last executing test programs: 3.858813512s ago: executing program 2 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x398}}, 0x0) 3.690125295s ago: executing program 2 (id=348): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x18, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendfile(r0, r1, &(0x7f0000000180)=0x66457e4a, 0x8) unshare(0x6a040000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b49, &(0x7f0000003140)=""/4111) 2.167751078s ago: executing program 3 (id=359): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4088, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) 2.037804829s ago: executing program 3 (id=361): setuid(0xee00) 1.841705783s ago: executing program 3 (id=364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fgetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 1.642901455s ago: executing program 3 (id=366): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") open(0x0, 0x14927e, 0xff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r5, 0x431, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40095}, 0x0) 1.184690442s ago: executing program 0 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x82, 0x100}}) 1.116206693s ago: executing program 1 (id=371): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x4, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014", @ANYRES16=r0], 0x28}}, 0x0) 1.022099675s ago: executing program 2 (id=372): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}], {0x14}}, 0x54}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000280)=0x5) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf25110045"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r6) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 979.005715ms ago: executing program 0 (id=373): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='jbd2_shrink_scan_exit\x00', r0, 0x0, 0x1}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 879.414397ms ago: executing program 1 (id=374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fgetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 777.527908ms ago: executing program 0 (id=375): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4004000, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) 647.29865ms ago: executing program 1 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480d18501800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000000900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c000000050a09000000000000000000020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 621.566981ms ago: executing program 3 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 498.169343ms ago: executing program 2 (id=378): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) 483.897873ms ago: executing program 1 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404}, 0x0) 432.277613ms ago: executing program 0 (id=380): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000003140)=""/4111) 382.602554ms ago: executing program 2 (id=381): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 316.916356ms ago: executing program 0 (id=382): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) 299.380065ms ago: executing program 3 (id=383): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 216.239857ms ago: executing program 1 (id=384): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020002004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 139.763568ms ago: executing program 0 (id=385): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(0xffffffffffffffff, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='macvlan1\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, r4, 0x9c3fa077fa966179, 0x4, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x6288aa8acb5c9380, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) 132.931398ms ago: executing program 2 (id=386): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}], {0x14}}, 0x54}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000280)=0x5) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf25110045"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r6) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 0s ago: executing program 1 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480d18501800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000000900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c000000050a09000000000000000000020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. syzkaller login: [ 80.927165][ T5764] cgroup: Unknown subsys name 'net' [ 81.061546][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.787852][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.447181][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.456436][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.465897][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.474451][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.489317][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.497595][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.505733][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.514073][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.522169][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.530597][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.540354][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.549626][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.567509][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.570071][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.576678][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.593425][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.601560][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.613428][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.620909][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.630003][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.641357][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.657348][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.669129][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.682926][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.067687][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.137658][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 85.290961][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.298272][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.307406][ T5773] bridge_slave_0: entered allmulticast mode [ 85.315223][ T5773] bridge_slave_0: entered promiscuous mode [ 85.350823][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 85.387282][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.394742][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.401937][ T5773] bridge_slave_1: entered allmulticast mode [ 85.409129][ T5773] bridge_slave_1: entered promiscuous mode [ 85.472344][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.479991][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.487407][ T5774] bridge_slave_0: entered allmulticast mode [ 85.494636][ T5774] bridge_slave_0: entered promiscuous mode [ 85.503880][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.511027][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.518375][ T5774] bridge_slave_1: entered allmulticast mode [ 85.526801][ T5774] bridge_slave_1: entered promiscuous mode [ 85.616759][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.629026][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.640655][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.650637][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.659007][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.666376][ T5782] bridge_slave_0: entered allmulticast mode [ 85.674360][ T5782] bridge_slave_0: entered promiscuous mode [ 85.706996][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.734435][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.741687][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.749789][ T5782] bridge_slave_1: entered allmulticast mode [ 85.757198][ T5782] bridge_slave_1: entered promiscuous mode [ 85.767160][ T5773] team0: Port device team_slave_0 added [ 85.777499][ T5773] team0: Port device team_slave_1 added [ 85.784053][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 85.851152][ T5774] team0: Port device team_slave_0 added [ 85.878671][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.904521][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.911541][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.938549][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.965501][ T5774] team0: Port device team_slave_1 added [ 85.974302][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.996086][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.003159][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.029278][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.100884][ T5782] team0: Port device team_slave_0 added [ 86.128490][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.136492][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.163316][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.177013][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.184396][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.210647][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.233226][ T5782] team0: Port device team_slave_1 added [ 86.287676][ T5773] hsr_slave_0: entered promiscuous mode [ 86.295406][ T5773] hsr_slave_1: entered promiscuous mode [ 86.318811][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.326123][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.333490][ T5779] bridge_slave_0: entered allmulticast mode [ 86.340501][ T5779] bridge_slave_0: entered promiscuous mode [ 86.363276][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.370276][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.396764][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.431670][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.438935][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.446636][ T5779] bridge_slave_1: entered allmulticast mode [ 86.453861][ T5779] bridge_slave_1: entered promiscuous mode [ 86.475151][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.482149][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.508253][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.530957][ T5774] hsr_slave_0: entered promiscuous mode [ 86.538044][ T5774] hsr_slave_1: entered promiscuous mode [ 86.544864][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.553768][ T5774] Cannot create hsr debugfs directory [ 86.614035][ T5782] hsr_slave_0: entered promiscuous mode [ 86.614715][ T50] Bluetooth: hci3: command tx timeout [ 86.619677][ T5781] Bluetooth: hci1: command tx timeout [ 86.631515][ T5782] hsr_slave_1: entered promiscuous mode [ 86.637970][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.646080][ T5782] Cannot create hsr debugfs directory [ 86.659982][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.672810][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.692634][ T5781] Bluetooth: hci0: command tx timeout [ 86.773118][ T5781] Bluetooth: hci2: command tx timeout [ 86.787332][ T5779] team0: Port device team_slave_0 added [ 86.796349][ T5779] team0: Port device team_slave_1 added [ 86.869925][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.877088][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.903820][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.937293][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.944772][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.971305][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.116013][ T5779] hsr_slave_0: entered promiscuous mode [ 87.122909][ T5779] hsr_slave_1: entered promiscuous mode [ 87.129739][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.137639][ T5779] Cannot create hsr debugfs directory [ 87.457990][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.479942][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.516588][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.542807][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.605782][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.651297][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.679291][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.704741][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.784292][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.812139][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.831786][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.844707][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.928890][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.940804][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.966709][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.978442][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.063911][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.108714][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.174447][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.181819][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.192331][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.199507][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.215338][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.281248][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.311037][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.347886][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.355148][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.375861][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.383230][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.469055][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.517931][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.525190][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.584277][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.591500][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.646689][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.679409][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.693824][ T5781] Bluetooth: hci3: command tx timeout [ 88.694349][ T50] Bluetooth: hci1: command tx timeout [ 88.740849][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.773302][ T50] Bluetooth: hci0: command tx timeout [ 88.784533][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.820856][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.828069][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.853689][ T50] Bluetooth: hci2: command tx timeout [ 88.901055][ T5774] veth0_vlan: entered promiscuous mode [ 88.921520][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.929025][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.034233][ T5774] veth1_vlan: entered promiscuous mode [ 89.070375][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.178263][ T5774] veth0_macvtap: entered promiscuous mode [ 89.210984][ T5774] veth1_macvtap: entered promiscuous mode [ 89.238648][ T5773] veth0_vlan: entered promiscuous mode [ 89.274032][ T5773] veth1_vlan: entered promiscuous mode [ 89.287653][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.305226][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.321352][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.375143][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.390908][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.407741][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.418270][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.560679][ T5773] veth0_macvtap: entered promiscuous mode [ 89.583905][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.586355][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.591978][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.617934][ T5773] veth1_macvtap: entered promiscuous mode [ 89.647943][ T5779] veth0_vlan: entered promiscuous mode [ 89.698834][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.706477][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.717549][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.719003][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.744089][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.756306][ T5779] veth1_vlan: entered promiscuous mode [ 89.769582][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.780336][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.794562][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.851072][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.863299][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.872057][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.881139][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.945512][ T5782] veth0_vlan: entered promiscuous mode [ 90.004990][ T5779] veth0_macvtap: entered promiscuous mode [ 90.039830][ T5782] veth1_vlan: entered promiscuous mode [ 90.077047][ T5779] veth1_macvtap: entered promiscuous mode [ 90.100254][ T5844] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 90.203142][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.211270][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.231208][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.250569][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.261841][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.285422][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.300083][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.331513][ T5782] veth0_macvtap: entered promiscuous mode [ 90.367596][ T5846] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.406763][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.420233][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.443670][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.476993][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.496661][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.518157][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.534739][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.550309][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.559276][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.576610][ T5782] veth1_macvtap: entered promiscuous mode [ 90.622607][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.630504][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.724941][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.750065][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.772874][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.783525][ T50] Bluetooth: hci1: command tx timeout [ 90.783538][ T5781] Bluetooth: hci3: command tx timeout [ 90.794982][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.804935][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.815479][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.837303][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.853063][ T50] Bluetooth: hci0: command tx timeout [ 90.884237][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.901892][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.917299][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.928589][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.939023][ T50] Bluetooth: hci2: command tx timeout [ 90.945921][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.957245][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.970473][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.013604][ T5857] syz.3.4[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.026116][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.042944][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.054661][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.063509][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074104][ T5857] loop3: detected capacity change from 0 to 512 [ 91.095712][ T5857] EXT4-fs: Ignoring removed oldalloc option [ 91.164945][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.204672][ T5857] EXT4-fs (loop3): 1 truncate cleaned up [ 91.211858][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.252161][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.444226][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.453167][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.521620][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.548163][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.563549][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.704383][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.712263][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.977951][ T5873] lo speed is unknown, defaulting to 1000 [ 92.035253][ T5873] lo speed is unknown, defaulting to 1000 [ 92.059484][ T5873] lo speed is unknown, defaulting to 1000 [ 92.156894][ T5873] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.224790][ T8] cfg80211: failed to load regulatory.db [ 92.265546][ T5873] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 92.365343][ T5873] lo speed is unknown, defaulting to 1000 [ 92.541032][ T5873] lo speed is unknown, defaulting to 1000 [ 92.617013][ T5873] lo speed is unknown, defaulting to 1000 [ 92.626129][ T5873] lo speed is unknown, defaulting to 1000 [ 92.646030][ T5882] syz.3.14 (5882) used greatest stack depth: 17960 bytes left [ 92.895162][ T5890] lo speed is unknown, defaulting to 1000 [ 93.460126][ T50] Bluetooth: hci3: command tx timeout [ 93.465697][ T50] Bluetooth: hci1: command tx timeout [ 93.471170][ T50] Bluetooth: hci0: command tx timeout [ 93.476683][ T50] Bluetooth: hci2: command tx timeout [ 93.546989][ T5893] loop2: detected capacity change from 0 to 164 [ 93.657040][ T5893] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.286636][ T5905] @: renamed from vlan0 (while UP) [ 94.547911][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 94.582785][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 94.847937][ T5917] Zero length message leads to an empty skb [ 95.210655][ T5923] (null): rxe_set_mtu: Set mtu to 1024 [ 95.380916][ T5928] loop3: detected capacity change from 0 to 512 [ 95.403161][ T5928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.440515][ T5928] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 95.474431][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 95.680962][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 95.765661][ T5923] infiniband syz!: set active [ 95.776940][ T5923] infiniband syz!: added team_slave_0 [ 95.849280][ T5923] RDS/IB: syz!: added [ 95.854865][ T5923] smc: adding ib device syz! with port count 1 [ 95.861504][ T5923] smc: ib device syz! port 1 has pnetid [ 95.922924][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023d2a800: rx timeout, send abort [ 96.423903][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023d28000: rx timeout, send abort [ 96.432364][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023d2a800: abort rx timeout. Force session deactivation [ 96.911188][ T5950] loop2: detected capacity change from 0 to 512 [ 96.932273][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023d28000: abort rx timeout. Force session deactivation [ 97.015936][ T5950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.059515][ T5950] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.262724][ T5939] siw: device registration error -23 [ 98.073844][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.431174][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 98.441274][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 98.584886][ T5975] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 98.886807][ T5985] loop2: detected capacity change from 0 to 512 [ 98.940441][ T5985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.963965][ T5985] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.850295][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 99.984748][ T5998] @: renamed from vlan0 (while UP) [ 100.034864][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.165299][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 100.238421][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.384787][ T6000] bridge_slave_1 (unregistering): left allmulticast mode [ 100.391916][ T6000] bridge_slave_1 (unregistering): left promiscuous mode [ 100.428278][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.700428][ T6013] loop3: detected capacity change from 0 to 512 [ 100.719664][ T6013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.770811][ T6013] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 101.052828][ T6023] @: renamed from vlan0 (while UP) [ 101.175295][ T6025] IPv4: Oversized IP packet from 127.202.26.0 [ 101.396075][ T6029] loop2: detected capacity change from 0 to 1024 [ 101.466349][ T6029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.605213][ T6029] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 101.612275][ T28] audit: type=1804 audit(1750146712.591:2): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.72" name="/newroot/22/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 101.664053][ T6029] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 101.677911][ T6029] EXT4-fs (loop2): This should not happen!! Data will be lost [ 101.677911][ T6029] [ 101.696521][ T6029] EXT4-fs (loop2): Total free blocks count 0 [ 101.706175][ T6029] EXT4-fs (loop2): Free/Dirty block details [ 101.712400][ T6029] EXT4-fs (loop2): free_blocks=68451041280 [ 101.727473][ T6029] EXT4-fs (loop2): dirty_blocks=16 [ 101.732938][ T6029] EXT4-fs (loop2): Block reservation details [ 101.752821][ T6029] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 101.760505][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 101.762747][ T28] audit: type=1804 audit(1750146712.601:3): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.72" name="/newroot/22/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 101.956050][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.130358][ T6043] lo speed is unknown, defaulting to 1000 [ 102.243618][ T6053] IPv4: Oversized IP packet from 127.202.26.0 [ 103.720894][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 103.907194][ T6075] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 104.000881][ T6078] @: renamed from vlan0 (while UP) [ 104.073764][ T6081] siw: device registration error -23 [ 104.091523][ T6083] IPv4: Oversized IP packet from 127.202.26.0 [ 104.393804][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.423099][ T6097] futex_wake_op: syz.2.98 tries to shift op by -1; fix this program [ 105.699051][ T6101] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 105.900023][ T6103] lo speed is unknown, defaulting to 1000 [ 107.362709][ T28] audit: type=1326 audit(1750146718.351:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 107.434492][ T28] audit: type=1326 audit(1750146718.351:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 107.552939][ T28] audit: type=1326 audit(1750146718.391:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 107.672546][ T28] audit: type=1326 audit(1750146718.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 107.824260][ T28] audit: type=1326 audit(1750146718.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 107.988319][ T28] audit: type=1326 audit(1750146718.391:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 108.439150][ T28] audit: type=1326 audit(1750146718.391:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 108.549558][ T28] audit: type=1326 audit(1750146718.401:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 108.573316][ T6131] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 108.621933][ T6134] 9pnet_fd: Insufficient options for proto=fd [ 108.629468][ T28] audit: type=1326 audit(1750146718.401:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 108.653156][ T28] audit: type=1326 audit(1750146718.401:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0a18e929 code=0x7ffc0000 [ 108.715148][ T6134] $Hÿ: renamed from bond0 (while UP) [ 108.746443][ T6134] $Hÿ: entered promiscuous mode [ 108.751551][ T6134] bond_slave_0: entered promiscuous mode [ 108.794650][ T6134] bond_slave_1: entered promiscuous mode [ 109.282708][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.312114][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.341225][ T6152] bridge1: entered promiscuous mode [ 109.357307][ T6152] bridge1: entered allmulticast mode [ 109.480752][ T6152] netlink: 'syz.0.119': attribute type 4 has an invalid length. [ 109.703120][ T6159] siw: device registration error -23 [ 110.507015][ T6164] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 110.768859][ T6168] 9pnet_fd: Insufficient options for proto=fd [ 111.671845][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 112.777180][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 112.777195][ T28] audit: type=1326 audit(1750146723.771:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 112.840071][ T28] audit: type=1326 audit(1750146723.801:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 112.883989][ T28] audit: type=1326 audit(1750146723.801:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 112.927343][ T28] audit: type=1326 audit(1750146723.801:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 112.951442][ T28] audit: type=1326 audit(1750146723.801:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 112.995960][ T28] audit: type=1326 audit(1750146723.801:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 113.044570][ T28] audit: type=1326 audit(1750146723.811:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 113.074479][ T28] audit: type=1326 audit(1750146723.811:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 113.107854][ T28] audit: type=1326 audit(1750146723.811:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 113.135587][ T28] audit: type=1326 audit(1750146723.811:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 113.278755][ T6232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.292028][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 113.301334][ T6232] bridge_slave_0: left allmulticast mode [ 113.310191][ T6232] bridge_slave_0: left promiscuous mode [ 113.316304][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.391069][ T6234] siw: device registration error -23 [ 113.943556][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 114.054871][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.152'. [ 114.686529][ T6273] netlink: 'syz.3.166': attribute type 4 has an invalid length. [ 115.378588][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 115.388454][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 115.431210][ T6304] bridge0: entered promiscuous mode [ 115.452948][ T6304] bridge0: entered allmulticast mode [ 115.511667][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 115.919578][ T6321] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 116.044687][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 116.188482][ T6336] syz!: rxe_newlink: already configured on team_slave_0 [ 116.281432][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 116.610563][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 116.628805][ T6354] syz.3.202[6354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.629669][ T6354] syz.3.202[6354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.114371][ T6374] 9pnet_fd: Insufficient options for proto=fd [ 117.165704][ T6374] $Hÿ: renamed from bond0 (while UP) [ 117.182802][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 117.209550][ T6374] $Hÿ: entered promiscuous mode [ 117.240077][ T6374] bond_slave_0: entered promiscuous mode [ 117.280241][ T6374] bond_slave_1: entered promiscuous mode [ 117.427345][ T6388] xt_hashlimit: size too large, truncated to 1048576 [ 117.527319][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 118.243129][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 118.449388][ T6411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.554744][ T6411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.732206][ T6411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.829135][ T6411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.106253][ T6411] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.141751][ T6411] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.183929][ T6411] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.209955][ T6411] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.825136][ T6432] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 119.868071][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 120.319239][ T6449] bridge2: entered promiscuous mode [ 120.330989][ T6449] bridge2: entered allmulticast mode [ 121.646101][ T6467] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 121.994318][ T6472] __nla_validate_parse: 3 callbacks suppressed [ 121.994335][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. Stopping sshd: [ 122.072909][ T6476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.249'. [ 122.185088][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.250'. [ 122.228020][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 122.272031][ T6479] bridge3: entered promiscuous mode stopped /usr/sbin/sshd (pid 5537) [ 122.292618][ T6479] bridge3: entered allmulticast mode OK [ 122.385572][ T6482] 9pnet_fd: Insufficient options for proto=fd [ 122.416631][ T6482] $Hÿ: renamed from bond0 (while UP) [ 122.449133][ T6482] $Hÿ: entered promiscuous mode [ 122.462753][ T6482] bond_slave_0: entered promiscuous mode [ 122.482807][ T6482] bond_slave_1: entered promiscuous mode Stopping crond: stopped /usr/sbin/crond (pid 5520) OK [ 122.860354][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. Stopping dhcpcd... [ 123.119676][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.258'. [ 123.132874][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. stopped /sbin/dhcpcd (pid 5438) [ 123.171012][ T6506] bridge1: entered promiscuous mode [ 123.194025][ T6506] bridge1: entered allmulticast mode [ 123.276979][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 123.314441][ T6506] netlink: 'syz.3.258': attribute type 4 has an invalid length. Stopping network: [ 123.606300][ T6518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'. [ 123.623318][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.262'. [ 123.656704][ T6521] bridge4: entered promiscuous mode [ 123.676841][ T6521] bridge4: entered allmulticast mode [ 123.884951][ T6527] 9pnet_fd: Insufficient options for proto=fd [ 124.893355][ T6561] 9pnet_fd: Insufficient options for proto=fd OK Stopping iptables: OK Stopping system message bus: [ 125.906056][ T6594] 9pnet_fd: Insufficient options for proto=fd [ 127.457066][ T6617] __nla_validate_parse: 9 callbacks suppressed [ 127.457086][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. done [ 127.565462][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.294'. [ 127.764287][ T6625] (null): rxe_set_mtu: Set mtu to 1024 [ 127.779268][ T6625] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.026667][ T6634] hub 9-0:1.0: USB hub found [ 128.045157][ T6634] hub 9-0:1.0: 1 port detected [ 128.099509][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 128.184016][ T6645] capability: warning: `syz.3.301' uses deprecated v2 capabilities in a way that may be insecure [ 128.187149][ T6634] lo speed is unknown, defaulting to 1000 [ 128.214675][ T6644] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 128.358911][ T6651] smc: net device bond0 applied user defined pnetid SYZ0 [ 128.378461][ T6651] smc: net device bond0 erased user defined pnetid SYZ0 [ 128.449203][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'. [ 128.500400][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.306'. [ 128.694443][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 128.694458][ T28] audit: type=1326 audit(1750146739.691:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 128.751751][ T28] audit: type=1326 audit(1750146739.691:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 128.811141][ T28] audit: type=1326 audit(1750146739.691:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 128.880614][ T28] audit: type=1326 audit(1750146739.691:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 128.952668][ T28] audit: type=1326 audit(1750146739.691:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 129.009801][ T28] audit: type=1326 audit(1750146739.701:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 129.084920][ T28] audit: type=1326 audit(1750146739.701:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57618e929 code=0x7ffc0000 [ 129.238298][ T6673] netlink: 124 bytes leftover after parsing attributes in process `syz.2.314'. Stopping klogd: [ 129.399351][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 129.458954][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 129.567391][ T28] audit: type=1326 audit(1750146740.561:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf18e929 code=0x7ffc0000 [ 129.628846][ T28] audit: type=1326 audit(1750146740.561:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cf18e929 code=0x7ffc0000 [ 129.719500][ T28] audit: type=1326 audit(1750146740.601:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40cf18e929 code=0x7ffc0000 OK Stopping acpid: [ 130.037423][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 130.057235][ T6703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.326'. [ 130.121241][ T6703] bridge5: entered promiscuous mode [ 130.136199][ T6703] bridge5: entered allmulticast mode [ 130.846960][ T6728] bridge1: entered promiscuous mode [ 130.852678][ T6728] bridge1: entered allmulticast mode OK Stopping syslogd: stopped /sbin/syslogd (pid 5126) OK [ 131.826594][ T6759] hub 9-0:1.0: USB hub found [ 131.837250][ T6759] hub 9-0:1.0: 1 port detected [ 131.929594][ T6757] lo speed is unknown, defaulting to 1000 [ 131.939626][ T6759] lo speed is unknown, defaulting to 1000 umount: can't remount debugfs read-only [ 132.408468][ T6771] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 132.878537][ T6777] __nla_validate_parse: 6 callbacks suppressed [ 132.878555][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 133.179194][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.186210][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.348328][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.371'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 135.359995][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.45 closed by remote host. [ 136.442345][ T2931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.481102][ T2931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.568171][ T2931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 136.627055][ T2931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.594021][ T6850] smc: removing ib device syz! [ 137.609036][ T6850] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 137.629883][ T6850] ACPI: PM: Preparing to enter system sleep state S5 [ 137.641771][ T6850] kvm: exiting hardware virtualization [ 137.647556][ T6850] reboot: Power down serialport: VM disconnected.