T5636] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 83.124605][ T5636] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 83.482135][ T51] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x69 [ 83.634703][ T5108] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.247288][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.069766][ T5712] syzkaller0: entered promiscuous mode [ 86.097131][ T5712] syzkaller0: entered allmulticast mode [ 86.164765][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.250805][ T5726] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.950825][ T5745] loop1: detected capacity change from 0 to 512 [ 86.976954][ T5745] EXT4-fs: Ignoring removed nobh option [ 87.007767][ T5745] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 87.021161][ T5745] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 87.036051][ T5745] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #13: comm syz-executor.1: casefold flag without casefold feature [ 87.067391][ T5745] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 87.090161][ T5745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.122790][ T5745] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 87.134617][ T5745] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 87.305220][ T5756] loop2: detected capacity change from 0 to 512 [ 87.375017][ T5756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.390821][ T5756] ext4 filesystem being mounted at /root/syzkaller-testdir807750160/syzkaller.GVfRXG/39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.458341][ T5756] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 87.475850][ T5756] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 87.499730][ T5756] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 87.522249][ T5756] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 87.680898][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.700982][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.857220][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.878552][ T5763] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 89.300877][ T5787] loop2: detected capacity change from 0 to 512 [ 89.372621][ T5787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.390954][ T5787] ext4 filesystem being mounted at /root/syzkaller-testdir807750160/syzkaller.GVfRXG/48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.545703][ T5787] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 89.590038][ T5787] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 89.625465][ T5787] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 89.678827][ T5787] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 89.957994][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.032368][ T5810] loop1: detected capacity change from 0 to 512 [ 90.074339][ T5810] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.149661][ T5810] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.203992][ T5810] EXT4-fs (loop1): 1 truncate cleaned up [ 90.212643][ T5810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.267481][ T5816] syzkaller0: entered promiscuous mode [ 90.333853][ T5816] syzkaller0: entered allmulticast mode [ 90.378387][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.561138][ T5835] loop2: detected capacity change from 0 to 2048 [ 90.608235][ T5835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.671069][ T5835] ext4 filesystem being mounted at /root/syzkaller-testdir807750160/syzkaller.GVfRXG/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.729332][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.816092][ T5105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.877478][ T5849] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 92.154259][ T5867] hsr_slave_0: left promiscuous mode [ 92.167409][ T5867] hsr_slave_1: left promiscuous mode [ 92.798387][ T5896] serio: Serial port pts0 [ 92.842499][ T5895] serio: Serial port pts1 [ 92.980810][ T5899] syzkaller0: entered promiscuous mode [ 92.986574][ T5899] syzkaller0: entered allmulticast mode [ 93.646678][ T5938] loop3: detected capacity change from 0 to 2048 [ 93.724698][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.953600][ T5108] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.110562][ T5946] serio: Serial port pts0 [ 94.308032][ T5949] loop3: detected capacity change from 0 to 256 [ 94.445790][ T5949] FAT-fs (loop3): Directory bread(block 64) failed [ 94.471567][ T5949] FAT-fs (loop3): Directory bread(block 65) failed [ 94.478274][ T5949] FAT-fs (loop3): Directory bread(block 66) failed [ 94.499573][ T5949] FAT-fs (loop3): Directory bread(block 67) failed [ 94.514447][ T5949] FAT-fs (loop3): Directory bread(block 68) failed [ 94.526241][ T5949] FAT-fs (loop3): Directory bread(block 69) failed [ 94.533133][ T5949] FAT-fs (loop3): Directory bread(block 70) failed [ 94.548272][ T5949] FAT-fs (loop3): Directory bread(block 71) failed [ 94.570685][ T5949] FAT-fs (loop3): Directory bread(block 72) failed [ 94.577480][ T5949] FAT-fs (loop3): Directory bread(block 73) failed [ 96.154565][ T5984] loop1: detected capacity change from 0 to 512 [ 96.169566][ T5983] netlink: 703 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.237753][ T5984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.315907][ T5984] ext4 filesystem being mounted at /root/syzkaller-testdir2546541989/syzkaller.EVguAX/66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.486973][ T5984] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 96.580517][ T5984] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 96.646680][ T5984] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 96.713327][ T5984] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 96.877014][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.897640][ T6008] syzkaller0: entered promiscuous mode [ 96.916008][ T6008] syzkaller0: entered allmulticast mode [ 96.958206][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.761914][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 97.761934][ T29] audit: type=1804 audit(1716939577.665:110): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2546541989/syzkaller.EVguAX/69/bus" dev="sda1" ino=1965 res=1 errno=0 [ 97.877886][ T29] audit: type=1326 audit(1716939577.775:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 97.964393][ T29] audit: type=1326 audit(1716939577.775:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 98.037047][ T6052] loop0: detected capacity change from 0 to 512 [ 98.043954][ T29] audit: type=1326 audit(1716939577.795:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 98.067776][ T29] audit: type=1326 audit(1716939577.795:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 98.092403][ T29] audit: type=1326 audit(1716939577.795:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 98.133313][ T29] audit: type=1326 audit(1716939577.825:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 98.195931][ T29] audit: type=1326 audit(1716939577.825:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62587cee9 code=0x7ffc0000 [ 98.251546][ T6052] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 98.338443][ T6052] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 98.462190][ T6052] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.547197][ T5109] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 99.849881][ T29] audit: type=1804 audit(1716939579.765:118): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2546541989/syzkaller.EVguAX/75/bus" dev="sda1" ino=1965 res=1 errno=0 [ 100.104015][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.119763][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.136147][ T6027] geneve2: entered promiscuous mode [ 100.147264][ T6027] geneve2: entered allmulticast mode [ 100.515398][ T6094] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 100.883252][ T1856] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.018127][ T6116] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 101.055142][ T6116] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 101.135775][ T6117] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 101.415939][ T6131] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 101.818663][ T29] audit: type=1804 audit(1716939581.735:119): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3212204615/syzkaller.nD18KH/71/bus" dev="sda1" ino=1951 res=1 errno=0 [ 101.859782][ T6158] Zero length message leads to an empty skb [ 101.987786][ T6165] loop4: detected capacity change from 0 to 128 [ 102.040759][ T6165] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 102.385399][ T6178] loop3: detected capacity change from 0 to 512 [ 102.484422][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.504087][ T6178] ext4 filesystem being mounted at /root/syzkaller-testdir838896821/syzkaller.k7JrFB/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.549941][ T6178] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 102.659232][ T5108] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.895595][ T6199] loop3: detected capacity change from 0 to 1024 [ 102.947383][ T6199] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 102.992071][ T6199] JBD2: no valid journal superblock found [ 103.008384][ T6199] EXT4-fs (loop3): Could not load journal inode [ 104.008999][ T6254] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.852056][ T6295] loop0: detected capacity change from 0 to 1024 [ 104.923614][ T6295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.002315][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.037028][ T6304] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.159922][ T29] audit: type=1804 audit(1716939585.075:120): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2546541989/syzkaller.EVguAX/86/bus" dev="sda1" ino=1950 res=1 errno=0 [ 105.368187][ T6311] loop0: detected capacity change from 0 to 2048 [ 106.066438][ T6334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.100994][ T6335] team0: entered promiscuous mode [ 106.127288][ T6335] team_slave_0: entered promiscuous mode [ 106.152194][ T6335] team_slave_1: entered promiscuous mode [ 106.182346][ T6335] team0: left promiscuous mode [ 106.197050][ T6335] team_slave_0: left promiscuous mode [ 106.211344][ T6335] team_slave_1: left promiscuous mode [ 106.936989][ T6372] af_packet: tpacket_rcv: packet too big, clamped from 4356 to 3952. macoff=96 [ 107.341102][ T6382] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.848094][ T6372] syz-executor.4 (6372) used greatest stack depth: 18000 bytes left [ 108.214578][ T6406] Illegal XDP return value 4294967274 on prog (id 50) dev N/A, expect packet loss! [ 108.637981][ T6416] loop0: detected capacity change from 0 to 512 [ 108.728473][ T6422] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 108.760144][ T6416] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 108.812962][ T6416] ext4_test_bit(bit=14, block=4) = 1 [ 108.818348][ T6416] is_bad_inode(inode)=0 [ 108.879079][ T6422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.889061][ T6416] NEXT_ORPHAN(inode)=0 [ 108.907449][ T6416] max_ino=32 [ 108.914542][ T6416] i_nlink=1 [ 108.924076][ T6416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.142495][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.458251][ T6492] loop4: detected capacity change from 0 to 512 [ 110.515106][ T6492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.547150][ T6492] ext4 filesystem being mounted at /root/syzkaller-testdir3212204615/syzkaller.nD18KH/91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.819013][ T5102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.822940][ T6510] random: crng reseeded on system resumption [ 111.285269][ T6525] ------------[ cut here ]------------ [ 111.291240][ T6525] kernel BUG at mm/page_table_check.c:148! [ 111.339494][ T6525] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 111.346679][ T6525] CPU: 1 PID: 6525 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 111.357119][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 111.367205][ T6525] RIP: 0010:__page_table_check_zero+0x25c/0x340 [ 111.373479][ T6525] Code: c1 0f 8c 51 fe ff ff 48 89 df e8 3f 46 f4 ff e9 44 fe ff ff e8 f5 cf 91 ff 90 0f 0b e8 ed cf 91 ff 90 0f 0b e8 e5 cf 91 ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 ad d4 91 [ 111.393113][ T6525] RSP: 0018:ffffc90013207938 EFLAGS: 00010283 [ 111.399216][ T6525] RAX: ffffffff820445ab RBX: dffffc0000000000 RCX: 0000000000040000 [ 111.407204][ T6525] RDX: ffffc90009eb1000 RSI: 0000000000004a8e RDI: 0000000000004a8f [ 111.415285][ T6525] RBP: ffff888016167c8c R08: ffff888016167c8f R09: 1ffff11002c2cf91 [ 111.423366][ T6525] R10: dffffc0000000000 R11: ffffed1002c2cf92 R12: ffff888016167c40 [ 111.431442][ T6525] R13: 1ffffffff28fadd8 R14: 0000000000000002 R15: 0000000000000000 [ 111.439428][ T6525] FS: 00007fec7f6466c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 111.448375][ T6525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.454965][ T6525] CR2: 00007ffff7301788 CR3: 0000000024436000 CR4: 00000000003506f0 [ 111.462937][ T6525] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.470986][ T6525] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.478952][ T6525] Call Trace: [ 111.482221][ T6525] [ 111.485158][ T6525] ? __die_body+0x88/0xe0 [ 111.489515][ T6525] ? die+0xcf/0x110 [ 111.493352][ T6525] ? do_trap+0x15a/0x3a0 [ 111.497592][ T6525] ? __page_table_check_zero+0x25c/0x340 [ 111.503222][ T6525] ? do_error_trap+0x1dc/0x2c0 [ 111.508064][ T6525] ? __page_table_check_zero+0x25c/0x340 [ 111.513706][ T6525] ? __pfx_do_error_trap+0x10/0x10 [ 111.518814][ T6525] ? handle_invalid_op+0x34/0x40 [ 111.523743][ T6525] ? __page_table_check_zero+0x25c/0x340 [ 111.529363][ T6525] ? exc_invalid_op+0x38/0x50 [ 111.534033][ T6525] ? asm_exc_invalid_op+0x1a/0x20 [ 111.539052][ T6525] ? __page_table_check_zero+0x25b/0x340 [ 111.544692][ T6525] ? __page_table_check_zero+0x25c/0x340 [ 111.550323][ T6525] ? __page_table_check_zero+0x25b/0x340 [ 111.555970][ T6525] free_unref_page+0xd2d/0xea0 [ 111.560733][ T6525] dec_usb_memory_use_count+0x259/0x350 [ 111.566272][ T6525] ? __pfx_usbdev_vm_close+0x10/0x10 [ 111.571551][ T6525] mmap_region+0x13b4/0x2090 [ 111.576131][ T6525] ? futex_unqueue+0xcb/0xf0 [ 111.580720][ T6525] ? __pfx_mmap_region+0x10/0x10 [ 111.585737][ T6525] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 111.591970][ T6525] ? cap_mmap_addr+0x163/0x2c0 [ 111.596731][ T6525] ? __get_unmapped_area+0x2f0/0x360 [ 111.602006][ T6525] do_mmap+0x8ad/0xfa0 [ 111.606067][ T6525] ? __pfx_do_mmap+0x10/0x10 [ 111.610646][ T6525] ? __pfx_ima_file_mmap+0x10/0x10 [ 111.615771][ T6525] vm_mmap_pgoff+0x1dd/0x3d0 [ 111.620371][ T6525] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 111.625482][ T6525] ? __fget_files+0x29/0x470 [ 111.630081][ T6525] ? __fget_files+0x3f6/0x470 [ 111.634762][ T6525] ksys_mmap_pgoff+0x4f1/0x720 [ 111.639552][ T6525] ? __x64_sys_mmap+0x7f/0x140 [ 111.644320][ T6525] do_syscall_64+0xf3/0x230 [ 111.648818][ T6525] ? clear_bhb_loop+0x35/0x90 [ 111.653489][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.659462][ T6525] RIP: 0033:0x7fec7e87cee9 [ 111.663868][ T6525] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 111.683474][ T6525] RSP: 002b:00007fec7f6460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 111.691887][ T6525] RAX: ffffffffffffffda RBX: 00007fec7e9b3fa0 RCX: 00007fec7e87cee9 [ 111.699850][ T6525] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 111.707811][ T6525] RBP: 00007fec7e8c947f R08: 0000000000000007 R09: 0000000000000000 [ 111.716206][ T6525] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 111.724162][ T6525] R13: 000000000000000b R14: 00007fec7e9b3fa0 R15: 00007ffc89c111b8 [ 111.732136][ T6525] [ 111.735145][ T6525] Modules linked in: 2024/05/28 23:39:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 111.759587][ T6510] PM: hibernation: Basic memory bitmaps created [ 111.817218][ T6509] PM: hibernation: Basic memory bitmaps freed [ 111.941432][ T6525] ---[ end trace 0000000000000000 ]--- [ 111.946943][ T6525] RIP: 0010:__page_table_check_zero+0x25c/0x340 [ 111.963465][ T6525] Code: c1 0f 8c 51 fe ff ff 48 89 df e8 3f 46 f4 ff e9 44 fe ff ff e8 f5 cf 91 ff 90 0f 0b e8 ed cf 91 ff 90 0f 0b e8 e5 cf 91 ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 ad d4 91 [ 111.987061][ T6525] RSP: 0018:ffffc90013207938 EFLAGS: 00010283 [ 111.993461][ T6525] RAX: ffffffff820445ab RBX: dffffc0000000000 RCX: 0000000000040000 [ 112.002656][ T6525] RDX: ffffc90009eb1000 RSI: 0000000000004a8e RDI: 0000000000004a8f [ 112.010656][ T6525] RBP: ffff888016167c8c R08: ffff888016167c8f R09: 1ffff11002c2cf91 [ 112.019070][ T6525] R10: dffffc0000000000 R11: ffffed1002c2cf92 R12: ffff888016167c40 [ 112.027386][ T6525] R13: 1ffffffff28fadd8 R14: 0000000000000002 R15: 0000000000000000 [ 112.035665][ T6525] FS: 00007fec7f6466c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 112.044910][ T6525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.051753][ T6525] CR2: 000055770a987131 CR3: 0000000024436000 CR4: 00000000003506f0 [ 112.059747][ T6525] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.069581][ T6525] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.077926][ T6525] Kernel panic - not syncing: Fatal exception [ 112.084137][ T6525] Kernel Offset: disabled [ 112.088448][ T6525] Rebooting in 86400 seconds..