last executing test programs: 2.277286606s ago: executing program 3 (id=813): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 2.188087844s ago: executing program 3 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.168798037s ago: executing program 0 (id=821): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.037781963s ago: executing program 3 (id=827): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) setxattr$system_posix_acl(0x0, &(0x7f00000022c0)='system.posix_acl_access\x00', 0x0, 0xb, 0x3) 2.012702872s ago: executing program 3 (id=828): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) 1.966544019s ago: executing program 3 (id=832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xb}, 0x18) 1.296438652s ago: executing program 0 (id=837): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000087"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.278310488s ago: executing program 0 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.139553904s ago: executing program 4 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5707081196f37538e486dd"], 0xffbf) 781.314966ms ago: executing program 0 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 750.030911ms ago: executing program 0 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x73a, 0x21) 692.074845ms ago: executing program 0 (id=856): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000380)=""/165, 0xa5}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) 690.542696ms ago: executing program 1 (id=859): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3ff, 0x9, 0x2, 0x7, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x110}}, 0x0) 644.204196ms ago: executing program 2 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 274.585766ms ago: executing program 1 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x2a) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 224.386501ms ago: executing program 2 (id=862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 224.145594ms ago: executing program 4 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000300)='$\x00l\"P\xfc\xf8\b\xb9\xa6\xcdy\x05\x00\x00\x00\x00\x00\x00\x00\xbd(}\xe7t', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r2) 223.983321ms ago: executing program 2 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 223.87125ms ago: executing program 1 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 205.062995ms ago: executing program 4 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) 193.530517ms ago: executing program 1 (id=867): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x3b}]}}}}}, 0x0) 129.18328ms ago: executing program 1 (id=868): r0 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 128.920899ms ago: executing program 3 (id=869): r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01005dd970dc0000"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f00000000c0)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nouid32}, {@lazytime}, {@minixdf}, {@nodelalloc}, {@usrjquota}], [{@euid_lt={'euid<', r1}}]}, 0x1, 0x451, &(0x7f0000000680)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r2, 0x8000000000000001, 0x0) read$snapshot(r2, 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000080)={0x1, 0x100, 0xa5b}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000540)={0x100, 0x5, 0x8f, 0x7, 0x1ff, 0x2}) 127.730763ms ago: executing program 2 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 127.433507ms ago: executing program 1 (id=871): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x7800, 0x700, 0x4, 0x3, {{0x9, 0x4, 0x0, 0x6, 0x24, 0x64, 0x0, 0xd, 0x29, 0x0, @empty, @empty, {[@ssrr={0x89, 0xb, 0xe5, [@remote, @empty]}, @end, @noop]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000700004173a58f8bcb43cebefc3017ac31f1000b0000000a000000002100007a4b9deec47b65e8e62af6f8d1262fe105cb73bd2bee0fcd2ca2ad38f274223f5e0da76b78fe273a", @ANYRES32=r0, @ANYBLOB="feffffff00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='signal_deliver\x00', r4}, 0x10) r5 = syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x3, 0x4, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x7) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x100000000, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0xc, '\x00', 0x0, r5, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) 124.752169ms ago: executing program 4 (id=872): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 112.471858ms ago: executing program 4 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r1, 0x1) 432.46µs ago: executing program 2 (id=874): r0 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) 157.581µs ago: executing program 4 (id=875): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r2, 0x0, 0x0, 0x8000c62) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x100000800000009) 0s ago: executing program 2 (id=876): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c0408c0}, 0x2008c014) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.251' (ED25519) to the list of known hosts. [ 28.269325][ T6538] cgroup: Unknown subsys name 'net' [ 28.385754][ T6538] cgroup: Unknown subsys name 'cpuset' [ 28.387718][ T6538] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.513814][ T6538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.781143][ T6561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.781647][ T6561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.781776][ T6561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.782409][ T6561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.782579][ T6561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.782735][ T6563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.783681][ T6563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.783857][ T6563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.783949][ T6563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.783992][ T6563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.785715][ T6561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.785893][ T6561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.786192][ T6563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.786395][ T6563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.786788][ T6563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.787640][ T6561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.787778][ T6561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.787984][ T6561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.788348][ T6561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.788855][ T6563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.791312][ T6563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.792694][ T6563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.792744][ T6563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.797231][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.798366][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.962781][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 30.007327][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 30.009844][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 30.026074][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 30.048880][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.049255][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.049343][ T6549] bridge_slave_0: entered allmulticast mode [ 30.049800][ T6549] bridge_slave_0: entered promiscuous mode [ 30.052303][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.052327][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.052392][ T6549] bridge_slave_1: entered allmulticast mode [ 30.052799][ T6549] bridge_slave_1: entered promiscuous mode [ 30.083075][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.093099][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.096910][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 30.110331][ T6549] team0: Port device team_slave_0 added [ 30.112353][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.113581][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.115004][ T6548] bridge_slave_0: entered allmulticast mode [ 30.116516][ T6548] bridge_slave_0: entered promiscuous mode [ 30.119625][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.120791][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.122048][ T6550] bridge_slave_0: entered allmulticast mode [ 30.123440][ T6550] bridge_slave_0: entered promiscuous mode [ 30.125107][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.126398][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.126487][ T6550] bridge_slave_1: entered allmulticast mode [ 30.126910][ T6550] bridge_slave_1: entered promiscuous mode [ 30.127739][ T6549] team0: Port device team_slave_1 added [ 30.137478][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.137502][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.137518][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.137942][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.138017][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.138077][ T6548] bridge_slave_1: entered allmulticast mode [ 30.138841][ T6548] bridge_slave_1: entered promiscuous mode [ 30.158865][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.158891][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.158918][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.184062][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.184169][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.184234][ T6551] bridge_slave_0: entered allmulticast mode [ 30.185295][ T6551] bridge_slave_0: entered promiscuous mode [ 30.190806][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.199603][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.199781][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.199828][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.199877][ T6551] bridge_slave_1: entered allmulticast mode [ 30.200275][ T6551] bridge_slave_1: entered promiscuous mode [ 30.206247][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.211328][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.217040][ T6549] hsr_slave_0: entered promiscuous mode [ 30.217342][ T6549] hsr_slave_1: entered promiscuous mode [ 30.224236][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.231991][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.236286][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.236413][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.236473][ T6556] bridge_slave_0: entered allmulticast mode [ 30.237197][ T6556] bridge_slave_0: entered promiscuous mode [ 30.237894][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.237912][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.237957][ T6556] bridge_slave_1: entered allmulticast mode [ 30.238399][ T6556] bridge_slave_1: entered promiscuous mode [ 30.245754][ T6548] team0: Port device team_slave_0 added [ 30.249597][ T6550] team0: Port device team_slave_0 added [ 30.255932][ T6551] team0: Port device team_slave_0 added [ 30.256653][ T6551] team0: Port device team_slave_1 added [ 30.267454][ T6548] team0: Port device team_slave_1 added [ 30.269157][ T6550] team0: Port device team_slave_1 added [ 30.289352][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.289379][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.289402][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.299538][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.304768][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.304790][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.304805][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.305440][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.305456][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.305473][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.306744][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.306752][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.306767][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.307161][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.307167][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.307180][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.316483][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.325122][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.325135][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.325150][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.342476][ T6556] team0: Port device team_slave_0 added [ 30.351760][ T6556] team0: Port device team_slave_1 added [ 30.380652][ T6548] hsr_slave_0: entered promiscuous mode [ 30.380948][ T6548] hsr_slave_1: entered promiscuous mode [ 30.381112][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 30.381152][ T6548] Cannot create hsr debugfs directory [ 30.382926][ T6551] hsr_slave_0: entered promiscuous mode [ 30.383205][ T6551] hsr_slave_1: entered promiscuous mode [ 30.383419][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 30.383429][ T6551] Cannot create hsr debugfs directory [ 30.387668][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.387679][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.387693][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.388324][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.388332][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.388343][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.428006][ T6556] hsr_slave_0: entered promiscuous mode [ 30.429438][ T6556] hsr_slave_1: entered promiscuous mode [ 30.430714][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 30.431757][ T6556] Cannot create hsr debugfs directory [ 30.434118][ T6550] hsr_slave_0: entered promiscuous mode [ 30.434722][ T6550] hsr_slave_1: entered promiscuous mode [ 30.434912][ T6550] debugfs: 'hsr0' already exists in 'hsr' [ 30.434922][ T6550] Cannot create hsr debugfs directory [ 30.507499][ T6549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.511151][ T6549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.526151][ T6549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.528660][ T6549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.570041][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.570090][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.570250][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.570279][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.580045][ T6551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.583577][ T6551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.590099][ T6551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.592207][ T6551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.608876][ T6548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.615548][ T6548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.618134][ T6548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.621137][ T6548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.636999][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.637040][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.637151][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.637182][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.649573][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.649619][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.649694][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.649722][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.670361][ T6550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.672772][ T6550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.678182][ T6550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.680757][ T6550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.693872][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.700859][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.713728][ T6556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.716770][ T6556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.718990][ T6556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.721834][ T6556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.733310][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.739967][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.741483][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.744026][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.747543][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.749892][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.751861][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.761640][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.770976][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.772325][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.786155][ T6551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.788071][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.792284][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.792327][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.792686][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.792701][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.792995][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.793009][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.813139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.813187][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.813571][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.813593][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.832992][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.833034][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.851524][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.869388][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.873444][ T2220] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.873489][ T2220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.876644][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.876670][ T2220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.890445][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.890495][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.900938][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.904208][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.909527][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.909576][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.915596][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.934042][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.936495][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.972739][ T6551] veth0_vlan: entered promiscuous mode [ 30.974247][ T6551] veth1_vlan: entered promiscuous mode [ 30.978117][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.978155][ T2220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.992650][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.010185][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.010223][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.019158][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.027965][ T6551] veth0_macvtap: entered promiscuous mode [ 31.028978][ T6551] veth1_macvtap: entered promiscuous mode [ 31.041522][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.066725][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.074189][ T6550] veth0_vlan: entered promiscuous mode [ 31.083962][ T6550] veth1_vlan: entered promiscuous mode [ 31.088388][ T6549] veth0_vlan: entered promiscuous mode [ 31.088667][ T6548] veth0_vlan: entered promiscuous mode [ 31.089836][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.093781][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.097596][ T6549] veth1_vlan: entered promiscuous mode [ 31.099743][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.099787][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.099805][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.105676][ T6548] veth1_vlan: entered promiscuous mode [ 31.113410][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.122231][ T6549] veth0_macvtap: entered promiscuous mode [ 31.130818][ T6548] veth0_macvtap: entered promiscuous mode [ 31.133819][ T6548] veth1_macvtap: entered promiscuous mode [ 31.138297][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.141392][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.154697][ T6549] veth1_macvtap: entered promiscuous mode [ 31.158440][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.159317][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.170258][ T2220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.170481][ T2220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.170496][ T2220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.170510][ T2220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.183496][ T6550] veth0_macvtap: entered promiscuous mode [ 31.183819][ T2220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.183878][ T2220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.183909][ T2220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.183926][ T2220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192206][ T6550] veth1_macvtap: entered promiscuous mode [ 31.236888][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.240337][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.240363][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.250214][ T6556] veth0_vlan: entered promiscuous mode [ 31.255285][ T6556] veth1_vlan: entered promiscuous mode [ 31.260406][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.263426][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.263632][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.263745][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.263875][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.274207][ T6556] veth0_macvtap: entered promiscuous mode [ 31.279982][ T6556] veth1_macvtap: entered promiscuous mode [ 31.281056][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.281090][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.302829][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.310893][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.312341][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.313461][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.319761][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.319820][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.319842][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.319856][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.320607][ T4179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.320620][ T4179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.342470][ T2220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.342478][ T2220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.351149][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.351377][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.365621][ T4179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.365648][ T4179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.387108][ T4179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.387137][ T4179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.393123][ T6549] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.405694][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.405722][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.419719][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.419757][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.438652][ T6665] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.647560][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 31.665625][ T31] audit: type=1107 audit(31.630:2): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 31.713897][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 31.715973][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 31.808404][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.808625][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.841264][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.841438][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.855317][ T6559] Bluetooth: hci1: command tx timeout [ 31.855331][ T52] Bluetooth: hci2: command tx timeout [ 31.855466][ T6559] Bluetooth: hci4: command tx timeout [ 31.855474][ T52] Bluetooth: hci3: command tx timeout [ 31.859582][ T6560] Bluetooth: hci0: command tx timeout [ 31.888256][ T6716] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.943345][ T6716] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.094799][ T6614] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.234593][ T6614] usb 1-1: device descriptor read/64, error -71 [ 32.484774][ T6614] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.516676][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 32.516794][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.550048][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.562328][ T6737] netlink: 7 bytes leftover after parsing attributes in process `syz.4.33'. [ 32.585461][ T6737] netlink: 7 bytes leftover after parsing attributes in process `syz.4.33'. [ 32.622316][ T6739] nft_compat: unsupported protocol 1 [ 32.627219][ T6614] usb 1-1: device descriptor read/64, error -71 [ 32.640985][ T6741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.35'. [ 32.642939][ T6741] netem: unknown loss type 12 [ 32.644134][ T6741] netem: change failed [ 32.736056][ T6614] usb usb1-port1: attempt power cycle [ 32.911336][ T31] audit: type=1326 audit(32.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914780][ T31] audit: type=1326 audit(32.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914804][ T31] audit: type=1326 audit(32.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914820][ T31] audit: type=1326 audit(32.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914834][ T31] audit: type=1326 audit(32.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914846][ T31] audit: type=1326 audit(32.880:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914858][ T31] audit: type=1326 audit(32.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914870][ T31] audit: type=1326 audit(32.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.914881][ T31] audit: type=1326 audit(32.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 32.956745][ T6716] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.084445][ T6614] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.093786][ T6757] netlink: 'syz.3.43': attribute type 11 has an invalid length. [ 33.093817][ T6757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.43'. [ 33.106929][ T6614] usb 1-1: device descriptor read/8, error -71 [ 33.208763][ T6761] netlink: 196 bytes leftover after parsing attributes in process `syz.3.45'. [ 33.344413][ T6614] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.364861][ T6614] usb 1-1: device descriptor read/8, error -71 [ 33.475378][ T6614] usb usb1-port1: unable to enumerate USB device [ 33.543611][ T6793] syz.4.61 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.669720][ T6805] loop3: detected capacity change from 0 to 2048 [ 33.674207][ T6805] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.691866][ T6805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.779563][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 33.868798][ T6814] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.934413][ T6117] Bluetooth: hci0: command tx timeout [ 33.934448][ T6117] Bluetooth: hci1: command tx timeout [ 33.934480][ T6117] Bluetooth: hci3: command tx timeout [ 33.934498][ T6117] Bluetooth: hci2: command tx timeout [ 33.934634][ T6560] Bluetooth: hci4: command tx timeout [ 34.383400][ T6822] loop1: detected capacity change from 0 to 1024 [ 34.386453][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.388130][ T6822] ======================================================= [ 34.388130][ T6822] WARNING: The mand mount option has been deprecated and [ 34.388130][ T6822] and is ignored by this kernel. Remove the mand [ 34.388130][ T6822] option from the mount to silence this warning. [ 34.388130][ T6822] ======================================================= [ 34.438136][ T6822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.443498][ T6822] netlink: 'syz.1.72': attribute type 10 has an invalid length. [ 34.443542][ T6822] macvlan1: entered allmulticast mode [ 34.443564][ T6822] veth1_vlan: entered allmulticast mode [ 34.443648][ T6822] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 34.461661][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.791845][ T6855] loop4: detected capacity change from 0 to 128 [ 34.851810][ T6716] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.966915][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.973574][ T42] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.981401][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.011252][ T2220] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.028744][ T6876] loop0: detected capacity change from 0 to 128 [ 35.054547][ T6876] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.101976][ T6885] tipc: Started in network mode [ 35.102015][ T6885] tipc: Node identity 7a69c1da65f1, cluster identity 4711 [ 35.102125][ T6885] tipc: Enabled bearer , priority 0 [ 35.102490][ T6885] syzkaller0: entered promiscuous mode [ 35.102500][ T6885] syzkaller0: entered allmulticast mode [ 35.105426][ T6885] tipc: Resetting bearer [ 35.106782][ T6885] tipc: Enabling of bearer rejected, already enabled [ 35.107382][ T6885] +: renamed from syzkaller0 (while UP) [ 35.117233][ T6885] tipc: Disabling bearer [ 35.201843][ T6550] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.016855][ T6559] Bluetooth: hci2: command tx timeout [ 36.016898][ T6559] Bluetooth: hci3: command tx timeout [ 36.016927][ T6559] Bluetooth: hci1: command tx timeout [ 36.016947][ T6559] Bluetooth: hci0: command tx timeout [ 36.017043][ T6560] Bluetooth: hci4: command tx timeout [ 36.196941][ T6911] tipc: Started in network mode [ 36.196976][ T6911] tipc: Node identity 52f204b4fbcb, cluster identity 4711 [ 36.197026][ T6911] tipc: Enabled bearer , priority 0 [ 36.197395][ T6911] syzkaller0: entered promiscuous mode [ 36.197405][ T6911] syzkaller0: entered allmulticast mode [ 36.260929][ T6910] tipc: Resetting bearer [ 36.285180][ T6910] tipc: Disabling bearer [ 36.289995][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.290962][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.352378][ T6933] loop0: detected capacity change from 0 to 1024 [ 36.358146][ T6933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.372621][ T6933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.400525][ T6550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.471539][ T6945] syz.4.124 uses obsolete (PF_INET,SOCK_PACKET) [ 36.514255][ T6951] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 36.517804][ T6951] netlink: 'syz.3.127': attribute type 3 has an invalid length. [ 36.630642][ T6968] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 36.675870][ T31] kauditd_printk_skb: 101 callbacks suppressed [ 36.675911][ T31] audit: type=1326 audit(36.650:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6973 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.675937][ T31] audit: type=1326 audit(36.650:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6973 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.684711][ T31] audit: type=1326 audit(36.660:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6973 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.685084][ T31] audit: type=1326 audit(36.660:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6973 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.685099][ T31] audit: type=1326 audit(36.660:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6973 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.725549][ T6977] geneve0: entered allmulticast mode [ 36.779638][ T6989] loop0: detected capacity change from 0 to 1024 [ 36.839001][ T7000] netlink: 'syz.1.139': attribute type 13 has an invalid length. [ 36.847098][ T7000] gretap0: refused to change device tx_queue_len [ 36.848538][ T7000] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 36.851180][ T31] audit: type=1326 audit(36.820:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.853340][ T31] audit: type=1326 audit(36.820:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.853419][ T31] audit: type=1326 audit(36.820:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.853550][ T31] audit: type=1326 audit(36.820:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.853669][ T31] audit: type=1326 audit(36.820:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 36.928702][ T7012] loop4: detected capacity change from 0 to 164 [ 36.931533][ T7012] iso9660: Unknown parameter '' [ 36.953091][ T7015] __nla_validate_parse: 3 callbacks suppressed [ 36.953470][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 36.982849][ T7020] loop4: detected capacity change from 0 to 128 [ 37.062500][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 37.062539][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.062551][ T7030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.270567][ T7060] loop1: detected capacity change from 0 to 1024 [ 37.272503][ T7060] EXT4-fs: inline encryption not supported [ 37.275539][ T7060] EXT4-fs: Ignoring removed bh option [ 37.318810][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.412444][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.652270][ T7114] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 37.681345][ T7114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.705581][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 37.710933][ T7123] loop0: detected capacity change from 0 to 512 [ 37.781419][ T7114] bond1 (unregistering): Released all slaves [ 37.791495][ T7123] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.937006][ T7158] netlink: 'syz.2.174': attribute type 7 has an invalid length. [ 37.938628][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 38.078948][ T7166] capability: warning: `syz.2.177' uses deprecated v2 capabilities in a way that may be insecure [ 38.104826][ T6117] Bluetooth: hci0: command tx timeout [ 38.104863][ T6117] Bluetooth: hci1: command tx timeout [ 38.104891][ T6117] Bluetooth: hci3: command tx timeout [ 38.104908][ T6117] Bluetooth: hci2: command tx timeout [ 38.108351][ T6560] Bluetooth: hci4: command tx timeout [ 38.344254][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 38.348863][ T7170] vlan2: entered allmulticast mode [ 38.350591][ T7170] dummy0: entered allmulticast mode [ 38.355495][ T7170] Zero length message leads to an empty skb [ 41.121457][ T7185] loop2: detected capacity change from 0 to 512 [ 41.141929][ T7185] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.141982][ T7185] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.151874][ T7186] atomic_op 000000009872f868 conn xmit_atomic 0000000000000000 [ 41.158648][ T7185] EXT4-fs (loop2): 1 truncate cleaned up [ 41.159083][ T7185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.176588][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 41.196975][ T7193] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.197112][ T7193] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 41.217488][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.731412][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 41.731459][ T31] audit: type=1326 audit(41.700:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 41.731487][ T31] audit: type=1326 audit(41.700:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 41.736484][ T31] audit: type=1326 audit(41.700:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 41.736509][ T31] audit: type=1326 audit(41.700:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffae95c0dc code=0x7ffc0000 [ 41.740051][ T31] audit: type=1326 audit(41.710:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffae95a770 code=0x7ffc0000 [ 41.747132][ T31] audit: type=1326 audit(41.710:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffae95c14c code=0x7ffc0000 [ 41.747149][ T31] audit: type=1326 audit(41.710:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffae95a5d4 code=0x7ffc0000 [ 41.747163][ T31] audit: type=1326 audit(41.710:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffae95bbd0 code=0x7ffc0000 [ 41.755747][ T7232] loop3: detected capacity change from 0 to 1024 [ 41.756406][ T7232] EXT4-fs: Ignoring removed bh option [ 41.756623][ T31] audit: type=1326 audit(41.720:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffae95a9ac code=0x7ffc0000 [ 41.756642][ T31] audit: type=1326 audit(41.720:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7230 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffae95a9ac code=0x7ffc0000 [ 41.781007][ T7232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 41.832720][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 41.926851][ T7245] loop3: detected capacity change from 0 to 1024 [ 41.948130][ T7245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.955360][ T7245] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 41.958201][ T7245] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 41.958233][ T7245] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.958233][ T7245] [ 41.958247][ T7245] EXT4-fs (loop3): Total free blocks count 0 [ 41.958255][ T7245] EXT4-fs (loop3): Free/Dirty block details [ 41.958266][ T7245] EXT4-fs (loop3): free_blocks=4293918720 [ 41.958277][ T7245] EXT4-fs (loop3): dirty_blocks=16 [ 41.958283][ T7245] EXT4-fs (loop3): Block reservation details [ 41.958289][ T7245] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 41.984124][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.136469][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 42.136508][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 42.145954][ T7267] loop1: detected capacity change from 0 to 1024 [ 42.146311][ T7267] EXT4-fs: Ignoring removed bh option [ 42.159879][ T7267] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.177052][ T7267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 42.177107][ T7267] System zones: 0-1, 3-12 [ 42.187511][ T7267] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.212: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.188599][ T7267] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.212: Failed to acquire dquot type 0 [ 42.190141][ T7267] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.212: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.191097][ T7267] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.212: Invalid inode bitmap blk 0 in block_group 0 [ 42.192739][ T7267] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 42.192871][ T7267] EXT4-fs (loop1): 1 orphan inode deleted [ 42.205989][ T7267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.216603][ T7267] EXT4-fs: Ignoring removed bh option [ 42.246689][ T4179] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.250476][ T4179] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 42.256872][ T7267] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.296741][ T7287] loop2: detected capacity change from 0 to 1024 [ 42.300987][ T7287] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 42.305620][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.314250][ T7287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.331223][ T7287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.218: missing EA_INODE flag [ 42.334223][ T7287] EXT4-fs (loop2): Remounting filesystem read-only [ 42.336182][ T7287] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.493663][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.582816][ T7307] loop2: detected capacity change from 0 to 4096 [ 42.595025][ T7307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.595938][ T7311] loop1: detected capacity change from 0 to 2048 [ 42.616627][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.622591][ T7311] EXT4-fs (loop1): failed to initialize system zone (-117) [ 42.626310][ T7311] EXT4-fs (loop1): mount failed [ 42.723585][ T7330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.235'. [ 43.024885][ T7371] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 43.024927][ T7371] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 43.111081][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 43.111120][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 43.249877][ T7394] loop0: detected capacity change from 0 to 256 [ 43.319781][ T7394] syz.0.261: attempt to access beyond end of device [ 43.319781][ T7394] loop0: rw=2049, sector=256, nr_sectors = 196 limit=256 [ 43.358592][ T7405] can0: slcan on ttyS3. [ 43.389369][ T7407] loop0: detected capacity change from 0 to 512 [ 43.405872][ T7405] can0 (unregistered): slcan off ttyS3. [ 43.417031][ T7405] can0: slcan on ttyS3. [ 43.429916][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.445522][ T6550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.469382][ T7403] can0 (unregistered): slcan off ttyS3. [ 43.746794][ T7444] netlink: 36 bytes leftover after parsing attributes in process `syz.4.282'. [ 43.872751][ T7454] loop4: detected capacity change from 0 to 512 [ 43.893455][ T7454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.897537][ T7454] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.285: bg 0: block 4: invalid block bitmap [ 43.901797][ T7454] EXT4-fs (loop4): Remounting filesystem read-only [ 43.903405][ T7454] EXT4-fs (loop4): 1 truncate cleaned up [ 43.909201][ T7454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.448227][ T7493] loop1: detected capacity change from 0 to 512 [ 44.457590][ T7493] ext4: Unknown parameter 'pcr' [ 44.573296][ T7496] loop0: detected capacity change from 0 to 8192 [ 44.599897][ T7496] syz.0.303: attempt to access beyond end of device [ 44.599897][ T7496] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 44.600271][ T7496] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 44.600282][ T7496] FAT-fs (loop0): Filesystem has been set read-only [ 44.604113][ T7496] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 44.605780][ T7496] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 44.675815][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.683370][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 45.771763][ T7594] vhci_hcd: invalid port number 96 [ 45.772824][ T7594] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 45.857059][ T7599] loop2: detected capacity change from 0 to 512 [ 45.857443][ T7599] EXT4-fs: Ignoring removed i_version option [ 45.862021][ T7599] EXT4-fs: Mount option(s) incompatible with ext2 [ 46.048295][ T7615] lo: entered allmulticast mode [ 46.048745][ T7615] tunl0: entered allmulticast mode [ 46.051058][ T7615] gre0: entered allmulticast mode [ 46.051384][ T7615] gretap0: entered allmulticast mode [ 46.051617][ T7615] erspan0: entered allmulticast mode [ 46.051768][ T7615] ip_vti0: entered allmulticast mode [ 46.052002][ T7615] ip6_vti0: entered allmulticast mode [ 46.052297][ T7615] sit0: entered allmulticast mode [ 46.060958][ T7615] ip6tnl0: entered allmulticast mode [ 46.064222][ T7615] ip6gre0: entered allmulticast mode [ 46.065599][ T7615] syz_tun: entered allmulticast mode [ 46.065772][ T7615] ip6gretap0: entered allmulticast mode [ 46.065923][ T7615] bridge0: entered allmulticast mode [ 46.066079][ T7615] vcan0: entered allmulticast mode [ 46.066206][ T7615] bond0: entered allmulticast mode [ 46.066217][ T7615] bond_slave_0: entered allmulticast mode [ 46.066229][ T7615] bond_slave_1: entered allmulticast mode [ 46.066486][ T7615] team0: entered allmulticast mode [ 46.066496][ T7615] team_slave_0: entered allmulticast mode [ 46.066508][ T7615] team_slave_1: entered allmulticast mode [ 46.067779][ T7615] nlmon0: entered allmulticast mode [ 46.086172][ T7615] caif0: entered allmulticast mode [ 46.087119][ T7615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.120010][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 46.511107][ T26] cfg80211: failed to load regulatory.db [ 46.540587][ T7670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 46.562030][ T7672] loop0: detected capacity change from 0 to 512 [ 46.566215][ T7672] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.574425][ T7672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 46.574516][ T7672] System zones: 1-12 [ 46.579486][ T7672] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.383: corrupted in-inode xattr: e_value size too large [ 46.580561][ T7672] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.383: couldn't read orphan inode 15 (err -117) [ 46.585962][ T7672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.606808][ T6550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.648561][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 47.457059][ T7734] __nla_validate_parse: 1 callbacks suppressed [ 47.457137][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 47.634840][ T31] kauditd_printk_skb: 154 callbacks suppressed [ 47.634883][ T31] audit: type=1326 audit(47.610:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7733 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395c0a8 code=0x7ffc0000 [ 47.634948][ T31] audit: type=1326 audit(47.610:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7733 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395c0a8 code=0x7ffc0000 [ 47.635146][ T31] audit: type=1326 audit(47.610:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7733 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=136 compat=0 ip=0xffffb395c0a8 code=0x7ffc0000 [ 47.635202][ T31] audit: type=1326 audit(47.610:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7733 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395c0a8 code=0x7ffc0000 [ 47.635259][ T31] audit: type=1326 audit(47.610:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7733 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395c0a8 code=0x7ffc0000 [ 47.677428][ T7741] pimreg: entered allmulticast mode [ 47.683034][ T7741] pimreg: left allmulticast mode [ 47.721596][ T7749] loop4: detected capacity change from 0 to 512 [ 47.723329][ T7749] EXT4-fs: Ignoring removed nobh option [ 47.747632][ T7749] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.417: corrupted inode contents [ 47.750748][ T7749] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.417: mark_inode_dirty error [ 47.753685][ T7749] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.417: corrupted inode contents [ 47.758959][ T7749] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.417: mark_inode_dirty error [ 47.762687][ T7749] Quota error (device loop4): write_blk: dquota write failed [ 47.762763][ T7749] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 47.762800][ T7749] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.417: Failed to acquire dquot type 0 [ 47.783526][ T7749] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.417: corrupted inode contents [ 47.790604][ T7749] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.417: mark_inode_dirty error [ 47.794421][ T7749] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.417: corrupted inode contents [ 47.797606][ T7749] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.417: mark_inode_dirty error [ 47.800061][ T7749] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.417: corrupted inode contents [ 47.802360][ T7749] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 47.804373][ T7749] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.417: corrupted inode contents [ 47.808389][ T7749] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.417: mark_inode_dirty error [ 47.809989][ T7749] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 47.811585][ T7749] EXT4-fs (loop4): 1 truncate cleaned up [ 47.813417][ T7749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.828608][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.838660][ T7761] 9pnet: p9_errstr2errno: server reported unknown error [ 48.001420][ T7778] vlan2: entered promiscuous mode [ 48.001510][ T7778] vlan2: entered allmulticast mode [ 48.001532][ T7778] hsr_slave_1: entered allmulticast mode [ 48.016408][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 48.275103][ T7803] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 48.288281][ T7803] loop4: detected capacity change from 0 to 2048 [ 48.314969][ T7803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.318180][ T7803] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.328928][ T7808] loop0: detected capacity change from 0 to 128 [ 48.363970][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.593418][ T7823] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.593456][ T7823] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 48.893596][ T7837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.893627][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.893660][ T7837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.893675][ T7837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.456'. [ 49.090618][ T7854] loop1: detected capacity change from 0 to 1024 [ 49.093698][ T7854] EXT4-fs: Ignoring removed bh option [ 49.113533][ T7854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 49.152231][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 49.155920][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 49.280426][ T31] audit: type=1326 audit(49.250:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 49.284095][ T31] audit: type=1326 audit(49.250:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 49.284122][ T31] audit: type=1326 audit(49.250:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 49.338883][ T7886] loop0: detected capacity change from 0 to 2048 [ 49.362336][ T7886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.369703][ T7886] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.479: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 49.382053][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.480'. [ 49.382092][ T7890] netlink: 52 bytes leftover after parsing attributes in process `syz.3.480'. [ 49.410732][ T7892] loop3: detected capacity change from 0 to 512 [ 49.417878][ T7892] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.418009][ T6550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.426270][ T7895] netlink: 'syz.1.483': attribute type 11 has an invalid length. [ 49.434112][ T7892] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.481: bg 0: block 248: padding at end of block bitmap is not set [ 49.438690][ T7892] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.481: Failed to acquire dquot type 1 [ 49.442796][ T7892] EXT4-fs (loop3): 1 truncate cleaned up [ 49.458323][ T7892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.481089][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.513529][ T7908] netlink: 256 bytes leftover after parsing attributes in process `syz.3.488'. [ 50.029783][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.029991][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.101786][ T7984] bridge0: entered promiscuous mode [ 50.101927][ T7984] macsec1: entered promiscuous mode [ 50.102500][ T7984] bridge0: port 3(macsec1) entered blocking state [ 50.102556][ T7984] bridge0: port 3(macsec1) entered disabled state [ 50.102617][ T7984] macsec1: entered allmulticast mode [ 50.102624][ T7984] bridge0: entered allmulticast mode [ 50.112363][ T7984] macsec1: left allmulticast mode [ 50.112394][ T7984] bridge0: left allmulticast mode [ 50.116003][ T7984] bridge0: left promiscuous mode [ 50.172338][ T7994] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 50.172387][ T7994] macvlan1: entered allmulticast mode [ 50.172397][ T7994] veth1_vlan: entered allmulticast mode [ 50.172474][ T7994] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 50.187550][ T7996] loop2: detected capacity change from 0 to 128 [ 50.241889][ T8004] loop2: detected capacity change from 0 to 1024 [ 50.263283][ T8004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.288285][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.489026][ T8031] netlink: 'syz.0.545': attribute type 6 has an invalid length. [ 50.683117][ T8061] serio: Serial port ptm0 [ 50.751582][ T8071] loop0: detected capacity change from 0 to 512 [ 50.751983][ T8071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.752002][ T8071] ext4: Unknown parameter 'fsname' [ 50.755359][ T8075] loop2: detected capacity change from 0 to 1024 [ 50.772095][ T8075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.790562][ T8076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.797503][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.838446][ T8082] ipvlan2: entered promiscuous mode [ 50.839701][ T8082] bridge0: port 3(ipvlan2) entered blocking state [ 50.840244][ T8082] bridge0: port 3(ipvlan2) entered disabled state [ 50.840320][ T8082] ipvlan2: entered allmulticast mode [ 50.840328][ T8082] bridge0: entered allmulticast mode [ 50.840974][ T8082] ipvlan2: left allmulticast mode [ 50.840980][ T8082] bridge0: left allmulticast mode [ 50.862806][ T8076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.945757][ T8076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.998435][ T8076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.044738][ T8092] loop0: detected capacity change from 0 to 2048 [ 51.108871][ T6898] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.123628][ T6898] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.123696][ T6898] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.134135][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.137015][ T7375] Alternate GPT is invalid, using primary GPT. [ 51.137109][ T7375] loop0: p2 p3 p7 [ 51.166771][ T8092] Alternate GPT is invalid, using primary GPT. [ 51.166878][ T8092] loop0: p2 p3 p7 [ 51.216123][ T7375] udevd[7375]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 51.217747][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.232545][ T7327] udevd[7327]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 51.247483][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.249714][ T7375] udevd[7375]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 51.258222][ T8113] loop2: detected capacity change from 0 to 512 [ 51.291303][ T8113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.292832][ T6567] udevd[6567]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 51.300444][ T8113] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.584: invalid indirect mapped block 4294967295 (level 0) [ 51.302603][ T8113] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.584: invalid indirect mapped block 4294967295 (level 1) [ 51.306391][ T8113] EXT4-fs (loop2): 1 orphan inode deleted [ 51.307635][ T8113] EXT4-fs (loop2): 1 truncate cleaned up [ 51.309121][ T8113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.358716][ T8120] vlan2: entered allmulticast mode [ 51.358747][ T8120] dummy0: entered allmulticast mode [ 51.363455][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.749110][ T8175] loop2: detected capacity change from 0 to 1024 [ 51.749618][ T8175] ext3: Unknown parameter 'noacl' [ 51.799871][ T8181] IPv6: Can't replace route, no match found [ 51.911637][ T8201] loop1: detected capacity change from 0 to 1024 [ 51.929506][ T8201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.039936][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.310108][ T8258] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 52.310150][ T8258] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 52.310174][ T8258] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 52.577388][ T8291] loop4: detected capacity change from 0 to 512 [ 52.590642][ T8291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.612806][ T6635] kernel write not supported for file /296/attr/exec (pid: 6635 comm: kworker/0:5) [ 52.620825][ T8294] bridge_slave_0: left allmulticast mode [ 52.630263][ T8294] bridge_slave_0: left promiscuous mode [ 52.630480][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.638493][ T8294] bridge_slave_1: left allmulticast mode [ 52.640474][ T8294] bridge_slave_1: left promiscuous mode [ 52.640597][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.650866][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.655970][ T8294] bond0: (slave bond_slave_0): Releasing backup interface [ 52.679455][ T8294] bond0: (slave bond_slave_1): Releasing backup interface [ 52.721272][ T8294] team0: Port device team_slave_0 removed [ 52.725842][ T8294] team0: Port device team_slave_1 removed [ 52.727377][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.728819][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.730759][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.732105][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.839298][ T8321] loop1: detected capacity change from 0 to 128 [ 52.843406][ T8321] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.889429][ T6548] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.012484][ T8344] loop1: detected capacity change from 0 to 512 [ 53.018762][ T8344] EXT4-fs: old and new quota format mixing [ 53.134053][ T31] kauditd_printk_skb: 243 callbacks suppressed [ 53.134091][ T31] audit: type=1326 audit(53.100:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.1.702" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb395c0a8 code=0x0 [ 53.170477][ T8368] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 53.226770][ T31] audit: type=1326 audit(53.200:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.0.708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b5c0a8 code=0x7ffc0000 [ 53.260065][ T31] audit: type=1326 audit(53.230:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8380 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 53.260102][ T31] audit: type=1326 audit(53.230:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8380 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 53.266933][ T31] audit: type=1326 audit(53.230:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8380 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=53 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 53.266963][ T31] audit: type=1326 audit(53.230:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8380 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 53.266996][ T31] audit: type=1326 audit(53.230:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8380 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae95c0a8 code=0x7ffc0000 [ 53.395735][ T8393] loop2: detected capacity change from 0 to 512 [ 53.399259][ T8393] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 53.418780][ T8393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 53.418843][ T8393] System zones: 1-12 [ 53.422330][ T8393] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.716: corrupted in-inode xattr: e_value size too large [ 53.425993][ T8393] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.716: couldn't read orphan inode 15 (err -117) [ 53.429894][ T8393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.468879][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.822895][ T31] audit: type=1326 audit(53.790:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 53.828348][ T31] audit: type=1326 audit(53.800:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 53.831932][ T31] audit: type=1326 audit(53.800:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8415 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 54.009285][ T8440] netlink: 'syz.2.733': attribute type 13 has an invalid length. [ 54.062656][ T8448] process 'syz.1.735' launched '/dev/fd/4' with NULL argv: empty string added [ 54.098522][ T8440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.281513][ T8480] __nla_validate_parse: 10 callbacks suppressed [ 54.281556][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 54.281933][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 54.437769][ T8505] loop1: detected capacity change from 0 to 128 [ 54.538253][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'. [ 54.542176][ T8516] loop0: detected capacity change from 0 to 128 [ 54.542967][ T8516] msdos: Unknown parameter 'fowner<00000000000000000000' [ 54.646119][ T8525] loop1: detected capacity change from 0 to 2048 [ 54.690112][ T7375] loop1: p2 p3 p7 [ 54.704827][ T8525] loop1: p2 p3 p7 [ 54.786999][ T7327] udevd[7327]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.789545][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.791783][ T7375] udevd[7375]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.798019][ T8527] loop1: detected capacity change from 0 to 8192 [ 54.800706][ T8527] syz.1.764: attempt to access beyond end of device [ 54.800706][ T8527] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.801971][ T8527] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 54.801982][ T8527] FAT-fs (loop1): Filesystem has been set read-only [ 54.802230][ T8527] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 54.802324][ T8527] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 54.876424][ T6565] udevd[6565]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 55.249111][ T8544] loop3: detected capacity change from 0 to 1024 [ 55.250085][ T8544] EXT4-fs: Ignoring removed bh option [ 55.250502][ T8544] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.258434][ T8544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.267439][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.297532][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 55.368672][ T8517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.368743][ T8517] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.383525][ T8517] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.392608][ T8517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.392730][ T8517] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.399066][ T8517] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.407036][ T8517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.407096][ T8517] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.422193][ T8517] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.433813][ T8517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.433909][ T8517] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.449359][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 55.493965][ T8517] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.496855][ T8517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 55.497977][ T8517] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 55.499401][ T8517] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 55.639616][ T8581] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 55.697421][ T8589] loop0: detected capacity change from 0 to 512 [ 55.717889][ T8589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.731918][ T8589] netlink: 'syz.0.792': attribute type 13 has an invalid length. [ 55.736227][ T8593] loop3: detected capacity change from 0 to 1024 [ 55.750165][ T8593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.776552][ T14] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 4) [ 55.781426][ T14] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 55.783544][ T14] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.783544][ T14] [ 55.786097][ T8600] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.792: iget: bad i_size value: 2533274857506816 [ 55.789931][ T14] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 55.791083][ T14] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 55.791096][ T14] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.791096][ T14] [ 55.791102][ T14] EXT4-fs (loop3): Total free blocks count 0 [ 55.791108][ T14] EXT4-fs (loop3): Free/Dirty block details [ 55.791114][ T14] EXT4-fs (loop3): free_blocks=4293918720 [ 55.791125][ T14] EXT4-fs (loop3): dirty_blocks=16 [ 55.791130][ T14] EXT4-fs (loop3): Block reservation details [ 55.810221][ T8600] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.792: iget: bad i_size value: 2533274857506816 [ 55.810782][ T8600] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.792: iget: bad i_size value: 2533274857506816 [ 55.811085][ T8600] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.792: iget: bad i_size value: 2533274857506816 [ 55.811339][ T8600] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.792: iget: bad i_size value: 2533274857506816 [ 55.843062][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.843245][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.892899][ T8611] loop3: detected capacity change from 0 to 1024 [ 55.893329][ T8611] EXT4-fs: Ignoring removed orlov option [ 55.897895][ T8611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.911372][ T6549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.054257][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.059253][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.281532][ T8623] netlink: 256 bytes leftover after parsing attributes in process `syz.4.802'. [ 56.283223][ T8623] netlink: 72 bytes leftover after parsing attributes in process `syz.4.802'. [ 56.354971][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.797'. [ 56.366404][ T4179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.366462][ T4179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.366497][ T4179] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.366516][ T4179] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.376854][ T6550] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.387398][ T8628] pimreg: entered allmulticast mode [ 56.396207][ T8627] pimreg: left allmulticast mode [ 56.494416][ T8639] 9pnet: Could not find request transport: rdmaÿÿ [ 56.539897][ T8655] atomic_op 00000000ade1f0d0 conn xmit_atomic 0000000000000000 [ 56.632425][ T8663] ip6gre1: entered allmulticast mode [ 56.664387][ T6560] Bluetooth: hci0: command 0x0c1a tx timeout [ 56.686253][ T8670] IPVS: stopping master sync thread 8673 ... [ 56.858428][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.862296][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.128746][ T8691] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.254907][ T8691] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.269804][ T8707] loop2: detected capacity change from 0 to 512 [ 57.280340][ T8707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.290698][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 57.301847][ T8707] netlink: 'syz.2.836': attribute type 27 has an invalid length. [ 57.304210][ T8691] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.464619][ T6560] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.464735][ T6560] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.464763][ T6560] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.534471][ T6559] Bluetooth: hci4: command 0x0c1a tx timeout [ 57.569027][ T8707] veth1_vlan: left allmulticast mode [ 57.585324][ T8707] macvlan1: left allmulticast mode [ 57.816840][ T8707] ip6gre1: left allmulticast mode [ 57.832359][ T6551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.846068][ T8691] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.887569][ T14] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.887620][ T14] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.887655][ T14] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.887675][ T14] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.903758][ T8750] netlink: 92 bytes leftover after parsing attributes in process `syz.1.848'. [ 57.903794][ T8750] netem: unknown loss type 0 [ 57.903818][ T8750] netem: change failed [ 58.494145][ T8778] netlink: 'syz.2.862': attribute type 21 has an invalid length. [ 58.499085][ T8778] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 58.522256][ T8621] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.543671][ T2220] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.565956][ T8621] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.585308][ T8621] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.663802][ T8803] loop1: detected capacity change from 0 to 1024 [ 58.671444][ T8800] loop2: detected capacity change from 0 to 8192 [ 58.701230][ T8803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.739916][ T6559] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.786958][ T8813] loop4: detected capacity change from 0 to 1024 [ 58.791125][ T8810] loop3: detected capacity change from 0 to 512 [ 58.802231][ T8810] ext4: Unknown parameter 'euid<00000000000000000000' [ 58.804861][ T880 ** replaying previous printk message ** [ 58.804861][ T8803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.804888][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 58.804897][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 58.805151][ T8803] ------------[ cut here ]------------ [ 58.805155][ T8803] WARNING: CPU: 0 PID: 8803 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xb68/0xdc8 [ 58.812086][ T8803] Modules linked in: [ 58.812720][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.1.871 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 58.814401][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 58.815967][ T8803] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 58.817215][ T8803] pc : nsim_fib_event_nb+0xb68/0xdc8 [ 58.818051][ T8803] lr : nsim_fib_event_nb+0xb68/0xdc8 [ 58.818833][ T8803] sp : ffff80009d076e20 [ 58.819450][ T8803] x29: ffff80009d076e50 x28: dfff800000000000 x27: ffff0000d50cd000 [ 58.820680][ T8803] x26: ffff80009d077018 x25: dfff800000000000 x24: 0000000000000002 [ 58.821930][ T8803] x23: 0000000000000002 x22: ffff80009d077000 x21: 0000000000000001 [ 58.823137][ T8803] x20: ffff0000d0da0f80 x19: 0000000000000001 x18: 0000000000000000 [ 58.824379][ T8803] x17: 00000000ffff0000 x16: ffff80008b007230 x15: 0000000000000001 [ 58.825583][ T8803] x14: 1fffe0001e741d85 x13: 0000000000000000 x12: 0000000000000000 [ 58.826866][ T8803] x11: 0000000000080000 x10: 0000000000002750 x9 : ffff8000a69ea000 [ 58.828194][ T8803] x8 : 0000000000002751 x7 : ffff8000802310a8 x6 : ffff8000802312a4 [ 58.829494][ T8803] x5 : 00000000ffffffff x4 : 0000000000000920 x3 : ffff80008658fd4c [ 58.830752][ T8803] x2 : 0000000000000001 x1 : 0000000000000002 x0 : 0000000000000001 [ 58.832020][ T8803] Call trace: [ 58.832541][ T8803] nsim_fib_event_nb+0xb68/0xdc8 (P) [ 58.833423][ T8803] notifier_call_chain+0x1b8/0x4e4 [ 58.834333][ T8803] atomic_notifier_call_chain+0xd0/0x180 [ 58.835298][ T8803] call_fib_notifiers+0x44/0x74 [ 58.836067][ T8803] call_fib6_notifiers+0x50/0x80 [ 58.836806][ T8803] call_fib6_multipath_entry_notifiers+0xd8/0x140 [ 58.837756][ T8803] inet6_rtm_newroute+0x1044/0x14d4 [ 58.838518][ T8803] rtnetlink_rcv_msg+0x664/0x97c [ 58.839292][ T8803] netlink_rcv_skb+0x220/0x3fc [ 58.839956][ T8803] rtnetlink_rcv+0x28/0x38 [ 58.840614][ T8803] netlink_unicast+0x694/0x8c4 [ 58.841319][ T8803] netlink_sendmsg+0x648/0x930 [ 58.842060][ T8803] ____sys_sendmsg+0x490/0x7b8 [ 58.842741][ T8803] ___sys_sendmsg+0x204/0x278 [ 58.843405][ T8803] __arm64_sys_sendmsg+0x184/0x238 [ 58.844142][ T8803] invoke_syscall+0x98/0x2b8 [ 58.844780][ T8803] el0_svc_common+0x130/0x23c [ 58.845494][ T8803] do_el0_svc+0x48/0x58 [ 58.846102][ T8803] el0_svc+0x58/0x180 [ 58.846753][ T8803] el0t_64_sync_handler+0x84/0x12c [ 58.847575][ T8803] el0t_64_sync+0x198/0x19c [ 58.848239][ T8803] irq event stamp: 4182 [ 58.848856][ T8803] hardirqs last enabled at (4181): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 58.850348][ T8803] hardirqs last disabled at (4182): [] el1_brk64+0x1c/0x48 [ 58.851617][ T8803] softirqs last enabled at (4176): [] inet6_rtm_newroute+0xaec/0x14d4 [ 58.852965][ T8803] softirqs last disabled at (4174): [] inet6_rtm_newroute+0xac8/0x14d4 [ 58.854285][ T8803] ---[ end trace 0000000000000000 ]--- [ 58.867922][ T8813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.884927][ T8813] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.875: Allocating blocks 385-513 which overlap fs metadata [ 58.886421][ T8811] EXT4-fs (loop4): pa 000000009a8d0397: logic 16, phys. 129, len 24 [ 58.886439][ T8811] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 58.931541][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.544404][ T6559] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.544442][ T6559] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.544457][ T6559] Bluetooth: hci3: command 0x0c1a tx timeout [ 59.614309][ T6560] Bluetooth: hci4: command 0x0c1a tx timeout [ 60.814326][ T6560] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.614408][ T6559] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.614447][ T6559] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.614499][ T6560] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.694330][ T6560] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.495478][ T2412] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495526][ T2412] ieee802154 phy1 wpan1: encryption failed: -22