last executing test programs: 6.318424068s ago: executing program 3 (id=543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000280)='rxrpc_call\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.095812846s ago: executing program 3 (id=546): openat$nvram(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r1, 0x0, 0x2100) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'pim6reg0\x00'}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 5.597210627s ago: executing program 3 (id=551): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000440)}], 0x1, 0x1, 0x3d) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xc, 0xa00, 0x3, 0x303, 0x15}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x40) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002600)="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", 0x5dd}], 0x1}}], 0x6, 0x200010c4) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000005140)=[{&(0x7f0000000280)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="14", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000008400000002000000ff03040001000000e5330000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000200000000800000018000000000000008400000007000000ac1e00010000000020000000000000008400000002"], 0x70, 0x24040000}], 0x1, 0x240000c0) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eb03"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) 5.435722178s ago: executing program 3 (id=554): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb0000001801fb002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0xe5, 0x63b9dc37, 0x1b) 5.293236122s ago: executing program 3 (id=556): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x2000, 0x8100, 0x8}}}}}}, 0x2e) 4.999824885s ago: executing program 3 (id=562): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1fe6d000) 4.398195935s ago: executing program 1 (id=574): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 3.445715427s ago: executing program 1 (id=584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c50000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x18) uname(&(0x7f00000002c0)=""/76) 3.241826881s ago: executing program 1 (id=586): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.174919648s ago: executing program 1 (id=587): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) 1.760538996s ago: executing program 1 (id=600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 1.723238942s ago: executing program 0 (id=601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000280)='rxrpc_call\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) 1.521265961s ago: executing program 2 (id=603): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.520795377s ago: executing program 0 (id=604): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.413574347s ago: executing program 0 (id=606): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.219369459s ago: executing program 0 (id=607): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 1.18794872s ago: executing program 2 (id=608): openat$nvram(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) socket$isdn_base(0x22, 0x3, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r1, 0x0, 0x2100) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'pim6reg0\x00'}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.136219539s ago: executing program 4 (id=609): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x200000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r2, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) 926.280566ms ago: executing program 4 (id=610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 833.840724ms ago: executing program 2 (id=611): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 757.229642ms ago: executing program 1 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = io_uring_setup(0x6001, 0x0) close_range(r2, r2, 0x0) io_submit(r1, 0x1, &(0x7f0000000900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000140)="e9", 0x1, 0x3caa}]) 685.302797ms ago: executing program 2 (id=613): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044000}, 0x800) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={0x0, 0xffffffffffffffff, 0x0, 0x97a3}, 0x18) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 564.249731ms ago: executing program 4 (id=614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x9}, 0x8) 452.665637ms ago: executing program 2 (id=615): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) keyctl$set_timeout(0xf, 0x0, 0x7ff) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE(0x0, 0x0, 0x0) 433.77504ms ago: executing program 4 (id=616): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 369.323358ms ago: executing program 2 (id=617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRESOCT], &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000004c0)={0x20000, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0x4e20, 0x59b, @remote, 0xc}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e29, @local}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x24) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000240)={r7, 0xfffd}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000100f9000000fddb547a76ef6ebf", @ANYRES32=0x0, @ANYBLOB="aa93070000000000140003006261746164765f736c6176655f30000004001980080028006fb80000"], 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) socket$nl_netfilter(0x10, 0x3, 0xc) 266.981594ms ago: executing program 4 (id=618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d61943", 0x38, 0x404c801, 0x0, 0x0) 263.127568ms ago: executing program 0 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) 37.045748ms ago: executing program 4 (id=620): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x267, &(0x7f0000000440)={@link_local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x231, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x101, [{0x1f, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0x19, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5ac"}, {0xe}, {0x21, 0x5, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f00"}]}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20000400) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) 0s ago: executing program 0 (id=621): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 85.778341][ T5810] cgroup: Unknown subsys name 'net' [ 85.931598][ T5810] cgroup: Unknown subsys name 'cpuset' [ 85.940659][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.683182][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.752387][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.763416][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.771500][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.779455][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.785391][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.787452][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.796220][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.801817][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.809698][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.822865][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.830482][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.834464][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.845277][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.854206][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.861652][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.863065][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.868984][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.877073][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.893166][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.897953][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.903274][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.908587][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.915611][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.929123][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.952329][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.770808][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 92.874215][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 92.973737][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 93.047212][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 93.160958][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 93.257891][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.265855][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.274321][ T5824] bridge_slave_0: entered allmulticast mode [ 93.282569][ T5824] bridge_slave_0: entered promiscuous mode [ 93.337624][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.344832][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.352701][ T5821] bridge_slave_0: entered allmulticast mode [ 93.360493][ T5821] bridge_slave_0: entered promiscuous mode [ 93.370775][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.379540][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.386967][ T5824] bridge_slave_1: entered allmulticast mode [ 93.394398][ T5824] bridge_slave_1: entered promiscuous mode [ 93.433227][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.440548][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.448715][ T5821] bridge_slave_1: entered allmulticast mode [ 93.456149][ T5821] bridge_slave_1: entered promiscuous mode [ 93.482175][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.489792][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.497555][ T5822] bridge_slave_0: entered allmulticast mode [ 93.504961][ T5822] bridge_slave_0: entered promiscuous mode [ 93.565762][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.573466][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.580806][ T5822] bridge_slave_1: entered allmulticast mode [ 93.588635][ T5822] bridge_slave_1: entered promiscuous mode [ 93.626122][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.668996][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.676239][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.684533][ T5823] bridge_slave_0: entered allmulticast mode [ 93.694221][ T5823] bridge_slave_0: entered promiscuous mode [ 93.706674][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.718831][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.753743][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.761763][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.769365][ T5823] bridge_slave_1: entered allmulticast mode [ 93.776948][ T5823] bridge_slave_1: entered promiscuous mode [ 93.787137][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.814210][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.821790][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.829280][ T5820] bridge_slave_0: entered allmulticast mode [ 93.837372][ T5820] bridge_slave_0: entered promiscuous mode [ 93.849108][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.898748][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.906118][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.914203][ T5820] bridge_slave_1: entered allmulticast mode [ 93.921826][ T5820] bridge_slave_1: entered promiscuous mode [ 93.931492][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.947482][ T5839] Bluetooth: hci0: command tx timeout [ 93.947487][ T5833] Bluetooth: hci1: command tx timeout [ 93.989029][ T5824] team0: Port device team_slave_0 added [ 94.017529][ T5833] Bluetooth: hci4: command tx timeout [ 94.018081][ T5838] Bluetooth: hci2: command tx timeout [ 94.029132][ T5839] Bluetooth: hci3: command tx timeout [ 94.040003][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.051527][ T5821] team0: Port device team_slave_0 added [ 94.059785][ T5824] team0: Port device team_slave_1 added [ 94.081064][ T5822] team0: Port device team_slave_0 added [ 94.089945][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.106117][ T5821] team0: Port device team_slave_1 added [ 94.128078][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.139351][ T5822] team0: Port device team_slave_1 added [ 94.188000][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.240098][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.247520][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.274420][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.288202][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.295179][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.324772][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.368734][ T5823] team0: Port device team_slave_0 added [ 94.375662][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.383104][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.410074][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.422342][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.429555][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.456267][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.489250][ T5823] team0: Port device team_slave_1 added [ 94.495839][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.502981][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.529943][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.542070][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.549178][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.575794][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.599548][ T5820] team0: Port device team_slave_0 added [ 94.641083][ T5820] team0: Port device team_slave_1 added [ 94.661930][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.668966][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.695913][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.747731][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.754724][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.780777][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.868012][ T5824] hsr_slave_0: entered promiscuous mode [ 94.874736][ T5824] hsr_slave_1: entered promiscuous mode [ 94.887553][ T5821] hsr_slave_0: entered promiscuous mode [ 94.894164][ T5821] hsr_slave_1: entered promiscuous mode [ 94.901017][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 94.907153][ T5821] Cannot create hsr debugfs directory [ 94.913894][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.921312][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.947436][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.978411][ T5822] hsr_slave_0: entered promiscuous mode [ 94.985101][ T5822] hsr_slave_1: entered promiscuous mode [ 94.992378][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 94.998301][ T5822] Cannot create hsr debugfs directory [ 95.007486][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.014460][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.040617][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.185318][ T5823] hsr_slave_0: entered promiscuous mode [ 95.193364][ T5823] hsr_slave_1: entered promiscuous mode [ 95.199881][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 95.205722][ T5823] Cannot create hsr debugfs directory [ 95.322273][ T5820] hsr_slave_0: entered promiscuous mode [ 95.329622][ T5820] hsr_slave_1: entered promiscuous mode [ 95.335971][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 95.341899][ T5820] Cannot create hsr debugfs directory [ 95.861537][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.890586][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.922979][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.934176][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.016852][ T5839] Bluetooth: hci0: command tx timeout [ 96.022437][ T5838] Bluetooth: hci1: command tx timeout [ 96.030210][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.041827][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.054706][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.086795][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.096949][ T5839] Bluetooth: hci2: command tx timeout [ 96.096989][ T5833] Bluetooth: hci3: command tx timeout [ 96.102447][ T5838] Bluetooth: hci4: command tx timeout [ 96.214032][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.232223][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.244600][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.259206][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.427450][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.442176][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.460801][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.473763][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.613082][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.670079][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.682377][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.707029][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.727030][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.763978][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.789974][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.803891][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.811335][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.860861][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.868087][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.919188][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.938408][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.976888][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.995067][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.002272][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.032186][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.039497][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.072572][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.095462][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.124983][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.132181][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.161610][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.168809][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.180216][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.187381][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.210300][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.217808][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.237619][ T1215] cfg80211: failed to load regulatory.db [ 97.343320][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.504704][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.589117][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.596362][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.662194][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.669486][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.789185][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.974950][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.032913][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.077909][ T5821] veth0_vlan: entered promiscuous mode [ 98.092174][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.107835][ T5838] Bluetooth: hci1: command tx timeout [ 98.108319][ T5833] Bluetooth: hci0: command tx timeout [ 98.154870][ T5821] veth1_vlan: entered promiscuous mode [ 98.178588][ T5833] Bluetooth: hci3: command tx timeout [ 98.186768][ T5833] Bluetooth: hci4: command tx timeout [ 98.188835][ T5838] Bluetooth: hci2: command tx timeout [ 98.274926][ T5824] veth0_vlan: entered promiscuous mode [ 98.361887][ T5824] veth1_vlan: entered promiscuous mode [ 98.384066][ T5822] veth0_vlan: entered promiscuous mode [ 98.418449][ T5822] veth1_vlan: entered promiscuous mode [ 98.451042][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.462721][ T5821] veth0_macvtap: entered promiscuous mode [ 98.502731][ T5821] veth1_macvtap: entered promiscuous mode [ 98.576308][ T5824] veth0_macvtap: entered promiscuous mode [ 98.601500][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.621039][ T5824] veth1_macvtap: entered promiscuous mode [ 98.634591][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.650475][ T5822] veth0_macvtap: entered promiscuous mode [ 98.672933][ T1331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.684523][ T1331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.698407][ T5822] veth1_macvtap: entered promiscuous mode [ 98.709956][ T1331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.718926][ T1331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.759039][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.799204][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.828749][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.837549][ T5820] veth0_vlan: entered promiscuous mode [ 98.872385][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.882441][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.897168][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.909177][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.918785][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.943478][ T5820] veth1_vlan: entered promiscuous mode [ 98.972159][ T5823] veth0_vlan: entered promiscuous mode [ 98.980289][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.990270][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.016135][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.025817][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.039422][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.049227][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.100549][ T5823] veth1_vlan: entered promiscuous mode [ 99.138513][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.151813][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.200783][ T5820] veth0_macvtap: entered promiscuous mode [ 99.253752][ T5820] veth1_macvtap: entered promiscuous mode [ 99.269126][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.298533][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.319613][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.394633][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.403674][ T5823] veth0_macvtap: entered promiscuous mode [ 99.432895][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.441271][ T5823] veth1_macvtap: entered promiscuous mode [ 99.442545][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.471076][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.534658][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.554650][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.576721][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.595786][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.605623][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.629404][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.640523][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.673598][ T5947] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 99.690073][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.744081][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.760269][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.850781][ T3523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.937350][ T3523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.005873][ T3523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.025110][ T3523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.077892][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.116312][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.177204][ T5838] Bluetooth: hci0: command tx timeout [ 100.177535][ T5833] Bluetooth: hci1: command tx timeout [ 100.244391][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.252741][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.261046][ T5833] Bluetooth: hci4: command tx timeout [ 100.261058][ T5838] Bluetooth: hci3: command tx timeout [ 100.267446][ T5838] Bluetooth: hci2: command tx timeout [ 100.335351][ T5960] loop3: detected capacity change from 0 to 512 [ 100.375364][ T5960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.409803][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.441406][ T5960] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.460627][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.569763][ T5960] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4198: comm syz.3.8: Allocating blocks 41-42 which overlap fs metadata [ 100.664313][ T5972] loop0: detected capacity change from 0 to 128 [ 100.677312][ T5972] EXT4-fs: Ignoring removed nobh option [ 100.682836][ T5960] Quota error (device loop3): write_blk: dquota write failed [ 100.719392][ T5960] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 100.734546][ T5972] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.749276][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.776796][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.790901][ T5960] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 100.811059][ T5972] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.830625][ T5960] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8: Failed to acquire dquot type 1 [ 100.889127][ T5960] EXT4-fs error (device loop3): mb_free_blocks:2020: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 100.956902][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8: corrupted inode contents [ 101.026149][ T5960] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.8: mark_inode_dirty error [ 101.041771][ T5822] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.093964][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8: corrupted inode contents [ 101.131636][ T5960] EXT4-fs error (device loop3): __ext4_ext_dirty:211: inode #12: comm syz.3.8: mark_inode_dirty error [ 101.197851][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8: corrupted inode contents [ 101.252411][ T5960] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 101.280590][ T5960] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.8: corrupted inode contents [ 101.337079][ T5960] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.8: mark_inode_dirty error [ 101.380907][ T5989] loop1: detected capacity change from 0 to 1024 [ 101.399374][ T5960] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 101.437984][ T5989] EXT4-fs: Ignoring removed orlov option [ 101.447883][ T5960] EXT4-fs (loop3): 1 truncate cleaned up [ 101.455403][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.566028][ T5989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.749369][ T30] audit: type=1800 audit(1764248572.325:2): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 101.794472][ T30] audit: type=1804 audit(1764248572.325:3): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.12" name="/newroot/4/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 101.924052][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.472693][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 102.501779][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.961829][ T6023] loop4: detected capacity change from 0 to 128 [ 103.017498][ T6023] EXT4-fs: Ignoring removed nobh option [ 103.082801][ T6023] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.181070][ T6023] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.445698][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.106278][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'. [ 105.954084][ T6077] loop4: detected capacity change from 0 to 512 [ 105.959796][ T6080] loop1: detected capacity change from 0 to 128 [ 105.992279][ T6080] EXT4-fs: Ignoring removed nobh option [ 106.013384][ T6077] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.060284][ T6077] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.243174][ T6077] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4198: comm syz.4.40: Allocating blocks 41-42 which overlap fs metadata [ 106.259249][ T6080] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.342145][ T6080] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.352810][ T6077] Quota error (device loop4): write_blk: dquota write failed [ 106.382388][ T6077] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 106.413541][ T6077] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4198: comm syz.4.40: Allocating blocks 41-42 which overlap fs metadata [ 106.487588][ T6077] Quota error (device loop4): write_blk: dquota write failed [ 106.495151][ T6077] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 106.530038][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.533863][ T6077] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.40: Failed to acquire dquot type 1 [ 106.605340][ T6077] EXT4-fs error (device loop4): mb_free_blocks:2020: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 106.666694][ T6077] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.40: corrupted inode contents [ 106.686240][ T6077] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.40: mark_inode_dirty error [ 106.714976][ T6077] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.40: corrupted inode contents [ 106.737600][ T6077] EXT4-fs error (device loop4): __ext4_ext_dirty:211: inode #12: comm syz.4.40: mark_inode_dirty error [ 106.771374][ T6077] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.40: corrupted inode contents [ 106.820422][ T6077] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 106.838171][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 106.861844][ T6077] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.40: corrupted inode contents [ 106.893434][ T6077] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.40: mark_inode_dirty error [ 106.907275][ T6077] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 106.918613][ T6077] EXT4-fs (loop4): 1 truncate cleaned up [ 106.936133][ T6077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.029646][ T6115] Zero length message leads to an empty skb [ 107.077917][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.731123][ T30] audit: type=1326 audit(1764248578.305:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 107.787500][ T30] audit: type=1326 audit(1764248578.335:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 107.839339][ T6142] loop3: detected capacity change from 0 to 512 [ 107.867684][ T30] audit: type=1326 audit(1764248578.335:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 107.909562][ T6142] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.930749][ T30] audit: type=1326 audit(1764248578.345:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 107.951950][ T6142] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.955122][ T30] audit: type=1326 audit(1764248578.345:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 108.005312][ T30] audit: type=1326 audit(1764248578.345:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 108.087640][ T6142] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4198: comm syz.3.63: Allocating blocks 41-42 which overlap fs metadata [ 108.129859][ T6142] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.63: Failed to acquire dquot type 1 [ 108.161651][ T6142] EXT4-fs error (device loop3): mb_free_blocks:2020: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 108.189493][ T6142] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.63: corrupted inode contents [ 108.224034][ T6142] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.63: mark_inode_dirty error [ 108.268633][ T6142] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.63: corrupted inode contents [ 108.342135][ T6142] EXT4-fs error (device loop3): __ext4_ext_dirty:211: inode #12: comm syz.3.63: mark_inode_dirty error [ 108.391734][ T6142] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.63: corrupted inode contents [ 108.404760][ T6161] loop1: detected capacity change from 0 to 128 [ 108.424282][ T6142] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 108.456176][ T6142] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.63: corrupted inode contents [ 108.508588][ T6142] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.63: mark_inode_dirty error [ 108.529340][ T6161] syz.1.66: attempt to access beyond end of device [ 108.529340][ T6161] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 108.558630][ T6142] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 108.577472][ T6142] EXT4-fs (loop3): 1 truncate cleaned up [ 108.581170][ T6161] syz.1.66: attempt to access beyond end of device [ 108.581170][ T6161] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 108.619921][ T6161] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 108.625404][ T6142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.628752][ T6161] syz.1.66: attempt to access beyond end of device [ 108.628752][ T6161] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 108.661152][ T6161] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 108.674155][ T6161] syz.1.66: attempt to access beyond end of device [ 108.674155][ T6161] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 108.711018][ T6161] syz.1.66: attempt to access beyond end of device [ 108.711018][ T6161] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 108.726064][ T6161] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 108.735242][ T6161] syz.1.66: attempt to access beyond end of device [ 108.735242][ T6161] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 108.751045][ T6161] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 108.764844][ T6161] syz.1.66: attempt to access beyond end of device [ 108.764844][ T6161] loop1: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 108.782937][ T6161] syz.1.66: attempt to access beyond end of device [ 108.782937][ T6161] loop1: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 108.803330][ T6161] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 108.836412][ T6161] syz.1.66: attempt to access beyond end of device [ 108.836412][ T6161] loop1: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 108.852778][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.907968][ T6161] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 108.946267][ T6161] syz.1.66: attempt to access beyond end of device [ 108.946267][ T6161] loop1: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 108.981361][ T6178] program syz.2.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.993115][ T6161] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 109.046756][ T6161] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 109.091472][ T6161] Buffer I/O error on dev loop1, logical block 119, lost async page write [ 109.126756][ T6161] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 109.386207][ T6190] loop0: detected capacity change from 0 to 1024 [ 109.403742][ T6190] EXT4-fs: Ignoring removed orlov option [ 109.484857][ T6190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.809639][ T6207] loop2: detected capacity change from 0 to 512 [ 109.832565][ T6207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.856976][ T6207] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.885736][ T6207] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4198: comm syz.2.85: Allocating blocks 41-42 which overlap fs metadata [ 109.915273][ T6207] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4198: comm syz.2.85: Allocating blocks 41-42 which overlap fs metadata [ 110.005969][ T6212] loop3: detected capacity change from 0 to 128 [ 110.013788][ T6212] EXT4-fs: Ignoring removed nobh option [ 110.057703][ T6207] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.85: Failed to acquire dquot type 1 [ 110.078049][ T6207] EXT4-fs error (device loop2): mb_free_blocks:2020: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 110.095817][ T6207] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.85: corrupted inode contents [ 110.122640][ T6212] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.180745][ T6207] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.85: mark_inode_dirty error [ 110.221755][ T6212] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.267388][ T6207] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.85: corrupted inode contents [ 110.306130][ T6207] EXT4-fs error (device loop2): __ext4_ext_dirty:211: inode #12: comm syz.2.85: mark_inode_dirty error [ 110.321781][ T5824] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.334497][ T6207] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.85: corrupted inode contents [ 110.386879][ T6207] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 110.407662][ T6207] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.85: corrupted inode contents [ 110.481967][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.490417][ T6207] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.85: mark_inode_dirty error [ 110.522459][ T6207] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 110.564861][ T6207] EXT4-fs (loop2): 1 truncate cleaned up [ 110.578561][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.778234][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.123985][ T6243] loop1: detected capacity change from 0 to 128 [ 111.132165][ T6243] EXT4-fs: Ignoring removed nobh option [ 111.178532][ T6243] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.196359][ T6243] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.281506][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.378211][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 111.402886][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 111.402906][ T30] audit: type=1326 audit(1764248581.975:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8f749 code=0x7ffc0000 [ 111.527953][ T30] audit: type=1326 audit(1764248582.015:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d3d8f749 code=0x7ffc0000 [ 111.598962][ T30] audit: type=1326 audit(1764248582.015:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8f749 code=0x7ffc0000 [ 111.628481][ T30] audit: type=1326 audit(1764248582.015:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08d3d8f749 code=0x7ffc0000 [ 111.663722][ T30] audit: type=1326 audit(1764248582.075:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8f749 code=0x7ffc0000 [ 111.747329][ T30] audit: type=1326 audit(1764248582.075:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8f749 code=0x7ffc0000 [ 112.025277][ T6265] loop1: detected capacity change from 0 to 512 [ 112.040803][ T6265] ======================================================= [ 112.040803][ T6265] WARNING: The mand mount option has been deprecated and [ 112.040803][ T6265] and is ignored by this kernel. Remove the mand [ 112.040803][ T6265] option from the mount to silence this warning. [ 112.040803][ T6265] ======================================================= [ 112.107370][ T6265] ext4: Unknown parameter 'nouser_xattr' [ 112.524065][ T6274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.660508][ T6284] loop1: detected capacity change from 0 to 128 [ 112.688936][ T6274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.707722][ T6284] EXT4-fs: Ignoring removed nobh option [ 112.742126][ T6284] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.777590][ T6284] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.841103][ T6274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.935652][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 113.002922][ T5821] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.048332][ T6274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.379273][ T6303] loop0: detected capacity change from 0 to 1024 [ 113.389718][ T6303] EXT4-fs: Ignoring removed orlov option [ 113.422781][ T6303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.440728][ T3523] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.514290][ T6010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.524582][ T30] audit: type=1800 audit(1764248584.095:29): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.121" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 113.554653][ T30] audit: type=1804 audit(1764248584.125:30): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.121" name="/newroot/23/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 113.594000][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.637901][ T3460] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.656160][ T6310] loop2: detected capacity change from 0 to 512 [ 113.694067][ T6310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.767829][ T6310] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.895614][ T6310] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 113.918257][ T6310] EXT4-fs (loop2): 1 truncate cleaned up [ 113.925408][ T6310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.108131][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.319377][ T6326] program syz.2.129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.360069][ T6330] program syz.1.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.365475][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.923150][ T6346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.024121][ T6346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.082809][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 115.180327][ T6346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.303270][ T6346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.597884][ T1008] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.624924][ T1008] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.664765][ T3421] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.690077][ T3421] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.338965][ T6397] loop2: detected capacity change from 0 to 512 [ 116.359358][ T6397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.394830][ T6397] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.463588][ T6397] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4198: comm syz.2.157: Allocating blocks 41-42 which overlap fs metadata [ 116.484256][ T6397] Quota error (device loop2): write_blk: dquota write failed [ 116.493849][ T6397] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 116.549977][ T6405] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.566660][ T6397] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 116.613063][ T6397] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.157: Failed to acquire dquot type 1 [ 116.672060][ T6397] EXT4-fs error (device loop2): mb_free_blocks:2020: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 116.696889][ T6397] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.157: corrupted inode contents [ 116.725418][ T6397] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.157: mark_inode_dirty error [ 116.748439][ T6405] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.768554][ T6397] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.157: corrupted inode contents [ 116.801453][ T6397] EXT4-fs error (device loop2): __ext4_ext_dirty:211: inode #12: comm syz.2.157: mark_inode_dirty error [ 116.815267][ T6397] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.157: corrupted inode contents [ 116.847379][ T6397] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 116.871253][ T6397] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.157: corrupted inode contents [ 116.912976][ T6405] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.928063][ T6397] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.157: mark_inode_dirty error [ 116.940284][ T6397] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 116.956081][ T6397] EXT4-fs (loop2): 1 truncate cleaned up [ 116.975937][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.033173][ T6405] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.187457][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.207108][ T6424] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.261506][ T1331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.282536][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 117.342328][ T6010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.402928][ T1851] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.582913][ T6405] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.679749][ T6405] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.767656][ T6405] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.115052][ T6454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.180'. [ 118.193289][ T6456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.182'. [ 118.457837][ T6466] program syz.3.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.458009][ T6463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.619909][ T6463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.718192][ T6463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.819769][ T6463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.969266][ T1851] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.988503][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 118.994574][ T1851] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.018720][ T1851] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.047424][ T1851] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.249470][ T6484] loop1: detected capacity change from 0 to 1024 [ 119.267012][ T6484] EXT4-fs: Ignoring removed orlov option [ 119.294577][ T6484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.360954][ T30] audit: type=1800 audit(1764248589.935:31): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 119.386762][ T30] audit: type=1804 audit(1764248589.955:32): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.193" name="/newroot/45/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 119.531236][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.619210][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 119.696110][ T6495] program syz.1.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.035863][ T6502] loop3: detected capacity change from 0 to 512 [ 120.045818][ T6502] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.071668][ T6502] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.093826][ T6502] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4198: comm syz.3.200: Allocating blocks 41-42 which overlap fs metadata [ 120.115414][ T6502] Quota error (device loop3): write_blk: dquota write failed [ 120.123731][ T6502] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 120.133829][ T6502] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4198: comm syz.3.200: Allocating blocks 41-42 which overlap fs metadata [ 120.149212][ T6502] Quota error (device loop3): write_blk: dquota write failed [ 120.157530][ T6502] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 120.172466][ T6502] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.200: Failed to acquire dquot type 1 [ 120.185287][ T6502] EXT4-fs error (device loop3): mb_free_blocks:2020: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 120.204425][ T6502] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.200: corrupted inode contents [ 120.217291][ T6502] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.200: mark_inode_dirty error [ 120.229238][ T6502] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.200: corrupted inode contents [ 120.242271][ T6502] EXT4-fs error (device loop3): __ext4_ext_dirty:211: inode #12: comm syz.3.200: mark_inode_dirty error [ 120.254436][ T6502] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.200: corrupted inode contents [ 120.298313][ T6502] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 120.307895][ T6502] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.200: corrupted inode contents [ 120.320704][ T6502] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.200: mark_inode_dirty error [ 120.333811][ T6502] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 120.348208][ T6502] EXT4-fs (loop3): 1 truncate cleaned up [ 120.358069][ T6502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.374763][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 120.499809][ T6511] pim6reg1: entered promiscuous mode [ 120.510796][ T6511] pim6reg1: entered allmulticast mode [ 120.514834][ T6513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.203'. [ 120.514866][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.768943][ T6515] loop0: detected capacity change from 0 to 1024 [ 120.787175][ T6515] EXT4-fs: Ignoring removed orlov option [ 120.841433][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.893509][ T30] audit: type=1800 audit(1764248591.465:33): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 121.192206][ T6531] loop1: detected capacity change from 0 to 1024 [ 121.202696][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.228992][ T6531] EXT4-fs: Ignoring removed bh option [ 121.242337][ T6531] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 121.315688][ T6531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.391939][ T6531] EXT4-fs (loop1): can't enable nombcache during remount [ 121.440714][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.481077][ T6541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.215'. [ 121.486831][ T6538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.588160][ T6544] program syz.1.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.602178][ T6538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.750217][ T6538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.790349][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 121.862163][ T6538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.143988][ T6260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.276759][ T1331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.343978][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.425497][ T6030] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.481100][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 122.588203][ T6580] netlink: 212 bytes leftover after parsing attributes in process `syz.0.227'. [ 122.700972][ T6583] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 123.094956][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 123.524950][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 123.599858][ T6623] loop1: detected capacity change from 0 to 512 [ 123.618308][ T6623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.642894][ T6623] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.701519][ T6623] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4198: comm syz.1.243: Allocating blocks 41-42 which overlap fs metadata [ 123.754712][ T6623] __quota_error: 1 callbacks suppressed [ 123.754731][ T6623] Quota error (device loop1): write_blk: dquota write failed [ 123.777006][ T6623] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 123.787963][ T6623] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 123.798168][ T6623] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.243: Failed to acquire dquot type 1 [ 123.813261][ T6623] EXT4-fs error (device loop1): mb_free_blocks:2020: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 123.828307][ T6623] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.243: corrupted inode contents [ 123.847681][ T6623] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.243: mark_inode_dirty error [ 123.909598][ T6623] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.243: corrupted inode contents [ 123.925039][ T6623] EXT4-fs error (device loop1): __ext4_ext_dirty:211: inode #12: comm syz.1.243: mark_inode_dirty error [ 123.945875][ T6623] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.243: corrupted inode contents [ 123.964862][ T6623] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 123.974920][ T6623] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.243: corrupted inode contents [ 123.994416][ T6623] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.243: mark_inode_dirty error [ 124.009884][ T6623] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 124.031751][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.247'. [ 124.043823][ T6623] EXT4-fs (loop1): 1 truncate cleaned up [ 124.116874][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.390840][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 124.400313][ T30] audit: type=1326 audit(1764248594.975:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e658f749 code=0x7ffc0000 [ 124.428281][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.446162][ T6653] loop2: detected capacity change from 0 to 1024 [ 124.474339][ T6653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.506533][ T30] audit: type=1326 audit(1764248594.975:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f65e658f749 code=0x7ffc0000 [ 124.537491][ T6653] ext4: Unknown parameter 'seclabel' [ 124.544685][ T30] audit: type=1326 audit(1764248594.975:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65e658f783 code=0x7ffc0000 [ 124.656871][ T30] audit: type=1326 audit(1764248595.015:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65e658e1ff code=0x7ffc0000 [ 124.728230][ T30] audit: type=1326 audit(1764248595.015:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f65e658f7d7 code=0x7ffc0000 [ 124.753248][ T30] audit: type=1326 audit(1764248595.015:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65e658df90 code=0x7ffc0000 [ 124.782873][ T30] audit: type=1326 audit(1764248595.015:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65e658f34b code=0x7ffc0000 [ 125.047751][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 125.337885][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 125.448816][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 125.525592][ T1331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.594022][ T1135] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.680667][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.760226][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.159756][ T6718] IPv6: Can't replace route, no match found [ 126.525502][ T6728] hsr_slave_0: left promiscuous mode [ 126.584040][ T6728] hsr_slave_1: left promiscuous mode [ 127.756990][ T6773] vlan2: entered allmulticast mode [ 128.625974][ T6793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.801071][ T6803] __nla_validate_parse: 4 callbacks suppressed [ 128.801090][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 128.900752][ T6793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.116096][ T6793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.285583][ T6793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.526542][ T6030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.616740][ T6030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.689873][ T6010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.754307][ T6010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.943682][ T6898] loop1: detected capacity change from 0 to 512 [ 131.960458][ T6898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.979949][ T6898] ext4: Unknown parameter 'defcontext' [ 132.353631][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 132.862333][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 132.882030][ T30] audit: type=1326 audit(1764248859.436:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afe58f749 code=0x7ffc0000 [ 132.926715][ T30] audit: type=1326 audit(1764248859.436:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afe58f749 code=0x7ffc0000 [ 133.026596][ T30] audit: type=1326 audit(1764248859.436:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f3afe58f749 code=0x7ffc0000 [ 133.128029][ T30] audit: type=1326 audit(1764248859.436:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afe58f749 code=0x7ffc0000 [ 133.149356][ T6932] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.186601][ T30] audit: type=1326 audit(1764248859.436:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afe58f749 code=0x7ffc0000 [ 133.275622][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 133.305652][ T6932] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.400362][ T6932] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.480566][ T6932] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.618825][ T6085] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.657479][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.695916][ T6085] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.753993][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.069022][ T6960] 9p: Bad value for 'source' [ 134.083781][ T6960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.093196][ T6960] batadv_slave_0: entered promiscuous mode [ 134.099481][ T6960] batadv_slave_0: entered allmulticast mode [ 134.115848][ T6960] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 134.658230][ T6963] netem: change failed [ 134.817010][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 135.586274][ T7002] netlink: 92 bytes leftover after parsing attributes in process `syz.3.397'. [ 135.595769][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 137.038604][ T7051] pimreg: entered allmulticast mode [ 137.678179][ T30] audit: type=1326 audit(1764248864.246:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 137.792785][ T30] audit: type=1326 audit(1764248864.246:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 137.885577][ T30] audit: type=1326 audit(1764248864.306:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 137.943442][ T30] audit: type=1326 audit(1764248864.306:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.051727][ T30] audit: type=1326 audit(1764248864.306:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.130987][ T30] audit: type=1326 audit(1764248864.316:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.209910][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.216991][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.219229][ T30] audit: type=1326 audit(1764248864.316:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.363590][ T30] audit: type=1326 audit(1764248864.556:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.420334][ T30] audit: type=1326 audit(1764248864.556:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.454483][ T30] audit: type=1326 audit(1764248864.556:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.484034][ T7099] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.553151][ T30] audit: type=1326 audit(1764248864.556:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.602864][ T7099] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.655109][ T30] audit: type=1326 audit(1764248864.556:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee1b8f749 code=0x7ffc0000 [ 138.686383][ T7108] netlink: 288 bytes leftover after parsing attributes in process `syz.2.443'. [ 138.710399][ T7099] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.916723][ T7099] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.007870][ T7111] 9p: Bad value for 'source' [ 139.019718][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.028294][ T7111] batadv_slave_0: entered promiscuous mode [ 139.034377][ T7111] batadv_slave_0: entered allmulticast mode [ 139.052802][ T7111] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 139.739803][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.445'. [ 139.754734][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 139.829366][ T1851] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.905796][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.964451][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.021869][ T1851] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.407636][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 140.584531][ T7157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'. [ 141.506239][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 141.856364][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.477'. [ 141.938504][ T7211] netlink: 104 bytes leftover after parsing attributes in process `syz.2.482'. [ 142.445809][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 142.851837][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.496'. [ 142.929428][ T7253] atomic_op ffff888053c5d198 conn xmit_atomic 0000000000000000 [ 143.271548][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 143.354291][ T7276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'. [ 143.957057][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 144.303464][ T7306] loop1: detected capacity change from 0 to 8192 [ 144.418021][ T7306] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.618215][ T5828] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.675790][ T5828] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.018107][ T7341] loop0: detected capacity change from 0 to 512 [ 145.045239][ T7341] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.103420][ T7341] EXT4-fs (loop0): 1 truncate cleaned up [ 145.131502][ T7341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.217205][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 145.217224][ T30] audit: type=1800 audit(1764248871.796:135): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 145.282458][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.491408][ T7355] __nla_validate_parse: 2 callbacks suppressed [ 145.491432][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 146.076171][ T7373] loop1: detected capacity change from 0 to 164 [ 146.133978][ T7373] process 'syz.1.544' launched '/dev/fd/3' with NULL argv: empty string added [ 146.187398][ T7373] bio_check_eod: 32 callbacks suppressed [ 146.187422][ T7373] syz.1.544: attempt to access beyond end of device [ 146.187422][ T7373] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.224517][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 146.241068][ T7373] syz.1.544: attempt to access beyond end of device [ 146.241068][ T7373] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.632891][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 147.055721][ T7414] ./file0: Can't lookup blockdev [ 147.194631][ T7420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.561'. [ 147.273657][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 148.080900][ T7457] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 148.223939][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 148.333868][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 148.919426][ T7485] netlink: 96 bytes leftover after parsing attributes in process `syz.1.586'. [ 149.353070][ T7495] loop2: detected capacity change from 0 to 512 [ 149.375498][ T7495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.469245][ T7495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 149.552008][ T7495] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.661954][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 149.735296][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 149.886299][ T7489] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.916781][ T7489] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.918708][ T7510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'. [ 149.974026][ T7489] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.990645][ T7489] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.006722][ T7489] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.039360][ T7489] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.080221][ T7489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.102003][ T7489] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 150.167880][ T7489] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 150.228411][ T7489] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.246553][ T7489] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 150.275490][ T7489] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 150.295866][ T7489] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 150.308376][ T7489] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 150.326300][ T7489] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 150.910594][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 151.137279][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.163392][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.608'. [ 151.543631][ T7561] netlink: 44 bytes leftover after parsing attributes in process `syz.2.613'. [ 151.569802][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.578905][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.017966][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.096811][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.256534][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.275834][ T7580] 9p: Bad value for 'source' [ 152.344628][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.777017][ T7579] ================================================================== [ 152.785828][ T7579] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 152.793492][ T7579] Read of size 1 at addr ffff888032f53618 by task syz.0.621/7579 [ 152.801559][ T7579] [ 152.803936][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(full) [ 152.803961][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.803981][ T7579] Call Trace: [ 152.803992][ T7579] [ 152.804001][ T7579] dump_stack_lvl+0x189/0x250 [ 152.804032][ T7579] ? rcu_is_watching+0x15/0xb0 [ 152.804048][ T7579] ? __kasan_check_byte+0x12/0x40 [ 152.804076][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.804102][ T7579] ? rcu_is_watching+0x15/0xb0 [ 152.804118][ T7579] ? lock_release+0x4b/0x3b0 [ 152.804143][ T7579] ? __virt_addr_valid+0x1c8/0x5c0 [ 152.804162][ T7579] ? __virt_addr_valid+0x4a5/0x5c0 [ 152.804180][ T7579] print_report+0xca/0x240 [ 152.804211][ T7579] ? _raw_spin_lock+0x2e/0x40 [ 152.804231][ T7579] kasan_report+0x118/0x150 [ 152.804258][ T7579] ? _raw_spin_lock+0x2e/0x40 [ 152.804280][ T7579] ? mqueue_flush_file+0x49/0x270 [ 152.804307][ T7579] __kasan_check_byte+0x2a/0x40 [ 152.804333][ T7579] lock_acquire+0x84/0x340 [ 152.804360][ T7579] ? __pfx_mqueue_flush_file+0x10/0x10 [ 152.804386][ T7579] _raw_spin_lock+0x2e/0x40 [ 152.804405][ T7579] ? mqueue_flush_file+0x49/0x270 [ 152.804432][ T7579] mqueue_flush_file+0x49/0x270 [ 152.804457][ T7579] ? filp_flush+0xae/0x190 [ 152.804475][ T7579] ? __pfx_mqueue_flush_file+0x10/0x10 [ 152.804501][ T7579] filp_flush+0xbd/0x190 [ 152.804520][ T7579] __x64_sys_close+0x75/0x110 [ 152.804538][ T7579] do_syscall_64+0xfa/0xf80 [ 152.804562][ T7579] ? rcu_is_watching+0x15/0xb0 [ 152.804576][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.804594][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 152.804613][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.804630][ T7579] RIP: 0033:0x7f171318f749 [ 152.804654][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.804669][ T7579] RSP: 002b:00007f1714079038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 152.804689][ T7579] RAX: ffffffffffffffda RBX: 00007f17133e5fa0 RCX: 00007f171318f749 [ 152.804703][ T7579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.804713][ T7579] RBP: 00007f1713213f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.804724][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.804734][ T7579] R13: 00007f17133e6038 R14: 00007f17133e5fa0 R15: 00007ffe0e530218 [ 152.804755][ T7579] [ 152.804761][ T7579] [ 153.052666][ T7579] Allocated by task 7579: [ 153.057261][ T7579] kasan_save_track+0x3e/0x80 [ 153.062242][ T7579] __kasan_slab_alloc+0x6c/0x80 [ 153.067109][ T7579] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 153.072983][ T7579] mqueue_alloc_inode+0x28/0x40 [ 153.077839][ T7579] alloc_inode+0x6a/0x1b0 [ 153.082309][ T7579] new_inode+0x22/0x170 [ 153.086487][ T7579] mqueue_get_inode+0x27/0xb50 [ 153.091275][ T7579] mqueue_create_attr+0x1ac/0x2e0 [ 153.096410][ T7579] vfs_mkobj+0xcf/0x290 [ 153.100594][ T7579] do_mq_open+0x60d/0x7c0 [ 153.104943][ T7579] __x64_sys_mq_open+0x16a/0x1c0 [ 153.110073][ T7579] do_syscall_64+0xfa/0xf80 [ 153.114678][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.121452][ T7579] [ 153.124076][ T7579] Freed by task 7569: [ 153.128229][ T7579] kasan_save_track+0x3e/0x80 [ 153.133063][ T7579] kasan_save_free_info+0x46/0x50 [ 153.138210][ T7579] __kasan_slab_free+0x5c/0x80 [ 153.143012][ T7579] kmem_cache_free+0x197/0x620 [ 153.147810][ T7579] rcu_core+0xd70/0x1870 [ 153.152075][ T7579] handle_softirqs+0x27d/0x850 [ 153.156942][ T7579] __irq_exit_rcu+0xca/0x1f0 [ 153.161546][ T7579] irq_exit_rcu+0x9/0x30 [ 153.165801][ T7579] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 153.171462][ T7579] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.177542][ T7579] [ 153.179870][ T7579] Last potentially related work creation: [ 153.185597][ T7579] kasan_save_stack+0x3e/0x60 [ 153.190298][ T7579] kasan_record_aux_stack+0xbd/0xd0 [ 153.195506][ T7579] call_rcu+0x157/0x9c0 [ 153.199700][ T7579] evict+0x931/0xae0 [ 153.203607][ T7579] __se_sys_mq_unlink+0x2c5/0x360 [ 153.208643][ T7579] do_syscall_64+0xfa/0xf80 [ 153.213246][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.219236][ T7579] [ 153.221568][ T7579] The buggy address belongs to the object at ffff888032f53600 [ 153.221568][ T7579] which belongs to the cache mqueue_inode_cache of size 1576 [ 153.236416][ T7579] The buggy address is located 24 bytes inside of [ 153.236416][ T7579] freed 1576-byte region [ffff888032f53600, ffff888032f53c28) [ 153.250239][ T7579] [ 153.252583][ T7579] The buggy address belongs to the physical page: [ 153.259011][ T7579] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032f52f40 pfn:0x32f50 [ 153.269093][ T7579] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.277591][ T7579] memcg:ffff88802e3c1901 [ 153.281834][ T7579] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 153.289400][ T7579] page_type: f5(slab) [ 153.293393][ T7579] raw: 00fff00000000040 ffff88801e3253c0 dead000000000122 0000000000000000 [ 153.302100][ T7579] raw: ffff888032f52f40 000000008012000e 00000000f5000000 ffff88802e3c1901 [ 153.310713][ T7579] head: 00fff00000000040 ffff88801e3253c0 dead000000000122 0000000000000000 [ 153.319527][ T7579] head: ffff888032f52f40 000000008012000e 00000000f5000000 ffff88802e3c1901 [ 153.328475][ T7579] head: 00fff00000000003 ffffea0000cbd401 00000000ffffffff 00000000ffffffff [ 153.337176][ T7579] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 153.346130][ T7579] page dumped because: kasan: bad access detected [ 153.352718][ T7579] page_owner tracks the page as allocated [ 153.358440][ T7579] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5822, tgid 5822 (syz-executor), ts 91944291119, free_ts 91742609478 [ 153.379813][ T7579] post_alloc_hook+0x234/0x290 [ 153.384598][ T7579] get_page_from_freelist+0x2365/0x2440 [ 153.390164][ T7579] __alloc_frozen_pages_noprof+0x181/0x370 [ 153.396037][ T7579] alloc_pages_mpol+0x232/0x4a0 [ 153.400942][ T7579] allocate_slab+0x86/0x3b0 [ 153.405470][ T7579] ___slab_alloc+0xf2b/0x1960 [ 153.410286][ T7579] __slab_alloc+0x65/0x100 [ 153.414750][ T7579] kmem_cache_alloc_lru_noprof+0x3fe/0x6e0 [ 153.420576][ T7579] mqueue_alloc_inode+0x28/0x40 [ 153.425538][ T7579] alloc_inode+0x6a/0x1b0 [ 153.429882][ T7579] new_inode+0x22/0x170 [ 153.434056][ T7579] mqueue_fill_super+0xdc/0x380 [ 153.439046][ T7579] get_tree_nodev+0xbb/0x150 [ 153.443953][ T7579] vfs_get_tree+0x92/0x2a0 [ 153.448478][ T7579] fc_mount_longterm+0x1c/0x100 [ 153.453376][ T7579] mq_init_ns+0x275/0x360 [ 153.457753][ T7579] page last free pid 5836 tgid 5836 stack trace: [ 153.464288][ T7579] __free_frozen_pages+0xbc8/0xd30 [ 153.470078][ T7579] __put_partials+0x146/0x170 [ 153.474800][ T7579] put_cpu_partial+0x1f2/0x2d0 [ 153.480008][ T7579] __slab_free+0x288/0x2a0 [ 153.484540][ T7579] qlist_free_all+0x97/0x100 [ 153.490750][ T7579] kasan_quarantine_reduce+0x148/0x160 [ 153.496247][ T7579] __kasan_slab_alloc+0x22/0x80 [ 153.501134][ T7579] __kvmalloc_node_noprof+0x57f/0x920 [ 153.506537][ T7579] seq_read_iter+0x202/0xe20 [ 153.511158][ T7579] vfs_read+0x55a/0xa30 [ 153.515334][ T7579] ksys_read+0x145/0x250 [ 153.519590][ T7579] do_syscall_64+0xfa/0xf80 [ 153.524120][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.530047][ T7579] [ 153.532386][ T7579] Memory state around the buggy address: [ 153.538024][ T7579] ffff888032f53500: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 153.546204][ T7579] ffff888032f53580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.554302][ T7579] >ffff888032f53600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.562652][ T7579] ^ [ 153.567710][ T7579] ffff888032f53680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.575847][ T7579] ffff888032f53700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.584037][ T7579] ================================================================== [ 153.594177][ T7579] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.601537][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(full) [ 153.610769][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.621105][ T7579] Call Trace: [ 153.624423][ T7579] [ 153.627479][ T7579] dump_stack_lvl+0x99/0x250 [ 153.632119][ T7579] ? __asan_memcpy+0x40/0x70 [ 153.636743][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.641982][ T7579] ? __pfx__printk+0x10/0x10 [ 153.646684][ T7579] vpanic+0x237/0x6d0 [ 153.650703][ T7579] ? __pfx_vpanic+0x10/0x10 [ 153.655246][ T7579] panic+0xb9/0xc0 [ 153.658989][ T7579] ? __pfx_panic+0x10/0x10 [ 153.663427][ T7579] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 153.669338][ T7579] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 153.675271][ T7579] ? _raw_spin_lock+0x2e/0x40 [ 153.679978][ T7579] check_panic_on_warn+0x89/0xb0 [ 153.685147][ T7579] ? _raw_spin_lock+0x2e/0x40 [ 153.690027][ T7579] end_report+0x6f/0x140 [ 153.694300][ T7579] kasan_report+0x129/0x150 [ 153.699028][ T7579] ? _raw_spin_lock+0x2e/0x40 [ 153.703746][ T7579] ? mqueue_flush_file+0x49/0x270 [ 153.708877][ T7579] __kasan_check_byte+0x2a/0x40 [ 153.713748][ T7579] lock_acquire+0x84/0x340 [ 153.718184][ T7579] ? __pfx_mqueue_flush_file+0x10/0x10 [ 153.723661][ T7579] _raw_spin_lock+0x2e/0x40 [ 153.728179][ T7579] ? mqueue_flush_file+0x49/0x270 [ 153.733223][ T7579] mqueue_flush_file+0x49/0x270 [ 153.738121][ T7579] ? filp_flush+0xae/0x190 [ 153.742551][ T7579] ? __pfx_mqueue_flush_file+0x10/0x10 [ 153.748029][ T7579] filp_flush+0xbd/0x190 [ 153.752289][ T7579] __x64_sys_close+0x75/0x110 [ 153.757105][ T7579] do_syscall_64+0xfa/0xf80 [ 153.761636][ T7579] ? rcu_is_watching+0x15/0xb0 [ 153.766419][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.772768][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 153.777477][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.783464][ T7579] RIP: 0033:0x7f171318f749 [ 153.788083][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.808269][ T7579] RSP: 002b:00007f1714079038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 153.817022][ T7579] RAX: ffffffffffffffda RBX: 00007f17133e5fa0 RCX: 00007f171318f749 [ 153.825297][ T7579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 153.833279][ T7579] RBP: 00007f1713213f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.841268][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.849248][ T7579] R13: 00007f17133e6038 R14: 00007f17133e5fa0 R15: 00007ffe0e530218 [ 153.857277][ T7579] [ 153.861020][ T7579] Kernel Offset: disabled [ 153.865353][ T7579] Rebooting in 86400 seconds..