last executing test programs: 1m24.291313661s ago: executing program 1 (id=418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) close(0x3) 1m24.138761328s ago: executing program 1 (id=420): syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x81000510) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x1b9, &(0x7f0000000800)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 1m23.585362855s ago: executing program 1 (id=422): mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x104) 1m21.772051664s ago: executing program 1 (id=429): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)={[{@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@fat=@quiet}, {@shortname_mixed}, {@utf8}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r1, 0x0, 0x0) stat(0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m21.501972572s ago: executing program 1 (id=433): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003180)=[{{0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1}}], 0x1, 0x58ca2280, 0x0) 1m19.714717196s ago: executing program 1 (id=443): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20000400) r0 = openat(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x13000}) 1m17.445066305s ago: executing program 32 (id=443): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20000400) r0 = openat(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x13000}) 1m7.69487522s ago: executing program 2 (id=473): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x800) shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmctl$SHM_INFO(r1, 0xe, 0x0) 1m7.382246096s ago: executing program 2 (id=475): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x20bc0, 0x11) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x0) 1m6.063920778s ago: executing program 2 (id=477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc, 0xa96}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86}, {0x0, 0x7, 0x2}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24005088}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 1m4.873735777s ago: executing program 2 (id=478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) io_setup(0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x0) socket(0x28, 0x6, 0x1) 1m4.466174839s ago: executing program 2 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x4, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x2, 0x0}, {[@generic={0x86, 0x12, "c56f142b5b0b504b28a331a169267bf7"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) unshare(0x20000600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m4.276589132s ago: executing program 2 (id=481): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8d42, 0xc000, 0x6, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)=""/203, 0xcb}], 0x1, &(0x7f0000000cc0)=""/221, 0xdd}, 0x100) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 49.011208657s ago: executing program 33 (id=481): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8d42, 0xc000, 0x6, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)=""/203, 0xcb}], 0x1, &(0x7f0000000cc0)=""/221, 0xdd}, 0x100) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 35.386023445s ago: executing program 0 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x33, 0x0, @void}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}}, 0x18}}, 0x800) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000002c0)={0xa002a014}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000104010200000000000000000100000108000440000000070500010001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) 34.321803312s ago: executing program 0 (id=548): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.321673982s ago: executing program 3 (id=549): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@norecovery}, {@grpid}, {@norecovery}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1868}}]}, 0xfe, 0x7a9, &(0x7f0000000c00)="$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") modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/181, 0xb5) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000810) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) brk(0x689d80000000) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x217) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) 34.269973121s ago: executing program 4 (id=550): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c932, 0x7000000, 0x1, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) readahead(r2, 0x1, 0x5000000000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) 33.061610094s ago: executing program 4 (id=551): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 32.411697948s ago: executing program 3 (id=552): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x20, 0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x40800) 31.200032441s ago: executing program 0 (id=553): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$inet(0x2, 0x800, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xfced) socket$nl_route(0x10, 0x3, 0x0) 31.199561571s ago: executing program 4 (id=554): syz_emit_ethernet(0xa0, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x82001, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x800, &(0x7f00000002c0)=ANY=[], 0xfd, 0x1524, &(0x7f0000001740)="$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") r1 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 31.194625142s ago: executing program 3 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0xf5}}], 0x48}, 0x0) 30.851785552s ago: executing program 0 (id=556): socket$inet(0x2, 0x3, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) 29.942204892s ago: executing program 3 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x201000c, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xb}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xfdc8565f289d494c) 28.919886182s ago: executing program 3 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61153c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07906706000005000000160302000ee60060bf500000000000002c650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 28.918041532s ago: executing program 0 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x101280) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write(0xffffffffffffffff, 0x0, 0x0) 28.916943213s ago: executing program 4 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 27.669532332s ago: executing program 4 (id=560): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 27.612509192s ago: executing program 3 (id=561): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000001c0)=[0x4], 0x0, 0x1, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000001c0)=[0x4], 0x0, 0x1, 0x1}}, 0x40) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 26.115925565s ago: executing program 0 (id=562): unshare(0x2a020480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r1, 0xc138fd0e, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x8004aee1, 0x2) 26.107560537s ago: executing program 4 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 11.835096888s ago: executing program 5 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.711793981s ago: executing program 5 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.44030023s ago: executing program 5 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.081223476s ago: executing program 5 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.625065248s ago: executing program 5 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 81.777634][ T5763] cgroup: Unknown subsys name 'net' [ 81.921818][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.610774][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.350006][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.392175][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.400193][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.415860][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.424923][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.425604][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.437372][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.447067][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.447754][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.463216][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.463613][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.472243][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.483347][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.486071][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.496149][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.502046][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.513685][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.521401][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.528687][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.537644][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.546440][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.572331][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.582805][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.591296][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.038136][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 86.129836][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.214220][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.261057][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.268960][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.276780][ T5779] bridge_slave_0: entered allmulticast mode [ 86.284490][ T5779] bridge_slave_0: entered promiscuous mode [ 86.329696][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.337153][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.344619][ T5779] bridge_slave_1: entered allmulticast mode [ 86.352103][ T5779] bridge_slave_1: entered promiscuous mode [ 86.360042][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.479433][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.497933][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.505504][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.513631][ T5776] bridge_slave_0: entered allmulticast mode [ 86.521205][ T5776] bridge_slave_0: entered promiscuous mode [ 86.540135][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.575821][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.584025][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.592186][ T5776] bridge_slave_1: entered allmulticast mode [ 86.599869][ T5776] bridge_slave_1: entered promiscuous mode [ 86.635736][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.645945][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.653254][ T5785] bridge_slave_0: entered allmulticast mode [ 86.660344][ T5785] bridge_slave_0: entered promiscuous mode [ 86.690141][ T5779] team0: Port device team_slave_0 added [ 86.699564][ T5779] team0: Port device team_slave_1 added [ 86.707209][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.717266][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.726278][ T5785] bridge_slave_1: entered allmulticast mode [ 86.734202][ T5785] bridge_slave_1: entered promiscuous mode [ 86.807967][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.830454][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.837849][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.845375][ T5774] bridge_slave_0: entered allmulticast mode [ 86.853860][ T5774] bridge_slave_0: entered promiscuous mode [ 86.863205][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.870246][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.899767][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.913931][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.920925][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.947329][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.960728][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.974888][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.984273][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.994657][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.001904][ T5774] bridge_slave_1: entered allmulticast mode [ 87.008898][ T5774] bridge_slave_1: entered promiscuous mode [ 87.070414][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.113321][ T5776] team0: Port device team_slave_0 added [ 87.158424][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.183586][ T5776] team0: Port device team_slave_1 added [ 87.202131][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.237211][ T5785] team0: Port device team_slave_0 added [ 87.297563][ T5785] team0: Port device team_slave_1 added [ 87.317081][ T5779] hsr_slave_0: entered promiscuous mode [ 87.325327][ T5779] hsr_slave_1: entered promiscuous mode [ 87.377046][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.385473][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.416752][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.498651][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.506377][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.538563][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.554175][ T5774] team0: Port device team_slave_0 added [ 87.592569][ T5777] Bluetooth: hci1: command tx timeout [ 87.598305][ T5777] Bluetooth: hci0: command tx timeout [ 87.620156][ T5774] team0: Port device team_slave_1 added [ 87.628484][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.640155][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.671668][ T5777] Bluetooth: hci3: command tx timeout [ 87.674273][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.681816][ T5777] Bluetooth: hci2: command tx timeout [ 87.737297][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.744785][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.771267][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.809330][ T5776] hsr_slave_0: entered promiscuous mode [ 87.816306][ T5776] hsr_slave_1: entered promiscuous mode [ 87.823600][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.831725][ T5776] Cannot create hsr debugfs directory [ 87.872569][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.879569][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.906305][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.919320][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.927143][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.953806][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.055047][ T5785] hsr_slave_0: entered promiscuous mode [ 88.062070][ T5785] hsr_slave_1: entered promiscuous mode [ 88.068682][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.076475][ T5785] Cannot create hsr debugfs directory [ 88.157124][ T5774] hsr_slave_0: entered promiscuous mode [ 88.164368][ T5774] hsr_slave_1: entered promiscuous mode [ 88.170600][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.179247][ T5774] Cannot create hsr debugfs directory [ 88.346425][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.385148][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.423681][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.435209][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.657281][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.669983][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.683912][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.700126][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.804215][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.811204][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.827914][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.838937][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.854020][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.948258][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.955616][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.968025][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.979769][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.001937][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.033655][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.040969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.110317][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.125093][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.132307][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.171401][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.217229][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.224448][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.261529][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.268713][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.398081][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.483806][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.515750][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.552675][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.559884][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.610488][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.617806][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.641005][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.673204][ T5781] Bluetooth: hci1: command tx timeout [ 89.678777][ T5777] Bluetooth: hci0: command tx timeout [ 89.752069][ T5777] Bluetooth: hci2: command tx timeout [ 89.757592][ T5777] Bluetooth: hci3: command tx timeout [ 89.855759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.863026][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.892069][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.899662][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.999779][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.059032][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.200733][ T5779] veth0_vlan: entered promiscuous mode [ 90.260186][ T5779] veth1_vlan: entered promiscuous mode [ 90.286830][ T5776] veth0_vlan: entered promiscuous mode [ 90.341082][ T5776] veth1_vlan: entered promiscuous mode [ 90.409806][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.489849][ T5776] veth0_macvtap: entered promiscuous mode [ 90.498232][ T5779] veth0_macvtap: entered promiscuous mode [ 90.517208][ T5779] veth1_macvtap: entered promiscuous mode [ 90.556541][ T5776] veth1_macvtap: entered promiscuous mode [ 90.606284][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.624092][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.636855][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.649921][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.676042][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.686255][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.698175][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.710487][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.724359][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.734210][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.743045][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.752318][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.773585][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.785141][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.795501][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.808861][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.825324][ T5774] veth0_vlan: entered promiscuous mode [ 90.860786][ T5774] veth1_vlan: entered promiscuous mode [ 90.884335][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.066882][ T5785] veth0_vlan: entered promiscuous mode [ 91.094428][ T5774] veth0_macvtap: entered promiscuous mode [ 91.126752][ T5785] veth1_vlan: entered promiscuous mode [ 91.135846][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.145245][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.171300][ T5774] veth1_macvtap: entered promiscuous mode [ 91.186867][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.197251][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.269650][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.281791][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.302057][ T5785] veth0_macvtap: entered promiscuous mode [ 91.329816][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.347861][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.360861][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.380782][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.394086][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.415099][ T5785] veth1_macvtap: entered promiscuous mode [ 91.456489][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.469387][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.469762][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.495547][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.506654][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.517738][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.530108][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.545073][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.554405][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.563679][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.573220][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.618163][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.633978][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.649407][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.669237][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.679749][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.693726][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.706102][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.735491][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.753363][ T5777] Bluetooth: hci0: command tx timeout [ 91.758852][ T5777] Bluetooth: hci1: command tx timeout [ 91.769568][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.784859][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.796863][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.810556][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.822664][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.833231][ T5777] Bluetooth: hci3: command tx timeout [ 91.838897][ T5777] Bluetooth: hci2: command tx timeout [ 91.863425][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.938682][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971803][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.980579][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.989682][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.215417][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.278963][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.433499][ T5853] xt_socket: unknown flags 0x4c [ 93.024933][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.067740][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.166838][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.209482][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.304646][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.322587][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.422024][ T5860] syz.3.7[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.483734][ T5859] CIFS: Attempting to mount //127.0.0.1/share [ 93.520666][ T5860] loop3: detected capacity change from 0 to 512 [ 93.623448][ T5860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.639955][ T5860] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.654645][ T5863] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 93.883958][ T5777] Bluetooth: hci1: command tx timeout [ 93.890106][ T5781] Bluetooth: hci0: command tx timeout [ 93.913382][ T5781] Bluetooth: hci2: command tx timeout [ 93.920576][ T5781] Bluetooth: hci3: command tx timeout [ 94.865167][ T5859] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 94.934343][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.943817][ T5859] CIFS: VFS: cifs_mount failed w/return code = -512 [ 97.065444][ T5777] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 97.283613][ T1190] cfg80211: failed to load regulatory.db [ 97.955924][ T5946] raw_sendmsg: syz.2.22 forgot to set AF_INET. Fix it! [ 98.160438][ T5926] loop0: detected capacity change from 0 to 32768 [ 98.301939][ T5926] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.413544][ T5961] loop2: detected capacity change from 0 to 164 [ 98.426660][ T5926] XFS (loop0): Ending clean mount [ 98.563352][ T5967] jffs2: notice: (5967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.647490][ T27] audit: type=1800 audit(1790660118.982:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 99.232437][ T27] audit: type=1800 audit(1790660119.572:3): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 99.234995][ T5983] smc: net device team0 applied user defined pnetid SYZ2 [ 99.634596][ T5983] smc: removing net device team0 with user defined pnetid SYZ2 [ 99.762572][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 99.868212][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 100.197270][ T5926] syz.0.18 (5926) used greatest stack depth: 20656 bytes left [ 100.357845][ T5785] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.579242][ T6002] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.192162][ T6020] capability: warning: `syz.3.34' uses deprecated v2 capabilities in a way that may be insecure [ 102.258827][ T6024] capability: warning: `syz.2.35' uses 32-bit capabilities (legacy support in use) [ 102.566056][ T6024] FAULT_INJECTION: forcing a failure. [ 102.566056][ T6024] name failslab, interval 1, probability 0, space 0, times 1 [ 103.490912][ T6024] CPU: 1 PID: 6024 Comm: syz.2.35 Not tainted syzkaller #0 [ 103.498238][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.508386][ T6024] Call Trace: [ 103.511727][ T6024] [ 103.514727][ T6024] dump_stack_lvl+0x18c/0x250 [ 103.519485][ T6024] ? show_regs_print_info+0x20/0x20 [ 103.524995][ T6024] ? load_image+0x420/0x420 [ 103.529591][ T6024] ? __might_sleep+0xe0/0xe0 [ 103.534310][ T6024] ? __lock_acquire+0x7d80/0x7d80 [ 103.539444][ T6024] ? asan.module_dtor+0x20/0x20 [ 103.544468][ T6024] should_fail_ex+0x394/0x4c0 [ 103.549224][ T6024] should_failslab+0x9/0x20 [ 103.553958][ T6024] slab_pre_alloc_hook+0x59/0x300 [ 103.559089][ T6024] kmem_cache_alloc_node+0x5e/0x310 [ 103.565178][ T6024] ? __alloc_skb+0x103/0x2c0 [ 103.569845][ T6024] __alloc_skb+0x103/0x2c0 [ 103.574623][ T6024] tipc_msg_build+0x163/0xe60 [ 103.579559][ T6024] ? tipc_node_find+0x3bb/0x490 [ 103.584475][ T6024] ? tipc_node_find+0xb4/0x490 [ 103.589436][ T6024] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 103.595723][ T6024] ? tipc_nametbl_lookup_anycast+0x11c/0xf00 [ 103.601922][ T6024] __tipc_sendmsg+0x1846/0x2b20 [ 103.607324][ T6024] ? __schedule+0x15b6/0x4660 [ 103.612991][ T6024] ? rht_unlock+0x1d0/0x1d0 [ 103.618037][ T6024] ? mark_lock+0x94/0x320 [ 103.622567][ T6024] ? verify_lock_unused+0x140/0x140 [ 103.628558][ T6024] ? asan.module_dtor+0x20/0x20 [ 103.634314][ T6024] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 103.641626][ T6024] ? lock_chain_count+0x20/0x20 [ 103.647023][ T6024] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 103.652904][ T6024] ? lockdep_hardirqs_on+0x98/0x150 [ 103.658173][ T6024] ? preempt_schedule+0xc0/0xd0 [ 103.663132][ T6024] ? tipc_sendmsg+0x47/0x70 [ 103.667720][ T6024] ? preempt_schedule_common+0x82/0xc0 [ 103.673991][ T6024] ? preempt_schedule+0xc0/0xd0 [ 103.678932][ T6024] ? schedule_preempt_disabled+0x20/0x20 [ 103.684786][ T6024] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 103.690993][ T6024] ? wait_woken+0x180/0x180 [ 103.695931][ T6024] ? _local_bh_enable+0xa0/0xa0 [ 103.700958][ T6024] tipc_sendmsg+0x55/0x70 [ 103.705354][ T6024] ? tipc_recvmsg+0x13d0/0x13d0 [ 103.710385][ T6024] ____sys_sendmsg+0x61b/0x980 [ 103.715830][ T6024] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 103.722247][ T6024] ? __asan_memset+0x22/0x40 [ 103.726912][ T6024] ? __sys_sendmsg_sock+0x30/0x30 [ 103.731995][ T6024] ? __import_iovec+0x3fa/0x850 [ 103.736953][ T6024] ? import_iovec+0x73/0xa0 [ 103.741539][ T6024] ___sys_sendmsg+0x2a6/0x360 [ 103.746543][ T6024] ? __sys_sendmsg+0x2b0/0x2b0 [ 103.751472][ T6024] __se_sys_sendmsg+0x1d0/0x2c0 [ 103.756422][ T6024] ? __x64_sys_sendmsg+0x80/0x80 [ 103.761491][ T6024] ? lockdep_hardirqs_on+0x98/0x150 [ 103.766799][ T6024] do_syscall_64+0x55/0xb0 [ 103.771472][ T6024] ? clear_bhb_loop+0x40/0x90 [ 103.777270][ T6024] ? clear_bhb_loop+0x40/0x90 [ 103.782030][ T6024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.788525][ T6024] RIP: 0033:0x7fcc0219e159 [ 103.793037][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.813631][ T6024] RSP: 002b:00007fcc02fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.822480][ T6024] RAX: ffffffffffffffda RBX: 00007fcc02425fa0 RCX: 00007fcc0219e159 [ 103.831033][ T6024] RDX: 0000000004046840 RSI: 0000200000000080 RDI: 0000000000000003 [ 103.839242][ T6024] RBP: 00007fcc0223506b R08: 0000000000000000 R09: 0000000000000000 [ 103.848071][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.856553][ T6024] R13: 00007fcc02426038 R14: 00007fcc02425fa0 R15: 00007ffd8397cf88 [ 103.866727][ T6024] [ 103.971475][ C0] sched: RT throttling activated [ 104.187085][ T6032] loop0: detected capacity change from 0 to 128 [ 104.233724][ T6032] ======================================================= [ 104.233724][ T6032] WARNING: The mand mount option has been deprecated and [ 104.233724][ T6032] and is ignored by this kernel. Remove the mand [ 104.233724][ T6032] option from the mount to silence this warning. [ 104.233724][ T6032] ======================================================= [ 104.399232][ T6032] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.459921][ T6032] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.627885][ T6034] loop3: detected capacity change from 0 to 1024 [ 104.698414][ T6034] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 104.753497][ T6034] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 104.793554][ T6034] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 104.828441][ T6034] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #5: comm syz.3.37: unexpected bad inode w/o EXT4_IGET_BAD [ 104.889372][ T6034] EXT4-fs (loop3): no journal found [ 104.911549][ T6034] EXT4-fs (loop3): can't get journal size [ 104.979847][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.004908][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.058886][ T6047] loop2: detected capacity change from 0 to 512 [ 105.101996][ T6047] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.171844][ T6047] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.246661][ T6047] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 105.273995][ T6049] Bluetooth: ISO socket layer initialized [ 105.328788][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.351857][ T5791] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.244673][ T5874] IPVS: starting estimator thread 0... [ 106.251636][ T6067] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 106.352039][ T6074] IPVS: using max 21 ests per chain, 50400 per kthread [ 108.065674][ T6098] syzkaller0: entered promiscuous mode [ 108.071379][ T6098] syzkaller0: entered allmulticast mode [ 108.112296][ T6098] tipc: Started in network mode [ 108.117395][ T6098] tipc: Node identity 0eef8ac0d2c4, cluster identity 4711 [ 108.133732][ T6098] tipc: Enabled bearer , priority 0 [ 108.325614][ T6096] tipc: Resetting bearer [ 108.744271][ T6111] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.293649][ T6096] tipc: Disabling bearer [ 109.344937][ T1190] tipc: Node number set to 3693841088 [ 110.725502][ T27] audit: type=1326 audit(1790660131.072:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 110.800748][ T27] audit: type=1326 audit(1790660131.072:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 110.837663][ T6144] futex_wake_op: syz.3.62 tries to shift op by 144; fix this program [ 110.865622][ T27] audit: type=1326 audit(1790660131.072:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 110.938024][ T27] audit: type=1326 audit(1790660131.072:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 110.998276][ T27] audit: type=1326 audit(1790660131.142:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2605b5e98e code=0x7ffc0000 [ 111.035922][ T27] audit: type=1326 audit(1790660131.142:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2605b5e98e code=0x7ffc0000 [ 111.069067][ T27] audit: type=1326 audit(1790660131.142:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2605b5e98e code=0x7ffc0000 [ 111.109432][ T27] audit: type=1326 audit(1790660131.142:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2605b5e98e code=0x7ffc0000 [ 111.162078][ T27] audit: type=1326 audit(1790660131.142:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2605b5e98e code=0x7ffc0000 [ 111.212966][ T27] audit: type=1326 audit(1790660131.142:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.59" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2605b5e98e code=0x7ffc0000 [ 112.693662][ T1190] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.545320][ T1190] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 113.576052][ T1190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.597327][ T1190] usb 4-1: config 0 descriptor?? [ 114.014032][ T6175] loop1: detected capacity change from 0 to 512 [ 114.041928][ T6175] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.132200][ T6175] FAT-fs (loop1): Directory bread(block 1056) failed [ 114.139179][ T6175] FAT-fs (loop1): Directory bread(block 1057) failed [ 114.146185][ T6175] FAT-fs (loop1): Directory bread(block 1058) failed [ 114.154061][ T6175] FAT-fs (loop1): Directory bread(block 1059) failed [ 114.161120][ T6175] FAT-fs (loop1): Directory bread(block 1060) failed [ 114.168361][ T6175] FAT-fs (loop1): Directory bread(block 1061) failed [ 114.175560][ T6175] FAT-fs (loop1): Directory bread(block 1062) failed [ 114.182542][ T6175] FAT-fs (loop1): Directory bread(block 1063) failed [ 114.189698][ T6175] FAT-fs (loop1): Directory bread(block 1064) failed [ 114.197276][ T6175] FAT-fs (loop1): Directory bread(block 1065) failed [ 116.120759][ T5817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.405019][ T1190] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 116.458127][ T1190] [drm] Initialized udl on minor 2 [ 116.486106][ T5817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.580659][ T1190] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 116.596747][ T1190] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 117.538174][ T5817] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 117.556693][ T5817] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 117.571420][ T1190] usb 4-1: USB disconnect, device number 2 [ 117.663567][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 117.840678][ T6202] Zero length message leads to an empty skb [ 117.928158][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 117.955636][ T6204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.963679][ T6204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.972269][ T6204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.979247][ T6204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.988363][ T6204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.995656][ T6204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.002492][ T6204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.009087][ T6204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.015785][ T6204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.022465][ T6204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.681934][ T5819] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.736260][ T6224] loop3: detected capacity change from 0 to 256 [ 120.331618][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 120.331638][ T27] audit: type=1326 audit(1790660140.662:80): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.3.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff58759e159 code=0x0 [ 121.314155][ T6251] loop1: detected capacity change from 0 to 8192 [ 121.374361][ T6251] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 121.404158][ T6251] loop1: partition table partially beyond EOD, truncated [ 121.430218][ T6251] loop1: p1 start 100663296 is beyond EOD, truncated [ 121.458089][ T6251] loop1: p2 size 134217732 extends beyond EOD, truncated [ 121.530591][ T6251] loop1: p4 size 14876672 extends beyond EOD, truncated [ 121.547876][ T6251] loop1: p5 size 134217732 extends beyond EOD, truncated [ 121.560625][ T6251] loop1: p6 size 14876672 extends beyond EOD, truncated [ 121.595241][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.033041][ T6266] loop1: detected capacity change from 0 to 256 [ 122.124293][ T6268] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.164257][ T6268] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 122.201498][ T5874] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.490287][ T6269] warning: `syz.0.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.944814][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.970434][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 123.005392][ T6042] udevd[6042]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 123.024518][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 123.040519][ T5874] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 123.049727][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 123.078677][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 123.116917][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.126049][ T5874] usb 3-1: Product: syz [ 123.130836][ T5874] usb 3-1: Manufacturer: syz [ 123.175447][ T5874] usb 3-1: SerialNumber: syz [ 123.226432][ T5874] usb-storage 3-1:1.0: USB Mass Storage device detected [ 123.277798][ T5874] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 123.319068][ T5874] scsi host1: usb-storage 3-1:1.0 [ 123.888850][ T5874] usb 3-1: USB disconnect, device number 2 [ 124.249767][ T5817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.653056][ T6297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.107'. [ 127.362101][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.118760][ T6334] geneve2: entered promiscuous mode [ 128.823980][ T6345] FAULT_INJECTION: forcing a failure. [ 128.823980][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 128.841008][ T6345] CPU: 0 PID: 6345 Comm: syz.3.123 Not tainted syzkaller #0 [ 128.848680][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.859050][ T6345] Call Trace: [ 128.864036][ T6345] [ 128.865657][ T6327] loop1: detected capacity change from 0 to 40427 [ 128.868559][ T6345] dump_stack_lvl+0x18c/0x250 [ 128.881006][ T6345] ? show_regs_print_info+0x20/0x20 [ 128.886438][ T6345] ? load_image+0x420/0x420 [ 128.891229][ T6345] should_fail_ex+0x394/0x4c0 [ 128.896183][ T6345] should_failslab+0x9/0x20 [ 128.901105][ T6345] slab_pre_alloc_hook+0x59/0x300 [ 128.906510][ T6345] kmem_cache_alloc+0x5a/0x2c0 [ 128.911639][ T6345] ? fib6_add_1+0x9ff/0x13c0 [ 128.916581][ T6345] fib6_add_1+0x9ff/0x13c0 [ 128.921526][ T6345] fib6_add+0x35d/0x49d0 [ 128.926610][ T6345] ? ip_fib_metrics_init+0x417/0x6f0 [ 128.932171][ T6345] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 128.937929][ T6345] ? do_raw_spin_lock+0x11f/0x2b0 [ 128.943830][ T6345] ? __rwlock_init+0x150/0x150 [ 128.949393][ T6345] ? ip6_route_add+0x75/0x160 [ 128.954162][ T6345] ip6_route_add+0x8a/0x160 [ 128.958740][ T6345] ipv6_route_ioctl+0x3af/0x500 [ 128.963740][ T6345] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 128.969348][ T6345] ? __might_fault+0xaa/0x120 [ 128.974080][ T6345] ? __might_fault+0xc6/0x120 [ 128.978882][ T6345] ? __might_fault+0xaa/0x120 [ 128.983605][ T6345] inet6_ioctl+0x247/0x2d0 [ 128.988246][ T6345] ? inet6_getname+0x670/0x670 [ 128.993260][ T6345] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 128.999260][ T6345] sock_do_ioctl+0xfc/0x310 [ 129.004274][ T6345] ? sock_show_fdinfo+0xb0/0xb0 [ 129.009188][ T6345] sock_ioctl+0x5be/0x7e0 [ 129.013740][ T6345] ? sock_poll+0x3e0/0x3e0 [ 129.019022][ T6345] ? bpf_lsm_file_ioctl+0x9/0x10 [ 129.025774][ T6345] ? security_file_ioctl+0x80/0xa0 [ 129.031344][ T6345] ? sock_poll+0x3e0/0x3e0 [ 129.036734][ T6345] __se_sys_ioctl+0xfd/0x170 [ 129.041427][ T6345] do_syscall_64+0x55/0xb0 [ 129.045898][ T6345] ? clear_bhb_loop+0x40/0x90 [ 129.051451][ T6345] ? clear_bhb_loop+0x40/0x90 [ 129.056572][ T6345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.064187][ T6345] RIP: 0033:0x7ff58759e159 [ 129.069093][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.090638][ T6345] RSP: 002b:00007ff58845c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.099702][ T6345] RAX: ffffffffffffffda RBX: 00007ff587825fa0 RCX: 00007ff58759e159 [ 129.114412][ T6345] RDX: 0000200000000980 RSI: 000000000000890b RDI: 0000000000000006 [ 129.123430][ T6345] RBP: 00007ff58763506b R08: 0000000000000000 R09: 0000000000000000 [ 129.133422][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.144585][ T6345] R13: 00007ff587826038 R14: 00007ff587825fa0 R15: 00007ffc3aea98f8 [ 129.153959][ T6345] [ 129.202700][ T6327] F2FS-fs (loop1): Unrecognized mount option "./bus" or missing value [ 129.736295][ T6352] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.296030][ T6350] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.580828][ T5874] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.607156][ T5874] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.627419][ T5874] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.646452][ T5874] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.655628][ T5874] rtc rtc0: __rtc_set_alarm: err=-22 [ 130.848564][ T6360] FAULT_INJECTION: forcing a failure. [ 130.848564][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 130.922976][ T6360] CPU: 1 PID: 6360 Comm: syz.1.128 Not tainted syzkaller #0 [ 130.932773][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.943707][ T6360] Call Trace: [ 130.947739][ T6360] [ 130.950757][ T6360] dump_stack_lvl+0x18c/0x250 [ 130.956521][ T6360] ? show_regs_print_info+0x20/0x20 [ 130.962530][ T6360] ? load_image+0x420/0x420 [ 130.968514][ T6360] ? __lock_acquire+0x7d80/0x7d80 [ 130.975061][ T6360] ? is_dynamic_key+0x260/0x260 [ 130.980836][ T6360] ? mark_lock+0x94/0x320 [ 130.986686][ T6360] should_fail_ex+0x394/0x4c0 [ 130.991455][ T6360] should_failslab+0x9/0x20 [ 130.996040][ T6360] slab_pre_alloc_hook+0x59/0x300 [ 131.001227][ T6360] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 131.006863][ T6360] __kmem_cache_alloc_node+0x53/0x250 [ 131.013524][ T6360] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 131.019293][ T6360] kmalloc_trace+0x2a/0xe0 [ 131.023863][ T6360] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 131.029767][ T6360] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 131.035194][ T6360] ? verify_lock_unused+0x140/0x140 [ 131.040991][ T6360] ? __might_sleep+0xe0/0xe0 [ 131.045662][ T6360] ? mark_lock+0x94/0x320 [ 131.050340][ T6360] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.056647][ T6360] ? lock_chain_count+0x20/0x20 [ 131.061560][ T6360] ? tcp_set_state+0x6c0/0x6c0 [ 131.066541][ T6360] tcp_sendmsg+0x2f/0x50 [ 131.071579][ T6360] __sys_sendto+0x4a9/0x6b0 [ 131.076619][ T6360] ? __ia32_sys_getpeername+0x90/0x90 [ 131.082465][ T6360] ? bpf_link_show_fdinfo+0x560/0x560 [ 131.088606][ T6360] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.095382][ T6360] ? lock_chain_count+0x20/0x20 [ 131.102421][ T6360] __x64_sys_sendto+0xde/0xf0 [ 131.107583][ T6360] do_syscall_64+0x55/0xb0 [ 131.113490][ T6360] ? clear_bhb_loop+0x40/0x90 [ 131.118859][ T6360] ? clear_bhb_loop+0x40/0x90 [ 131.123807][ T6360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.132926][ T6360] RIP: 0033:0x7fa124f9e159 [ 131.137944][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.158511][ T6360] RSP: 002b:00007fa125e3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.169401][ T6360] RAX: ffffffffffffffda RBX: 00007fa125225fa0 RCX: 00007fa124f9e159 [ 131.179719][ T6360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 131.188210][ T6360] RBP: 00007fa12503506b R08: 0000200000e68000 R09: 0000000000000010 [ 131.196413][ T6360] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 131.204954][ T6360] R13: 00007fa125226038 R14: 00007fa125225fa0 R15: 00007ffe282e0078 [ 131.214254][ T6360] [ 131.591606][ T1190] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.714953][ T1190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.734848][ T1190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.776595][ T1190] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.854247][ T1190] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 132.945468][ T1190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.968162][ T1190] usb 3-1: Product: syz [ 132.981724][ T1190] usb 3-1: Manufacturer: syz [ 132.986861][ T1190] usb 3-1: SerialNumber: syz [ 133.120743][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132922][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.144390][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.628416][ T1190] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 133.883942][ T1190] snd-usb-audio: probe of 3-1:1.0 failed with error -12 [ 133.910950][ T1190] usb 3-1: USB disconnect, device number 3 [ 133.985264][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.463752][ T6387] Illegal XDP return value 4291366912 on prog (id 15) dev N/A, expect packet loss! [ 134.513117][ T6390] loop5: detected capacity change from 0 to 7 [ 134.545267][ T6390] Dev loop5: unable to read RDB block 7 [ 134.566842][ T6390] loop5: AHDI p1 p3 p4 [ 134.571339][ T6390] loop5: partition table partially beyond EOD, truncated [ 134.620373][ T6390] loop5: p1 size 100663296 extends beyond EOD, truncated [ 134.659580][ T6390] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 134.757895][ T6393] Dev loop5: unable to read RDB block 7 [ 134.791905][ T6393] loop5: AHDI p1 p3 p4 [ 134.796412][ T6393] loop5: partition table partially beyond EOD, truncated [ 134.852096][ T6393] loop5: p1 size 100663296 extends beyond EOD, truncated [ 134.890790][ T6393] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 135.034784][ T4502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.461771][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 135.521333][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 135.667872][ T6406] syz.3.142 (6406) used greatest stack depth: 20488 bytes left [ 136.033406][ T6417] lo: entered promiscuous mode [ 137.482163][ T6417] tunl0: entered promiscuous mode [ 137.665101][ T6417] gre0: entered promiscuous mode [ 137.720581][ T6435] loop2: detected capacity change from 0 to 512 [ 137.736512][ T6435] ext2: Unknown parameter 'fsmagic' [ 137.927598][ T6417] gretap0: entered promiscuous mode [ 138.007930][ T6417] erspan0: entered promiscuous mode [ 138.079426][ T6417] ip_vti0: entered promiscuous mode [ 138.132192][ T6417] ip6_vti0: entered promiscuous mode [ 138.190165][ T6417] sit0: entered promiscuous mode [ 138.299761][ T6417] ip6tnl0: entered promiscuous mode [ 138.372770][ T6417] ip6gre0: entered promiscuous mode [ 138.447048][ T6417] syz_tun: entered promiscuous mode [ 138.520041][ T6417] ip6gretap0: entered promiscuous mode [ 138.608797][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.627736][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.666698][ T6417] bridge0: entered promiscuous mode [ 138.731270][ T6417] vcan0: entered promiscuous mode [ 138.872746][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.052031][ T6417] bond0: entered promiscuous mode [ 139.057301][ T6417] bond_slave_0: entered promiscuous mode [ 139.072062][ T6417] bond_slave_1: entered promiscuous mode [ 139.303656][ T6417] dummy0: entered promiscuous mode [ 139.781668][ T6417] nlmon0: entered promiscuous mode [ 139.804776][ T6417] caif0: entered promiscuous mode [ 139.882600][ T6417] batadv0: entered promiscuous mode [ 139.967515][ T6417] vxcan0: entered promiscuous mode [ 140.006449][ T6417] vxcan1: entered promiscuous mode [ 140.066472][ T6417] veth0: entered promiscuous mode [ 140.126513][ T6417] veth1: entered promiscuous mode [ 140.152513][ T3531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.272675][ T6417] wg0: entered promiscuous mode [ 140.431892][ T6417] wg1: entered promiscuous mode [ 140.552132][ T6417] wg2: entered promiscuous mode [ 140.632606][ T6417] veth0_to_bridge: entered promiscuous mode [ 140.734326][ T6417] veth1_to_bridge: entered promiscuous mode [ 140.866277][ T6417] veth0_to_bond: entered promiscuous mode [ 140.992292][ T6417] veth1_to_bond: entered promiscuous mode [ 141.101968][ T6417] veth0_to_team: entered promiscuous mode [ 141.124609][ T6417] team_slave_0: entered promiscuous mode [ 141.201884][ T6417] veth1_to_team: entered promiscuous mode [ 141.225808][ T6417] team_slave_1: entered promiscuous mode [ 141.312507][ T6417] veth0_to_batadv: entered promiscuous mode [ 141.325417][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.384870][ T6417] batadv_slave_0: entered promiscuous mode [ 141.442242][ T6417] veth1_to_batadv: entered promiscuous mode [ 141.476460][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.536499][ T6417] batadv_slave_1: entered promiscuous mode [ 141.613490][ T6417] xfrm0: entered promiscuous mode [ 141.673917][ T6417] veth0_to_hsr: entered promiscuous mode [ 141.753197][ T6417] veth1_to_hsr: entered promiscuous mode [ 141.835820][ T6417] hsr0: entered promiscuous mode [ 141.897931][ T6417] veth1_virt_wifi: entered promiscuous mode [ 141.950301][ T6417] veth0_virt_wifi: entered promiscuous mode [ 141.965524][ T6417] virt_wifi0: entered promiscuous mode [ 142.220180][ T6417] vlan0: entered promiscuous mode [ 142.408923][ T6417] vlan1: entered promiscuous mode [ 142.473688][ T6417] macvlan0: entered promiscuous mode [ 142.519688][ T6417] macvlan1: entered promiscuous mode [ 142.534014][ T6417] ipvlan0: entered promiscuous mode [ 142.551330][ T6417] ipvlan1: entered promiscuous mode [ 142.648396][ T6417] macvtap0: entered promiscuous mode [ 142.696871][ T6417] macsec0: entered promiscuous mode [ 142.783447][ T6417] geneve0: entered promiscuous mode [ 142.849849][ T6417] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.869120][ T6417] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.911539][ T6417] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.920709][ T6417] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.961687][ T6417] geneve1: entered promiscuous mode [ 143.009902][ T6417] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 143.042546][ T6417] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 143.131302][ T6417] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 143.172867][ T6417] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 143.203283][ T6417] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 143.210541][ T6417] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 143.231753][ T6417] syztnl0: entered promiscuous mode [ 143.237174][ T6417] erspan1: entered promiscuous mode [ 143.277240][ T6417] syzkaller0: entered promiscuous mode [ 143.646902][ T6459] input: syz1 as /devices/virtual/input/input5 [ 144.637168][ T142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.702342][ T6487] process 'syz.0.164' launched './file0' with NULL argv: empty string added [ 145.418502][ T6475] loop2: detected capacity change from 0 to 40427 [ 145.456688][ T6475] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 145.467026][ T6475] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.493409][ T6475] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 145.541506][ T6475] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.555870][ T27] audit: type=1326 audit(1790660165.902:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 145.641551][ T27] audit: type=1326 audit(1790660165.932:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 145.695713][ T27] audit: type=1326 audit(1790660165.932:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 145.757394][ T6475] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.764713][ T27] audit: type=1326 audit(1790660165.932:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 145.791793][ T6475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.851696][ T27] audit: type=1326 audit(1790660165.932:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 145.911871][ T142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.941643][ T27] audit: type=1326 audit(1790660165.932:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 146.021576][ T27] audit: type=1326 audit(1790660165.932:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 146.087232][ T27] audit: type=1326 audit(1790660165.942:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 146.139875][ T27] audit: type=1326 audit(1790660165.942:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2605b9e159 code=0x7ffc0000 [ 146.164167][ T27] audit: type=1326 audit(1790660165.942:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.0.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2605b9ddeb code=0x7ffc0000 [ 146.417422][ T6506] loop3: detected capacity change from 0 to 256 [ 146.561396][ T6506] FAT-fs (loop3): Directory bread(block 64) failed [ 146.568753][ T6506] FAT-fs (loop3): Directory bread(block 65) failed [ 146.611684][ T6506] FAT-fs (loop3): Directory bread(block 66) failed [ 146.618314][ T6506] FAT-fs (loop3): Directory bread(block 67) failed [ 146.652021][ T6506] FAT-fs (loop3): Directory bread(block 68) failed [ 146.658699][ T6506] FAT-fs (loop3): Directory bread(block 69) failed [ 146.701287][ T6506] FAT-fs (loop3): Directory bread(block 70) failed [ 146.721738][ T6506] FAT-fs (loop3): Directory bread(block 71) failed [ 146.749250][ T6506] FAT-fs (loop3): Directory bread(block 72) failed [ 146.757050][ T6506] FAT-fs (loop3): Directory bread(block 73) failed [ 148.875435][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 148.921585][ T6534] bridge_slave_1: left allmulticast mode [ 148.928489][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.010493][ T6534] bridge_slave_0: left allmulticast mode [ 149.041766][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.112824][ T1190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.469991][ T6542] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 149.668051][ T6544] bond1: (slave veth0_to_bond): making interface the new active one [ 149.748473][ T6544] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 149.910302][ T6542] macvlan2: entered promiscuous mode [ 149.936746][ T6542] macvlan2: entered allmulticast mode [ 149.953060][ T6542] bond1: entered promiscuous mode [ 149.971605][ T6542] veth0_to_bond: entered promiscuous mode [ 150.003677][ T6542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.044641][ T6542] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 150.089127][ T6542] bond1: left promiscuous mode [ 150.108123][ T6542] veth0_to_bond: left promiscuous mode [ 150.392891][ T4502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.515007][ T6558] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 150.647285][ T6558] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 150.705029][ T6558] team0: Failed to send options change via netlink (err -105) [ 150.713242][ T6558] team0: Port device netdevsim0 added [ 151.056377][ T2977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.674216][ T6558] syz.0.186 (6558) used greatest stack depth: 20232 bytes left [ 151.694514][ T6566] loop1: detected capacity change from 0 to 512 [ 151.707035][ T6566] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.261885][ T6583] tipc: Started in network mode [ 153.266853][ T6583] tipc: Node identity 2000004, cluster identity 4711 [ 153.274117][ T6583] tipc: Node number set to 33554436 [ 153.409100][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 153.420972][ T6589] bridge_slave_1: left allmulticast mode [ 153.439743][ T6589] bridge_slave_1: left promiscuous mode [ 153.456241][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.466553][ T1190] IPVS: starting estimator thread 0... [ 153.476996][ T6588] net_ratelimit: 14 callbacks suppressed [ 153.477012][ T6588] IPVS: nq: FWM 3 0x00000003 - no destination available [ 153.508742][ T6589] bridge_slave_0: left allmulticast mode [ 153.522817][ T6589] bridge_slave_0: left promiscuous mode [ 153.548179][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.595117][ T6591] IPVS: using max 19 ests per chain, 45600 per kthread [ 153.698684][ T6588] IPVS: Unknown mcast interface: nr0 [ 154.032109][ T6596] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 154.065505][ T6596] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 155.171271][ T6605] loop3: detected capacity change from 0 to 4096 [ 155.190887][ T6605] EXT4-fs (loop3): Test dummy encryption mode enabled [ 155.227801][ T6605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.493774][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.657343][ T6619] loop1: detected capacity change from 0 to 512 [ 155.681329][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.206'. [ 155.772910][ T6619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.836179][ T6621] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 155.889604][ T6619] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.927328][ T6621] bond1 (unregistering): Released all slaves [ 156.093352][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.153542][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.517032][ T6629] loop3: detected capacity change from 0 to 8 [ 156.566834][ T6629] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 156.861960][ T6616] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.868852][ T6616] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 156.877700][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.981201][ T6616] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 157.017529][ T6616] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.024340][ T6616] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.063064][ T6616] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.099258][ T6616] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.116635][ T6616] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 157.154865][ T6616] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 157.194277][ T6616] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.209249][ T6616] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.249016][ T6616] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.512674][ T6647] jffs2: notice: (6647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.625996][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.680657][ T6654] loop3: detected capacity change from 0 to 512 [ 157.778124][ T6654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.821860][ T6654] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.978332][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.161677][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.161700][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.421676][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.920743][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.191643][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.197970][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.287585][ T6680] loop2: detected capacity change from 0 to 8 [ 161.336139][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 161.344728][ T6680] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 161.629846][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.455923][ T3531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.636369][ T3531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.826294][ T6698] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 162.942349][ T6701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.967555][ T6701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.003663][ T6701] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 163.019221][ T6682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.030342][ T6701] bond0 (unregistering): Released all slaves [ 163.043318][ T6682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.051268][ T6682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.059068][ T6682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.352188][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.630596][ T6722] jffs2: notice: (6722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.662371][ T6722] overlayfs: failed to clone upperpath [ 165.144043][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.146516][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.195575][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.293734][ T6759] loop2: detected capacity change from 0 to 512 [ 167.363685][ T6759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 167.410489][ T6759] System zones: 1-12 [ 167.474974][ T6759] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.251: missing EA_INODE flag [ 167.543624][ T6759] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.251: error while reading EA inode 12 err=-117 [ 167.577880][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 167.592429][ T6759] EXT4-fs (loop2): 1 orphan inode deleted [ 167.608617][ T6766] bridge_slave_1: left allmulticast mode [ 167.616308][ T6759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.631393][ T6766] bridge_slave_1: left promiscuous mode [ 167.649086][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.683969][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.724572][ T6766] bridge_slave_0: left allmulticast mode [ 167.747671][ T6766] bridge_slave_0: left promiscuous mode [ 167.756465][ T3531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.847195][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.074052][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.115689][ T6790] Bluetooth: MGMT ver 1.22 [ 171.597377][ T6797] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 171.597377][ T6797] program syz.3.261 not setting count and/or reply_len properly [ 172.522186][ T6802] lo: entered promiscuous mode [ 173.020188][ T6802] tunl0: entered promiscuous mode [ 173.045623][ T6802] gre0: entered promiscuous mode [ 173.151920][ T6802] gretap0: entered promiscuous mode [ 173.422885][ T6802] erspan0: entered promiscuous mode [ 173.447244][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.489983][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.834159][ T6802] ip_vti0: entered promiscuous mode [ 173.867465][ T6802] ip6_vti0: entered promiscuous mode [ 173.890064][ T6802] sit0: entered promiscuous mode [ 173.946873][ T6802] ip6tnl0: entered promiscuous mode [ 173.980218][ T6802] ip6gre0: entered promiscuous mode [ 174.014014][ T6802] syz_tun: entered promiscuous mode [ 174.044044][ T6802] ip6gretap0: entered promiscuous mode [ 174.077158][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.086611][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.096842][ T6802] bridge0: entered promiscuous mode [ 174.124993][ T6802] vcan0: entered promiscuous mode [ 174.138212][ T6802] team0: entered promiscuous mode [ 174.146099][ T6802] team_slave_0: entered promiscuous mode [ 174.155266][ T6802] team_slave_1: entered promiscuous mode [ 174.172377][ T6802] dummy0: entered promiscuous mode [ 174.187577][ T6802] nlmon0: entered promiscuous mode [ 174.195740][ T6802] caif0: entered promiscuous mode [ 174.218481][ T6802] batadv0: entered promiscuous mode [ 174.235934][ T6802] vxcan0: entered promiscuous mode [ 174.244394][ T6802] vxcan1: entered promiscuous mode [ 174.266881][ T6802] veth0: entered promiscuous mode [ 174.300417][ T6802] veth1: entered promiscuous mode [ 174.323900][ T6802] wg0: entered promiscuous mode [ 174.347895][ T6802] wg1: entered promiscuous mode [ 174.370820][ T6802] wg2: entered promiscuous mode [ 174.393189][ T6802] veth0_to_bridge: entered promiscuous mode [ 174.458030][ T6802] veth1_to_bridge: entered promiscuous mode [ 174.507299][ T6802] veth0_to_bond: entered promiscuous mode [ 174.523993][ T6802] bond_slave_0: entered promiscuous mode [ 174.532538][ T6802] veth1_to_bond: entered promiscuous mode [ 174.544247][ T6802] bond_slave_1: entered promiscuous mode [ 174.568061][ T6802] veth0_to_team: entered promiscuous mode [ 174.613665][ T6802] veth1_to_team: entered promiscuous mode [ 174.660754][ T6802] veth0_to_batadv: entered promiscuous mode [ 174.676398][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.697888][ T6802] batadv_slave_0: entered promiscuous mode [ 174.733252][ T6802] veth1_to_batadv: entered promiscuous mode [ 174.749989][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.759110][ T6802] batadv_slave_1: entered promiscuous mode [ 174.783976][ T6802] xfrm0: entered promiscuous mode [ 174.824139][ T6802] veth0_to_hsr: entered promiscuous mode [ 174.868707][ T6802] veth1_to_hsr: entered promiscuous mode [ 174.917144][ T6802] hsr0: entered promiscuous mode [ 174.944440][ T6802] veth1_virt_wifi: entered promiscuous mode [ 174.975466][ T6802] veth0_virt_wifi: entered promiscuous mode [ 174.990672][ T6802] virt_wifi0: entered promiscuous mode [ 175.074350][ T6802] vlan0: entered promiscuous mode [ 175.080074][ T6802] vlan1: entered promiscuous mode [ 175.094564][ T6802] macvlan0: entered promiscuous mode [ 175.148648][ T6802] macvlan1: entered promiscuous mode [ 175.162446][ T6802] ipvlan0: entered promiscuous mode [ 175.168095][ T6802] ipvlan1: entered promiscuous mode [ 175.198026][ T6802] macvtap0: entered promiscuous mode [ 175.229055][ T6802] macsec0: entered promiscuous mode [ 175.255191][ T6802] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.264747][ T6802] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.278748][ T6802] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.288382][ T6802] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.301028][ T6802] geneve0: entered promiscuous mode [ 175.324549][ T6802] geneve1: entered promiscuous mode [ 175.331900][ T6802] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 175.343192][ T6802] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 175.401028][ T6802] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 175.425410][ T6802] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 175.441201][ T6802] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 175.448776][ T6802] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 175.461744][ T6802] bond1: entered promiscuous mode [ 175.631887][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 175.669049][ T6833] bridge_slave_1: left allmulticast mode [ 175.711147][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.744266][ T6833] bridge_slave_0: left allmulticast mode [ 175.751324][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.849337][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 177.887574][ T6851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.498064][ T6867] lo: entered promiscuous mode [ 179.586663][ T6870] loop3: detected capacity change from 0 to 2048 [ 179.664776][ T6870] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 179.718423][ T6872] xt_HMARK: spi-set and port-set can't be combined [ 179.735893][ T6870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.759069][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 179.759087][ T27] audit: type=1326 audit(1790660200.102:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.1.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa124f9e159 code=0x0 [ 179.998072][ T6867] tunl0: entered promiscuous mode [ 180.032554][ T6867] gre0: entered promiscuous mode [ 180.209427][ T6867] gretap0: entered promiscuous mode [ 180.261141][ T6867] erspan0: entered promiscuous mode [ 180.294895][ T6867] ip_vti0: entered promiscuous mode [ 180.316773][ T6867] ip6_vti0: entered promiscuous mode [ 180.348904][ T6867] sit0: entered promiscuous mode [ 180.403748][ T6867] ip6tnl0: entered promiscuous mode [ 180.434803][ T6867] ip6gre0: entered promiscuous mode [ 180.468263][ T6867] syz_tun: entered promiscuous mode [ 180.510715][ T6867] ip6gretap0: entered promiscuous mode [ 180.572953][ T6867] vcan0: entered promiscuous mode [ 180.593781][ T6867] bond0: entered promiscuous mode [ 180.599827][ T6867] bond_slave_0: entered promiscuous mode [ 180.610206][ T6867] bond_slave_1: entered promiscuous mode [ 180.660527][ T6867] team0: entered promiscuous mode [ 180.676574][ T6867] team_slave_0: entered promiscuous mode [ 180.688685][ T6867] team_slave_1: entered promiscuous mode [ 180.731093][ T6867] dummy0: entered promiscuous mode [ 180.767347][ T6867] nlmon0: entered promiscuous mode [ 180.786496][ T6867] caif0: entered promiscuous mode [ 180.803184][ T6867] batadv0: entered promiscuous mode [ 180.858353][ T6867] vxcan0: entered promiscuous mode [ 180.889568][ T6867] vxcan1: entered promiscuous mode [ 180.922439][ T6867] veth0: entered promiscuous mode [ 181.062549][ T6867] veth1: entered promiscuous mode [ 181.157349][ T6867] wg0: entered promiscuous mode [ 181.263508][ T6867] wg1: entered promiscuous mode [ 182.030616][ T6867] wg2: entered promiscuous mode [ 182.057153][ T6867] veth0_to_bridge: entered promiscuous mode [ 182.096521][ T6867] bridge_slave_0: entered promiscuous mode [ 182.131913][ T6867] veth1_to_bridge: entered promiscuous mode [ 182.168589][ T6867] bridge_slave_1: entered promiscuous mode [ 182.194824][ T6867] veth0_to_bond: entered promiscuous mode [ 182.247690][ T6867] veth1_to_bond: entered promiscuous mode [ 182.297650][ T6867] veth0_to_team: entered promiscuous mode [ 182.374893][ T6867] veth1_to_team: entered promiscuous mode [ 182.436424][ T6867] veth0_to_batadv: entered promiscuous mode [ 182.448526][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.481159][ T6867] batadv_slave_0: entered promiscuous mode [ 182.517792][ T6867] veth1_to_batadv: entered promiscuous mode [ 182.542045][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.562037][ T6867] batadv_slave_1: entered promiscuous mode [ 182.598170][ T6867] xfrm0: entered promiscuous mode [ 182.636955][ T6867] veth0_to_hsr: entered promiscuous mode [ 182.699926][ T6867] veth1_to_hsr: entered promiscuous mode [ 182.780067][ T6867] hsr0: entered promiscuous mode [ 182.839307][ T6867] veth1_virt_wifi: entered promiscuous mode [ 182.895028][ T6867] veth0_virt_wifi: entered promiscuous mode [ 182.914338][ T6867] virt_wifi0: entered promiscuous mode [ 183.032562][ T6867] vlan0: entered promiscuous mode [ 183.048499][ T6867] vlan1: entered promiscuous mode [ 183.064867][ T6867] macvlan0: entered promiscuous mode [ 183.150959][ T6867] macvlan1: entered promiscuous mode [ 183.171937][ T6867] ipvlan0: entered promiscuous mode [ 183.181908][ T6867] ipvlan1: entered promiscuous mode [ 183.276988][ T6867] macvtap0: entered promiscuous mode [ 183.319301][ T6867] macsec0: entered promiscuous mode [ 183.359188][ T6867] geneve0: entered promiscuous mode [ 183.404492][ T6867] geneve1: entered promiscuous mode [ 183.444841][ T6867] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 183.478130][ T6867] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 183.507359][ T6867] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 183.547821][ T6867] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 183.566992][ T6867] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 183.582180][ T6867] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 183.589549][ T6867] syztnl2: entered promiscuous mode [ 183.599603][ T6867] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.610737][ T6867] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.622752][ T6867] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.637569][ T6867] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.680989][ T6894] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 185.442755][ T6927] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 185.442755][ T6927] program syz.1.295 not setting count and/or reply_len properly [ 186.600295][ T6931] syzkaller0: entered promiscuous mode [ 186.621550][ T6931] syzkaller0: entered allmulticast mode [ 189.041583][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.685132][ T6965] syzkaller0: entered allmulticast mode [ 189.998784][ T6974] loop3: detected capacity change from 0 to 4096 [ 190.246998][ T6974] EXT4-fs: Ignoring removed orlov option [ 190.274830][ T6974] EXT4-fs (loop3): Test dummy encryption mode enabled [ 190.367294][ T6974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.173305][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.991530][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.072664][ T6974] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 193.280047][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.503704][ T7003] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 193.503704][ T7003] program syz.2.319 not setting count and/or reply_len properly [ 194.569666][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.582508][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.109459][ T7023] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 195.221745][ T7026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.282856][ T7026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.323908][ T7026] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 195.343322][ T7026] bond0 (unregistering): Released all slaves [ 195.557102][ T7033] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 196.475229][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.468746][ T7057] loop3: detected capacity change from 0 to 256 [ 197.520111][ T7057] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 197.553863][ T7055] syzkaller0: entered promiscuous mode [ 197.560171][ T7055] syzkaller0: entered allmulticast mode [ 197.601062][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 197.842786][ T7064] loop3: detected capacity change from 0 to 512 [ 197.885285][ T7064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 197.895925][ T7064] System zones: 1-12 [ 197.917125][ T7064] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.337: missing EA_INODE flag [ 197.957028][ T7064] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.337: error while reading EA inode 12 err=-117 [ 197.972121][ T7064] EXT4-fs (loop3): 1 orphan inode deleted [ 197.979828][ T7064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.551889][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.915010][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.136150][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.991890][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.339319][ T7144] netlink: 276 bytes leftover after parsing attributes in process `syz.2.359'. [ 206.370745][ T7160] loop2: detected capacity change from 0 to 512 [ 206.631879][ T7160] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.730268][ T7160] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 206.782024][ T7160] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 206.802273][ T7160] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.370: Failed to acquire dquot type 1 [ 206.846948][ T7160] EXT4-fs (loop2): 1 truncate cleaned up [ 206.868023][ T7160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 206.967012][ T7160] EXT4-fs (loop2): shut down requested (0) [ 207.149559][ T7173] mmap: syz.0.375 (7173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.162188][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 207.366964][ T7181] netlink: 11 bytes leftover after parsing attributes in process `syz.2.377'. [ 207.632830][ T7186] vlan2: entered allmulticast mode [ 207.638024][ T7186] veth0_to_bond: entered allmulticast mode [ 208.551153][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 211.512945][ T7238] netlink: 11 bytes leftover after parsing attributes in process `syz.0.392'. [ 211.580943][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 213.080567][ T7250] loop1: detected capacity change from 0 to 512 [ 213.131071][ T7250] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.214648][ T7250] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 213.252643][ T7250] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 213.332968][ T7250] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.398: Failed to acquire dquot type 1 [ 213.392194][ T7250] EXT4-fs (loop1): 1 truncate cleaned up [ 213.403701][ T7250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 213.559814][ T7250] EXT4-fs (loop1): shut down requested (0) [ 213.759128][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 214.810719][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 214.851579][ T28] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 215.058309][ T28] usb 2-1: not running at top speed; connect to a high speed hub [ 215.104583][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 215.143381][ T28] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 215.162075][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.195935][ T28] usb 2-1: Product: syz [ 215.225856][ T28] usb 2-1: Manufacturer: syz [ 215.230529][ T28] usb 2-1: SerialNumber: syz [ 215.273084][ T7270] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 215.300377][ T28] oti6858 2-1:1.0: oti6858 converter detected [ 215.349614][ T28] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 215.742650][ C0] usb 2-1: oti6858_read_int_callback(): usb_submit_urb() failed with error -1 [ 215.755316][ T28] usb 2-1: USB disconnect, device number 2 [ 215.900771][ T28] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 215.942895][ T28] oti6858 2-1:1.0: device disconnected [ 216.471955][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.676921][ T5874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.693457][ T7301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.705515][ T5874] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.725518][ T5874] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 216.739927][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.858592][ T7305] lo: entered allmulticast mode [ 216.908382][ T7305] mroute: pending queue full, dropping entries [ 216.923322][ T7304] lo: left allmulticast mode [ 217.139784][ T7311] loop1: detected capacity change from 0 to 16 [ 217.196242][ T7311] erofs: (device loop1): mounted with root inode @ nid 36. [ 218.359890][ T5874] usb 4-1: USB disconnect, device number 3 [ 219.202766][ T7338] lo: entered allmulticast mode [ 219.327255][ T7337] lo: left allmulticast mode [ 219.443138][ T7344] loop1: detected capacity change from 0 to 128 [ 219.630836][ T5774] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 219.650434][ T5774] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 219.926406][ T7355] tipc: Enabling of bearer rejected, failed to enable media [ 221.192605][ T11] tipc: Left network mode [ 224.009213][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 224.335227][ T7398] jffs2: notice: (7398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 224.387749][ T7400] overlayfs: failed to clone upperpath [ 225.568862][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 225.604552][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 225.696305][ T7411] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.706082][ T7411] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.714947][ T7411] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.723766][ T7411] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.778216][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.810724][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.837960][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.849116][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.875862][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.883955][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.941711][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 225.961030][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 226.246275][ T7419] FAULT_INJECTION: forcing a failure. [ 226.246275][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 226.293187][ T7419] CPU: 1 PID: 7419 Comm: syz.3.452 Not tainted syzkaller #0 [ 226.300578][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.310706][ T7419] Call Trace: [ 226.314047][ T7419] [ 226.317659][ T7419] dump_stack_lvl+0x18c/0x250 [ 226.322881][ T7419] ? show_regs_print_info+0x20/0x20 [ 226.328252][ T7419] ? load_image+0x420/0x420 [ 226.333201][ T7419] ? __might_sleep+0xe0/0xe0 [ 226.339311][ T7419] ? __lock_acquire+0x7d80/0x7d80 [ 226.346590][ T7419] should_fail_ex+0x394/0x4c0 [ 226.352227][ T7419] should_failslab+0x9/0x20 [ 226.358768][ T7419] slab_pre_alloc_hook+0x59/0x300 [ 226.365844][ T7419] ? kvmalloc_node+0x70/0x180 [ 226.371107][ T7419] ? kvmalloc_node+0x70/0x180 [ 226.371145][ T7419] __kmem_cache_alloc_node+0x53/0x250 [ 226.385242][ T7419] ? kvmalloc_node+0x70/0x180 [ 226.389999][ T7419] __kmalloc_node+0xa6/0x240 [ 226.394654][ T7419] kvmalloc_node+0x70/0x180 [ 226.399269][ T7419] nf_hook_entries_grow+0x27c/0x710 [ 226.404743][ T7419] __nf_register_net_hook+0x2c9/0x910 [ 226.410235][ T7419] nf_register_net_hook+0xb2/0x190 [ 226.415554][ T7419] nf_register_net_hooks+0x44/0x1b0 [ 226.421805][ T7419] ipt_register_table+0x51a/0x7b0 [ 226.430143][ T7419] ? trace_packet+0x4a0/0x4a0 [ 226.436738][ T7419] ? ipt_alloc_initial_table+0x4ff/0x610 [ 226.443172][ T7419] iptable_mangle_table_init+0x41/0x60 [ 226.449720][ T7419] xt_find_table_lock+0x304/0x3e0 [ 226.457184][ T7419] do_ipt_set_ctl+0x2c0/0xe00 [ 226.463205][ T7419] ? ipt_unregister_table_exit+0x230/0x230 [ 226.470546][ T7419] ? trace_contention_end+0x39/0xe0 [ 226.476275][ T7419] ? __mutex_lock+0x30d/0xc80 [ 226.481630][ T7419] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 226.487606][ T7419] ? mutex_unlock+0x10/0x10 [ 226.492198][ T7419] ? aa_af_perm+0x330/0x330 [ 226.496787][ T7419] nf_setsockopt+0x263/0x280 [ 226.503511][ T7419] ? sock_common_recvmsg+0x190/0x190 [ 226.509969][ T7419] do_sock_setsockopt+0x175/0x1a0 [ 226.515052][ T7419] ? __fdget+0x180/0x210 [ 226.515092][ T7419] __x64_sys_setsockopt+0x182/0x200 [ 226.515129][ T7419] do_syscall_64+0x55/0xb0 [ 226.515160][ T7419] ? clear_bhb_loop+0x40/0x90 [ 226.515188][ T7419] ? clear_bhb_loop+0x40/0x90 [ 226.519787][ T7419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.529989][ T7419] RIP: 0033:0x7ff58759e159 [ 226.539428][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.553330][ T7419] RSP: 002b:00007ff58843b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 226.553360][ T7419] RAX: ffffffffffffffda RBX: 00007ff587826090 RCX: 00007ff58759e159 [ 226.553379][ T7419] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000006 [ 226.553394][ T7419] RBP: 00007ff58763506b R08: 0000000000000078 R09: 0000000000000000 [ 226.584557][ T7419] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 226.604249][ T7419] R13: 00007ff587826128 R14: 00007ff587826090 R15: 00007ffc3aea98f8 [ 226.604295][ T7419] [ 227.398029][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.633228][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.991827][ T5781] Bluetooth: hci0: command tx timeout [ 228.074237][ T7447] jffs2: notice: (7447) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 228.255504][ T11] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 228.315007][ T11] bond1 (unregistering): Released all slaves [ 229.744710][ T11] team0 (unregistering): Port device team_slave_1 removed [ 229.820440][ T11] team0 (unregistering): Port device team_slave_0 removed [ 230.089966][ T5781] Bluetooth: hci0: command tx timeout [ 230.634247][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.007052][ T7462] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 232.015922][ T7462] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 232.025826][ T7462] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 232.152365][ T5781] Bluetooth: hci0: command tx timeout [ 232.652770][ T7415] chnl_net:caif_netlink_parms(): no params data found [ 232.963384][ T11] IPVS: stop unused estimator thread 0... [ 233.099952][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.108748][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.116261][ T7415] bridge_slave_0: entered allmulticast mode [ 233.124925][ T7415] bridge_slave_0: entered promiscuous mode [ 233.140837][ T7415] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.148549][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.156303][ T7415] bridge_slave_1: entered allmulticast mode [ 233.164847][ T7415] bridge_slave_1: entered promiscuous mode [ 233.289637][ T7415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.325818][ T7415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.495169][ T7513] loop3: detected capacity change from 0 to 2048 [ 233.589435][ T7513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.765274][ T7415] team0: Port device team_slave_0 added [ 233.825968][ T7415] team0: Port device team_slave_1 added [ 234.232015][ T5781] Bluetooth: hci0: command tx timeout [ 235.027244][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.270224][ T7415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.315872][ T7415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.512463][ T7415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.621847][ T7415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.690643][ T7415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.894026][ T7415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.525699][ T5781] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 236.645497][ T7415] hsr_slave_0: entered promiscuous mode [ 236.672209][ T7415] hsr_slave_1: entered promiscuous mode [ 236.690024][ T7415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.711115][ T7415] Cannot create hsr debugfs directory [ 239.089519][ T7575] tipc: Failed to remove unknown binding: 66,0,0/0:1521694649/1521694651 [ 239.111991][ T7573] tipc: Failed to remove unknown binding: 66,0,0/0:2656380411/2656380412 [ 239.120982][ T7573] tipc: Failed to remove unknown binding: 66,0,0/0:2656380411/2656380412 [ 239.141040][ T7415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.199658][ T7415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.229513][ T7415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.249804][ T7415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.787382][ T7415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.820258][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 240.073498][ T7415] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.117903][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.126473][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.143201][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.150632][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.425376][ T7415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.617967][ T7415] veth0_vlan: entered promiscuous mode [ 240.640566][ T7415] veth1_vlan: entered promiscuous mode [ 240.750089][ T7415] veth0_macvtap: entered promiscuous mode [ 240.775653][ T7613] bridge0: port 1(syz_tun) entered blocking state [ 240.786597][ T7613] bridge0: port 1(syz_tun) entered disabled state [ 240.794285][ T7613] syz_tun: entered allmulticast mode [ 240.802473][ T7613] syz_tun: entered promiscuous mode [ 240.812318][ T7613] bridge0: port 1(syz_tun) entered blocking state [ 240.822635][ T7613] bridge0: port 1(syz_tun) entered forwarding state [ 240.881160][ T7415] veth1_macvtap: entered promiscuous mode [ 240.974466][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.013941][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.063515][ T7415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.106177][ T7415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.131566][ T7415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.153398][ T7415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.187142][ T7415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.221204][ T7415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.249561][ T7415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.275271][ T7415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.751046][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.939558][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.765737][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.787261][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.215603][ C0] net_ratelimit: 31 callbacks suppressed [ 244.882002][ T27] audit: type=1804 audit(1790660277.218:129): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/115/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 244.909264][ T7663] netlink: 184 bytes leftover after parsing attributes in process `syz.4.498'. [ 244.940587][ T7663] bond0: entered allmulticast mode [ 244.959070][ T7663] bond_slave_0: entered allmulticast mode [ 244.972043][ T7663] bond_slave_1: entered allmulticast mode [ 246.176382][ T5142] udevd[5142]: could not touch /run/udev/queue: No such file or directory [ 248.382774][ T7714] loop0: detected capacity change from 0 to 32768 [ 248.971901][ T7727] loop4: detected capacity change from 0 to 8 [ 249.431451][ C1] net_ratelimit: 27 callbacks suppressed [ 249.945788][ T7734] jffs2: notice: (7734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 250.265910][ T7739] loop4: detected capacity change from 0 to 512 [ 250.289009][ T7739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.328650][ T7739] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 250.356102][ T7739] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 250.371043][ T7739] EXT4-fs (loop4): group descriptors corrupted! [ 252.360385][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 253.942950][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.956959][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.969758][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.984753][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.994311][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.004653][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.862272][ T7788] loop3: detected capacity change from 0 to 8 [ 255.020541][ C1] net_ratelimit: 7 callbacks suppressed [ 255.837113][ T7798] overlayfs: failed to clone upperpath [ 255.965491][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.972546][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.779807][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.800060][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.828296][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.858382][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.886358][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.905373][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.728475][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.761151][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.771058][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.785305][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.802635][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 259.813506][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.251176][ C1] net_ratelimit: 10 callbacks suppressed [ 260.299156][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.324418][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.246325][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.279797][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.299002][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.315280][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.327585][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 261.336627][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.267223][ T4502] team0 (unregistering): Port device team_slave_1 removed [ 262.463387][ T7855] overlayfs: failed to verify upper (/file0, ino=8195, err=-116) [ 262.484102][ T7855] overlayfs: failed to verify index dir 'upper' xattr [ 262.514641][ T7855] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 262.530421][ T4502] team0 (unregistering): Port device team_slave_0 removed [ 262.735923][ T4502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.192846][ T7860] netlink: 180 bytes leftover after parsing attributes in process `syz.0.542'. [ 263.202641][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 264.073236][ T4502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.241503][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.256176][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.266188][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.313269][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.323252][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.333872][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.366318][ T4502] bond0 (unregistering): Released all slaves [ 265.459047][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 265.479922][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 265.502958][ T7865] net_ratelimit: 12 callbacks suppressed [ 265.502973][ T7865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.739485][ T7875] netlink: 196 bytes leftover after parsing attributes in process `syz.3.546'. [ 266.040970][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.547'. [ 266.979703][ T7889] loop3: detected capacity change from 0 to 2048 [ 267.999160][ T7889] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c11c, mo2=0002] [ 268.097873][ T7889] System zones: 0-7 [ 268.133742][ T7889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.336548][ T7910] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 16: comm syz.3.549: lblock 0 mapped to illegal pblock 16 (length 1) [ 268.482568][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.495483][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.508369][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.518250][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.530017][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 268.538031][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.781070][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.700367][ T7904] syz.0.548 (7904) used greatest stack depth: 20200 bytes left [ 270.035247][ T7928] loop4: detected capacity change from 0 to 256 [ 270.095984][ T7928] exFAT-fs (loop4): bogus fat length [ 270.141377][ T7928] exFAT-fs (loop4): failed to read boot sector [ 270.147636][ T7928] exFAT-fs (loop4): failed to recognize exfat type [ 270.274281][ T7474] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.949819][ C0] net_ratelimit: 7 callbacks suppressed [ 272.215698][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.244265][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.261520][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.286101][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.312377][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.322105][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.659501][ T7969] loop4: detected capacity change from 0 to 128 [ 275.145679][ T7985] tipc: Started in network mode [ 275.151154][ T7985] tipc: Node identity 2e3574c20a88, cluster identity 4711 [ 275.158578][ T7985] tipc: Enabled bearer , priority 0 [ 275.182451][ T7984] tipc: Disabling bearer [ 275.384968][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.398147][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.408892][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.421442][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.434640][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.442897][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.657191][ C1] net_ratelimit: 7 callbacks suppressed [ 276.747713][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.760419][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.770493][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.781220][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.791694][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.799787][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.212370][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.226392][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.236647][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.249505][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.260814][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.268984][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.797336][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.809459][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.818831][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.829079][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.838108][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.847600][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.430849][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.441007][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.451891][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.465990][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.474504][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.491418][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.823881][ C1] net_ratelimit: 11 callbacks suppressed [ 283.249460][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.261532][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.276497][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.287929][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.299934][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.312485][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.091634][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.103074][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.112084][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.125056][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.134778][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.142568][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.920410][ T4513] net_ratelimit: 8 callbacks suppressed [ 287.095650][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.106348][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.116831][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.127010][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.140333][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.152870][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.162300][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.173617][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.183856][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.194146][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.202988][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 289.211223][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.274743][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.288257][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.297170][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.312117][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.322235][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.333182][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.182632][ C1] net_ratelimit: 10 callbacks suppressed [ 293.541078][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.554381][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.565909][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.580034][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.593852][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.602470][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.898182][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.911223][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.920431][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.930314][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.939351][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.947543][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.370362][ C1] net_ratelimit: 9 callbacks suppressed [ 298.350244][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.361370][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.373165][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.383235][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.393235][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.403952][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.981160][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.993199][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.005400][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.018411][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.030831][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 301.039418][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=521 state=3 status=67 (errno 9: Bad file descriptor) [ 301.907590][ T5785] bridge0: port 1(syz_tun) entered disabled state [ 301.985634][ T5785] syz_tun (unregistering): left allmulticast mode [ 302.012495][ T5785] syz_tun (unregistering): left promiscuous mode [ 302.019134][ T5785] bridge0: port 1(syz_tun) entered disabled state [ 302.213195][ T4513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.358758][ T4513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.436611][ T4513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.512704][ T4513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.561815][ C1] net_ratelimit: 8 callbacks suppressed [ 302.712768][ T4513] tipc: Left network mode [ 303.740840][ T4513] hsr_slave_0: left promiscuous mode [ 303.749328][ T4513] hsr_slave_1: left promiscuous mode [ 303.759390][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.767742][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.776548][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.784245][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.792974][ T4513] bridge_slave_1: left allmulticast mode [ 303.798704][ T4513] bridge_slave_1: left promiscuous mode [ 303.808106][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.833712][ T4513] bridge_slave_0: left allmulticast mode [ 303.839668][ T4513] bridge_slave_0: left promiscuous mode [ 303.845783][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.888313][ T4513] veth1_macvtap: left promiscuous mode [ 303.896014][ T4513] veth0_macvtap: left promiscuous mode [ 303.902285][ T4513] veth1_vlan: left promiscuous mode [ 303.907868][ T4513] veth0_vlan: left promiscuous mode [ 305.035327][ T4513] team0 (unregistering): Port device team_slave_1 removed [ 305.113892][ T4513] team0 (unregistering): Port device team_slave_0 removed [ 305.192218][ T4513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.201822][ T4513] bond_slave_1 (unregistering): left allmulticast mode [ 305.275524][ T4513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.285426][ T4513] bond_slave_0 (unregistering): left allmulticast mode [ 305.901751][ T4513] bond0 (unregistering): Released all slaves [ 306.779318][ T4513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.790247][ T4513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.881047][ T4513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.891532][ T4513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.980023][ T4513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.991333][ T4513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.085789][ T4513] team0: Port device netdevsim0 removed [ 307.098870][ T4513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.110107][ T4513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.325478][ T4513] tipc: Left network mode [ 308.860263][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.881732][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.909611][ T4513] hsr_slave_0: left promiscuous mode [ 308.923478][ T4513] hsr_slave_1: left promiscuous mode [ 308.935508][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.948498][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.957142][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.965727][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.013663][ T4513] veth1_macvtap: left promiscuous mode [ 309.021709][ T4513] veth0_macvtap: left promiscuous mode [ 309.034989][ T4513] veth1_vlan: left promiscuous mode [ 309.040414][ T4513] veth0_vlan: left promiscuous mode [ 309.047974][ T4513] net_ratelimit: 17 callbacks suppressed [ 310.236253][ T4513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.299016][ T4513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.802997][ T4513] bond0 (unregistering): Released all slaves