last executing test programs: 4m19.05265611s ago: executing program 2 (id=1506): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setresuid(0x0, 0xee01, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 4m18.861308447s ago: executing program 2 (id=1508): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7179) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xffff, 0x1, 0x10000}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x6}, 0x8) r4 = epoll_create1(0x80000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x20000000}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r1, 0xffffffffffffffff, 0x0) 4m18.568428937s ago: executing program 2 (id=1512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="9469733f6fb8256b02dfc1b437bccf67acf129c820e6667408f89292fddfae42c7daa4d84c615745b9819878860cf2e668212e6a70cddc177af883e8ff445c3519ff57642e46e17fd45fee", 0x4b}, {&(0x7f0000000040)="5239a180dd91c54835660ddb950cd28d17149652b27f4982f4f2985cee6019d88e9281fef0d90df0c3cac2", 0x2b}, {&(0x7f0000000140)="85d890e58ceea1ad0e3524737171159aaddc87b387222f2f", 0x18}, {&(0x7f00000001c0)="9564fabf351f49354de8c06aca8548c3a726bee3dcff5502d828732171f640f44d89a109a397717a4fc5ac9f1661d90440bb07f6", 0x34}], 0x4, 0x0, 0x0, 0x24000025}], 0x1, 0x8080) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)='c', 0x1}], 0x1}}], 0x1, 0x4085) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) poll(&(0x7f0000000180)=[{r0, 0x80}], 0x1, 0x8) 4m18.280785497s ago: executing program 2 (id=1514): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000001c0a05000000000000000000020000000900010073797a3000000000090002"], 0xc0}}, 0x0) 4m17.484149317s ago: executing program 2 (id=1516): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x400000004}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f90324fc602f1b02000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4m17.237298793s ago: executing program 2 (id=1520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) 4m2.153914442s ago: executing program 32 (id=1520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) 2m33.868366015s ago: executing program 1 (id=1967): mkdirat(0xffffffffffffff9c, 0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2m32.430585003s ago: executing program 1 (id=1973): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e14", 0x1a}], 0x1}, 0x80) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 2m32.180802002s ago: executing program 1 (id=1976): socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.816221061s ago: executing program 1 (id=1979): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000180)=0x200, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x8, 0x2, 0x0, 0x200000000000b4b, 0x4000000000009, 0x9, 0x0, 0xfffff597}, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0xfffffffe, 0xffffffffffffff00, [0xdf]}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0xc0011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 2m27.500500295s ago: executing program 1 (id=1990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) 2m25.017352778s ago: executing program 1 (id=1995): socket(0x10, 0x803, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = timerfd_create(0x9, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) 2m9.757424159s ago: executing program 33 (id=1995): socket(0x10, 0x803, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = timerfd_create(0x9, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1) 12.672237873s ago: executing program 5 (id=2348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 11.768499572s ago: executing program 6 (id=2351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') pread64(r3, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 10.428568629s ago: executing program 6 (id=2352): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x300, 0x800, 0x2bbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xfdff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 10.060250684s ago: executing program 6 (id=2354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsm_set_self_attr(0x68, &(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00'], 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x4080090) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x4e) socket(0xa, 0x3, 0x3a) 8.825837261s ago: executing program 6 (id=2356): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000001740)={@id={0x2, 0x0, @d}}) 8.824011822s ago: executing program 3 (id=2357): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11c0400, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/134, 0x86}], 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, 0x0) 7.41276206s ago: executing program 0 (id=2359): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff0802030109021200010000000009"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 7.034556234s ago: executing program 5 (id=2360): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3b) 6.272540294s ago: executing program 0 (id=2361): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 6.127477334s ago: executing program 6 (id=2362): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2006400000"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000400)=0x3, 0x4) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0xa01008, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x1, 0xc6f, &(0x7f0000000440)="$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") r3 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000"], 0x10}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./bus\x00', 0x800000, &(0x7f00000001c0)={[{@space_cache}, {@nossd}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x10d17e, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) fallocate(r8, 0x1, 0x3, 0x5) fallocate(r7, 0x0, 0x0, 0x1000f4) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x501d01, 0x0) ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000000180)={0x0, 0x9, [@local, @random="6f78dd7001cb", @multicast, @broadcast, @remote, @broadcast, @broadcast, @empty, @empty]}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x1, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fcntl$getflags(r10, 0x401) 6.048416701s ago: executing program 0 (id=2363): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) accept(r3, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 5.555333401s ago: executing program 3 (id=2364): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x300, 0x800, 0x2bbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xfdff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 5.258808674s ago: executing program 4 (id=2365): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x4f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x7fffffff, 0x10001, 0xffff, 0x10001, 0x200, 0x0, 0xffffffc0, 0x10001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x52a3d8ac78d8108c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1d, 0x1, 0x0, 0x4, 0x0, 0x1}, {0xd, 0x2, 0x6, 0xff, 0x5, 0x800}, 0x2, 0xfffffffc, 0x1756}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xfb757fd6f69f56d1}]}}]}, 0x64}}, 0x4008000) 4.915470973s ago: executing program 3 (id=2366): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semop(0x0, 0x0, 0x0) 4.705370028s ago: executing program 3 (id=2367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x208811, &(0x7f0000000180)={[{@space_cache}, {@nodatasum}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@rescue={'rescue', 0x3d, 'ignoremetacsums'}}, {@clear_cache}, {@subvolid={'subvolid', 0x3d, 0x7f}}, {@space_cache_v1}, {@autodefrag}]}, 0x1, 0x510e, &(0x7f000000a240)="$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") 4.553675088s ago: executing program 4 (id=2368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f00000004c0)="2f1c", &(0x7f00000003c0)=@tcp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 4.484409314s ago: executing program 5 (id=2369): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x319cc8a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2da, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.405786929s ago: executing program 4 (id=2370): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x3000002, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x1, 0x26f, &(0x7f0000000280)="$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") open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) 4.024768192s ago: executing program 4 (id=2371): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 2.94778228s ago: executing program 5 (id=2372): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000001740)={@id={0x2, 0x0, @d}}) 2.892200756s ago: executing program 4 (id=2373): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0xd, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993", 0x7) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908877dae500632174ccde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e39120b3c", 0x5d}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x44854) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/92, 0x5c}], 0x1}, 0x40) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x8, 0x20, 0x80, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x0, 0x1, 0x7, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0xfffd}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) clock_adjtime(0x7, &(0x7f0000000180)={0x1, 0x6c, 0xffff, 0x8, 0xff, 0x6, 0x0, 0x5, 0x47a8645, 0x4, 0x7fffffff, 0x1ff, 0xfffffffffffffffa, 0x7, 0x2, 0x3, 0xe, 0x2, 0xfffffffffffffffb, 0xcab, 0xffffffff80000000, 0x200, 0x5, 0x7, 0x2, 0x100000000061c}) syz_usb_control_io(r8, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.653815541s ago: executing program 6 (id=2374): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x7b, 0xe3, 0x79}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x8, 0x0, 0x4e, &(0x7f0000000040)="d7bc3388c8619e1ffd835c7089ecb55d62f36a888e3e068fd518e274782208ee63b4dd65d947ab030dd7c89f4e8396fc286ef12ddb2143b252b09b29d543b8b0aa72077b274d539693ea84f64d19"}], 0x1}) 1.826459051s ago: executing program 5 (id=2375): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") setxattr$security_evm(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), &(0x7f0000001240)=ANY=[@ANYBLOB="0500100000"], 0x371, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) 1.607796771s ago: executing program 0 (id=2376): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x300, 0x800, 0x2bbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xfdff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.490490947s ago: executing program 4 (id=2377): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x65ab, 0x101080) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000200)={0x0, 0x3, 0x8, '\x00', &(0x7f0000000140)=0xf}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) pipe(0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r6, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200843c, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r6, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES16=r0, @ANYRESHEX=r7], 0x1, 0x2c5, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1ff102, 0x40) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.440511861s ago: executing program 0 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x17) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000001000010025bd7000f9dbdf2500000000", @ANYRES32, @ANYBLOB="3809040003000000a00016803c0001800c00040009000000000040020c000400ffffff7f"], 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0x0, 0x2}}}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x7c}}, 0x4) 1.31637589s ago: executing program 3 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0xb, 0x6, 0x1, 0x0, r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = mq_open(0x0, 0x2, 0x162, 0x0) mq_getsetattr(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() r9 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r10, 0xffffffffffffffff) sendmsg$netlink(r7, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="100000001100000826bd7000fedbdf252cd2ffd6"], 0x10}], 0x1, &(0x7f0000005a80)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20, 0x4000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x49) 178.581285ms ago: executing program 5 (id=2380): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f00000004c0)="2f1c", &(0x7f00000003c0)=@tcp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 178.269751ms ago: executing program 0 (id=2381): flock(0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 0s ago: executing program 3 (id=2382): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800012, &(0x7f0000000b80)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/241, 0xf1, 0x22, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB], 0xfe49, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x4, 0x7, 0x6, 0x0, 0x4}, {0xb6, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0x7f, 0x4, 0x800, 0x4, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0xfffffffc, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x200, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x5}, {0x4, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x9, 0x3ff, 0xe, 0x7}, {0x5, 0x8001, 0x7, 0x1000, 0x6, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x3, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7f, 0xc494, 0x3, 0x5409}, {0x0, 0xb, 0x3, 0xa, 0x6, 0x27f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0xc, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x0, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458f}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0xbff}, {0x80000001, 0x10, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0xe5f, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0x10, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0xc, 0xffff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x4, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x4}, {0x80, 0xfffff001, 0x7, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2015, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x1, 0x3, 0x80, 0x2eba, 0xff}, {0x86, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x1, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x4006, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7, 0x6}, {0x7, 0x6, 0x10000000, 0x4, 0x8, 0xfffffff7}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x6, 0x81, 0x5, 0x7f, 0x40000002}, {0x3, 0x4, 0x1, 0x2, 0x2, 0xfffffff3}, {0x1cff, 0xfffffffd, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0x6b14}, {0x4, 0x100, 0x7, 0x5, 0x9, 0x9}, {0x1, 0x7, 0x5, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x9, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0x0, 0x8, 0x3, 0x3}, {0x3c3, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x7f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0xffff, 0x7, 0x5, 0x7}, {0xfff, 0x0, 0x3, 0x3, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0xdae, 0x4, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5ef}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0xfffffffc}, {0x8, 0x498, 0xffffff3a, 0xc000000, 0x4, 0x7}, {0x1, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7894, 0x4}, {0x8, 0x800, 0xfffffffe, 0x4, 0x7, 0x5}, {0x6, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x7}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x3fe, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x50000000, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x200, 0xfffffffb, 0x8, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x2, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x800, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x5, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xe, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0x6, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0xd, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x9, 0x10001}, {0x5388, 0x80000001, 0xfffffff9, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x2, 0x7224, 0x8, 0xfffff90e, 0x0, 0x7d6a7490}, {0x2, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {}, {}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 82.574318][ T5848] cgroup: Unknown subsys name 'net' [ 82.743520][ T5848] cgroup: Unknown subsys name 'cpuset' [ 82.753017][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.397568][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.186855][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.195054][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.202772][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.211323][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.230372][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.238322][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.270981][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.280126][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.298674][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.299769][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.306437][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.321194][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.329469][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.335874][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.338939][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.352609][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.360723][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.361475][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.368348][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.383435][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.392841][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.403055][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.415025][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.424731][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.433205][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.191561][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 88.252106][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 88.291300][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 88.324377][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 88.440755][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 88.559401][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.567921][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.575832][ T5860] bridge_slave_0: entered allmulticast mode [ 88.583804][ T5860] bridge_slave_0: entered promiscuous mode [ 88.653677][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.661100][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.668586][ T5860] bridge_slave_1: entered allmulticast mode [ 88.676642][ T5860] bridge_slave_1: entered promiscuous mode [ 88.708443][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.715721][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.723706][ T5858] bridge_slave_0: entered allmulticast mode [ 88.731544][ T5858] bridge_slave_0: entered promiscuous mode [ 88.754423][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.761729][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.768904][ T5859] bridge_slave_0: entered allmulticast mode [ 88.777012][ T5859] bridge_slave_0: entered promiscuous mode [ 88.805805][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.813602][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.821553][ T5858] bridge_slave_1: entered allmulticast mode [ 88.828751][ T5858] bridge_slave_1: entered promiscuous mode [ 88.850543][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.857751][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.866006][ T5859] bridge_slave_1: entered allmulticast mode [ 88.873504][ T5859] bridge_slave_1: entered promiscuous mode [ 88.932858][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.974320][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.983876][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.992332][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.999577][ T5869] bridge_slave_0: entered allmulticast mode [ 89.006878][ T5869] bridge_slave_0: entered promiscuous mode [ 89.030682][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.042569][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.055895][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.065744][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.073257][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.081022][ T5869] bridge_slave_1: entered allmulticast mode [ 89.088247][ T5869] bridge_slave_1: entered promiscuous mode [ 89.139121][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.188304][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.195871][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.204018][ T5875] bridge_slave_0: entered allmulticast mode [ 89.212205][ T5875] bridge_slave_0: entered promiscuous mode [ 89.222122][ T5860] team0: Port device team_slave_0 added [ 89.228183][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.235365][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.242862][ T5875] bridge_slave_1: entered allmulticast mode [ 89.250556][ T5875] bridge_slave_1: entered promiscuous mode [ 89.299260][ T5860] team0: Port device team_slave_1 added [ 89.336092][ T5858] team0: Port device team_slave_0 added [ 89.344382][ T5858] team0: Port device team_slave_1 added [ 89.352669][ T5859] team0: Port device team_slave_0 added [ 89.362955][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.433306][ T5859] team0: Port device team_slave_1 added [ 89.443506][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.449279][ T52] Bluetooth: hci4: command tx timeout [ 89.450573][ T5868] Bluetooth: hci0: command tx timeout [ 89.456301][ T5873] Bluetooth: hci1: command tx timeout [ 89.463324][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.493703][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.508159][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.519772][ T5873] Bluetooth: hci3: command tx timeout [ 89.519781][ T5868] Bluetooth: hci2: command tx timeout [ 89.538754][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.545869][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.572068][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.586447][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.599201][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.622696][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.629946][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.656180][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.681409][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.688394][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.715059][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.768859][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.775968][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.802057][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.815743][ T5869] team0: Port device team_slave_0 added [ 89.824877][ T5869] team0: Port device team_slave_1 added [ 89.848027][ T5875] team0: Port device team_slave_0 added [ 89.856820][ T5875] team0: Port device team_slave_1 added [ 89.863620][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.870895][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.897222][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.988917][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.996316][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.023802][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.049319][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.056420][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.082596][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.096627][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.103656][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.129978][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.167032][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.174323][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.200507][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.260782][ T5860] hsr_slave_0: entered promiscuous mode [ 90.267211][ T5860] hsr_slave_1: entered promiscuous mode [ 90.289327][ T5858] hsr_slave_0: entered promiscuous mode [ 90.296749][ T5858] hsr_slave_1: entered promiscuous mode [ 90.303503][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 90.309312][ T5858] Cannot create hsr debugfs directory [ 90.323037][ T5859] hsr_slave_0: entered promiscuous mode [ 90.329643][ T5859] hsr_slave_1: entered promiscuous mode [ 90.335793][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 90.341618][ T5859] Cannot create hsr debugfs directory [ 90.385831][ T5875] hsr_slave_0: entered promiscuous mode [ 90.392730][ T5875] hsr_slave_1: entered promiscuous mode [ 90.398942][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 90.405223][ T5875] Cannot create hsr debugfs directory [ 90.486069][ T5869] hsr_slave_0: entered promiscuous mode [ 90.492743][ T5869] hsr_slave_1: entered promiscuous mode [ 90.499145][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 90.505294][ T5869] Cannot create hsr debugfs directory [ 91.152396][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.167401][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.178649][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.200635][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.251543][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.275573][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.295694][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.317436][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.391826][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.427263][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.466515][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.477412][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.526162][ T5873] Bluetooth: hci1: command tx timeout [ 91.526190][ T5868] Bluetooth: hci0: command tx timeout [ 91.532237][ T5873] Bluetooth: hci4: command tx timeout [ 91.582750][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.598439][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.605961][ T5873] Bluetooth: hci2: command tx timeout [ 91.609743][ T5873] Bluetooth: hci3: command tx timeout [ 91.634660][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.645565][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.769448][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.796965][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.808884][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.824196][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.864971][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.898030][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.936782][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.970792][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.978025][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.988910][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.996153][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.013331][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.053949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.061132][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.114077][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.143973][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.151191][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.236341][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.262840][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.288254][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.295486][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.357164][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.364379][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.387405][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.446273][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.453611][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.494395][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.515819][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.523110][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.563375][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.575156][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.685510][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.698446][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.773498][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.780694][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.793421][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.800650][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.833433][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.098914][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.128912][ T5859] veth0_vlan: entered promiscuous mode [ 93.165545][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.211450][ T5859] veth1_vlan: entered promiscuous mode [ 93.369349][ T5859] veth0_macvtap: entered promiscuous mode [ 93.444595][ T5859] veth1_macvtap: entered promiscuous mode [ 93.462140][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.481262][ T5860] veth0_vlan: entered promiscuous mode [ 93.528177][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.568604][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.589129][ T5860] veth1_vlan: entered promiscuous mode [ 93.607965][ T5873] Bluetooth: hci0: command tx timeout [ 93.607986][ T5868] Bluetooth: hci1: command tx timeout [ 93.608024][ T5868] Bluetooth: hci4: command tx timeout [ 93.637127][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.682898][ T52] Bluetooth: hci2: command tx timeout [ 93.688504][ T5868] Bluetooth: hci3: command tx timeout [ 93.702055][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724172][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.733812][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.749922][ T5875] veth0_vlan: entered promiscuous mode [ 93.760931][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.826315][ T5875] veth1_vlan: entered promiscuous mode [ 93.890878][ T5860] veth0_macvtap: entered promiscuous mode [ 93.908679][ T4715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.921454][ T4715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.964438][ T5860] veth1_macvtap: entered promiscuous mode [ 93.993797][ T5858] veth0_vlan: entered promiscuous mode [ 94.008823][ T5869] veth0_vlan: entered promiscuous mode [ 94.038554][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.042969][ T5858] veth1_vlan: entered promiscuous mode [ 94.052018][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.062776][ T5875] veth0_macvtap: entered promiscuous mode [ 94.093572][ T5875] veth1_macvtap: entered promiscuous mode [ 94.118435][ T5869] veth1_vlan: entered promiscuous mode [ 94.166739][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.178622][ T5858] veth0_macvtap: entered promiscuous mode [ 94.199160][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.222759][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.234762][ T5858] veth1_macvtap: entered promiscuous mode [ 94.266260][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.306945][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.324585][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.353299][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.363197][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.391889][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.404015][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.423794][ T5869] veth0_macvtap: entered promiscuous mode [ 94.433888][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.446251][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.475167][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.483840][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.493982][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.503839][ T5869] veth1_macvtap: entered promiscuous mode [ 94.523348][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.552035][ T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.572000][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.582847][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.608886][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.626148][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.665756][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.678326][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.687059][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.752897][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.765833][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.773928][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.795956][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.807407][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.840885][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.893049][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.910135][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.973469][ T4715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.997185][ T4715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.044674][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.061038][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.139038][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.165278][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.238693][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.283215][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.460595][ T4715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.469430][ T4715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.478286][ T5995] program syz.2.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.680177][ T52] Bluetooth: hci0: command tx timeout [ 95.680208][ T5873] Bluetooth: hci1: command tx timeout [ 95.685650][ T5868] Bluetooth: hci4: command tx timeout [ 95.703570][ T6001] ip6gretap1: entered allmulticast mode [ 95.761943][ T5868] Bluetooth: hci3: command tx timeout [ 95.763723][ T5873] Bluetooth: hci2: command tx timeout [ 96.048681][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.490730][ T6018] bridge0: port 2(bridge_slave_1) entered listening state [ 96.738105][ T6026] loop1: detected capacity change from 0 to 256 [ 96.995184][ T6035] capability: warning: `syz.2.22' uses 32-bit capabilities (legacy support in use) [ 97.123303][ T982] cfg80211: failed to load regulatory.db [ 98.050877][ T6058] loop3: detected capacity change from 0 to 256 [ 98.068816][ T6056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.495878][ T6072] loop3: detected capacity change from 0 to 16 [ 98.555185][ T6072] erofs (device loop3): mounted with root inode @ nid 36. [ 98.790437][ T6076] overlayfs: failed to resolve './bus': -2 [ 99.181419][ T6082] loop0: detected capacity change from 0 to 256 [ 101.194240][ T6131] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 101.211178][ T6132] overlayfs: failed to resolve './bus': -2 [ 101.247692][ T6134] program syz.2.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.877042][ T6155] bridge_slave_0: default FDB implementation only supports local addresses [ 102.856676][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 102.906060][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 102.975195][ T6180] bridge0: port 3(vlan2) entered blocking state [ 102.989780][ T6180] bridge0: port 3(vlan2) entered disabled state [ 102.997627][ T6180] vlan2: entered allmulticast mode [ 103.016415][ T6180] bridge0: entered allmulticast mode [ 103.065795][ T6184] loop4: detected capacity change from 0 to 128 [ 103.078444][ T6180] vlan2: left allmulticast mode [ 103.084632][ T6180] bridge0: left allmulticast mode [ 103.156385][ T6184] syz.4.81: attempt to access beyond end of device [ 103.156385][ T6184] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 103.217990][ T6184] syz.4.81: attempt to access beyond end of device [ 103.217990][ T6184] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 103.280775][ T6184] syz.4.81: attempt to access beyond end of device [ 103.280775][ T6184] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 103.350270][ T6184] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 103.429614][ T6184] syz.4.81: attempt to access beyond end of device [ 103.429614][ T6184] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 103.550671][ T6184] syz.4.81: attempt to access beyond end of device [ 103.550671][ T6184] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 103.647911][ T6184] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 103.702163][ T6184] syz.4.81: attempt to access beyond end of device [ 103.702163][ T6184] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 103.806077][ T6200] loop0: detected capacity change from 0 to 1764 [ 105.247906][ T6223] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 105.266510][ T6223] netlink: 'syz.4.96': attribute type 2 has an invalid length. [ 105.764668][ T6236] loop3: detected capacity change from 0 to 16 [ 105.804290][ T6236] erofs (device loop3): mounted with root inode @ nid 36. [ 105.894325][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 105.894364][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 105.939781][ T6239] bridge0: port 3(vlan2) entered blocking state [ 105.939931][ T6239] bridge0: port 3(vlan2) entered disabled state [ 105.940116][ T6239] vlan2: entered allmulticast mode [ 105.940136][ T6239] bridge0: entered allmulticast mode [ 105.985006][ T6239] vlan2: left allmulticast mode [ 105.985031][ T6239] bridge0: left allmulticast mode [ 106.804279][ T6260] kvm: pic: non byte write [ 108.002063][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 109.344675][ T6347] loop3: detected capacity change from 0 to 256 [ 110.139446][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 110.758910][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 112.250890][ T6454] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 112.290777][ T6454] netlink: 'syz.4.188': attribute type 2 has an invalid length. [ 112.403625][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 112.667689][ T6467] overlayfs: missing 'lowerdir' [ 113.687128][ T6501] Zero length message leads to an empty skb [ 114.610046][ T6533] fuse: Bad value for 'group_id' [ 114.625207][ T6533] fuse: Bad value for 'group_id' [ 114.709193][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 114.731851][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 114.796339][ T6537] bridge0: port 3(vlan2) entered blocking state [ 114.820435][ T6537] bridge0: port 3(vlan2) entered disabled state [ 114.836899][ T6537] vlan2: entered allmulticast mode [ 114.847239][ T6537] bridge0: entered allmulticast mode [ 114.881728][ T6537] vlan2: left allmulticast mode [ 114.886918][ T6537] bridge0: left allmulticast mode [ 115.861197][ T6563] fuse: Bad value for 'group_id' [ 115.890494][ T6563] fuse: Bad value for 'group_id' [ 116.364124][ T6591] capability: warning: `syz.3.246' uses deprecated v2 capabilities in a way that may be insecure [ 116.454484][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 117.131012][ T6625] overlayfs: failed to clone upperpath [ 117.147154][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 117.165525][ T30] audit: type=1800 audit(1757087219.173:2): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.263" name="bus" dev="overlay" ino=264 res=0 errno=0 [ 117.233377][ T6630] overlayfs: missing 'lowerdir' [ 117.415486][ T6636] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 117.415486][ T6636] طAͪk0+ [ 117.886794][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.278'. [ 117.940839][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.278'. [ 118.030810][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 118.136962][ T6664] overlayfs: missing 'lowerdir' [ 118.936477][ T6690] kvm: pic: non byte write [ 119.051848][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 119.072030][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 119.084604][ T6702] overlayfs: missing 'workdir' [ 119.111595][ T6699] bridge0: port 3(vlan2) entered blocking state [ 119.128425][ T6699] bridge0: port 3(vlan2) entered disabled state [ 119.147120][ T6699] vlan2: entered allmulticast mode [ 119.164923][ T6699] bridge0: entered allmulticast mode [ 119.218819][ T6699] vlan2: left allmulticast mode [ 119.223997][ T6699] bridge0: left allmulticast mode [ 119.586323][ T6710] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.056099][ T6726] overlayfs: missing 'workdir' [ 120.152207][ T6733] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 120.199999][ T6733] netlink: 'syz.2.310': attribute type 2 has an invalid length. [ 120.301196][ T6737] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 120.384774][ T6737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.542856][ T6742] bond1: (slave ip6erspan0): making interface the new active one [ 120.614741][ T6742] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 121.151053][ T6770] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 121.175567][ T6770] netlink: 'syz.2.324': attribute type 2 has an invalid length. [ 121.261216][ T30] audit: type=1800 audit(1757087223.243:3): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.327" name="bus" dev="overlay" ino=288 res=0 errno=0 [ 121.533787][ T6783] overlayfs: failed to clone upperpath [ 122.139707][ T30] audit: type=1326 audit(1757087224.143:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 122.251777][ T30] audit: type=1326 audit(1757087224.173:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 122.334270][ T30] audit: type=1326 audit(1757087224.173:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 122.436369][ T30] audit: type=1326 audit(1757087224.173:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 122.545708][ T30] audit: type=1326 audit(1757087224.173:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 122.584220][ T6810] gre1: entered allmulticast mode [ 122.620967][ T30] audit: type=1326 audit(1757087224.173:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea9df8d550 code=0x7ffc0000 [ 122.703552][ T30] audit: type=1326 audit(1757087224.173:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea9df8d550 code=0x7ffc0000 [ 122.804416][ T30] audit: type=1326 audit(1757087224.173:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 122.898926][ T30] audit: type=1326 audit(1757087224.183:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 122.930233][ T6816] overlayfs: failed to clone upperpath [ 123.009937][ T30] audit: type=1326 audit(1757087224.183:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 123.096920][ T30] audit: type=1326 audit(1757087224.183:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fea9df8ebe9 code=0x7ffc0000 [ 123.198439][ T6823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.360371][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.770495][ T5984] kernel write not supported for file /vcsa (pid: 5984 comm: kworker/1:6) [ 123.779775][ T6847] overlayfs: failed to clone upperpath [ 125.107037][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 125.119615][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 125.224721][ T6884] bridge0: port 3(vlan2) entered blocking state [ 125.316127][ T6884] bridge0: port 3(vlan2) entered disabled state [ 125.370216][ T6884] vlan2: entered allmulticast mode [ 125.409587][ T6884] bridge0: entered allmulticast mode [ 125.441673][ T6884] vlan2: left allmulticast mode [ 125.459806][ T6884] bridge0: left allmulticast mode [ 126.572119][ T6926] overlayfs: failed to clone upperpath [ 127.125416][ T6945] sctp: [Deprecated]: syz.3.389 (pid 6945) Use of int in maxseg socket option. [ 127.125416][ T6945] Use struct sctp_assoc_value instead [ 127.900826][ T6965] kvm: pic: non byte write [ 127.905483][ T6965] kvm: pic: non byte write [ 128.574774][ T6992] loop3: detected capacity change from 0 to 128 [ 129.507794][ T7033] overlayfs: failed to clone upperpath [ 129.643591][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 129.643622][ T30] audit: type=1326 audit(1757087231.653:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 129.832621][ T30] audit: type=1326 audit(1757087231.693:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 129.942110][ T30] audit: type=1326 audit(1757087231.693:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 130.029800][ T30] audit: type=1326 audit(1757087231.693:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 130.059889][ T30] audit: type=1326 audit(1757087231.693:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 130.122664][ T30] audit: type=1326 audit(1757087231.693:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dd3b8d550 code=0x7ffc0000 [ 130.146792][ T30] audit: type=1326 audit(1757087231.693:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dd3b8d550 code=0x7ffc0000 [ 130.282990][ T30] audit: type=1326 audit(1757087231.693:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 130.390632][ T30] audit: type=1326 audit(1757087231.703:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 130.473505][ T30] audit: type=1326 audit(1757087231.703:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.0.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 130.984721][ T7085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.594775][ T7111] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 131.605680][ T7108] 9pnet_fd: Insufficient options for proto=fd [ 131.644754][ T7111] netlink: 'syz.1.461': attribute type 2 has an invalid length. [ 131.959325][ T7118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.183671][ T7144] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 133.241449][ T7144] netlink: 'syz.2.474': attribute type 2 has an invalid length. [ 133.872744][ T7158] 9pnet_fd: Insufficient options for proto=fd [ 133.978728][ T7164] 9pnet_fd: Insufficient options for proto=fd [ 134.194197][ T7171] netlink: 'syz.3.486': attribute type 5 has an invalid length. [ 134.305073][ T7175] program syz.0.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.523698][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 134.578357][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 134.622190][ T7181] bridge0: port 3(vlan2) entered blocking state [ 134.659184][ T7181] bridge0: port 3(vlan2) entered disabled state [ 134.693184][ T7181] vlan2: entered allmulticast mode [ 134.716285][ T7181] bridge0: entered allmulticast mode [ 134.732699][ T7181] vlan2: left allmulticast mode [ 134.755547][ T7181] bridge0: left allmulticast mode [ 134.842618][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 134.842640][ T30] audit: type=1326 audit(1757087236.833:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 134.923465][ T30] audit: type=1326 audit(1757087236.833:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 135.009563][ T30] audit: type=1326 audit(1757087236.833:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 135.108719][ T30] audit: type=1326 audit(1757087236.833:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 135.188715][ T7195] 9pnet_fd: Insufficient options for proto=fd [ 135.208736][ T30] audit: type=1326 audit(1757087236.833:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 syzkaller syzkaller login: [ 135.272925][ T30] audit: type=1326 audit(1757087236.833:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 135.376718][ T30] audit: type=1326 audit(1757087236.833:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 135.451199][ T30] audit: type=1326 audit(1757087236.833:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 135.520225][ T30] audit: type=1326 audit(1757087236.833:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 135.603748][ T30] audit: type=1326 audit(1757087236.833:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 136.023630][ T7225] overlayfs: failed to clone upperpath [ 136.452010][ T7245] futex_wake_op: syz.3.518 tries to shift op by 32; fix this program [ 136.614800][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 137.053121][ T7269] 9pnet_fd: Insufficient options for proto=fd [ 137.486836][ T7282] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 137.507395][ T7282] netlink: 'syz.1.535': attribute type 2 has an invalid length. [ 137.965933][ T7298] overlayfs: failed to clone upperpath [ 138.097548][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.104696][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.384246][ T7345] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 139.415135][ T7345] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 139.956793][ T7370] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 139.967962][ T7370] netlink: 'syz.4.576': attribute type 2 has an invalid length. [ 140.290406][ T7386] overlayfs: failed to clone upperpath [ 140.476603][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 140.506587][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 141.613064][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 141.637311][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 142.358140][ T7446] loop0: detected capacity change from 0 to 760 [ 142.387523][ T7446] iso9660: Unknown parameter '0xffffffffffffffffʼ< [ 147.321764][ T6031] loop0: p1 size 242222080 extends beyond EOD, truncated [ 147.346080][ T6031] loop0: p2 start 4294967295 is beyond EOD, truncated [ 147.605074][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 147.949293][ T7643] netlink: 112 bytes leftover after parsing attributes in process `syz.4.689'. [ 147.985669][ T7645] fuse: Bad value for 'fd' [ 148.003553][ T5928] udevd[5928]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 148.009395][ T5916] udevd[5916]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 148.043439][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 148.081545][ T6031] udevd[6031]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 148.250321][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 148.919167][ T7682] fuse: Bad value for 'fd' [ 149.479875][ T7702] 9pnet_fd: Insufficient options for proto=fd [ 149.817630][ T7720] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 150.942222][ T7758] 9pnet_fd: Insufficient options for proto=fd [ 151.639580][ T7785] 9pnet_fd: Insufficient options for proto=fd [ 152.422370][ T7809] fuse: Bad value for 'fd' [ 152.497447][ T7811] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 152.682067][ T7811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.777843][ T7816] vlan0: entered allmulticast mode [ 152.802645][ T7816] bond1: entered allmulticast mode [ 158.742266][ T7990] fuse: Unknown parameter 'use00000000000000000000' [ 158.923433][ T7995] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 158.967114][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'. [ 159.374870][ T8001] overlayfs: failed to clone upperpath [ 159.743660][ T8017] fuse: Unknown parameter 'user_i00000000000000000000' [ 159.903606][ T8024] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 159.915855][ T8024] netlink: 'syz.1.840': attribute type 2 has an invalid length. [ 159.948489][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.840'. [ 161.173755][ T8068] overlayfs: failed to clone lowerpath [ 161.470133][ T8077] overlayfs: missing 'lowerdir' [ 161.740693][ T8086] 9pnet_fd: Insufficient options for proto=fd [ 161.957530][ T8094] fuse: Unknown parameter 'user_id00000000000000000000' [ 162.263890][ T8107] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (252) [ 163.936792][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 163.962565][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 165.397217][ T8225] 9pnet_fd: Insufficient options for proto=fd [ 165.480000][ T8227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.254169][ T8301] ip6gretap0: entered promiscuous mode [ 167.278380][ T8301] macvtap1: entered promiscuous mode [ 167.305717][ T8301] ip6gretap0: left promiscuous mode [ 167.739242][ T8311] netlink: 112 bytes leftover after parsing attributes in process `syz.0.964'. [ 167.975337][ T8321] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.994251][ T8321] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.392907][ T8339] netlink: 112 bytes leftover after parsing attributes in process `syz.2.977'. [ 168.957816][ T8353] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.974015][ T8353] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.703508][ T8383] overlayfs: failed to clone upperpath [ 169.825777][ T8385] fuse: Unknown parameter '0x0000000000000003' [ 170.910263][ T8420] fuse: Unknown parameter '0x0000000000000003' [ 171.048768][ T8424] 9pnet_fd: Insufficient options for proto=fd [ 171.517135][ T8441] overlayfs: failed to clone upperpath [ 171.742680][ T8453] fuse: Unknown parameter '0x0000000000000003' [ 171.925453][ T8459] ip6tnl1: entered allmulticast mode [ 172.105513][ T8471] overlayfs: failed to clone upperpath [ 172.337498][ T8484] fuse: Unknown parameter '0x0000000000000003' [ 173.008431][ T8519] fuse: Unknown parameter 'fd0x0000000000000003' [ 173.508831][ T8547] fuse: Unknown parameter 'fd0x0000000000000003' [ 173.625975][ T8552] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1072'. [ 173.828419][ T8566] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 173.840837][ T8562] 9pnet_fd: Insufficient options for proto=fd [ 174.014084][ T8574] fuse: Unknown parameter 'fd0x0000000000000003' [ 174.207634][ T8586] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1087'. [ 174.615991][ T8595] Illegal XDP return value 3354014372 on prog (id 145) dev syz_tun, expect packet loss! [ 174.747888][ T8600] futex_wake_op: syz.4.1094 tries to shift op by 32; fix this program [ 175.293798][ T8620] 9pnet_fd: Insufficient options for proto=fd [ 175.680223][ T8646] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1114'. [ 175.695049][ T8647] futex_wake_op: syz.4.1115 tries to shift op by 32; fix this program [ 176.408984][ T8670] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1126'. [ 176.910607][ T8680] futex_wake_op: syz.0.1129 tries to shift op by 32; fix this program [ 177.419408][ T8700] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1138'. [ 177.794601][ T8719] overlayfs: failed to clone upperpath [ 178.653941][ T8749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.840841][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1161'. [ 178.868010][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 178.900119][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 178.958722][ T8764] overlayfs: failed to clone upperpath [ 180.536594][ T8834] overlayfs: failed to clone upperpath [ 181.080665][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 181.080684][ T30] audit: type=1326 audit(1757087283.093:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 181.128917][ T30] audit: type=1326 audit(1757087283.093:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 181.254267][ T30] audit: type=1326 audit(1757087283.093:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 181.344544][ T30] audit: type=1326 audit(1757087283.093:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 181.486673][ T30] audit: type=1326 audit(1757087283.093:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 181.509435][ T30] audit: type=1326 audit(1757087283.093:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 181.534452][ T30] audit: type=1326 audit(1757087283.093:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 182.554746][ T30] audit: type=1326 audit(1757087283.093:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 182.578866][ T30] audit: type=1326 audit(1757087283.093:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 182.763468][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 182.827968][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 182.898438][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 183.552923][ T30] audit: type=1326 audit(1757087283.093:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 185.529966][ T8940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1237'. [ 185.560600][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 185.617943][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 186.570974][ T8976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1251'. [ 186.610913][ T8976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1251'. [ 188.461992][ T9044] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1277'. [ 188.882175][ T9055] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1282'. [ 188.907133][ T9055] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1282'. [ 189.643840][ T9083] futex_wake_op: syz.2.1295 tries to shift op by 32; fix this program [ 189.857223][ T9090] ======================================================= [ 189.857223][ T9090] WARNING: The mand mount option has been deprecated and [ 189.857223][ T9090] and is ignored by this kernel. Remove the mand [ 189.857223][ T9090] option from the mount to silence this warning. [ 189.857223][ T9090] ======================================================= [ 190.697594][ T9115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1308'. [ 190.854321][ T9121] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 190.889380][ T9121] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 190.936815][ T9121] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 190.999640][ T9121] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 191.270856][ T9138] netlink: 'syz.2.1318': attribute type 4 has an invalid length. [ 191.605636][ T9154] netlink: 'syz.4.1325': attribute type 4 has an invalid length. [ 191.641834][ T9154] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1325'. [ 192.000957][ T9171] netlink: 'syz.1.1330': attribute type 10 has an invalid length. [ 192.046224][ T9171] veth1_macvtap: left promiscuous mode [ 192.527025][ T9192] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 192.553478][ T9192] netlink: 'syz.4.1340': attribute type 2 has an invalid length. [ 192.682363][ T9196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1344'. [ 192.719394][ T9197] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1343'. [ 193.820344][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 193.882949][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 194.496039][ T9273] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1377'. [ 194.517461][ T9273] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1377'. [ 194.944469][ T9289] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1385'. [ 194.991250][ T9289] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1385'. [ 196.059781][ T9332] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 196.093394][ T9332] netlink: 'syz.2.1403': attribute type 2 has an invalid length. [ 196.339961][ T9341] __nla_validate_parse: 1 callbacks suppressed [ 196.339978][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1407'. [ 196.408937][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1407'. [ 196.580711][ T9354] futex_wake_op: syz.4.1411 tries to shift op by 32; fix this program [ 197.240172][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 197.321747][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1424'. [ 197.741703][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1435'. [ 197.755862][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 198.552051][ T9445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1453'. [ 198.790075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 199.524806][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.531493][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.097576][ T9479] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1468'. [ 200.110501][ T9479] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1468'. [ 200.877592][ T9516] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.1483'. [ 201.245297][ T9535] futex_wake_op: syz.3.1493 tries to shift op by 32; fix this program [ 201.268067][ T5873] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 201.539114][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 201.539142][ T30] audit: type=1804 audit(1757087303.543:124): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1496" name="file0" dev="tmpfs" ino=1476 res=1 errno=0 [ 201.878286][ T9558] __nla_validate_parse: 2 callbacks suppressed [ 201.878307][ T9558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1503'. [ 202.857139][ T9581] netlink: 'syz.3.1510': attribute type 2 has an invalid length. [ 203.640681][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 203.654243][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 203.668938][ T9591] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1516'. [ 203.678621][ T9591] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1516'. [ 205.249221][ T9622] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1530'. [ 205.269044][ T9622] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1530'. [ 205.465976][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 205.485255][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 207.177950][ T9659] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1543'. [ 207.194655][ T9659] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1543'. [ 207.401806][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 207.419704][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 210.693186][ T9692] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1555'. [ 210.711778][ T9692] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1555'. [ 210.833502][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 211.468498][ T9717] futex_wake_op: syz.4.1564 tries to shift op by 32; fix this program [ 211.935926][ T9723] netlink: 'syz.4.1567': attribute type 10 has an invalid length. [ 211.961409][ T9723] veth1_macvtap: left promiscuous mode [ 212.006819][ T5880] Bluetooth: hci4: command 0x0406 tx timeout [ 212.011636][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 212.014020][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 212.419763][ T5879] Bluetooth: hci1: command 0x0406 tx timeout [ 212.425853][ T5879] Bluetooth: hci0: command 0x0406 tx timeout [ 213.291286][ T9746] futex_wake_op: syz.0.1575 tries to shift op by 32; fix this program [ 213.658653][ T9759] netlink: 'syz.0.1581': attribute type 4 has an invalid length. [ 213.670241][ T9759] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1581'. [ 213.764724][ T9763] netlink: 'syz.3.1584': attribute type 29 has an invalid length. [ 214.150225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 214.252525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 214.969260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 215.139743][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 215.276403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 215.312314][ T9780] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 215.341997][ T9778] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1588'. [ 215.379059][ T9778] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1588'. [ 215.435906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 215.445862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 216.211241][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 218.030516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.699953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 219.338493][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 219.365517][ T9820] ip6erspan0: entered allmulticast mode [ 219.893855][ T9831] overlayfs: failed to clone upperpath [ 220.902321][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.920572][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.928808][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.942742][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.951726][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.263900][ T9857] netlink: 'syz.0.1616': attribute type 4 has an invalid length. [ 222.282239][ T9857] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1616'. [ 222.339800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.552222][ T3552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.725592][ T9837] chnl_net:caif_netlink_parms(): no params data found [ 223.022016][ T3552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.040812][ T5879] Bluetooth: hci5: command tx timeout [ 223.320109][ T9866] netlink: 'syz.4.1619': attribute type 10 has an invalid length. [ 223.418338][ T3552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.632258][ T9872] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1620'. [ 223.894964][ T3552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.933524][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.969717][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.000826][ T9837] bridge_slave_0: entered allmulticast mode [ 224.047031][ T9837] bridge_slave_0: entered promiscuous mode [ 224.090789][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.108185][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.140637][ T9837] bridge_slave_1: entered allmulticast mode [ 224.171696][ T9837] bridge_slave_1: entered promiscuous mode [ 224.519049][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.565779][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.130535][ T5879] Bluetooth: hci5: command tx timeout [ 225.361754][ T9894] sit1: entered allmulticast mode [ 225.482785][ T9837] team0: Port device team_slave_0 added [ 225.497600][ T9837] team0: Port device team_slave_1 added [ 225.932065][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.229911][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.402191][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.200377][ T5879] Bluetooth: hci5: command tx timeout [ 227.242056][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.281869][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.404853][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.556540][ T3552] bridge_slave_1: left allmulticast mode [ 227.583858][ T3552] bridge_slave_1: left promiscuous mode [ 227.603364][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.770843][ T3552] bridge_slave_0: left allmulticast mode [ 227.776582][ T3552] bridge_slave_0: left promiscuous mode [ 227.816413][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.841047][ T9912] futex_wake_op: syz.4.1636 tries to shift op by 32; fix this program [ 228.847179][ T9937] No control pipe specified [ 229.359708][ T5879] Bluetooth: hci5: command tx timeout [ 229.554725][ T9948] futex_wake_op: syz.3.1653 tries to shift op by 32; fix this program [ 229.822972][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'. [ 230.036201][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.064749][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.099694][ T3552] bond0 (unregistering): Released all slaves [ 230.471635][ T9837] hsr_slave_0: entered promiscuous mode [ 230.496936][ T9837] hsr_slave_1: entered promiscuous mode [ 230.545625][ T9837] debugfs: 'hsr0' already exists in 'hsr' [ 230.581638][ T9837] Cannot create hsr debugfs directory [ 231.211805][ T9980] futex_wake_op: syz.3.1665 tries to shift op by 32; fix this program [ 235.083618][ T30] audit: type=1326 audit(1757087337.083:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.4.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1398ebe9 code=0x7ffc0000 [ 235.234660][ T30] audit: type=1326 audit(1757087337.083:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.4.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1398ebe9 code=0x7ffc0000 [ 235.442077][ T30] audit: type=1326 audit(1757087337.083:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.4.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5a1398ebe9 code=0x7ffc0000 [ 235.465970][ T30] audit: type=1326 audit(1757087337.083:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.4.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1398ebe9 code=0x7ffc0000 [ 235.527934][ T30] audit: type=1326 audit(1757087337.083:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9999 comm="syz.4.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1398ebe9 code=0x7ffc0000 [ 236.852754][ T3552] hsr_slave_0: left promiscuous mode [ 236.881484][ T3552] hsr_slave_1: left promiscuous mode [ 236.905380][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.929686][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.968684][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.002885][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.102918][ T3552] veth1_macvtap: left promiscuous mode [ 237.116922][ T3552] veth0_macvtap: left promiscuous mode [ 237.138036][ T3552] veth1_vlan: left promiscuous mode [ 237.161795][ T3552] veth0_vlan: left promiscuous mode [ 240.307713][ T30] audit: type=1326 audit(1757087342.303:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10070 comm="syz.0.1690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dd3b8ebe9 code=0x0 [ 241.520850][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 241.630479][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 242.107656][T10065] tipc: Enabling of bearer rejected, failed to enable media [ 242.384080][ T9837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.448764][ T9837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.493139][ T9837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.525915][ T9837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.062178][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.130805][ T9837] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.164679][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.171942][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.222984][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.230231][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.686850][T10151] netlink: 'syz.4.1712': attribute type 2 has an invalid length. [ 244.115416][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.717294][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 245.466672][T10193] netlink: 'syz.3.1722': attribute type 10 has an invalid length. [ 245.528780][T10193] veth1_macvtap: left promiscuous mode [ 245.923071][T10205] ptrace attach of "./syz-executor exec"[5858] was attempted by ""[10205] [ 247.066062][ T9837] veth0_vlan: entered promiscuous mode [ 247.121263][ T9837] veth1_vlan: entered promiscuous mode [ 247.265302][ T9837] veth0_macvtap: entered promiscuous mode [ 247.316824][ T9837] veth1_macvtap: entered promiscuous mode [ 247.403317][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.637770][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.626310][ T1136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.668052][ T1136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.723289][ T1136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.757807][ T1136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.414883][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.667532][T10245] netlink: 'syz.4.1735': attribute type 10 has an invalid length. [ 249.687630][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.871761][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1734'. [ 249.881144][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 250.528363][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.543891][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.287422][T10278] ptrace attach of "./syz-executor exec"[5869] was attempted by "./syz-executor exec"[10278] [ 254.110319][T10292] futex_wake_op: syz.4.1747 tries to shift op by 32; fix this program [ 255.994554][T10310] loop5: detected capacity change from 0 to 1024 [ 259.210002][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 259.379597][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'. [ 259.460630][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 260.414134][T10366] futex_wake_op: syz.5.1768 tries to shift op by 32; fix this program [ 260.556772][T10366] loop5: detected capacity change from 0 to 8192 [ 260.663791][T10366] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.821808][ T5879] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 260.828833][ T5879] Bluetooth: hci3: unexpected event for opcode 0x204b [ 260.962587][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.968921][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.295221][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1778'. [ 262.317692][T10396] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 262.317692][T10396] program syz.5.1778 not setting count and/or reply_len properly [ 263.544260][T10427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1789'. [ 266.563123][T10466] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1804'. [ 269.194057][T10472] loop5: detected capacity change from 0 to 32768 [ 269.269253][T10472] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1807 (10472) [ 269.438735][T10472] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.457685][T10472] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 269.798904][T10472] BTRFS info (device loop5): enabling ssd optimizations [ 270.013327][T10472] BTRFS info (device loop5): enabling free space tree [ 270.178246][ T30] audit: type=1800 audit(1757087372.173:131): pid=10472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1807" name="file0" dev="loop5" ino=258 res=0 errno=0 [ 270.539572][ T9837] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.005210][T10614] netlink: 'syz.5.1838': attribute type 10 has an invalid length. [ 274.066851][T10614] team0: Device dummy0 is up. Set it down before adding it as a team port [ 275.962672][T10653] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1849'. [ 279.240554][T10705] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1869'. [ 282.773323][T10749] futex_wake_op: syz.0.1885 tries to shift op by 32; fix this program [ 283.277916][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1884'. [ 284.587510][T10748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1884'. [ 284.860225][T10759] loop5: detected capacity change from 0 to 40427 [ 284.902787][T10759] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 284.911580][T10759] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 284.932056][T10759] F2FS-fs (loop5): invalid crc value [ 285.022389][T10759] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 285.043919][T10759] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 285.051119][T10759] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 287.473231][T10798] loop5: detected capacity change from 0 to 40427 [ 287.481310][T10798] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 287.489101][T10798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 287.517092][T10798] F2FS-fs (loop5): invalid crc value [ 287.630836][T10798] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.656433][T10798] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 287.663700][T10798] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 289.008148][ T30] audit: type=1326 audit(1757087391.013:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 289.310218][ T30] audit: type=1326 audit(1757087391.013:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 290.651593][ T30] audit: type=1326 audit(1757087391.043:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 290.841852][ T30] audit: type=1326 audit(1757087391.043:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 290.950283][ T30] audit: type=1326 audit(1757087391.043:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 290.973647][ T30] audit: type=1326 audit(1757087391.043:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 290.997811][ T30] audit: type=1326 audit(1757087391.043:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 291.020267][ T30] audit: type=1326 audit(1757087391.043:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 291.105301][ T30] audit: type=1326 audit(1757087391.043:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 291.188581][ T30] audit: type=1326 audit(1757087391.043:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10830 comm="syz.3.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 293.853194][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 296.791474][ T5938] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 296.974962][ T5938] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.015965][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 297.016002][ T30] audit: type=1326 audit(1757087398.843:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 297.054743][ T30] audit: type=1326 audit(1757087398.843:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 297.077524][ T30] audit: type=1326 audit(1757087398.843:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 297.655427][ T5938] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.675904][ T5938] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.685115][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.718724][T10904] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.737471][ T5938] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.761042][ T30] audit: type=1326 audit(1757087398.843:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 297.783848][ T30] audit: type=1326 audit(1757087398.843:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 297.858952][ T30] audit: type=1326 audit(1757087398.863:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 297.961577][ T30] audit: type=1326 audit(1757087398.863:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 298.016186][T10904] loop5: detected capacity change from 0 to 1024 [ 298.097693][ T30] audit: type=1326 audit(1757087398.863:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 298.320030][ T30] audit: type=1326 audit(1757087398.863:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 298.346076][ T30] audit: type=1326 audit(1757087398.863:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10915 comm="syz.0.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 298.380592][ T5965] usb 6-1: USB disconnect, device number 2 [ 299.908437][T10587] hfsplus: b-tree write err: -5, ino 4 [ 309.150321][T11031] loop5: detected capacity change from 0 to 1024 [ 310.361517][T11031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.596722][T11043] pim6reg: entered allmulticast mode [ 312.682058][T11064] atomic_op ffff88805a443198 conn xmit_atomic 0000000000000000 [ 314.996713][ T9837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.649618][ T5965] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 317.662476][ T5965] usb 6-1: No LPM exit latency info found, disabling LPM. [ 317.692970][ T5965] usb 6-1: string descriptor 0 read error: -22 [ 317.712542][ T5965] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 317.916326][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.003592][ T5965] usb 6-1: config 0 descriptor?? [ 318.277079][ T5965] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 319.056692][T11123] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 319.096793][ T5965] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 319.108543][T11124] atomic_op ffff8880326ee998 conn xmit_atomic 0000000000000000 [ 319.131634][ T5965] dib0700: firmware download failed at 7 with -22 [ 319.197952][ T5965] usb 6-1: USB disconnect, device number 3 [ 319.263491][T11123] veth1_macvtap: left promiscuous mode [ 322.649949][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.656304][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.114251][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 323.114272][ T30] audit: type=1326 audit(1757087424.223:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.155408][ T30] audit: type=1326 audit(1757087424.223:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.340168][ T30] audit: type=1326 audit(1757087424.243:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.428629][ T30] audit: type=1326 audit(1757087424.243:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.508213][ T30] audit: type=1326 audit(1757087424.243:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.536465][T11158] tipc: Invalid UDP bearer configuration [ 323.536539][T11158] tipc: Enabling of bearer rejected, failed to enable media [ 323.831080][ T30] audit: type=1326 audit(1757087424.243:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.854179][ T30] audit: type=1326 audit(1757087424.243:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.877011][ T30] audit: type=1326 audit(1757087424.243:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.901236][ T30] audit: type=1326 audit(1757087424.243:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 323.978845][ T30] audit: type=1326 audit(1757087424.243:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.3.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 330.793698][T11218] lo speed is unknown, defaulting to 1000 [ 330.800494][T11218] lo speed is unknown, defaulting to 1000 [ 330.823430][T11218] lo speed is unknown, defaulting to 1000 [ 330.881336][T11218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 331.046228][T11218] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 331.166076][T11219] loop5: detected capacity change from 0 to 1024 [ 331.191721][T11219] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 331.211679][T11218] lo speed is unknown, defaulting to 1000 [ 331.220380][T11218] lo speed is unknown, defaulting to 1000 [ 331.227549][T11218] lo speed is unknown, defaulting to 1000 [ 331.234603][T11218] lo speed is unknown, defaulting to 1000 [ 331.241650][T11218] lo speed is unknown, defaulting to 1000 [ 331.249781][T11219] JBD2: no valid journal superblock found [ 331.255566][T11219] EXT4-fs (loop5): Could not load journal inode [ 332.899530][ T5965] IPVS: starting estimator thread 0... [ 333.199615][T11234] IPVS: using max 25 ests per chain, 60000 per kthread [ 333.539700][T11241] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2046'. [ 334.904731][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.914834][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.922844][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.932683][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.949143][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.098153][ T5965] IPVS: starting estimator thread 0... [ 335.117192][T11258] lo speed is unknown, defaulting to 1000 [ 335.219552][T11265] IPVS: using max 35 ests per chain, 84000 per kthread [ 335.574223][T11258] chnl_net:caif_netlink_parms(): no params data found [ 335.618625][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2057'. [ 335.859695][T11272] afs: Bad value for 'source' [ 335.876418][T11272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.461730][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 337.045690][ T5879] Bluetooth: hci1: command tx timeout [ 337.101327][ T4715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.263289][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.303516][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.340354][T11258] bridge_slave_0: entered allmulticast mode [ 337.376584][T11258] bridge_slave_0: entered promiscuous mode [ 337.432036][ T4715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.698405][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.494593][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.504377][T11258] bridge_slave_1: entered allmulticast mode [ 338.512388][T11258] bridge_slave_1: entered promiscuous mode [ 338.943001][T11302] ceph: No mds server is up or the cluster is laggy [ 339.008716][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 339.219246][ T5879] Bluetooth: hci1: command tx timeout [ 339.294215][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 339.659114][ T4715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.995579][T11258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.140837][T11258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.294959][ T5879] Bluetooth: hci1: command tx timeout [ 341.511860][T11328] atomic_op ffff88808e187198 conn xmit_atomic 0000000000000000 [ 342.141817][ T4715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.223237][T11258] team0: Port device team_slave_0 added [ 342.241067][T11258] team0: Port device team_slave_1 added [ 342.564530][T11258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.186660][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.246532][T11258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.260960][T11258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.267940][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.358002][T11258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.362705][ T5873] Bluetooth: hci1: command tx timeout [ 343.506714][T11340] loop5: detected capacity change from 0 to 8 [ 343.717320][T11258] hsr_slave_0: entered promiscuous mode [ 343.810729][T11258] hsr_slave_1: entered promiscuous mode [ 343.817197][T11258] debugfs: 'hsr0' already exists in 'hsr' [ 343.836374][T11340] unable to read id index table [ 343.855532][T11258] Cannot create hsr debugfs directory [ 344.255917][ T4715] bridge_slave_1: left allmulticast mode [ 344.263689][ T4715] bridge_slave_1: left promiscuous mode [ 344.272006][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.283201][ T4715] bridge_slave_0: left allmulticast mode [ 344.288881][ T4715] bridge_slave_0: left promiscuous mode [ 344.295551][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.618294][T11365] atomic_op ffff888030c5f998 conn xmit_atomic 0000000000000000 [ 344.989759][ T5873] Bluetooth: hci5: command 0x0406 tx timeout [ 345.327469][T11366] kAFS: unable to lookup cell 'sy0' [ 346.222706][T11386] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2094'. [ 346.493642][ T4715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.506089][ T4715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.521108][ T4715] bond0 (unregistering): Released all slaves [ 346.577590][T11384] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2093'. [ 347.233951][T11402] atomic_op ffff8880223f8998 conn xmit_atomic 0000000000000000 [ 347.996999][ T4715] hsr_slave_0: left promiscuous mode [ 348.024453][ T4715] hsr_slave_1: left promiscuous mode [ 348.055117][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.084280][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.127407][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.142397][ T4715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.155404][T11418] loop5: detected capacity change from 0 to 512 [ 348.188731][ T4715] veth0_macvtap: left promiscuous mode [ 348.203056][ T4715] veth1_vlan: left promiscuous mode [ 348.208466][ T4715] veth0_vlan: left promiscuous mode [ 348.252293][T11418] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2106: casefold flag without casefold feature [ 348.307388][T11418] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2106: couldn't read orphan inode 15 (err -117) [ 348.451745][T11418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.995652][ T9837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.271878][ T4715] team0 (unregistering): Port device team_slave_1 removed [ 349.332499][ T4715] team0 (unregistering): Port device team_slave_0 removed [ 353.109798][T11258] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.153979][T11258] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 353.228461][T11258] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 353.291102][T11457] futex_wake_op: syz.5.2120 tries to shift op by 32; fix this program [ 353.292445][T11258] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 353.626404][T11457] loop5: detected capacity change from 0 to 8192 [ 353.708067][T11457] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.951925][T11470] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2122'. [ 354.984748][T11258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.223620][T11258] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.259612][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.266891][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.302903][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.310244][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.765799][T11484] loop5: detected capacity change from 0 to 32768 [ 356.774587][T11484] btrfs: Unknown parameter 'fscontext' [ 358.023686][T11258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.393866][T11508] process 'syz.0.2130' launched '/dev/fd/8' with NULL argv: empty string added [ 359.222753][T11510] netlink: 'syz.5.2133': attribute type 10 has an invalid length. [ 359.251137][T11510] veth1_macvtap: left promiscuous mode [ 360.458214][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 360.458234][ T30] audit: type=1326 audit(1757087462.463:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 360.525005][ T30] audit: type=1326 audit(1757087462.463:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 360.548073][ T30] audit: type=1326 audit(1757087462.463:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 360.628975][ T30] audit: type=1326 audit(1757087462.463:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 360.783535][ T30] audit: type=1326 audit(1757087462.463:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 361.125827][ T30] audit: type=1326 audit(1757087462.493:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 361.436659][ T30] audit: type=1326 audit(1757087462.493:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 361.479478][ T30] audit: type=1326 audit(1757087462.493:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 361.566713][ T30] audit: type=1326 audit(1757087462.503:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 361.606643][ T30] audit: type=1326 audit(1757087462.503:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11521 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd3b8ebe9 code=0x7ffc0000 [ 363.073852][T11258] veth0_vlan: entered promiscuous mode [ 363.159908][T11258] veth1_vlan: entered promiscuous mode [ 363.265782][T11258] veth0_macvtap: entered promiscuous mode [ 363.328305][T11258] veth1_macvtap: entered promiscuous mode [ 363.539955][T11258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.378877][T11258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.443297][T10595] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.457690][T10595] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.489659][T10595] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.518290][T10595] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.345678][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 367.345696][ T30] audit: type=1326 audit(1757087468.633:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.3.2152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6deb78ebe9 code=0x0 [ 367.458500][T10595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.519514][T10595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.594747][T10594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.761976][T10594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.522707][T11594] loop6: detected capacity change from 0 to 40427 [ 368.544402][T11594] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 368.552852][T11594] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 368.567194][T11594] F2FS-fs (loop6): invalid crc value [ 369.380965][T11594] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 369.405223][T11594] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 369.413626][T11594] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 369.691212][T11614] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 370.783805][T11623] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2165'. [ 371.366719][T11612] loop5: detected capacity change from 0 to 32768 [ 371.512546][T11612] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2162 (11612) [ 371.582146][T11612] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 371.600737][T11612] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 371.707270][T11634] warning: `syz.3.2167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 372.603224][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 372.608543][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 373.682540][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 374.208370][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 374.260006][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 374.299950][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 374.335970][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 374.370752][T11612] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 374.493694][T11655] loop6: detected capacity change from 0 to 16 [ 374.527991][T11655] erofs (device loop6): mounted with root inode @ nid 36. [ 374.560699][T11612] BTRFS error (device loop5): open_ctree failed: -12 [ 374.848889][T11660] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 374.871065][T11660] erofs (device loop6): failed to decompress -29 in[58, 4038] out[1851] [ 374.880031][T11660] erofs (device loop6): read error -117 @ 43 of nid 36 [ 374.913039][T11660] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 374.922414][T11660] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 374.931242][T11660] erofs (device loop6): readahead error at folio 42 @ nid 36 [ 374.940704][T11660] erofs (device loop6): bogus lookback distance 774 @ lcn 40 of nid 36 [ 374.949317][T11660] erofs (device loop6): readahead error at folio 41 @ nid 36 [ 375.453965][T11661] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 375.462702][T11661] erofs (device loop6): read error -117 @ 43 of nid 36 [ 375.470530][T11660] erofs (device loop6): bogus lookback distance 774 @ lcn 40 of nid 36 [ 375.478923][T11660] erofs (device loop6): readahead error at folio 40 @ nid 36 [ 375.487483][T11660] erofs (device loop6): readahead error at folio 39 @ nid 36 [ 375.494986][T11660] erofs (device loop6): readahead error at folio 38 @ nid 36 [ 375.506086][T11660] erofs (device loop6): readahead error at folio 36 @ nid 36 [ 375.515688][T11660] erofs (device loop6): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 375.524139][T11660] erofs (device loop6): readahead error at folio 31 @ nid 36 [ 375.535355][T11660] erofs (device loop6): readahead error at folio 25 @ nid 36 [ 375.543145][T11660] erofs (device loop6): readahead error at folio 24 @ nid 36 [ 375.551899][T11660] erofs (device loop6): readahead error at folio 19 @ nid 36 [ 375.563348][T11660] syz.6.2172: attempt to access beyond end of device [ 375.563348][T11660] loop6: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 375.578575][T11660] syz.6.2172: attempt to access beyond end of device [ 375.578575][T11660] loop6: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 375.595327][T11660] syz.6.2172: attempt to access beyond end of device [ 375.595327][T11660] loop6: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 375.614767][T11660] erofs (device loop6): failed to decompress -29 in[58, 4038] out[2639] [ 375.624736][T11660] erofs (device loop6): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 375.633279][T11660] erofs (device loop6): readahead error at folio 47 @ nid 36 [ 375.641241][T11660] erofs (device loop6): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 375.650080][T11660] erofs (device loop6): readahead error at folio 46 @ nid 36 [ 375.658073][T11660] erofs (device loop6): readahead error at folio 45 @ nid 36 [ 375.668040][T11660] syz.6.2172: attempt to access beyond end of device [ 375.668040][T11660] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 375.706847][T11660] erofs (device loop6): failed to decompress -29 in[58, 4038] out[3537] [ 380.566916][T11686] siw: device registration error -23 [ 381.558091][T11688] atomic_op ffff88807d096998 conn xmit_atomic 0000000000000000 [ 382.618666][T11697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.783291][T11707] loop5: detected capacity change from 0 to 32768 [ 383.853617][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.861865][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.233634][T11707] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 384.233668][T11707] allowing incompatible features above 0.0: (unknown version) [ 384.233682][T11707] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 384.279255][T11707] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 384.287578][T11707] bcachefs (loop5): initializing new filesystem [ 384.304910][T11707] bcachefs (loop5): going read-write [ 384.421342][T11707] bcachefs (loop5): marking superblocks [ 384.442001][T11707] bcachefs (loop5): initializing freespace [ 384.452539][T11707] bcachefs (loop5): done initializing freespace [ 384.462768][T11707] bcachefs (loop5): reading snapshots table [ 384.468784][T11707] bcachefs (loop5): reading snapshots done [ 384.520919][T11707] bcachefs (loop5): done starting filesystem [ 385.467533][T11707] syz.5.2187 (11707) used greatest stack depth: 17384 bytes left [ 385.621228][ T9837] bcachefs (loop5): shutting down [ 385.626554][ T9837] bcachefs (loop5): going read-only [ 385.640886][ T9837] bcachefs (loop5): finished waiting for writes to stop [ 385.717298][ T9837] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2 [ 385.926172][T11743] fuse: Bad value for 'fd' [ 385.928986][ T9837] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 386.262202][ T9837] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 386.301913][ T9837] bcachefs (loop5): marking filesystem clean [ 386.559188][ T9837] bcachefs (loop5): shutdown complete [ 387.893420][T11781] siw: device registration error -23 [ 387.957129][T11777] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.900370][ T5965] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 390.079578][ T5965] usb 7-1: Using ep0 maxpacket: 16 [ 390.097485][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.406250][ T5965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.900041][ T5965] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.918603][ T5965] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.928624][ T5965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.941392][ T5965] usb 7-1: config 0 descriptor?? [ 391.470974][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 391.508824][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 391.546710][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 391.571489][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 392.751139][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 392.758434][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 394.354016][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 394.361409][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 394.368666][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 394.376582][ T5965] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 394.384747][ T5965] microsoft 0003:045E:07DA.0001: item fetching failed at offset 33/34 [ 394.393792][ T5965] microsoft 0003:045E:07DA.0001: parse failed [ 394.400094][ T5965] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 394.454190][ T5965] usb 7-1: USB disconnect, device number 2 [ 398.213672][T11873] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2221'. [ 398.491427][T11878] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[11878] [ 398.569941][T11879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2226'. [ 401.953448][T11899] futex_wake_op: syz.0.2232 tries to shift op by 32; fix this program [ 404.390122][T11926] loop6: detected capacity change from 0 to 64 [ 406.037030][T11935] atomic_op ffff88807b323198 conn xmit_atomic 0000000000000000 [ 406.701222][ T5878] IPVS: starting estimator thread 0... [ 406.836432][T11938] IPVS: using max 25 ests per chain, 60000 per kthread [ 406.898713][T11945] futex_wake_op: syz.3.2247 tries to shift op by 32; fix this program [ 406.916401][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2246'. [ 407.209465][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 407.519521][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 408.192853][ T5878] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 408.206380][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 408.218988][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.229937][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 408.241537][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 408.425464][T11953] loop6: detected capacity change from 0 to 512 [ 408.441758][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.467489][T11953] ext4: Unknown parameter 'uid<00000000000000000000' [ 408.837204][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.866992][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.962365][ T5938] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 409.972325][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 410.109843][ T5938] usb 7-1: device descriptor read/64, error -32 [ 410.119634][ T5878] usb 6-1: usb_control_msg returned -71 [ 410.125272][ T5878] usbtmc 6-1:16.0: can't read capabilities [ 410.290252][ T30] audit: type=1326 audit(1757087512.303:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 410.306282][ T5878] usb 6-1: USB disconnect, device number 4 [ 410.378618][T11975] 9pnet_fd: Insufficient options for proto=fd [ 410.525575][ T30] audit: type=1326 audit(1757087512.303:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 410.557901][ T30] audit: type=1326 audit(1757087512.303:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 412.126156][T11983] loop6: detected capacity change from 0 to 32768 [ 412.201064][T11983] bcachefs (/dev/loop6): error reading default superblock: Unsupported superblock version 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive) [ 412.221685][T11983] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section clean: wrong size (got 8 should be 24) [ 412.221685][T11983] clean (size 8): [ 412.221685][T11983] flags: 0 [ 412.221685][T11983] journal_seq: 0 [ 412.221685][T11983] [ 412.247430][T11983] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 412.329741][ T30] audit: type=1326 audit(1757087512.303:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 412.356337][ T30] audit: type=1326 audit(1757087512.303:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 412.378891][ T30] audit: type=1326 audit(1757087512.333:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 412.437681][ T30] audit: type=1326 audit(1757087512.333:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 412.645350][ T30] audit: type=1326 audit(1757087512.333:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 412.972172][ T30] audit: type=1326 audit(1757087512.333:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 412.994699][ T30] audit: type=1326 audit(1757087512.333:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11972 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a9b8ebe9 code=0x7ffc0000 [ 413.182699][T12003] atomic_op ffff88807d093198 conn xmit_atomic 0000000000000000 [ 413.854742][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2268'. [ 413.870606][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2268'. [ 413.884315][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2268'. [ 414.095354][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2268'. [ 417.521819][T12050] atomic_op ffff8880674f3198 conn xmit_atomic 0000000000000000 [ 418.078651][T12052] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2282'. [ 420.358217][T12072] loop5: detected capacity change from 0 to 1024 [ 420.887495][T12072] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 420.921090][T12072] JBD2: no valid journal superblock found [ 420.926924][T12072] EXT4-fs (loop5): Could not load journal inode [ 422.482606][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2293'. [ 422.492873][T12084] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 422.492873][T12084] program syz.6.2293 not setting count and/or reply_len properly [ 423.030088][T12094] atomic_op ffff88802ac38198 conn xmit_atomic 0000000000000000 [ 423.179175][T12096] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2296'. [ 423.881078][T12103] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2297'. [ 424.660779][T12108] loop5: detected capacity change from 0 to 32768 [ 424.707414][T12108] bcachefs (/dev/loop5): error reading default superblock: Unsupported superblock version 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive) [ 424.902795][T12108] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: wrong size (got 8 should be 24) [ 424.902795][T12108] clean (size 8): [ 424.902795][T12108] flags: 0 [ 424.902795][T12108] journal_seq: 0 [ 424.902795][T12108] [ 424.929760][T12108] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 426.639258][T12116] loop5: detected capacity change from 0 to 1024 [ 426.659725][T12116] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 426.672686][T12116] JBD2: no valid journal superblock found [ 426.678481][T12116] EXT4-fs (loop5): Could not load journal inode [ 430.123269][T12128] loop5: detected capacity change from 0 to 4096 [ 431.286382][T12136] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.501692][T12142] tmpfs: Bad value for 'nr_inodes' [ 436.079699][T12148] 9pnet_fd: Insufficient options for proto=fd [ 437.421104][T12157] loop6: detected capacity change from 0 to 40427 [ 437.465255][T12157] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 437.473078][T12157] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 437.504414][T12157] F2FS-fs (loop6): invalid crc value [ 437.604750][T12157] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 437.683011][T12157] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 437.690666][T12157] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 443.793783][T12221] loop5: detected capacity change from 0 to 2048 [ 443.967214][T12221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.239554][T12234] ptrace attach of "./syz-executor exec"[5858] was attempted by ""[12234] [ 444.537083][T12236] atomic_op ffff888024758198 conn xmit_atomic 0000000000000000 [ 445.297965][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.304622][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.370015][T12253] loop5: detected capacity change from 0 to 40427 [ 446.415124][T12253] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 446.423064][T12253] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 446.487728][T12253] F2FS-fs (loop5): invalid crc value [ 446.964262][T12253] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 447.102208][T12253] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 447.110112][T12253] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 452.018108][T12291] 9pnet_fd: Insufficient options for proto=fd [ 452.374817][T12310] loop6: detected capacity change from 0 to 256 [ 452.798922][T12317] loop5: detected capacity change from 0 to 40427 [ 452.815497][T12317] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 452.823400][T12317] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 452.852562][T12317] F2FS-fs (loop5): invalid crc value [ 453.068507][T12317] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 453.217862][T12310] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 453.444970][T12317] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 453.452105][T12317] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 453.757373][T12310] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 453.920799][T12310] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 455.453262][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 455.642369][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.689519][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.720047][ T43] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 455.749728][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.781335][ T43] usb 7-1: config 0 descriptor?? [ 456.069687][T12353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2365'. [ 456.231957][ T43] hid_parser_main: 11 callbacks suppressed [ 456.231983][ T43] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 456.255059][ T43] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 456.265181][ T43] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 456.279810][ T43] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 456.297550][ T43] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 456.318362][ T43] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 456.371459][ T43] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 456.467234][T12344] loop6: detected capacity change from 0 to 2048 [ 456.737264][T12365] loop5: detected capacity change from 0 to 256 [ 457.949483][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 458.111267][T12374] loop5: detected capacity change from 0 to 256 [ 458.125830][T12374] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.204520][T12374] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 458.236173][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 458.293998][T12374] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 458.345974][ T5878] usb 7-1: USB disconnect, device number 5 [ 459.393474][T12382] loop5: detected capacity change from 0 to 512 [ 459.421534][T12382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.498057][T12382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.534349][T12382] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.665669][T12392] overlayfs: failed to resolve './bus': -2 [ 459.785029][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 459.785048][ T30] audit: type=1326 audit(1757087561.793:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 459.845378][ T5878] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 460.052732][ T30] audit: type=1326 audit(1757087561.793:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 460.080241][ T30] audit: type=1326 audit(1757087561.833:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 460.910569][ T30] audit: type=1326 audit(1757087561.833:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 460.977101][ T30] audit: type=1326 audit(1757087561.833:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 461.001439][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 461.006991][ T30] audit: type=1326 audit(1757087561.833:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 461.040234][ T30] audit: type=1326 audit(1757087561.833:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 461.064053][ T5878] usb 7-1: config 0 has an invalid interface number: 66 but max is 0 [ 461.073335][ T5878] usb 7-1: config 0 has no interface number 0 [ 461.293114][ T5878] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 461.304733][ T30] audit: type=1326 audit(1757087561.833:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb78ebe9 code=0x7ffc0000 [ 461.342062][ T9837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.424337][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.469805][ T5878] usb 7-1: Product: syz [ 461.479677][ T5878] usb 7-1: Manufacturer: syz [ 461.484592][ T5878] usb 7-1: SerialNumber: syz [ 461.517584][T12403] ------------[ cut here ]------------ [ 461.523200][T12403] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 461.550773][T12403] WARNING: kernel/bpf/verifier.c:2733 at reg_bounds_sanity_check+0x6e6/0xc20, CPU#1: syz.0.2381/12403 [ 461.562009][T12403] Modules linked in: [ 461.565934][T12403] CPU: 1 UID: 0 PID: 12403 Comm: syz.0.2381 Not tainted syzkaller #0 PREEMPT(full) [ 461.575651][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.586035][T12403] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 461.592705][T12403] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 5f 1e aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 461.612532][T12403] RSP: 0018:ffffc900037fef08 EFLAGS: 00010282 [ 461.618621][T12403] RAX: 1a0a025b89367400 RBX: fffffffe00000030 RCX: 0000000000080000 [ 461.626697][T12403] RDX: ffffc9000b65a000 RSI: 0000000000018e68 RDI: 0000000000018e69 [ 461.634927][T12403] RBP: 0000000000000030 R08: 0000000000000003 R09: 0000000000000004 [ 461.643047][T12403] R10: dffffc0000000000 R11: fffffbfff1c3a7a4 R12: ffff888067c6e168 [ 461.651225][T12403] R13: ffff888067c6e188 R14: ffff888067c6e1a0 R15: 0000000000000000 [ 461.659236][T12403] FS: 00007f4dd49a76c0(0000) GS:ffff888125af9000(0000) knlGS:0000000000000000 [ 461.668278][T12403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.674957][T12403] CR2: 000055555cfc7608 CR3: 000000002fb9a000 CR4: 00000000003526f0 [ 461.683041][T12403] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 461.691139][T12403] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 461.699117][T12403] Call Trace: [ 461.702433][T12403] [ 461.705395][T12403] reg_set_min_max+0x264/0x300 [ 461.710230][T12403] check_cond_jmp_op+0x1625/0x2910 [ 461.715381][T12403] ? reg_bounds_sanity_check+0x80d/0xc20 [ 461.721111][T12403] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 461.726593][T12403] ? __check_reg_arg+0x21f/0x490 [ 461.731571][T12403] ? do_check+0x2796/0xe520 [ 461.736086][T12403] do_check+0x675c/0xe520 [ 461.740577][T12403] ? __pfx_do_check+0x10/0x10 [ 461.745301][T12403] ? init_func_state+0x1ddf/0x2d20 [ 461.750510][T12403] do_check_common+0x1949/0x24f0 [ 461.755482][T12403] bpf_check+0x17474/0x1d2f0 [ 461.760150][T12403] ? kernel_text_address+0xa5/0xe0 [ 461.765285][T12403] ? __kernel_text_address+0xd/0x40 [ 461.770559][T12403] ? unwind_get_return_address+0x4d/0x90 [ 461.776215][T12403] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.782437][T12403] ? __lock_acquire+0xab9/0xd20 [ 461.787344][T12403] ? __mutex_trylock_common+0x153/0x260 [ 461.792948][T12403] ? __pfx___mutex_trylock_common+0x10/0x10 [ 461.798867][T12403] ? css_rstat_updated+0x23a/0x4f0 [ 461.804045][T12403] ? __lock_acquire+0xab9/0xd20 [ 461.808926][T12403] ? __pfx_bpf_check+0x10/0x10 [ 461.813760][T12403] ? ktime_get_with_offset+0x8c/0x2a0 [ 461.819151][T12403] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 461.825454][T12403] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.830705][T12403] ? ktime_get_with_offset+0x8c/0x2a0 [ 461.836089][T12403] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 461.842722][T12403] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 461.849392][T12403] ? __asan_memset+0x22/0x50 [ 461.854009][T12403] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 461.859218][T12403] ? security_bpf_prog_load+0x125/0x3f0 [ 461.864859][T12403] bpf_prog_load+0x1318/0x1930 [ 461.869683][T12403] ? __pfx_bpf_prog_load+0x10/0x10 [ 461.874820][T12403] ? bpf_lsm_bpf+0x9/0x20 [ 461.879154][T12403] ? security_bpf+0x7e/0x300 [ 461.883913][T12403] __sys_bpf+0x528/0x870 [ 461.888177][T12403] ? __pfx___sys_bpf+0x10/0x10 [ 461.893028][T12403] ? rcu_is_watching+0x15/0xb0 [ 461.897813][T12403] __x64_sys_bpf+0x7c/0x90 [ 461.902299][T12403] do_syscall_64+0xfa/0xfa0 [ 461.906817][T12403] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.912129][T12403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.918208][T12403] ? clear_bhb_loop+0x60/0xb0 [ 461.923469][T12403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.929406][T12403] RIP: 0033:0x7f4dd3b8ebe9 [ 461.933862][T12403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.953545][T12403] RSP: 002b:00007f4dd49a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.962014][T12403] RAX: ffffffffffffffda RBX: 00007f4dd3dc5fa0 RCX: 00007f4dd3b8ebe9 [ 461.970018][T12403] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 461.977996][T12403] RBP: 00007f4dd3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 461.986018][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.994211][T12403] R13: 00007f4dd3dc6038 R14: 00007f4dd3dc5fa0 R15: 00007fff1531e148 [ 462.002295][T12403] [ 462.005330][T12403] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 462.012610][T12403] CPU: 1 UID: 0 PID: 12403 Comm: syz.0.2381 Not tainted syzkaller #0 PREEMPT(full) [ 462.021976][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.032124][T12403] Call Trace: [ 462.035407][T12403] [ 462.038342][T12403] dump_stack_lvl+0x99/0x250 [ 462.042941][T12403] ? __asan_memcpy+0x40/0x70 [ 462.047540][T12403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.052746][T12403] ? __pfx__printk+0x10/0x10 [ 462.057365][T12403] vpanic+0x237/0x6d0 [ 462.061374][T12403] ? __pfx_vpanic+0x10/0x10 [ 462.065904][T12403] ? is_bpf_text_address+0x292/0x2b0 [ 462.071218][T12403] ? is_bpf_text_address+0x26/0x2b0 [ 462.076473][T12403] panic+0xb9/0xc0 [ 462.080222][T12403] ? __pfx_panic+0x10/0x10 [ 462.084663][T12403] __warn+0x334/0x4c0 [ 462.088653][T12403] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 462.094308][T12403] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 462.099959][T12403] report_bug+0x2be/0x4f0 [ 462.104308][T12403] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 462.109969][T12403] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 462.115618][T12403] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 462.121262][T12403] handle_bug+0x84/0x160 [ 462.125517][T12403] exc_invalid_op+0x1a/0x50 [ 462.130026][T12403] asm_exc_invalid_op+0x1a/0x20 [ 462.134876][T12403] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 462.141132][T12403] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 5f 1e aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 462.160748][T12403] RSP: 0018:ffffc900037fef08 EFLAGS: 00010282 [ 462.166839][T12403] RAX: 1a0a025b89367400 RBX: fffffffe00000030 RCX: 0000000000080000 [ 462.174815][T12403] RDX: ffffc9000b65a000 RSI: 0000000000018e68 RDI: 0000000000018e69 [ 462.182879][T12403] RBP: 0000000000000030 R08: 0000000000000003 R09: 0000000000000004 [ 462.190851][T12403] R10: dffffc0000000000 R11: fffffbfff1c3a7a4 R12: ffff888067c6e168 [ 462.198931][T12403] R13: ffff888067c6e188 R14: ffff888067c6e1a0 R15: 0000000000000000 [ 462.206944][T12403] reg_set_min_max+0x264/0x300 [ 462.211734][T12403] check_cond_jmp_op+0x1625/0x2910 [ 462.216871][T12403] ? reg_bounds_sanity_check+0x80d/0xc20 [ 462.222525][T12403] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 462.228002][T12403] ? __check_reg_arg+0x21f/0x490 [ 462.232960][T12403] ? do_check+0x2796/0xe520 [ 462.237475][T12403] do_check+0x675c/0xe520 [ 462.241883][T12403] ? __pfx_do_check+0x10/0x10 [ 462.246570][T12403] ? init_func_state+0x1ddf/0x2d20 [ 462.251721][T12403] do_check_common+0x1949/0x24f0 [ 462.256683][T12403] bpf_check+0x17474/0x1d2f0 [ 462.261287][T12403] ? kernel_text_address+0xa5/0xe0 [ 462.266412][T12403] ? __kernel_text_address+0xd/0x40 [ 462.271622][T12403] ? unwind_get_return_address+0x4d/0x90 [ 462.277258][T12403] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.283434][T12403] ? __lock_acquire+0xab9/0xd20 [ 462.288325][T12403] ? __mutex_trylock_common+0x153/0x260 [ 462.293879][T12403] ? __pfx___mutex_trylock_common+0x10/0x10 [ 462.299780][T12403] ? css_rstat_updated+0x23a/0x4f0 [ 462.304907][T12403] ? __lock_acquire+0xab9/0xd20 [ 462.309777][T12403] ? __pfx_bpf_check+0x10/0x10 [ 462.314545][T12403] ? ktime_get_with_offset+0x8c/0x2a0 [ 462.319938][T12403] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 462.326209][T12403] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.331412][T12403] ? ktime_get_with_offset+0x8c/0x2a0 [ 462.336811][T12403] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 462.343085][T12403] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 462.349689][T12403] ? __asan_memset+0x22/0x50 [ 462.354300][T12403] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 462.359507][T12403] ? security_bpf_prog_load+0x125/0x3f0 [ 462.365068][T12403] bpf_prog_load+0x1318/0x1930 [ 462.369851][T12403] ? __pfx_bpf_prog_load+0x10/0x10 [ 462.374986][T12403] ? bpf_lsm_bpf+0x9/0x20 [ 462.379322][T12403] ? security_bpf+0x7e/0x300 [ 462.383945][T12403] __sys_bpf+0x528/0x870 [ 462.388220][T12403] ? __pfx___sys_bpf+0x10/0x10 [ 462.393005][T12403] ? rcu_is_watching+0x15/0xb0 [ 462.397801][T12403] __x64_sys_bpf+0x7c/0x90 [ 462.402225][T12403] do_syscall_64+0xfa/0xfa0 [ 462.406737][T12403] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.411940][T12403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.418015][T12403] ? clear_bhb_loop+0x60/0xb0 [ 462.422703][T12403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.428599][T12403] RIP: 0033:0x7f4dd3b8ebe9 [ 462.433016][T12403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.452634][T12403] RSP: 002b:00007f4dd49a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.461065][T12403] RAX: ffffffffffffffda RBX: 00007f4dd3dc5fa0 RCX: 00007f4dd3b8ebe9 [ 462.469049][T12403] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 462.477040][T12403] RBP: 00007f4dd3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 462.485017][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.492994][T12403] R13: 00007f4dd3dc6038 R14: 00007f4dd3dc5fa0 R15: 00007fff1531e148 [ 462.500984][T12403] [ 462.504356][T12403] Kernel Offset: disabled [ 462.508682][T12403] Rebooting in 86400 seconds..