last executing test programs: 1m58.313110917s ago: executing program 3 (id=39): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u', @ANYBLOB]) 1m55.500745771s ago: executing program 3 (id=48): rename(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x0, 0x3) 1m53.782526643s ago: executing program 3 (id=54): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) inotify_init1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x8, 0x40, @local, @mcast2, 0x20, 0x7, 0x7fffffff, 0x1b7c}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r2, 0x0, 0xfffe83) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x20, 0x3, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010006c00020000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa00000000000000000300060000000000"], 0x80}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1m52.890358046s ago: executing program 3 (id=58): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[], 0x0, 0x23e, &(0x7f0000000bc0)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m51.577944365s ago: executing program 32 (id=58): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[], 0x0, 0x23e, &(0x7f0000000bc0)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 14.066986601s ago: executing program 2 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 12.826853609s ago: executing program 2 (id=326): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000500)) 12.587210926s ago: executing program 2 (id=327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, 0x0, 0x2000000) 10.558630194s ago: executing program 2 (id=333): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) 9.407491388s ago: executing program 1 (id=337): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x30) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) 8.021552826s ago: executing program 1 (id=342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000cd0000000000000000000000fe8000000000000000000000000000bb000000006c0000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000020010000000000000000000000000000000000003c00000000000000e00000020000000000000000000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000001ff7c47f791"], 0x23c}}, 0x0) 6.991158531s ago: executing program 0 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x1, 0x4}}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x20}, {0x4}}]}, 0x30}}, 0x0) 6.935425914s ago: executing program 1 (id=346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) 6.233263326s ago: executing program 4 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 6.080394111s ago: executing program 0 (id=348): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u', @ANYBLOB]) 6.074973462s ago: executing program 1 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 5.400572835s ago: executing program 2 (id=350): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x4) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000", @ANYRES8], 0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2275, &(0x7f00000018c0)) socket(0x5, 0x80000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000004500000088140000", @ANYRES32, @ANYBLOB="0500009288000000005daaaa4cd1f77700000000009b000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) creat(&(0x7f0000000000)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) 5.400295503s ago: executing program 4 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.106622027s ago: executing program 4 (id=352): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x30) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) 4.326531593s ago: executing program 1 (id=353): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4.279374044s ago: executing program 5 (id=354): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.15915657s ago: executing program 0 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000010000000a00000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x7}, 0x20) 3.954632073s ago: executing program 5 (id=356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000700), 0xe, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a30d100007006000000002000020d3"]) 3.667994414s ago: executing program 4 (id=357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x2000000) 3.02336645s ago: executing program 5 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x1, 0x4}}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x20}, {0x4}}]}, 0x30}}, 0x0) 2.768363226s ago: executing program 0 (id=359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) 2.47386874s ago: executing program 2 (id=360): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) 2.154496578s ago: executing program 4 (id=361): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x15, 0x0, 0x4f}) 1.754679569s ago: executing program 1 (id=362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="05ff03076844268cb89e14f08848fe", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.535366272s ago: executing program 0 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 1.518072709s ago: executing program 5 (id=364): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) 891.279271ms ago: executing program 4 (id=365): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u', @ANYBLOB]) 514.454787ms ago: executing program 5 (id=366): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x380000, 0x2, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @multicast1}}}}) 313.373824ms ago: executing program 0 (id=367): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x30) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10000002}}, 0x2e) 0s ago: executing program 5 (id=368): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 196.714270][ T5763] cgroup: Unknown subsys name 'net' [ 196.886525][ T5763] cgroup: Unknown subsys name 'cpuset' [ 196.904505][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.287482][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.294435][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.363567][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.932430][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.945178][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.955128][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.995858][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.007900][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 257.023877][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.025136][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.041721][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.051844][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.066953][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.086469][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 257.096074][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.143965][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.168337][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.185308][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.218579][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.230659][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 257.241145][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.273977][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.300291][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.329381][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.330924][ T5078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.340125][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.352039][ T5078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.355181][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.364117][ T5078] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.374250][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.375933][ T5078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.386893][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.401437][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.662451][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 258.970249][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 259.016389][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 259.104552][ T5781] Bluetooth: hci0: command tx timeout [ 259.183700][ T5781] Bluetooth: hci1: command tx timeout [ 259.349358][ T5781] Bluetooth: hci3: command tx timeout [ 259.423784][ T5781] Bluetooth: hci2: command tx timeout [ 259.488454][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 259.511941][ T5781] Bluetooth: hci4: command tx timeout [ 259.849313][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.857274][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.865469][ T5789] bridge_slave_0: entered allmulticast mode [ 259.875176][ T5789] bridge_slave_0: entered promiscuous mode [ 259.907217][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.915539][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.923588][ T5789] bridge_slave_1: entered allmulticast mode [ 259.933041][ T5789] bridge_slave_1: entered promiscuous mode [ 260.154278][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.200029][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.213130][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 260.487768][ T5789] team0: Port device team_slave_0 added [ 260.538430][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.546412][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.554453][ T5783] bridge_slave_0: entered allmulticast mode [ 260.564061][ T5783] bridge_slave_0: entered promiscuous mode [ 260.629450][ T5789] team0: Port device team_slave_1 added [ 260.687840][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.695823][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.705261][ T5783] bridge_slave_1: entered allmulticast mode [ 260.715427][ T5783] bridge_slave_1: entered promiscuous mode [ 260.728822][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.737077][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.745474][ T5779] bridge_slave_0: entered allmulticast mode [ 260.756238][ T5779] bridge_slave_0: entered promiscuous mode [ 260.998258][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.006315][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.014303][ T5779] bridge_slave_1: entered allmulticast mode [ 261.024134][ T5779] bridge_slave_1: entered promiscuous mode [ 261.071290][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.078618][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.105253][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.208015][ T5781] Bluetooth: hci0: command tx timeout [ 261.260903][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.268742][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.295255][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.308626][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.311827][ T5781] Bluetooth: hci1: command tx timeout [ 261.318587][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.330736][ T5788] bridge_slave_0: entered allmulticast mode [ 261.340251][ T5788] bridge_slave_0: entered promiscuous mode [ 261.364611][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.424467][ T5781] Bluetooth: hci3: command tx timeout [ 261.444260][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.452068][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.460047][ T5788] bridge_slave_1: entered allmulticast mode [ 261.469262][ T5788] bridge_slave_1: entered promiscuous mode [ 261.511728][ T5781] Bluetooth: hci2: command tx timeout [ 261.530897][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.583739][ T5781] Bluetooth: hci4: command tx timeout [ 261.587943][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.786206][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.841881][ T5783] team0: Port device team_slave_0 added [ 261.852707][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.860783][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.868686][ T5793] bridge_slave_0: entered allmulticast mode [ 261.878104][ T5793] bridge_slave_0: entered promiscuous mode [ 261.900960][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.925133][ T5789] hsr_slave_0: entered promiscuous mode [ 261.935889][ T5789] hsr_slave_1: entered promiscuous mode [ 261.988296][ T5783] team0: Port device team_slave_1 added [ 261.996548][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.004619][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.012398][ T5793] bridge_slave_1: entered allmulticast mode [ 262.021736][ T5793] bridge_slave_1: entered promiscuous mode [ 262.090071][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.182393][ T5779] team0: Port device team_slave_0 added [ 262.256552][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.263896][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.290427][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.345883][ T5779] team0: Port device team_slave_1 added [ 262.361072][ T5788] team0: Port device team_slave_0 added [ 262.474418][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.481641][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.508146][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.529028][ T5788] team0: Port device team_slave_1 added [ 262.579294][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.693826][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.701032][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.727558][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.749695][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.893749][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.900958][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.927591][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.947928][ T5793] team0: Port device team_slave_0 added [ 263.013306][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.020829][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.047534][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.083864][ T5793] team0: Port device team_slave_1 added [ 263.187165][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.194702][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.221153][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.248041][ T5783] hsr_slave_0: entered promiscuous mode [ 263.257744][ T5783] hsr_slave_1: entered promiscuous mode [ 263.267829][ T5781] Bluetooth: hci0: command tx timeout [ 263.272057][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.281323][ T5783] Cannot create hsr debugfs directory [ 263.343714][ T5781] Bluetooth: hci1: command tx timeout [ 263.403787][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.411026][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.439167][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.457586][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.466034][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.492563][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.503696][ T5781] Bluetooth: hci3: command tx timeout [ 263.613941][ T5781] Bluetooth: hci2: command tx timeout [ 263.641381][ T5779] hsr_slave_0: entered promiscuous mode [ 263.651793][ T5779] hsr_slave_1: entered promiscuous mode [ 263.661141][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.669489][ T5781] Bluetooth: hci4: command tx timeout [ 263.676304][ T5779] Cannot create hsr debugfs directory [ 264.011650][ T5788] hsr_slave_0: entered promiscuous mode [ 264.021208][ T5788] hsr_slave_1: entered promiscuous mode [ 264.030628][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.038577][ T5788] Cannot create hsr debugfs directory [ 264.173057][ T5793] hsr_slave_0: entered promiscuous mode [ 264.183160][ T5793] hsr_slave_1: entered promiscuous mode [ 264.192535][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.200531][ T5793] Cannot create hsr debugfs directory [ 264.876482][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.977489][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.059588][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.132327][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.360799][ T5781] Bluetooth: hci0: command tx timeout [ 265.391815][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.423719][ T5781] Bluetooth: hci1: command tx timeout [ 265.473035][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.497610][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.534161][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.649842][ T5781] Bluetooth: hci3: command tx timeout [ 265.663736][ T5781] Bluetooth: hci2: command tx timeout [ 265.743599][ T5781] Bluetooth: hci4: command tx timeout [ 265.827060][ T5779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.895001][ T5779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.927377][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.952312][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.977736][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.002516][ T5779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.103552][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.130288][ T5779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.291597][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.395120][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.517375][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.551464][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.115719][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.144233][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.359136][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.375676][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.449333][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.457189][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.572481][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.580387][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.597472][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.605349][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.860635][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.868524][ T4757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.920536][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.052711][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.093768][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.141603][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.251016][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.258990][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.302203][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.439651][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.447539][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.545772][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.575656][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.660357][ T4142] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.668223][ T4142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.684813][ T4142] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.692562][ T4142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.965873][ T4142] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.973928][ T4142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.990376][ T4142] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.998306][ T4142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.213715][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.396009][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.175414][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.781805][ T5783] veth0_vlan: entered promiscuous mode [ 270.913466][ T5783] veth1_vlan: entered promiscuous mode [ 270.981107][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.408111][ T5783] veth0_macvtap: entered promiscuous mode [ 271.470806][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.515498][ T5783] veth1_macvtap: entered promiscuous mode [ 271.578473][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.711675][ T5789] veth0_vlan: entered promiscuous mode [ 271.780518][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.818239][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.883402][ T5789] veth1_vlan: entered promiscuous mode [ 271.965506][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.097962][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.107389][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.118852][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.129660][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.276772][ T5788] veth0_vlan: entered promiscuous mode [ 272.489736][ T5788] veth1_vlan: entered promiscuous mode [ 272.502922][ T5789] veth0_macvtap: entered promiscuous mode [ 272.520101][ T5793] veth0_vlan: entered promiscuous mode [ 272.566645][ T5789] veth1_macvtap: entered promiscuous mode [ 272.730534][ T5793] veth1_vlan: entered promiscuous mode [ 272.827757][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.840656][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.856048][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.975536][ T5788] veth0_macvtap: entered promiscuous mode [ 273.073958][ T5788] veth1_macvtap: entered promiscuous mode [ 273.098164][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.109282][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.124760][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.291483][ T5793] veth0_macvtap: entered promiscuous mode [ 273.333038][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.345641][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.356005][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.366856][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.382412][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.414999][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.425638][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.434948][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.444164][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.520838][ T5793] veth1_macvtap: entered promiscuous mode [ 273.626131][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.637637][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.648091][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.658935][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.674177][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.825420][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.834700][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.844041][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.853117][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.889445][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.900449][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.912842][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.923828][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.934000][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.944811][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.959934][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.264762][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.276404][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.286750][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.297636][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.309065][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.320038][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.335510][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.499358][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.510817][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.522309][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.531942][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.638605][ T5779] veth0_vlan: entered promiscuous mode [ 274.754252][ T5779] veth1_vlan: entered promiscuous mode [ 275.197675][ T5779] veth0_macvtap: entered promiscuous mode [ 275.318191][ T5779] veth1_macvtap: entered promiscuous mode [ 275.613871][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.626025][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.636444][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.647333][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.657686][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.669460][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.680236][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.691071][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.706310][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.884230][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.895292][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.907296][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.919163][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.929425][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.940259][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.950618][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.961506][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.976479][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.236716][ T5779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.246143][ T5779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.255507][ T5779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.264725][ T5779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.148844][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.157479][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.444558][ T4516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.452695][ T4516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.732456][ T5783] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 281.515231][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.524019][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.700348][ T5953] syz.3.4[5953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.700832][ T5953] syz.3.4[5953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.746586][ T5953] syz.3.4[5953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.800793][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.813129][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.970294][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.979025][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.209020][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.217755][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.466869][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.475204][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.562680][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.571024][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.710296][ T5960] loop3: detected capacity change from 0 to 512 [ 282.767105][ T5960] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.799608][ T5960] journal_path: Lookup failure for './file0' [ 282.806237][ T5960] EXT4-fs: error: could not find journal device path [ 283.405919][ T5964] ======================================================= [ 283.405919][ T5964] WARNING: The mand mount option has been deprecated and [ 283.405919][ T5964] and is ignored by this kernel. Remove the mand [ 283.405919][ T5964] option from the mount to silence this warning. [ 283.405919][ T5964] ======================================================= [ 283.984763][ T29] audit: type=1326 audit(1733716622.496:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.008149][ T29] audit: type=1326 audit(1733716622.506:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.031179][ T29] audit: type=1326 audit(1733716622.516:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.053523][ T29] audit: type=1326 audit(1733716622.516:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.330860][ T5967] loop3: detected capacity change from 0 to 1024 [ 284.346052][ T29] audit: type=1326 audit(1733716622.836:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.368228][ T29] audit: type=1326 audit(1733716622.846:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.394818][ T29] audit: type=1326 audit(1733716622.846:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.416923][ T29] audit: type=1326 audit(1733716622.846:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.438961][ T29] audit: type=1326 audit(1733716622.856:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.461121][ T29] audit: type=1326 audit(1733716622.856:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 284.625916][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.634342][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.026655][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.055668][ T4516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.065038][ T4516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.373877][ T5977] loop1: detected capacity change from 0 to 1024 [ 285.573161][ T5977] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 285.589399][ T5977] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 285.614861][ T5977] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 286.204641][ T5977] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #5: comm syz.1.11: unexpected bad inode w/o EXT4_IGET_BAD [ 286.356180][ T5977] EXT4-fs (loop1): no journal found [ 286.361703][ T5977] EXT4-fs (loop1): can't get journal size [ 286.478051][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.526698][ T5977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.426806][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.746710][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.753855][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.479048][ T6029] netlink: 392 bytes leftover after parsing attributes in process `syz.4.23'. [ 293.337654][ T6039] loop4: detected capacity change from 0 to 1024 [ 293.543866][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.596661][ T6038] loop2: detected capacity change from 0 to 512 [ 293.648574][ T6038] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.28: Invalid inode bitmap blk 4 in block_group 0 [ 293.741314][ T6038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.048719][ T6038] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 294.490297][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.555868][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.358232][ T6063] loop2: detected capacity change from 0 to 128 [ 295.539522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 295.743419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 296.391382][ T6068] loop1: detected capacity change from 0 to 512 [ 296.510222][ T6071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 296.520272][ T6071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 296.693903][ T6068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.708517][ T6068] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.756525][ T6068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.030944][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 297.031028][ T29] audit: type=1326 audit(1733716635.586:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 297.060204][ T29] audit: type=1326 audit(1733716635.596:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 297.086002][ T29] audit: type=1326 audit(1733716635.596:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 298.175801][ T6087] loop1: detected capacity change from 0 to 512 [ 298.287900][ T6087] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 298.353725][ T6090] loop4: detected capacity change from 0 to 512 [ 298.417618][ T6087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 298.459479][ T6087] System zones: 1-12 [ 298.479393][ T6087] EXT4-fs (loop1): orphan cleanup on readonly fs [ 298.486444][ T6087] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.44: Inode bitmap for bg 0 marked uninitialized [ 298.507569][ T6087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 298.635465][ T6090] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 298.646722][ T6090] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 298.657752][ T6090] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.46: Failed to acquire dquot type 1 [ 298.740598][ T6090] EXT4-fs (loop4): 1 truncate cleaned up [ 298.750829][ T6090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.764757][ T6090] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.980433][ T6098] loop2: detected capacity change from 0 to 512 [ 299.165147][ T6098] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.47: Invalid inode bitmap blk 4 in block_group 0 [ 299.270050][ T6098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.345076][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.407980][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.456811][ T6103] loop3: detected capacity change from 0 to 512 [ 299.478306][ T6103] EXT4-fs: Ignoring removed oldalloc option [ 299.535961][ T6103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 299.549667][ T6103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.717450][ T6098] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 299.765799][ T6103] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 299.779403][ T6103] EXT4-fs (loop3): 1 truncate cleaned up [ 299.787442][ T6103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.865030][ T29] audit: type=1800 audit(1733716638.386:22): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.48" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 299.973099][ T6103] loop3: detected capacity change from 512 to 64 [ 300.033108][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 300.112666][ T6112] loop4: detected capacity change from 0 to 128 [ 300.128436][ T6110] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 224:freeing already freed block (bit 223); block bitmap corrupt. [ 300.150173][ T6110] EXT4-fs (loop3): pa ffff8881259ab230: logic 0, phys. 193, len 32 [ 300.160463][ T6110] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 32, pa_free 31 [ 300.175601][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.227794][ T6103] loop3: unable to read partition table [ 300.237424][ T6103] loop_reread_partitions: partition scan of loop3 (5A;8R֤m])^\) failed (rc=-5) [ 301.237553][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.295664][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.394319][ T29] audit: type=1326 audit(1733716639.946:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 301.417081][ T29] audit: type=1326 audit(1733716639.946:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 301.464212][ T6119] loop2: detected capacity change from 0 to 512 [ 301.503867][ T6123] loop4: detected capacity change from 0 to 128 [ 301.652808][ T6123] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 301.662867][ T6116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.724732][ T29] audit: type=1326 audit(1733716640.036:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 301.747718][ T29] audit: type=1326 audit(1733716640.036:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 301.880886][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.899997][ T6119] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.910016][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.115141][ T6116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.240637][ T6120] netem: unknown loss type 0 [ 302.246653][ T6120] netem: change failed [ 302.283078][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.480018][ T6119] __quota_error: 2 callbacks suppressed [ 302.480119][ T6119] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 302.505758][ T6119] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 302.515589][ T6119] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.52: Failed to acquire dquot type 0 [ 302.640529][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.163030][ T6116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.407653][ T6116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.495350][ T11] bridge_slave_1: left allmulticast mode [ 303.501305][ T11] bridge_slave_1: left promiscuous mode [ 303.531008][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.635765][ T11] bridge_slave_0: left allmulticast mode [ 303.636688][ T6134] loop1: detected capacity change from 0 to 512 [ 303.641744][ T11] bridge_slave_0: left promiscuous mode [ 303.655397][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.767638][ T6134] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.62: Invalid inode bitmap blk 4 in block_group 0 [ 303.925823][ T6134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.159616][ T6134] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 304.261653][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.278981][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.292581][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.361536][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.675461][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.678165][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.708473][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.720333][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.826181][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.970448][ T11] bond0 (unregistering): Released all slaves [ 305.013719][ T6147] loop4: detected capacity change from 0 to 128 [ 305.327474][ T6116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.356781][ T6116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.631276][ T6116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.127903][ T29] audit: type=1326 audit(1733716644.646:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 306.150770][ T29] audit: type=1326 audit(1733716644.676:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 306.175030][ T29] audit: type=1326 audit(1733716644.676:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 306.201824][ T29] audit: type=1326 audit(1733716644.686:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 306.226567][ T29] audit: type=1326 audit(1733716644.686:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 306.572965][ T6116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.032879][ T5784] Bluetooth: hci1: command tx timeout [ 307.098692][ T11] hsr_slave_0: left promiscuous mode [ 307.116569][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.136070][ T11] hsr_slave_1: left promiscuous mode [ 307.200564][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.214322][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.227630][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.235612][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.335605][ T11] veth1_macvtap: left promiscuous mode [ 307.341437][ T11] veth0_macvtap: left promiscuous mode [ 307.348936][ T11] veth1_vlan: left promiscuous mode [ 307.354649][ T11] veth0_vlan: left promiscuous mode [ 307.439706][ T6162] kernel read not supported for file /eth0 (pid: 6162 comm: syz.1.73) [ 307.454362][ T29] audit: type=1800 audit(1733716646.026:34): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.73" name="eth0" dev="mqueue" ino=9014 res=0 errno=0 [ 308.247070][ T6168] loop1: detected capacity change from 0 to 512 [ 308.345433][ T6168] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.74: Invalid inode bitmap blk 4 in block_group 0 [ 308.416275][ T6168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.597122][ T6168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.74: bg 0: block 13: invalid block bitmap [ 309.123094][ T5784] Bluetooth: hci1: command tx timeout [ 309.141631][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 309.237359][ T11] team0 (unregistering): Port device team_slave_1 removed [ 309.361072][ T11] team0 (unregistering): Port device team_slave_0 removed [ 309.417360][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.005238][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 310.103948][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 310.751247][ T6187] Zero length message leads to an empty skb [ 310.980532][ T6189] vlan2: entered allmulticast mode [ 311.188193][ T5784] Bluetooth: hci1: command tx timeout [ 311.243070][ T6197] kernel read not supported for file /eth0 (pid: 6197 comm: syz.2.83) [ 311.274872][ T29] audit: type=1800 audit(1733716649.816:35): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.83" name="eth0" dev="mqueue" ino=7999 res=0 errno=0 [ 312.184171][ T6142] chnl_net:caif_netlink_parms(): no params data found [ 312.640040][ T6215] loop2: detected capacity change from 0 to 512 [ 312.865334][ T6215] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.88: Invalid inode bitmap blk 4 in block_group 0 [ 312.881709][ T6215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.148098][ T6223] loop1: detected capacity change from 0 to 512 [ 313.158697][ T6223] EXT4-fs: Ignoring removed i_version option [ 313.165578][ T6223] journal_path: Lookup failure for './file1' [ 313.172125][ T6223] EXT4-fs: error: could not find journal device path [ 313.216492][ T6223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.89'. [ 313.375721][ T5784] Bluetooth: hci1: command tx timeout [ 313.414829][ T6215] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.88: bg 0: block 13: invalid block bitmap [ 313.719361][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.727306][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.735813][ T6142] bridge_slave_0: entered allmulticast mode [ 313.745734][ T6142] bridge_slave_0: entered promiscuous mode [ 313.829862][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.839926][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.848086][ T6142] bridge_slave_1: entered allmulticast mode [ 313.857743][ T6142] bridge_slave_1: entered promiscuous mode [ 313.968371][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 314.105622][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.177109][ T6232] team0 (unregistering): Port device team_slave_0 removed [ 314.473521][ T6232] team0 (unregistering): Port device team_slave_1 removed [ 314.737459][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 315.069470][ T6239] vlan2: entered allmulticast mode [ 315.115530][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.159104][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.425917][ T6142] team0: Port device team_slave_0 added [ 315.463688][ T6142] team0: Port device team_slave_1 added [ 315.750457][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.758064][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.784876][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.968035][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.975389][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.002274][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.992628][ T6142] hsr_slave_0: entered promiscuous mode [ 317.065757][ T6142] hsr_slave_1: entered promiscuous mode [ 317.078100][ T6142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.086909][ T6142] Cannot create hsr debugfs directory [ 317.094735][ T6252] pim6reg1: entered promiscuous mode [ 317.100322][ T6252] pim6reg1: entered allmulticast mode [ 317.933918][ T6266] loop2: detected capacity change from 0 to 512 [ 318.199134][ T6266] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.103: Invalid inode bitmap blk 4 in block_group 0 [ 318.222086][ T6266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.303115][ T6266] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.103: bg 0: block 13: invalid block bitmap [ 318.590519][ T6142] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.751416][ T6142] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.872994][ T6142] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.934698][ T6142] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.020797][ T6283] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 319.229530][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.691693][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.809779][ T6142] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.893197][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.901154][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.921317][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.929166][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.323118][ T6142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.334309][ T6142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.568918][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 320.768894][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 320.795329][ T6299] vlan2: entered allmulticast mode [ 321.634250][ T29] audit: type=1326 audit(1733716660.176:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 321.714929][ T6306] loop4: detected capacity change from 0 to 128 [ 321.821356][ T29] audit: type=1326 audit(1733716660.236:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 321.844545][ T29] audit: type=1326 audit(1733716660.246:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 321.871116][ T29] audit: type=1326 audit(1733716660.246:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 321.894857][ T29] audit: type=1326 audit(1733716660.296:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 321.917439][ T29] audit: type=1326 audit(1733716660.306:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 321.939755][ T29] audit: type=1326 audit(1733716660.306:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 321.966130][ T29] audit: type=1326 audit(1733716660.306:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 322.093565][ T6306] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 322.173600][ T29] audit: type=1326 audit(1733716660.646:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 322.198292][ T29] audit: type=1326 audit(1733716660.646:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 322.551614][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.037619][ T6316] loop0: detected capacity change from 0 to 1024 [ 323.158582][ T6321] loop4: detected capacity change from 0 to 512 [ 323.209578][ T6318] loop1: detected capacity change from 0 to 512 [ 323.329392][ T6316] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 323.341095][ T6316] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 323.513758][ T6316] JBD2: no valid journal superblock found [ 323.519986][ T6316] EXT4-fs (loop0): Could not load journal inode [ 323.703732][ T6316] raw_sendmsg: syz.0.114 forgot to set AF_INET. Fix it! [ 323.807775][ T6321] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.116: Invalid inode bitmap blk 4 in block_group 0 [ 323.816728][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.836701][ T6318] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.893929][ T6321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.215598][ T6321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 324.837617][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.218334][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 325.280121][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.318987][ T6345] team0 (unregistering): Port device team_slave_0 removed [ 325.408648][ T6345] team0 (unregistering): Port device team_slave_1 removed [ 326.555969][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 326.586466][ T6355] vlan2: entered allmulticast mode [ 326.669883][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 326.669967][ T29] audit: type=1326 audit(1733716665.236:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 326.699368][ T29] audit: type=1326 audit(1733716665.236:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 326.722101][ T29] audit: type=1326 audit(1733716665.236:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 326.746467][ T29] audit: type=1326 audit(1733716665.316:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 326.771276][ T29] audit: type=1326 audit(1733716665.316:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 326.794471][ T29] audit: type=1326 audit(1733716665.316:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 326.817697][ T29] audit: type=1326 audit(1733716665.316:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 326.842163][ T29] audit: type=1326 audit(1733716665.366:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 326.864718][ T29] audit: type=1326 audit(1733716665.366:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 326.889503][ T29] audit: type=1326 audit(1733716665.396:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 327.460561][ T6142] veth0_vlan: entered promiscuous mode [ 327.508143][ T6361] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 327.578097][ T6142] veth1_vlan: entered promiscuous mode [ 327.749353][ T6364] loop0: detected capacity change from 0 to 128 [ 327.842916][ T6364] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 328.068516][ T6142] veth0_macvtap: entered promiscuous mode [ 328.171783][ T6142] veth1_macvtap: entered promiscuous mode [ 328.461206][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.476130][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.487899][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.498895][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.509176][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.525537][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.537292][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.548253][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.564082][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.669478][ T6372] loop4: detected capacity change from 0 to 512 [ 328.830432][ T6372] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.128: Invalid inode bitmap blk 4 in block_group 0 [ 328.860034][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.871152][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.882199][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.893194][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.903647][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.918451][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.929620][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.940500][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.955846][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.069052][ T6372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.295603][ T6372] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 329.322965][ T6142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.338831][ T6142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.349947][ T6142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.359148][ T6142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.881408][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.061992][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 331.704261][ T6404] loop0: detected capacity change from 0 to 512 [ 331.915620][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 332.083231][ T6404] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.136: Invalid inode bitmap blk 4 in block_group 0 [ 332.158719][ T6404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.214810][ T6411] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 332.355989][ T6404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.136: bg 0: block 13: invalid block bitmap [ 332.811876][ T6419] loop1: detected capacity change from 0 to 128 [ 332.906520][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.920371][ T6419] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 333.411981][ T6425] loop2: detected capacity change from 0 to 512 [ 333.712050][ T6425] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.140: Invalid inode bitmap blk 4 in block_group 0 [ 333.805271][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.958776][ T6425] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 334.367816][ T6440] loop4: detected capacity change from 0 to 256 [ 334.698258][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 334.698347][ T29] audit: type=1804 audit(1733716673.256:99): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.144" name="/newroot/29/file1/file0" dev="loop4" ino=1048600 res=1 errno=0 [ 334.828679][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.058476][ T6457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'. [ 336.067963][ T6457] netem: unknown loss type 13 [ 336.072881][ T6457] netem: change failed [ 336.097701][ T6451] loop0: detected capacity change from 0 to 2048 [ 336.100818][ T6457] loop2: detected capacity change from 0 to 512 [ 336.114290][ T6457] EXT4-fs: Ignoring removed orlov option [ 336.189656][ T6457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 336.836458][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 336.937265][ T6457] EXT4-fs (loop2): 1 orphan inode deleted [ 336.943857][ T6457] EXT4-fs (loop2): 1 truncate cleaned up [ 336.951584][ T6457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.048462][ T6451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.187793][ T6457] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 337.226036][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 337.333738][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 337.768183][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.798353][ T4608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.806706][ T4608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.002939][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.007436][ T4608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.021246][ T4608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.700322][ T6479] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 339.249022][ T6487] loop4: detected capacity change from 0 to 1024 [ 339.723618][ T6487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.632853][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.946123][ T6497] infiniband syz0: set active [ 340.951137][ T6497] infiniband syz0: added bond0 [ 341.052096][ T6497] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 341.140539][ T6497] infiniband syz0: Couldn't open port 1 [ 341.537772][ T6497] RDS/IB: syz0: added [ 341.542091][ T6497] smc: adding ib device syz0 with port count 1 [ 341.548763][ T6497] smc: ib device syz0 port 1 has pnetid [ 341.994133][ T6514] loop4: detected capacity change from 0 to 128 [ 342.014261][ T6506] batadv1: entered promiscuous mode [ 342.034599][ T6506] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 344.486804][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 345.581150][ T13] tipc: Subscription rejected, illegal request [ 346.423697][ T29] audit: type=1326 audit(1733716684.956:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 346.450998][ T29] audit: type=1326 audit(1733716684.976:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 346.475189][ T29] audit: type=1326 audit(1733716684.976:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 346.497851][ T29] audit: type=1326 audit(1733716685.036:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 346.584024][ T29] audit: type=1326 audit(1733716685.136:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 346.606623][ T29] audit: type=1326 audit(1733716685.136:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 346.958481][ T29] audit: type=1326 audit(1733716685.516:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 346.991166][ T29] audit: type=1326 audit(1733716685.546:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 347.013969][ T29] audit: type=1326 audit(1733716685.556:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 347.117784][ T29] audit: type=1326 audit(1733716685.686:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.5.164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 348.915405][ T6573] loop2: detected capacity change from 0 to 128 [ 349.453596][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.175'. [ 349.526435][ T6573] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.874198][ T6573] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 350.110775][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 350.289772][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 351.202763][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.501986][ T6601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.534090][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 352.217778][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.376421][ T6611] loop5: detected capacity change from 0 to 512 [ 352.574273][ T6611] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.145089][ T6623] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 353.284166][ T6611] EXT4-fs (loop5): 1 truncate cleaned up [ 353.291803][ T6611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.544130][ T6611] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.179: inode #1073372648: comm syz.5.179: iget: illegal inode # [ 353.718404][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 354.058659][ T6611] EXT4-fs error (device loop5): ext4_xattr_inode_iget:445: comm syz.5.179: error while reading EA inode 1073372648 err=-117 [ 354.597409][ T6611] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #15: comm syz.5.179: corrupted xattr block 33: invalid header [ 355.295821][ T6611] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 355.930023][ T6643] rdma_rxe: rxe_newlink: failed to add bond0 [ 356.327503][ T6142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.627150][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.650082][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 357.801809][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 358.777910][ T6670] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 359.806598][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 359.806684][ T29] audit: type=1326 audit(1733716698.366:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 359.836201][ T29] audit: type=1326 audit(1733716698.366:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.473717][ T29] audit: type=1326 audit(1733716698.676:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.496686][ T29] audit: type=1326 audit(1733716698.766:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.519152][ T29] audit: type=1326 audit(1733716698.766:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.542248][ T29] audit: type=1326 audit(1733716698.936:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.569967][ T29] audit: type=1326 audit(1733716698.936:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.593968][ T29] audit: type=1326 audit(1733716698.936:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.616538][ T29] audit: type=1326 audit(1733716698.936:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.638951][ T29] audit: type=1326 audit(1733716698.936:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 360.687680][ T6700] rdma_rxe: rxe_newlink: failed to add bond0 [ 361.504878][ T6715] syz.0.204 uses obsolete (PF_INET,SOCK_PACKET) [ 361.598163][ T6703] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.024488][ T6709] loop0: detected capacity change from 0 to 128 [ 362.490505][ T6703] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.792650][ T6703] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.109594][ T6703] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.433535][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.206'. [ 363.714979][ T6703] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.753881][ T6703] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.783542][ T6703] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.821771][ T6703] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.252892][ T6742] loop4: detected capacity change from 0 to 128 [ 365.707179][ T6753] rdma_rxe: rxe_newlink: failed to add bond0 [ 365.829002][ T6745] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 366.849629][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 366.849921][ T29] audit: type=1326 audit(1733716705.416:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 366.879098][ T29] audit: type=1326 audit(1733716705.426:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 366.901565][ T29] audit: type=1326 audit(1733716705.426:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 366.927649][ T29] audit: type=1326 audit(1733716705.456:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 366.951321][ T29] audit: type=1326 audit(1733716705.456:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 366.973882][ T29] audit: type=1326 audit(1733716705.476:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 366.996545][ T29] audit: type=1326 audit(1733716705.476:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 367.022329][ T29] audit: type=1326 audit(1733716705.496:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 367.045974][ T29] audit: type=1326 audit(1733716705.496:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 367.068647][ T29] audit: type=1326 audit(1733716705.496:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 368.287674][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.220'. [ 371.677630][ T6812] syz0: rxe_newlink: already configured on bond0 [ 372.198992][ T6817] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 372.828742][ T6826] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 374.429964][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 375.574200][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 375.574286][ T29] audit: type=1326 audit(1733716714.096:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 375.602954][ T29] audit: type=1326 audit(1733716714.096:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 375.924511][ T29] audit: type=1326 audit(1733716714.316:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 375.947238][ T29] audit: type=1326 audit(1733716714.316:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 375.969785][ T29] audit: type=1326 audit(1733716714.316:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 376.363499][ T6866] syz0: rxe_newlink: already configured on bond0 [ 376.654366][ T6874] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 378.245607][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 378.644767][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.253'. [ 379.538066][ T6921] rdma_rxe: rxe_newlink: failed to add bond0 [ 379.856338][ T6892] Bluetooth: hci0: command 0x0406 tx timeout [ 379.857670][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 379.869888][ T6892] Bluetooth: hci2: command 0x0406 tx timeout [ 379.870035][ T6892] Bluetooth: hci4: command 0x0406 tx timeout [ 383.457232][ T6972] rdma_rxe: rxe_newlink: failed to add bond0 [ 383.575428][ T6965] pim6reg1: entered promiscuous mode [ 383.581136][ T6965] pim6reg1: entered allmulticast mode [ 384.312574][ T6980] loop1: detected capacity change from 0 to 512 [ 384.933811][ T6980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 385.557325][ T6980] EXT4-fs (loop1): 1 truncate cleaned up [ 385.565522][ T6980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.406491][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.739019][ T7034] kernel read not supported for file /eth0 (pid: 7034 comm: syz.2.293) [ 389.763612][ T29] audit: type=1800 audit(1733716728.326:170): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.293" name="eth0" dev="mqueue" ino=7999 res=0 errno=0 [ 391.318679][ T7038] loop1: detected capacity change from 0 to 8192 [ 391.356832][ T7038] vfat: Unknown parameter 'S^F ]34/8vЩX"h\oC:dQ;/w*z|6ݠ/]%:neF4Ű+yꅈ' [ 391.614297][ T7038] loop1: detected capacity change from 0 to 512 [ 391.939288][ T7038] EXT4-fs error (device loop1): ext4_quota_enable:7112: inode #4: comm syz.1.292: iget: special inode unallocated [ 392.073949][ T7038] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.292: Bad quota inode: 4, type: 1 [ 392.267100][ T7038] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 392.514859][ T7038] EXT4-fs (loop1): mount failed [ 392.746233][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 393.769865][ T29] audit: type=1326 audit(1733716732.336:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 393.792382][ T29] audit: type=1326 audit(1733716732.336:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 393.815557][ T29] audit: type=1326 audit(1733716732.336:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 393.847409][ T29] audit: type=1326 audit(1733716732.416:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 394.015150][ T7085] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 394.855269][ T7092] kernel read not supported for file /eth0 (pid: 7092 comm: syz.2.306) [ 394.869438][ T29] audit: type=1800 audit(1733716733.436:175): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.306" name="eth0" dev="mqueue" ino=7999 res=0 errno=0 [ 395.286899][ T7095] loop5: detected capacity change from 0 to 1024 [ 395.403835][ T7095] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 395.530150][ T7095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.554040][ T6142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.883817][ T7122] loop4: detected capacity change from 0 to 8192 [ 397.893181][ T7122] vfat: Unknown parameter 'S^F ]34/8vЩX"h\oC:dQ;/w*z|6ݠ/]%:neF4Ű+yꅈ' [ 398.134549][ T7122] loop4: detected capacity change from 0 to 512 [ 398.575646][ T7122] EXT4-fs error (device loop4): ext4_quota_enable:7112: inode #4: comm syz.4.315: iget: special inode unallocated [ 398.825021][ T7122] EXT4-fs error (device loop4): ext4_quota_enable:7115: comm syz.4.315: Bad quota inode: 4, type: 1 [ 399.011909][ T7122] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.068016][ T7122] EXT4-fs (loop4): mount failed [ 399.242824][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 399.257187][ T7138] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 400.091014][ T7150] loop1: detected capacity change from 0 to 512 [ 400.325340][ T7150] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.320: casefold flag without casefold feature [ 400.424232][ T7150] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.320: couldn't read orphan inode 15 (err -117) [ 401.554342][ T7150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.983987][ T29] audit: type=1326 audit(1733716741.176:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 403.006674][ T29] audit: type=1326 audit(1733716741.246:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 403.790268][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.360817][ T7220] process 'syz.5.338' launched './file0' with NULL argv: empty string added [ 406.774684][ T7231] netlink: 392 bytes leftover after parsing attributes in process `syz.1.342'. [ 410.399007][ T29] audit: type=1326 audit(1733716748.766:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.421696][ T29] audit: type=1326 audit(1733716748.766:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.447927][ T29] audit: type=1326 audit(1733716748.776:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.471419][ T29] audit: type=1326 audit(1733716748.776:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.495377][ T29] audit: type=1326 audit(1733716748.776:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.517917][ T29] audit: type=1326 audit(1733716748.776:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.543761][ T29] audit: type=1326 audit(1733716748.776:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.567327][ T29] audit: type=1326 audit(1733716748.776:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7262 comm="syz.5.354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 410.676306][ T7268] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.687332][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.650513][ T7317] ===================================================== [ 414.658019][ T7317] BUG: KMSAN: uninit-value in batadv_get_vid+0x1d4/0x300 [ 414.665479][ T7317] batadv_get_vid+0x1d4/0x300 [ 414.670411][ T7317] batadv_interface_tx+0x31c/0x1db0 [ 414.675993][ T7317] dev_hard_start_xmit+0x247/0xa20 [ 414.681328][ T7317] __dev_queue_xmit+0x366a/0x57d0 [ 414.686667][ T7317] __bpf_redirect+0x1511/0x1690 [ 414.691729][ T7317] bpf_clone_redirect+0x37e/0x500 [ 414.697081][ T7317] ___bpf_prog_run+0x13fe/0xe0f0 [ 414.702277][ T7317] __bpf_prog_run512+0xc5/0xf0 [ 414.707409][ T7317] bpf_test_run+0x546/0xd20 [ 414.712148][ T7317] bpf_prog_test_run_skb+0x18c4/0x2570 [ 414.717956][ T7317] bpf_prog_test_run+0x5e5/0xa30 [ 414.723173][ T7317] __sys_bpf+0x6aa/0xd90 [ 414.727769][ T7317] __ia32_sys_bpf+0xa0/0xe0 [ 414.732498][ T7317] ia32_sys_call+0x394d/0x4180 [ 414.737613][ T7317] __do_fast_syscall_32+0xb0/0x110 [ 414.742941][ T7317] do_fast_syscall_32+0x38/0x80 [ 414.748206][ T7317] do_SYSENTER_32+0x1f/0x30 [ 414.752936][ T7317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.759691][ T7317] [ 414.762155][ T7317] Uninit was created at: [ 414.766835][ T7317] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 414.773014][ T7317] kmalloc_reserve+0x13d/0x4a0 [ 414.778145][ T7317] pskb_expand_head+0x226/0x1a60 [ 414.783459][ T7317] skb_ensure_writable+0x496/0x520 [ 414.788810][ T7317] bpf_clone_redirect+0x1c5/0x500 [ 414.794197][ T7317] ___bpf_prog_run+0x13fe/0xe0f0 [ 414.799394][ T7317] __bpf_prog_run512+0xc5/0xf0 [ 414.804520][ T7317] bpf_test_run+0x546/0xd20 [ 414.809259][ T7317] bpf_prog_test_run_skb+0x18c4/0x2570 [ 414.815073][ T7317] bpf_prog_test_run+0x5e5/0xa30 [ 414.820266][ T7317] __sys_bpf+0x6aa/0xd90 [ 414.824851][ T7317] __ia32_sys_bpf+0xa0/0xe0 [ 414.829570][ T7317] ia32_sys_call+0x394d/0x4180 [ 414.834664][ T7317] __do_fast_syscall_32+0xb0/0x110 [ 414.840001][ T7317] do_fast_syscall_32+0x38/0x80 [ 414.845248][ T7317] do_SYSENTER_32+0x1f/0x30 [ 414.849959][ T7317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.856700][ T7317] [ 414.859186][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.1.362 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 414.870169][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 414.880546][ T7317] ===================================================== [ 414.887736][ T7317] Disabling lock debugging due to kernel taint [ 414.894184][ T7317] Kernel panic - not syncing: kmsan.panic set ... [ 414.900789][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.1.362 Tainted: G B 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 414.913149][ T7317] Tainted: [B]=BAD_PAGE [ 414.917456][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 414.927706][ T7317] Call Trace: [ 414.931146][ T7317] [ 414.934218][ T7317] dump_stack_lvl+0x216/0x2d0 [ 414.939164][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 414.945220][ T7317] dump_stack+0x1e/0x24 [ 414.949631][ T7317] panic+0x4e2/0xcf0 [ 414.953769][ T7317] ? kmsan_get_metadata+0xa1/0x1c0 [ 414.959140][ T7317] kmsan_report+0x2c7/0x2d0 [ 414.963865][ T7317] ? is_module_text_address+0x1b3/0x250 [ 414.969691][ T7317] ? __msan_warning+0x95/0x120 [ 414.974728][ T7317] ? batadv_get_vid+0x1d4/0x300 [ 414.979834][ T7317] ? batadv_interface_tx+0x31c/0x1db0 [ 414.985496][ T7317] ? dev_hard_start_xmit+0x247/0xa20 [ 414.991049][ T7317] ? __dev_queue_xmit+0x366a/0x57d0 [ 414.996474][ T7317] ? __bpf_redirect+0x1511/0x1690 [ 415.001708][ T7317] ? bpf_clone_redirect+0x37e/0x500 [ 415.007126][ T7317] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 415.012493][ T7317] ? __bpf_prog_run512+0xc5/0xf0 [ 415.017687][ T7317] ? bpf_test_run+0x546/0xd20 [ 415.022609][ T7317] ? bpf_prog_test_run_skb+0x18c4/0x2570 [ 415.028496][ T7317] ? bpf_prog_test_run+0x5e5/0xa30 [ 415.033879][ T7317] ? __sys_bpf+0x6aa/0xd90 [ 415.038544][ T7317] ? __ia32_sys_bpf+0xa0/0xe0 [ 415.043470][ T7317] ? ia32_sys_call+0x394d/0x4180 [ 415.048629][ T7317] ? __do_fast_syscall_32+0xb0/0x110 [ 415.054157][ T7317] ? do_fast_syscall_32+0x38/0x80 [ 415.059471][ T7317] ? do_SYSENTER_32+0x1f/0x30 [ 415.064363][ T7317] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.071166][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.077231][ T7317] ? do_SYSENTER_32+0x1f/0x30 [ 415.082134][ T7317] ? filter_irq_stacks+0x60/0x1a0 [ 415.087413][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.092849][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.098906][ T7317] ? batadv_interface_tx+0xc6/0x1db0 [ 415.104486][ T7317] ? filter_irq_stacks+0x60/0x1a0 [ 415.109778][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.115248][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.121298][ T7317] __msan_warning+0x95/0x120 [ 415.126164][ T7317] batadv_get_vid+0x1d4/0x300 [ 415.131109][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.137164][ T7317] batadv_interface_tx+0x31c/0x1db0 [ 415.142649][ T7317] ? netif_skb_features+0x11fa/0x13f0 [ 415.148267][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.153708][ T7317] ? __pfx_batadv_interface_tx+0x10/0x10 [ 415.159631][ T7317] ? __pfx_batadv_interface_tx+0x10/0x10 [ 415.165546][ T7317] dev_hard_start_xmit+0x247/0xa20 [ 415.170918][ T7317] __dev_queue_xmit+0x366a/0x57d0 [ 415.176197][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.181626][ T7317] ? __dev_queue_xmit+0x3d6/0x57d0 [ 415.187009][ T7317] __bpf_redirect+0x1511/0x1690 [ 415.192116][ T7317] bpf_clone_redirect+0x37e/0x500 [ 415.197381][ T7317] ___bpf_prog_run+0x13fe/0xe0f0 [ 415.202609][ T7317] __bpf_prog_run512+0xc5/0xf0 [ 415.207646][ T7317] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 415.214276][ T7317] ? kmsan_internal_poison_memory+0x7d/0x90 [ 415.220453][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.225896][ T7317] ? kmsan_internal_poison_memory+0x49/0x90 [ 415.232089][ T7317] ? kmsan_slab_alloc+0xdf/0x160 [ 415.237324][ T7317] ? kmem_cache_alloc_noprof+0x915/0xe10 [ 415.243259][ T7317] ? slab_build_skb+0x5c/0x560 [ 415.248240][ T7317] ? bpf_prog_test_run_skb+0x56d/0x2570 [ 415.254052][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.259498][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.265546][ T7317] ? bpf_test_run+0x101/0xd20 [ 415.270471][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.275904][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.281338][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.286776][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.292841][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.298901][ T7317] ? __pfx___bpf_prog_run512+0x10/0x10 [ 415.304650][ T7317] bpf_test_run+0x546/0xd20 [ 415.309403][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.314828][ T7317] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 415.321459][ T7317] ? kmsan_get_metadata+0x13e/0x1c0 [ 415.326889][ T7317] ? bpf_test_run+0x3af/0xd20 [ 415.331832][ T7317] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 415.337877][ T7317] bpf_prog_test_run_skb+0x18c4/0x2570 [ 415.343627][ T7317] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 415.349695][ T7317] bpf_prog_test_run+0x5e5/0xa30 [ 415.354932][ T7317] __sys_bpf+0x6aa/0xd90 [ 415.359461][ T7317] __ia32_sys_bpf+0xa0/0xe0 [ 415.364211][ T7317] ia32_sys_call+0x394d/0x4180 [ 415.369218][ T7317] __do_fast_syscall_32+0xb0/0x110 [ 415.374560][ T7317] ? switch_fpu_return+0x17/0x20 [ 415.379724][ T7317] do_fast_syscall_32+0x38/0x80 [ 415.384873][ T7317] do_SYSENTER_32+0x1f/0x30 [ 415.389599][ T7317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.396243][ T7317] RIP: 0023:0xf744d579 [ 415.400495][ T7317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 415.420365][ T7317] RSP: 002b:00000000f513657c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 415.429027][ T7317] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 415.437213][ T7317] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.445372][ T7317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.453532][ T7317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 415.461687][ T7317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.469864][ T7317] [ 415.473368][ T7317] Kernel Offset: disabled [ 415.477788][ T7317] Rebooting in 86400 seconds..