last executing test programs: 3m39.07784257s ago: executing program 2 (id=3): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000300)=0xde) socket$unix(0x1, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000200)=0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3m37.450508384s ago: executing program 2 (id=9): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3m34.470413155s ago: executing program 2 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001840), 0x0, 0x8800) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x11}, &(0x7f0000000000)) geteuid() 3m32.953395684s ago: executing program 2 (id=11): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000300)=0xde) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRESHEX], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000200)=0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3m31.311602044s ago: executing program 2 (id=13): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m28.327421261s ago: executing program 2 (id=16): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) get_mempolicy(0x0, &(0x7f0000000100), 0x1, &(0x7f00003bc000/0x2000)=nil, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xa968, 0x107b, 0xfffffffffdfffffe, 0x2, 0xffffffff}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 3m12.961687278s ago: executing program 32 (id=16): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) get_mempolicy(0x0, &(0x7f0000000100), 0x1, &(0x7f00003bc000/0x2000)=nil, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xa968, 0x107b, 0xfffffffffdfffffe, 0x2, 0xffffffff}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 4.168314384s ago: executing program 5 (id=976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0xd2c}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x0, 0xffffffff}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x2, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0xfffffffd, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x1000, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xffffffff, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000, 0x0, 0x2}, {0xfffffffc, 0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3.627428056s ago: executing program 5 (id=980): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto(r1, 0x0, 0x0, 0x810, 0x0, 0x0) socket(0x25, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r2, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 3.055546784s ago: executing program 1 (id=984): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.001529088s ago: executing program 5 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.608905809s ago: executing program 5 (id=989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 2.45416343s ago: executing program 1 (id=990): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x10) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 2.360830602s ago: executing program 6 (id=991): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x3, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="930b76", 0x0, 0x0, 0xd8ceeaf369b01de9, 0x0, 0x0}) 2.149502266s ago: executing program 4 (id=992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x2600, 0x0) 2.092561727s ago: executing program 3 (id=993): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.066960292s ago: executing program 1 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1.973491043s ago: executing program 0 (id=995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r1) 1.906517597s ago: executing program 6 (id=996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe2(0x0, 0x1080) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5000000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.706601969s ago: executing program 0 (id=997): r0 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r0, 0x1c39, 0x106a, 0x22, 0x0, 0x0) 1.706118186s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r3}, 0xc) 1.601458289s ago: executing program 1 (id=999): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2925, 0xffff, 0x9dff, 0xf, "9402080100"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.537093258s ago: executing program 4 (id=1000): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x8004}, {0xffffffffffffffff, 0x50}, {0xffffffffffffffff, 0x4115}, {r0, 0x100}], 0x5, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680)={[0x6]}, 0x8) 1.365577681s ago: executing program 6 (id=1001): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') eventfd(0x0) 1.247714955s ago: executing program 3 (id=1002): r0 = syz_io_uring_setup(0xbc0, &(0x7f0000000540)={0x0, 0x7e44, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1.183804921s ago: executing program 0 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) 1.146828064s ago: executing program 4 (id=1004): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @val=@netfilter={0x2, 0x1, 0x2, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r1, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x68c5}, 0x80) 1.061353189s ago: executing program 5 (id=1005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r3, 0x2, 0x4, 0x0, 0x7, 0xc}, 0x14) 932.335156ms ago: executing program 3 (id=1006): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 868.12692ms ago: executing program 6 (id=1007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "98d308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) 781.497929ms ago: executing program 0 (id=1008): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001bdad"], 0x28}}], 0x1, 0x40000000) 725.099789ms ago: executing program 4 (id=1009): syz_emit_ethernet(0x3e, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}, "3f3f48adaff694cc627fed5bb2a0c8d3"}}}}}}, 0x0) 691.622159ms ago: executing program 3 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x1b}, @void, @eth={@remote, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x68, 0x0, 0x9, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}, "8890596aabcd5981"}}}}}, 0x2e) 565.543938ms ago: executing program 6 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 565.249973ms ago: executing program 0 (id=1012): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 531.011658ms ago: executing program 1 (id=1013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) 436.478036ms ago: executing program 4 (id=1014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 357.204399ms ago: executing program 6 (id=1015): socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x40000000000000, 0xdb3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x44, 0x66, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x8, 0xffff}, {0xfff1, 0x6}}, [{0x8, 0xb, 0xfffff000}, {0x8, 0xb, 0x40}, {0x8}, {0x8, 0xb, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e27, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10002}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010025bd7000fddbdf2500590000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 356.770606ms ago: executing program 1 (id=1016): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000070000000700000009bf000000000000", @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x2800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f0000000f80)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RREADDIR(r4, &(0x7f0000000000)={0xb, 0x29, 0x4, {0x1}}, 0xb) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mmap(&(0x7f00003f7000/0x3000)=nil, 0x3000, 0x1000008, 0xbb6e9fe6aa012c38, 0xffffffffffffffff, 0x85750000) sendfile(r5, r6, 0x0, 0x20000023896) close(r5) r7 = gettid() ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 286.637343ms ago: executing program 0 (id=1017): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = syz_io_uring_setup(0x2ad6, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8004, 0x1bf}, &(0x7f0000000440)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000280)='io\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) 263.479156ms ago: executing program 3 (id=1018): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010000000000000000000a000000040000000c000a0000000081"], 0x24}}, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x2d, 0x1, @tid=r0}, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 101.415917ms ago: executing program 4 (id=1019): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 0s ago: executing program 5 (id=1020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 95.034593][ T5817] cgroup: Unknown subsys name 'net' [ 95.136160][ T5817] cgroup: Unknown subsys name 'cpuset' [ 95.145750][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.923654][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.483404][ T976] cfg80211: failed to load regulatory.db [ 101.569912][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.590480][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.610107][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.623161][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.636409][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.645278][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.653299][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.661034][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.669694][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.678089][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.686388][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.694072][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.701668][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.710439][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.719093][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.727784][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.736644][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.748137][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.752155][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.760447][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.773167][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.773253][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.787793][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.788094][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.802822][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.811974][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.828207][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.836412][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.838605][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.867830][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.537924][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 102.867210][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 102.906370][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 102.926767][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.934301][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.941938][ T5839] bridge_slave_0: entered allmulticast mode [ 102.949562][ T5839] bridge_slave_0: entered promiscuous mode [ 103.024964][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.032571][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.039778][ T5839] bridge_slave_1: entered allmulticast mode [ 103.047504][ T5839] bridge_slave_1: entered promiscuous mode [ 103.055269][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 103.309863][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.325550][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.375266][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.384616][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.391949][ T5829] bridge_slave_0: entered allmulticast mode [ 103.399510][ T5829] bridge_slave_0: entered promiscuous mode [ 103.409242][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 103.477370][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.485923][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.493155][ T5829] bridge_slave_1: entered allmulticast mode [ 103.500696][ T5829] bridge_slave_1: entered promiscuous mode [ 103.537815][ T5839] team0: Port device team_slave_0 added [ 103.553393][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.560505][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.567829][ T5835] bridge_slave_0: entered allmulticast mode [ 103.575527][ T5835] bridge_slave_0: entered promiscuous mode [ 103.599160][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 103.627710][ T5839] team0: Port device team_slave_1 added [ 103.663645][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.670799][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.679683][ T5835] bridge_slave_1: entered allmulticast mode [ 103.688341][ T5835] bridge_slave_1: entered promiscuous mode [ 103.727230][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.758879][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.766385][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.773684][ T5842] bridge_slave_0: entered allmulticast mode [ 103.781229][ T5842] bridge_slave_0: entered promiscuous mode [ 103.819722][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.867033][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.874264][ T52] Bluetooth: hci3: command tx timeout [ 103.874269][ T5847] Bluetooth: hci4: command tx timeout [ 103.874472][ T5847] Bluetooth: hci0: command tx timeout [ 103.890994][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.898783][ T5842] bridge_slave_1: entered allmulticast mode [ 103.907192][ T5842] bridge_slave_1: entered promiscuous mode [ 103.941616][ T5847] Bluetooth: hci2: command tx timeout [ 103.941632][ T5848] Bluetooth: hci5: command tx timeout [ 103.941853][ T5848] Bluetooth: hci1: command tx timeout [ 103.982035][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.989078][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.015508][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.066828][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.085553][ T5829] team0: Port device team_slave_0 added [ 104.095265][ T5829] team0: Port device team_slave_1 added [ 104.116222][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.123626][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.149607][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.164469][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.176852][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.248214][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.294834][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.302160][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.309333][ T5831] bridge_slave_0: entered allmulticast mode [ 104.317425][ T5831] bridge_slave_0: entered promiscuous mode [ 104.325916][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.333544][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.340906][ T5831] bridge_slave_1: entered allmulticast mode [ 104.349158][ T5831] bridge_slave_1: entered promiscuous mode [ 104.372796][ T5835] team0: Port device team_slave_0 added [ 104.412221][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.419206][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.445617][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.459117][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.466121][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.492150][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.521963][ T5835] team0: Port device team_slave_1 added [ 104.529982][ T5842] team0: Port device team_slave_0 added [ 104.605427][ T5842] team0: Port device team_slave_1 added [ 104.611606][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.618821][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.626440][ T5830] bridge_slave_0: entered allmulticast mode [ 104.634344][ T5830] bridge_slave_0: entered promiscuous mode [ 104.644472][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.651746][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.658886][ T5830] bridge_slave_1: entered allmulticast mode [ 104.667319][ T5830] bridge_slave_1: entered promiscuous mode [ 104.700052][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.757525][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.764729][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.791593][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.823859][ T5839] hsr_slave_0: entered promiscuous mode [ 104.830497][ T5839] hsr_slave_1: entered promiscuous mode [ 104.840393][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.850181][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.857468][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.884247][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.897167][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.904199][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.930344][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.958825][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.965975][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.992056][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.023212][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.083223][ T5829] hsr_slave_0: entered promiscuous mode [ 105.089949][ T5829] hsr_slave_1: entered promiscuous mode [ 105.096396][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 105.102244][ T5829] Cannot create hsr debugfs directory [ 105.111249][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.157138][ T5831] team0: Port device team_slave_0 added [ 105.166241][ T5831] team0: Port device team_slave_1 added [ 105.206185][ T5830] team0: Port device team_slave_0 added [ 105.268942][ T5830] team0: Port device team_slave_1 added [ 105.305636][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.312719][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.338883][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.416438][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.423578][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.449822][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.511139][ T5835] hsr_slave_0: entered promiscuous mode [ 105.519132][ T5835] hsr_slave_1: entered promiscuous mode [ 105.525504][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 105.531236][ T5835] Cannot create hsr debugfs directory [ 105.543618][ T5842] hsr_slave_0: entered promiscuous mode [ 105.550117][ T5842] hsr_slave_1: entered promiscuous mode [ 105.557667][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 105.563546][ T5842] Cannot create hsr debugfs directory [ 105.593096][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.600076][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.626260][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.639193][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.646396][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.673199][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.890239][ T5831] hsr_slave_0: entered promiscuous mode [ 105.898199][ T5831] hsr_slave_1: entered promiscuous mode [ 105.905143][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 105.910867][ T5831] Cannot create hsr debugfs directory [ 105.941800][ T5848] Bluetooth: hci0: command tx timeout [ 105.944539][ T52] Bluetooth: hci3: command tx timeout [ 105.947331][ T5847] Bluetooth: hci4: command tx timeout [ 106.021735][ T5847] Bluetooth: hci2: command tx timeout [ 106.021767][ T52] Bluetooth: hci5: command tx timeout [ 106.033561][ T5848] Bluetooth: hci1: command tx timeout [ 106.081307][ T5830] hsr_slave_0: entered promiscuous mode [ 106.087959][ T5830] hsr_slave_1: entered promiscuous mode [ 106.094408][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 106.100134][ T5830] Cannot create hsr debugfs directory [ 106.518519][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.531058][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.559343][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.587177][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.653858][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.668038][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.684812][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.707941][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.786369][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.817306][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.830315][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.850559][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.980803][ T5842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.022831][ T5842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.037181][ T5842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.048356][ T5842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.124711][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.156444][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.185538][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.196726][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.216961][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.254912][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.278186][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.321312][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.334564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.341859][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.382917][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.390044][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.423680][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.439388][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.451038][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.469677][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.494118][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.535337][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.542514][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.583718][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.594901][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.626148][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.633339][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.674708][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.719843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.727030][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.780779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.788060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.839629][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.903761][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.947985][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.955611][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.007813][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.015000][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.025575][ T5848] Bluetooth: hci4: command tx timeout [ 108.027081][ T52] Bluetooth: hci0: command tx timeout [ 108.030977][ T5848] Bluetooth: hci3: command tx timeout [ 108.085365][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.106174][ T5848] Bluetooth: hci1: command tx timeout [ 108.106211][ T5847] Bluetooth: hci2: command tx timeout [ 108.118454][ T52] Bluetooth: hci5: command tx timeout [ 108.178156][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.260786][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.305856][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.367072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.374269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.405378][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.412567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.547907][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.610956][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.618153][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.644117][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.685740][ T5829] veth0_vlan: entered promiscuous mode [ 108.715274][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.722702][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.845092][ T5829] veth1_vlan: entered promiscuous mode [ 108.900810][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.058779][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.078713][ T5829] veth0_macvtap: entered promiscuous mode [ 109.114107][ T5829] veth1_macvtap: entered promiscuous mode [ 109.170571][ T5839] veth0_vlan: entered promiscuous mode [ 109.207861][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.296382][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.344487][ T5839] veth1_vlan: entered promiscuous mode [ 109.394262][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.432702][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.480937][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.501486][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.519241][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.726819][ T5839] veth0_macvtap: entered promiscuous mode [ 109.774700][ T5839] veth1_macvtap: entered promiscuous mode [ 109.800739][ T5835] veth0_vlan: entered promiscuous mode [ 109.809604][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.827535][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.837802][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.897898][ T5831] veth0_vlan: entered promiscuous mode [ 109.908929][ T5835] veth1_vlan: entered promiscuous mode [ 109.950804][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.958886][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.971131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.981147][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.990615][ T5831] veth1_vlan: entered promiscuous mode [ 110.046658][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.059652][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.086287][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.100759][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.103615][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.112889][ T52] Bluetooth: hci0: command tx timeout [ 110.124851][ T5847] Bluetooth: hci4: command tx timeout [ 110.129565][ T52] Bluetooth: hci3: command tx timeout [ 110.182525][ T52] Bluetooth: hci5: command tx timeout [ 110.182652][ T5847] Bluetooth: hci2: command tx timeout [ 110.187964][ T52] Bluetooth: hci1: command tx timeout [ 110.208311][ T5842] veth0_vlan: entered promiscuous mode [ 110.255377][ T5830] veth0_vlan: entered promiscuous mode [ 110.268815][ T5835] veth0_macvtap: entered promiscuous mode [ 110.281923][ T5835] veth1_macvtap: entered promiscuous mode [ 110.304464][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.317042][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.428707][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.448053][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.524977][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.546446][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.569127][ T5831] veth0_macvtap: entered promiscuous mode [ 110.580572][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.590190][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.636541][ T5830] veth1_vlan: entered promiscuous mode [ 110.649966][ T3546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.665349][ T3546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.680182][ T5831] veth1_macvtap: entered promiscuous mode [ 110.897164][ T5923] Process accounting resumed [ 111.508441][ T5842] veth1_vlan: entered promiscuous mode [ 111.589216][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.624194][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.641039][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.650065][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.664785][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.704996][ T5830] veth0_macvtap: entered promiscuous mode [ 111.717281][ T5830] veth1_macvtap: entered promiscuous mode [ 111.760833][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.793553][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.813096][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.883849][ T5923] Process accounting resumed [ 112.899861][ T5842] veth0_macvtap: entered promiscuous mode [ 112.907887][ T5984] Zero length message leads to an empty skb [ 112.918145][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 112.928503][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.930926][ T5842] veth1_macvtap: entered promiscuous mode [ 112.941396][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.123665][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.171420][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.229378][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.300550][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.421768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.430626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 113.439440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.542281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.550877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.561599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.570673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.579286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.952561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.961997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.874974][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.025532][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.037549][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.111458][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.126454][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.161498][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.336213][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.381309][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.607802][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.531627][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.839778][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.896391][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.982521][ T6014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'. [ 120.264132][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.292908][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.352096][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.753005][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.340893][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.361158][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.589354][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.611140][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.658127][ T6043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.684664][ T6043] block device autoloading is deprecated and will be removed. [ 122.810557][ T6046] Sensor A: ================= START STATUS ================= [ 122.818379][ T6046] Sensor A: Test Pattern: 75% Colorbar [ 122.824302][ T6046] Sensor A: Show Information: All [ 122.829700][ T6046] Sensor A: Vertical Flip: false [ 122.841400][ T6046] Sensor A: Horizontal Flip: false [ 122.847353][ T6046] Sensor A: Brightness: 128 [ 122.852609][ T6046] Sensor A: Contrast: 128 [ 122.857247][ T6046] Sensor A: Hue: 0 [ 122.861116][ T6046] Sensor A: Saturation: 128 [ 123.190236][ T6046] Sensor A: ================== END STATUS ================== [ 123.468998][ T912] Process accounting resumed [ 128.085456][ T6070] fuse: root generation should be zero [ 131.314137][ T6095] /dev/nullb0: Can't open blockdev [ 134.355219][ T912] Process accounting resumed [ 137.903637][ T6122] netlink: zone id is out of range [ 137.969480][ T6122] netlink: zone id is out of range [ 138.011460][ T6122] netlink: zone id is out of range [ 138.057873][ T6122] netlink: zone id is out of range [ 138.688031][ T6122] netlink: zone id is out of range [ 138.732207][ T6122] netlink: zone id is out of range [ 138.872071][ T6122] netlink: zone id is out of range [ 138.968222][ T6122] netlink: zone id is out of range [ 139.038747][ T6122] netlink: zone id is out of range [ 139.082310][ T6126] Sensor A: ================= START STATUS ================= [ 139.089886][ T6126] Sensor A: Test Pattern: 75% Colorbar [ 139.129263][ T6122] netlink: zone id is out of range [ 140.139655][ T6126] Sensor A: Show Information: All [ 140.540857][ T6126] Sensor A: Vertical Flip: false [ 140.546205][ T6126] Sensor A: Horizontal Flip: false [ 140.551551][ T6126] Sensor A: Brightness: 128 [ 140.556097][ T6126] Sensor A: Contrast: 128 [ 140.562006][ T6126] Sensor A: Hue: 0 [ 140.565782][ T6126] Sensor A: Saturation: 128 [ 140.570336][ T6126] Sensor A: ================== END STATUS ================== [ 141.798773][ T912] Process accounting resumed [ 142.150525][ T6137] batman_adv: batadv0: Adding interface: gretap1 [ 142.157077][ T6137] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.182565][ T6137] batman_adv: batadv0: Interface activated: gretap1 [ 142.878376][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.929441][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.047903][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.36'. [ 143.177399][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.36'. [ 144.225495][ T6149] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 144.443050][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 144.483895][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 144.952276][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.084293][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.101671][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.110948][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.118925][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.044105][ T6167] loop3: detected capacity change from 0 to 4096 [ 147.132951][ T6167] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 147.222107][ T5847] Bluetooth: hci6: command tx timeout [ 147.224702][ T6173] overlayfs: failed to resolve './file0': -2 [ 147.252992][ T6167] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 147.312127][ T6167] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 149.301536][ T5847] Bluetooth: hci6: command tx timeout [ 151.383282][ T5847] Bluetooth: hci6: command tx timeout [ 151.826329][ T912] Process accounting resumed [ 152.404072][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.429139][ T60] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 152.509726][ T5830] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 152.562188][ T5830] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 152.591475][ T5830] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 152.651656][ T13] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 153.463689][ T5847] Bluetooth: hci6: command tx timeout [ 153.996054][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.263875][ T6193] batman_adv: batadv0: Adding interface: gretap1 [ 156.332549][ T6193] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.386010][ T6193] batman_adv: batadv0: Interface activated: gretap1 [ 156.736671][ T976] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 156.758679][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.094079][ T976] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 157.105229][ T976] usb 5-1: config 8 has no interface number 0 [ 157.112717][ T976] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 157.123877][ T976] usb 5-1: config 8 interface 177 has no altsetting 0 [ 157.130683][ T976] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 157.941565][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.982788][ T6209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.041211][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.742821][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.011319][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.321008][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.598196][ C0] ir_toy 5-1:8.177: out urb status: -71 [ 161.710979][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.071822][ T6158] chnl_net:caif_netlink_parms(): no params data found [ 162.331451][ T976] ir_toy 5-1:8.177: could not write reset command: -110 [ 162.338925][ T976] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110 [ 162.426809][ T976] usb 5-1: USB disconnect, device number 2 [ 162.798674][ T6240] process 'syz.4.56' launched './file1' with NULL argv: empty string added [ 164.066496][ T6243] binder: 6234:6243 ioctl 0 200000000040 returned -22 [ 165.266688][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.289017][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.676156][ T6158] bridge_slave_0: entered allmulticast mode [ 165.690040][ T6158] bridge_slave_0: entered promiscuous mode [ 166.603659][ T912] Process accounting resumed [ 166.750787][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.801534][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.910040][ T6158] bridge_slave_1: entered allmulticast mode [ 166.955180][ T6158] bridge_slave_1: entered promiscuous mode [ 167.488715][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.535978][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.992231][ T6158] team0: Port device team_slave_0 added [ 169.011894][ T135] bridge_slave_1: left allmulticast mode [ 169.017630][ T135] bridge_slave_1: left promiscuous mode [ 169.044160][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.121486][ T135] bridge_slave_0: left allmulticast mode [ 169.127168][ T135] bridge_slave_0: left promiscuous mode [ 169.203843][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.158686][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.308710][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.363398][ T135] bond0 (unregistering): Released all slaves [ 172.930239][ T912] Process accounting resumed [ 173.624661][ T6158] team0: Port device team_slave_1 added [ 173.929918][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.937866][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.033725][ T6304] binder: 6302:6304 ioctl 0 200000000040 returned -22 [ 176.202339][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.323746][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.724244][ T6274] batman_adv: batadv0: Interface deactivated: gretap1 [ 177.896995][ T6317] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 177.956087][ T6304] batman_adv: batadv0: Adding interface: gretap1 [ 178.013443][ T6304] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.067856][ T6304] batman_adv: batadv0: Interface activated: gretap1 [ 178.088588][ T6036] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.130490][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.179366][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.363106][ T6158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.384837][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.432725][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.470787][ T6322] binder: 6320:6322 ioctl 0 200000000040 returned -22 [ 179.011552][ T6158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.255203][ T6036] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.396710][ T6322] batman_adv: batadv0: Adding interface: gretap1 [ 179.404470][ T6311] loop1: detected capacity change from 0 to 32768 [ 179.446363][ T6322] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.609167][ T6322] batman_adv: batadv0: Interface activated: gretap1 [ 180.011113][ T6036] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.084262][ T1334] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.733745][ T135] hsr_slave_0: left promiscuous mode [ 182.029009][ T5962] Process accounting resumed [ 182.575027][ T135] hsr_slave_1: left promiscuous mode [ 182.804704][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.813873][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.823161][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.859057][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.997703][ T135] veth1_macvtap: left promiscuous mode [ 183.030096][ T135] veth0_macvtap: left promiscuous mode [ 183.043613][ T135] veth1_vlan: left promiscuous mode [ 183.059230][ T135] veth0_vlan: left promiscuous mode [ 184.352273][ T135] team0 (unregistering): Port device team_slave_1 removed [ 184.477694][ T135] team0 (unregistering): Port device team_slave_0 removed [ 184.821101][ T6364] loop4: detected capacity change from 0 to 32768 [ 185.265909][ T6366] overlayfs: failed to resolve './file0': -2 [ 186.149728][ T6158] hsr_slave_0: entered promiscuous mode [ 186.165438][ T6158] hsr_slave_1: entered promiscuous mode [ 186.202034][ T6158] debugfs: 'hsr0' already exists in 'hsr' [ 186.207782][ T6158] Cannot create hsr debugfs directory [ 190.929074][ T6405] loop1: detected capacity change from 0 to 512 [ 190.939338][ T6158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.005687][ T6405] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.035617][ T6158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.065965][ T6158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.085740][ T6158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.092557][ T6405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.202350][ T6405] EXT4-fs (loop1): 1 truncate cleaned up [ 191.211259][ T6405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.408229][ T6416] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 191.457698][ T30] audit: type=1800 audit(1761853987.908:2): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.95" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 192.350274][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.539074][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.822343][ T6158] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.890266][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.897663][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.250087][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.257304][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.683810][ T6158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.083300][ T6437] unsupported nlmsg_type 40 [ 196.651759][ T6221] Process accounting resumed [ 197.689851][ T6453] binder: 6442:6453 ioctl c0306201 200000000540 returned -22 [ 198.161468][ T6464] binder: 6457:6464 ioctl c0306201 0 returned -14 [ 198.784388][ T6158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.570049][ T6470] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 203.381779][ T6495] fuse: Unknown parameter 'group_id00000000000000000000' [ 203.845921][ T6502] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.868869][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.875842][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.472099][ T6507] fuse: Bad value for 'fd' [ 205.613631][ T6506] loop3: detected capacity change from 0 to 512 [ 205.653661][ T6506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.796487][ T6506] EXT4-fs (loop3): 1 truncate cleaned up [ 206.059868][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.085291][ T6516] overlayfs: failed to resolve './file0': -2 [ 206.780471][ T30] audit: type=1800 audit(1761854003.308:3): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.112" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 207.064283][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.262694][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.271940][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.292121][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.302121][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.400603][ T5962] Process accounting resumed [ 208.584608][ T6538] binder: 6530:6538 ioctl c0306201 0 returned -14 [ 209.043552][ T6541] binder: 6539:6541 ioctl c0306201 200000000540 returned -22 [ 209.387737][ T5847] Bluetooth: hci3: command tx timeout [ 209.514923][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.941583][ T5847] Bluetooth: hci3: command tx timeout [ 213.193510][ T6572] fuse: Bad value for 'fd' [ 213.201888][ T6572] fuse: Bad value for 'fd' [ 214.041388][ T5847] Bluetooth: hci3: command tx timeout [ 216.165896][ T5847] Bluetooth: hci3: command tx timeout [ 216.201104][ T912] Process accounting resumed [ 216.281273][ T6600] loop1: detected capacity change from 0 to 512 [ 216.290161][ T6600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.306870][ T6600] EXT4-fs (loop1): 1 truncate cleaned up [ 216.465485][ T6603] binder: 6597:6603 ioctl c0306201 200000000540 returned -22 [ 216.813816][ T6600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.916656][ T30] audit: type=1800 audit(1761854013.478:4): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 218.021620][ T6618] fuse: Bad value for 'user_id' [ 218.026894][ T6618] fuse: Bad value for 'user_id' [ 218.035557][ T6618] fuse: Bad value for 'fd' [ 218.126065][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.019240][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 220.991803][ T1011] bridge_slave_1: left allmulticast mode [ 221.041861][ T1011] bridge_slave_1: left promiscuous mode [ 221.109257][ T1011] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.429722][ T1011] bridge_slave_0: left allmulticast mode [ 221.464767][ T1011] bridge_slave_0: left promiscuous mode [ 221.470590][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.683141][ T1011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.732929][ T1011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.757976][ T1011] bond0 (unregistering): Released all slaves [ 224.762497][ T6221] Process accounting resumed [ 225.178919][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.186527][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.360189][ T6657] binder: 6651:6657 ioctl c0306201 200000000540 returned -22 [ 225.972072][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.817873][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.822037][ T6665] fuse: Bad value for 'user_id' [ 226.830122][ T6665] fuse: Bad value for 'user_id' [ 226.855706][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 226.861834][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 226.865700][ T6665] fuse: Bad value for 'fd' [ 226.867873][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 226.880057][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 226.887701][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 227.107091][ T6669] loop4: detected capacity change from 0 to 512 [ 227.372464][ T6669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.942936][ T6669] EXT4-fs (loop4): 1 truncate cleaned up [ 227.984760][ T6669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.053028][ T30] audit: type=1800 audit(1761854024.638:5): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.155" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 228.729411][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.163054][ T6218] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.227739][ T6218] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.438905][ T1011] hsr_slave_0: left promiscuous mode [ 229.511430][ T1011] hsr_slave_1: left promiscuous mode [ 229.517597][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.604917][ T1011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.408848][ T6739] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 230.558803][ T6743] netlink: 'syz.3.182': attribute type 21 has an invalid length. [ 230.908502][ T6754] netlink: 'syz.1.186': attribute type 7 has an invalid length. [ 231.005667][ T1011] team0 (unregistering): Port device team_slave_1 removed [ 231.113371][ T1011] team0 (unregistering): Port device team_slave_0 removed [ 231.386218][ T6218] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.396312][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.422820][ T6732] netlink: 830 bytes leftover after parsing attributes in process `syz.5.178'. [ 231.433521][ T6743] netlink: 'syz.3.182': attribute type 6 has an invalid length. [ 231.441165][ T6743] netlink: 132 bytes leftover after parsing attributes in process `syz.3.182'. [ 231.475725][ T6760] netlink: 128 bytes leftover after parsing attributes in process `syz.4.188'. [ 231.894919][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.928499][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.019249][ T6524] bridge_slave_0: entered allmulticast mode [ 232.050292][ T6524] bridge_slave_0: entered promiscuous mode [ 232.072362][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.081618][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.088817][ T6524] bridge_slave_1: entered allmulticast mode [ 232.137909][ T6524] bridge_slave_1: entered promiscuous mode [ 232.392606][ T6794] netlink: 'syz.0.200': attribute type 21 has an invalid length. [ 232.431614][ T6794] netlink: 'syz.0.200': attribute type 22 has an invalid length. [ 232.466088][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.469813][ T6794] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.200'. [ 232.532516][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.946054][ T6524] team0: Port device team_slave_0 added [ 232.993828][ T6524] team0: Port device team_slave_1 added [ 233.029123][ T6810] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.208'. [ 233.346457][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.378734][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.464012][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.621905][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.666352][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.732752][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.791847][ T6836] netlink: 763 bytes leftover after parsing attributes in process `syz.1.218'. [ 233.959785][ T6843] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 234.013164][ T6843] netlink: 164 bytes leftover after parsing attributes in process `syz.3.221'. [ 234.067611][ T6850] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 234.107577][ T6850] netlink: 164 bytes leftover after parsing attributes in process `syz.3.221'. [ 234.172749][ T6524] hsr_slave_0: entered promiscuous mode [ 234.179558][ T6524] hsr_slave_1: entered promiscuous mode [ 234.222262][ T6524] debugfs: 'hsr0' already exists in 'hsr' [ 234.228476][ T6524] Cannot create hsr debugfs directory [ 235.733422][ T6903] netlink: 'syz.1.243': attribute type 2 has an invalid length. [ 235.742020][ T6903] netlink: 'syz.1.243': attribute type 9 has an invalid length. [ 236.207350][ T6880] netlink: 'syz.5.233': attribute type 29 has an invalid length. [ 236.218161][ T6892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.238'. [ 237.538557][ T6929] tap0: tun_chr_ioctl cmd 2147767521 [ 237.544404][ T6931] netlink: 'syz.5.253': attribute type 25 has an invalid length. [ 238.374898][ T6959] syzkaller0: tun_chr_ioctl cmd 1074025688 [ 238.648373][ T6972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.268'. [ 238.715404][ T6971] netlink: 60 bytes leftover after parsing attributes in process `syz.4.268'. [ 238.866579][ T6979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.270'. [ 238.874975][ T6973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.268'. [ 239.152820][ T6524] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.208276][ T6524] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.286806][ T6524] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.372098][ T6995] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 239.405494][ T6524] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.420231][ T6995] netlink: 'syz.0.276': attribute type 4 has an invalid length. [ 239.461854][ T6995] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.276'. [ 239.755592][ T7012] netlink: 'syz.5.281': attribute type 10 has an invalid length. [ 239.849915][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.903148][ T7012] bond0: (slave team0): Enslaving as an active interface with an up link [ 239.997208][ T7022] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 240.039776][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.158590][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.277950][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.285152][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.381077][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.388290][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.608865][ T7031] tun0: tun_chr_ioctl cmd 1074025694 [ 241.231203][ T7053] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.296'. [ 241.645088][ T7065] netlink: 'syz.0.300': attribute type 11 has an invalid length. [ 241.780346][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.366261][ T7093] netlink: 'syz.1.310': attribute type 21 has an invalid length. [ 242.407099][ T7080] syzkaller0: entered promiscuous mode [ 242.421908][ T7095] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.311'. [ 242.441439][ T7080] syzkaller0: entered allmulticast mode [ 242.453834][ T7093] netlink: 164 bytes leftover after parsing attributes in process `syz.1.310'. [ 243.998457][ T7142] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 244.108621][ T7115] warning: `syz.1.318' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.133417][ T7129] netlink: 'syz.4.325': attribute type 29 has an invalid length. [ 244.156684][ T7132] netlink: 'syz.4.325': attribute type 29 has an invalid length. [ 244.212138][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.251882][ T7142] bridge_slave_1: left allmulticast mode [ 244.281402][ T7142] bridge_slave_1: left promiscuous mode [ 244.287255][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.435038][ T7148] netlink: 830 bytes leftover after parsing attributes in process `syz.1.333'. [ 244.465858][ T7151] netlink: 21 bytes leftover after parsing attributes in process `syz.4.335'. [ 244.569774][ T6524] veth0_vlan: entered promiscuous mode [ 244.629816][ T6524] veth1_vlan: entered promiscuous mode [ 244.677614][ T7156] netlink: 'syz.0.336': attribute type 21 has an invalid length. [ 244.731747][ T7156] netlink: 'syz.0.336': attribute type 6 has an invalid length. [ 244.782601][ T7156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.336'. [ 244.853313][ T6524] veth0_macvtap: entered promiscuous mode [ 244.882280][ T7160] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 244.917943][ T7160] netlink: 'syz.3.337': attribute type 29 has an invalid length. [ 244.958765][ T6524] veth1_macvtap: entered promiscuous mode [ 245.048579][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.119642][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.179474][ T6218] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.221626][ T7176] netlink: 507 bytes leftover after parsing attributes in process `syz.5.344'. [ 245.242448][ T6218] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.251189][ T6218] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.310839][ T6218] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.509022][ T7186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.346'. [ 245.548585][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.346'. [ 245.773766][ T6218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.831474][ T6218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.985173][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.015792][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.706138][ T7219] loop6: detected capacity change from 0 to 4096 [ 246.775396][ T7219] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 246.909687][ T7219] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 246.970806][ T7219] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 247.384638][ T12] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 247.427312][ T6524] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 247.456895][ T6524] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 247.494776][ T6524] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 247.617718][ T1147] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 248.906991][ T7302] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 248.978259][ T7296] veth0_vlan: entered allmulticast mode [ 252.668467][ T7339] sit0: entered promiscuous mode [ 252.673749][ T7339] sit0: entered allmulticast mode [ 257.825336][ T7522] sit0: entered promiscuous mode [ 257.843080][ T7522] sit0: entered allmulticast mode [ 259.721806][ T7553] pim6reg1: entered promiscuous mode [ 259.727144][ T7553] pim6reg1: entered allmulticast mode [ 260.081535][ T7572] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.293137][ T7629] pim6reg1: entered promiscuous mode [ 263.298462][ T7629] pim6reg1: entered allmulticast mode [ 265.314104][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.320451][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.838479][ T7813] wg2: entered promiscuous mode [ 274.848789][ T7813] wg2: entered allmulticast mode [ 279.302139][ T7906] veth0_vlan: entered allmulticast mode [ 279.324272][ T7906] ÿÿÿÿÿÿ: renamed from vlan1 [ 280.406387][ T7911] syzkaller0: entered promiscuous mode [ 280.421165][ T7911] syzkaller0: entered allmulticast mode [ 283.867417][ T7993] loop1: detected capacity change from 0 to 32768 [ 283.924247][ T6289] loop1: p1 p2 p3 < p5 p6 > [ 283.936664][ T6289] loop1: p2 size 16775168 extends beyond EOD, truncated [ 283.950168][ T6289] loop1: p5 start 4294970168 is beyond EOD, truncated [ 283.999237][ T7989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.011201][ T7993] loop1: p1 p2 p3 < p5 p6 > [ 284.032497][ T7993] loop1: p2 size 16775168 extends beyond EOD, truncated [ 284.052125][ T7993] loop1: p5 start 4294970168 is beyond EOD, truncated [ 284.233669][ T7989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.466548][ T8003] loop6: detected capacity change from 0 to 512 [ 284.494405][ T8003] ======================================================= [ 284.494405][ T8003] WARNING: The mand mount option has been deprecated and [ 284.494405][ T8003] and is ignored by this kernel. Remove the mand [ 284.494405][ T8003] option from the mount to silence this warning. [ 284.494405][ T8003] ======================================================= [ 284.547362][ T7989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.579862][ T8006] tipc: Started in network mode [ 284.585330][ T8006] tipc: Node identity 7f000001, cluster identity 4711 [ 284.593821][ T8007] loop5: detected capacity change from 0 to 1024 [ 284.606575][ T8003] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 284.624155][ T8007] EXT4-fs: Ignoring removed orlov option [ 284.628364][ T8006] tipc: Enabled bearer , priority 10 [ 284.667702][ T8002] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 284.697701][ T8002] tipc: Enabled bearer , priority 10 [ 284.701603][ T8007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.727080][ T8003] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.632: orphan file block 0: bad magic [ 284.768161][ T8003] EXT4-fs (loop6): mount failed [ 284.886878][ T8007] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 285.210983][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.319195][ T8020] loop6: detected capacity change from 0 to 128 [ 285.337630][ T8020] serio: Serial port ptm0 [ 285.375009][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 285.378636][ T5834] udevd[5834]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 285.414605][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 285.429147][ T6289] udevd[6289]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 285.591737][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 285.600780][ T5834] udevd[5834]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 285.615686][ T7989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.626237][ T6298] udevd[6298]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 285.649160][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 285.764270][ T5962] tipc: Node number set to 2130706433 [ 286.141367][ T1334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.159878][ T1334] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.262883][ T3518] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.290896][ T3518] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.470797][ T8035] loop5: detected capacity change from 0 to 512 [ 286.657096][ T8035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.658093][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 286.693550][ T8035] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.802899][ T30] audit: type=1326 audit(1761854083.388:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 286.862259][ T8035] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 286.891527][ T30] audit: type=1326 audit(1761854083.388:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 286.957096][ T30] audit: type=1326 audit(1761854083.418:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 287.090252][ T30] audit: type=1326 audit(1761854083.418:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 287.172065][ T30] audit: type=1326 audit(1761854083.418:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 287.271463][ T30] audit: type=1326 audit(1761854083.418:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 287.305178][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.401520][ T30] audit: type=1326 audit(1761854083.418:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 287.509434][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.657'. [ 287.513413][ T30] audit: type=1326 audit(1761854083.418:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 287.617113][ T30] audit: type=1326 audit(1761854083.418:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.3.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 287.617244][ T8071] loop0: detected capacity change from 0 to 512 [ 287.687948][ T8071] EXT4-fs: Ignoring removed bh option [ 287.693590][ T30] audit: type=1804 audit(1761854083.428:15): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.643" name="/newroot/124/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 287.714561][ T8071] EXT4-fs (loop0): 1 truncate cleaned up [ 287.719896][ T8071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.356275][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.781627][ T8087] capability: warning: `syz.5.664' uses deprecated v2 capabilities in a way that may be insecure [ 289.741538][ T8114] loop1: detected capacity change from 0 to 512 [ 289.780568][ T8114] EXT4-fs (loop1): orphan cleanup on readonly fs [ 289.812352][ T8114] EXT4-fs error (device loop1): __ext4_iget:5443: inode #4: block 127754: comm syz.1.674: invalid block [ 289.841594][ T8114] EXT4-fs error (device loop1): ext4_quota_enable:7138: comm syz.1.674: Bad quota inode: 4, type: 1 [ 289.896322][ T8114] EXT4-fs warning (device loop1): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 289.924064][ T8114] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 289.937341][ T8114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.967516][ T8114] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 289.999887][ T8119] loop4: detected capacity change from 0 to 128 [ 290.015346][ T8114] EXT4-fs error (device loop1): __ext4_iget:5443: inode #4: block 127754: comm syz.1.674: invalid block [ 290.047744][ T8114] EXT4-fs error (device loop1): ext4_quota_enable:7138: comm syz.1.674: Bad quota inode: 4, type: 1 [ 290.066090][ T8119] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.080769][ T8114] EXT4-fs warning (device loop1): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 290.095234][ T8119] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.318654][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 290.402226][ T8128] ip6gre1: entered allmulticast mode [ 290.403902][ T5831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.432902][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.748003][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 290.749240][ T8141] loop6: detected capacity change from 0 to 1024 [ 290.840124][ T8141] EXT4-fs: inline encryption not supported [ 290.856957][ T8141] EXT4-fs: Ignoring removed i_version option [ 290.864805][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 290.904946][ T8141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.167917][ T8153] nfs4: Bad value for 'source' [ 291.400955][ T6524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.528668][ T8166] loop0: detected capacity change from 0 to 512 [ 292.609038][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 292.649753][ T8166] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.694: bad orphan inode 15 [ 292.682933][ T8166] ext4_test_bit(bit=14, block=5) = 0 [ 292.700750][ T8166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.941682][ T8166] EXT4-fs error (device loop0): __ext4_new_inode:1072: comm syz.0.694: reserved inode found cleared - inode=1 [ 293.146105][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.462389][ T8196] loop0: detected capacity change from 0 to 512 [ 293.523633][ T8196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.584003][ T8196] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.025670][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.387777][ T8215] Process accounting resumed [ 294.396353][ T8220] loop0: detected capacity change from 0 to 512 [ 294.440212][ T8220] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.711: casefold flag without casefold feature [ 294.554067][ T8220] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.711: couldn't read orphan inode 15 (err -117) [ 294.620896][ T8220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.806485][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.974724][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 294.974749][ T30] audit: type=1326 audit(1761854091.558:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 295.082566][ T30] audit: type=1326 audit(1761854091.588:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 295.170990][ T30] audit: type=1326 audit(1761854091.588:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 295.271379][ T30] audit: type=1326 audit(1761854091.588:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 295.331945][ T30] audit: type=1326 audit(1761854091.588:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 295.408453][ T8241] syz.4.710 uses obsolete (PF_INET,SOCK_PACKET) [ 295.428377][ T30] audit: type=1326 audit(1761854091.588:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 295.487105][ T30] audit: type=1326 audit(294.993:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 295.583492][ T30] audit: type=1326 audit(294.993:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8233 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 296.816599][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 296.889667][ T8273] IPv6: Can't replace route, no match found [ 297.093574][ T8278] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 297.130144][ T30] audit: type=1326 audit(297.103:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.5.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54078efc9 code=0x7ffc0000 [ 297.222803][ T30] audit: type=1326 audit(297.103:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8279 comm="syz.5.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54078efc9 code=0x7ffc0000 [ 297.285189][ T8284] loop4: detected capacity change from 0 to 128 [ 297.323781][ T8284] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.367322][ T8284] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.623022][ T60] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.699942][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 298.363295][ T8309] loop1: detected capacity change from 0 to 1024 [ 298.482720][ T8309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.776279][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.786395][ T8334] loop3: detected capacity change from 0 to 512 [ 299.932647][ T8334] EXT4-fs (loop3): too many log groups per flexible block group [ 299.943875][ T8340] syz.1.763 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 299.971981][ T8334] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 299.972099][ T8334] EXT4-fs (loop3): mount failed [ 300.480824][ T8346] netlink: 44 bytes leftover after parsing attributes in process `syz.1.768'. [ 301.425029][ T8359] netlink: 96 bytes leftover after parsing attributes in process `syz.1.773'. [ 301.612642][ T8368] netlink: 'syz.4.778': attribute type 39 has an invalid length. [ 301.733219][ T8368] veth0_macvtap: left promiscuous mode [ 301.762347][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 301.898408][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.972823][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.048623][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.106347][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.179029][ T8374] batman_adv: batadv0: Interface deactivated: gretap1 [ 302.235853][ T8374] batman_adv: batadv0: Removing interface: gretap1 [ 302.842900][ T8399] loop6: detected capacity change from 0 to 1024 [ 302.878542][ T8399] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.018739][ T8399] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:482: comm syz.6.791: Invalid block bitmap block 0 in block_group 0 [ 303.055182][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 303.055204][ T30] audit: type=1326 audit(303.033:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.4.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 303.094024][ T8399] Quota error (device loop6): write_blk: dquota write failed [ 303.132553][ T8399] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 303.160522][ T8400] loop0: detected capacity change from 0 to 1024 [ 303.169134][ T30] audit: type=1326 audit(303.033:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.4.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 303.182534][ T8399] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.791: Failed to acquire dquot type 0 [ 303.302716][ T8399] EXT4-fs error (device loop6): ext4_free_blocks:6705: comm syz.6.791: Freeing blocks not in datazone - block = 0, count = 4096 [ 303.316291][ T30] audit: type=1326 audit(303.093:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.4.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 303.319555][ T8400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.338212][ T30] audit: type=1326 audit(303.093:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.4.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 303.379003][ T30] audit: type=1326 audit(303.093:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.4.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 303.411366][ T30] audit: type=1326 audit(303.093:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.4.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 303.436409][ T30] audit: type=1326 audit(303.093:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.4.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 303.468049][ T8399] EXT4-fs error (device loop6): ext4_read_inode_bitmap:138: comm syz.6.791: Invalid inode bitmap blk 0 in block_group 0 [ 303.483537][ T12] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 303.518032][ T12] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 303.541540][ T8399] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 303.563017][ T8399] EXT4-fs (loop6): 1 orphan inode deleted [ 303.570796][ T8399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.634088][ T8416] netlink: 176 bytes leftover after parsing attributes in process `syz.5.796'. [ 303.654507][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.700425][ T8399] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 304.013226][ T6524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.419446][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.802'. [ 304.430016][ T1147] Bluetooth: hci7: Frame reassembly failed (-84) [ 304.436981][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.476727][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.803'. [ 304.489521][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.569843][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.620145][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.277015][ T8445] netlink: 'syz.0.808': attribute type 4 has an invalid length. [ 305.328755][ T8448] netlink: 'syz.0.808': attribute type 4 has an invalid length. [ 305.415678][ T8450] loop6: detected capacity change from 0 to 512 [ 305.498237][ T8450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.588204][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 305.642401][ T8454] xt_hashlimit: max too large, truncated to 1048576 [ 305.669878][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 305.716583][ T8454] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 305.885565][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 305.914652][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 306.183410][ T5847] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 306.186000][ T5851] Bluetooth: hci6: command 0x1003 tx timeout [ 306.360566][ T6524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.432538][ T5847] Bluetooth: hci7: command 0x1003 tx timeout [ 306.433224][ T5833] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 307.294734][ T8481] mmap: syz.3.821 (8481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 308.160110][ T8493] 9pnet: Could not find request transport: t [ 309.451978][ T8523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.739802][ T8529] loop3: detected capacity change from 0 to 164 [ 309.808341][ T8529] Unable to read rock-ridge attributes [ 309.889763][ T8529] Unable to read rock-ridge attributes [ 309.954327][ T8529] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 310.004598][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 310.518644][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 310.666677][ T8550] usb usb8: usbfs: process 8550 (syz.5.849) did not claim interface 0 before use [ 311.319370][ T8562] loop4: detected capacity change from 0 to 512 [ 311.327785][ T8562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 311.437308][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 311.437332][ T30] audit: type=1326 audit(311.413:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.437594][ T8562] EXT4-fs (loop4): 1 truncate cleaned up [ 311.443667][ T30] audit: type=1326 audit(311.413:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.496139][ T30] audit: type=1326 audit(311.473:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.521989][ T30] audit: type=1326 audit(311.473:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.544215][ T30] audit: type=1326 audit(311.473:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.566064][ T30] audit: type=1326 audit(311.503:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.622338][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.638545][ T8565] loop1: detected capacity change from 0 to 1024 [ 311.641911][ T30] audit: type=1326 audit(311.503:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.779600][ T30] audit: type=1326 audit(311.503:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.811348][ T30] audit: type=1326 audit(311.503:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.830560][ T8565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.843052][ T30] audit: type=1326 audit(311.503:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af598efc9 code=0x7ffc0000 [ 311.930426][ T8574] loop6: detected capacity change from 0 to 1024 [ 312.217135][ T8574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.400526][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 312.419728][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.622095][ T6524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.489996][ T8615] loop6: detected capacity change from 0 to 164 [ 314.889406][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.041963][ T8642] netlink: 'syz.5.880': attribute type 10 has an invalid length. [ 315.107887][ T8642] hsr_slave_0: left promiscuous mode [ 315.163663][ T8642] hsr_slave_1: left promiscuous mode [ 316.275313][ T8671] loop5: detected capacity change from 0 to 512 [ 316.568365][ T8671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.653346][ T8680] loop4: detected capacity change from 0 to 128 [ 316.689365][ T8680] EXT4-fs: Ignoring removed nobh option [ 316.756816][ T8680] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.053475][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.144316][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 317.194022][ T5831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.221233][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 317.470277][ T8692] loop5: detected capacity change from 0 to 512 [ 317.571815][ T8692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.686336][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 317.686361][ T30] audit: type=1326 audit(317.663:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 317.754966][ T30] audit: type=1326 audit(317.663:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 317.777058][ T30] audit: type=1326 audit(317.723:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 317.800927][ T30] audit: type=1326 audit(317.723:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 317.835969][ T30] audit: type=1326 audit(317.723:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 317.914833][ T30] audit: type=1326 audit(317.723:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 318.021432][ T30] audit: type=1326 audit(317.723:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 318.147223][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.156388][ T30] audit: type=1326 audit(317.723:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 318.203667][ T8703] loop4: detected capacity change from 0 to 2048 [ 318.248801][ T30] audit: type=1800 audit(317.733:252): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.896" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 318.356380][ T30] audit: type=1800 audit(317.733:253): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.896" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 319.272778][ T8734] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.441638][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 319.583775][ T8742] team0: No ports can be present during mode change [ 319.946537][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.921'. [ 320.031785][ T8725] program syz.5.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.924014][ T8763] loop3: detected capacity change from 0 to 128 [ 320.993196][ T8763] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.509038][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.704048][ T8779] loop4: detected capacity change from 0 to 128 [ 321.733815][ T8779] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 321.814214][ T8781] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 322.071786][ T8787] loop1: detected capacity change from 0 to 1024 [ 322.115444][ T8787] EXT4-fs: Ignoring removed orlov option [ 322.121134][ T8787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.151947][ T8789] loop0: detected capacity change from 0 to 512 [ 322.183200][ T8789] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 322.202787][ T8787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.366331][ T8789] EXT4-fs error (device loop0): __ext4_iget:5443: inode #11: block 2: comm syz.0.937: invalid block [ 322.432553][ T8787] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 322.455658][ T8789] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.937: couldn't read orphan inode 11 (err -117) [ 322.505086][ T8787] EXT4-fs (loop1): This should not happen!! Data will be lost [ 322.505086][ T8787] [ 322.530084][ T8789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.301447][ T8787] EXT4-fs (loop1): Total free blocks count 0 [ 323.346946][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 323.346971][ T30] audit: type=1800 audit(323.323:280): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.937" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 323.438939][ T8787] EXT4-fs (loop1): Free/Dirty block details [ 323.444961][ T8787] EXT4-fs (loop1): free_blocks=0 [ 323.450705][ T8787] EXT4-fs (loop1): dirty_blocks=0 [ 323.465097][ T8787] EXT4-fs (loop1): Block reservation details [ 323.471090][ T8787] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 323.482218][ T30] audit: type=1804 audit(323.393:281): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.937" name="/newroot/168/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 323.553744][ T8811] loop5: detected capacity change from 0 to 128 [ 323.687932][ T8811] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.719891][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.820630][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.847894][ T30] audit: type=1804 audit(323.823:282): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.945" name="/newroot/160/file0" dev="tmpfs" ino=839 res=1 errno=0 [ 324.203054][ T5842] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.243091][ T8833] netlink: 'syz.4.950': attribute type 2 has an invalid length. [ 324.268959][ T8835] loop1: detected capacity change from 0 to 1024 [ 324.384974][ T8835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.552630][ T8846] tmpfs: Unknown parameter 'm' [ 324.646785][ T8844] Process accounting paused [ 324.911892][ T8857] loop3: detected capacity change from 0 to 512 [ 325.009258][ T8857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.037009][ T8853] loop5: detected capacity change from 0 to 8192 [ 325.125005][ T8857] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.961: corrupted inode contents [ 325.159360][ T8857] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.961: mark_inode_dirty error [ 325.198645][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.260449][ T8857] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.961: corrupted inode contents [ 325.553570][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.267330][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 326.337538][ T8891] netlink: 36 bytes leftover after parsing attributes in process `syz.5.971'. [ 326.376373][ T8892] loop0: detected capacity change from 0 to 1024 [ 326.398500][ T8892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.433114][ T8895] Cannot find del_set index 3 as target [ 326.497488][ T8892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.647937][ T30] audit: type=1326 audit(326.623:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 326.711363][ T30] audit: type=1326 audit(326.633:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 326.748437][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.755041][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.757875][ T30] audit: type=1326 audit(326.633:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 326.832239][ T30] audit: type=1326 audit(326.683:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953ff8efc9 code=0x7ffc0000 [ 327.372626][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 327.502530][ T8915] team1: entered promiscuous mode [ 327.546732][ T8915] team1: entered allmulticast mode [ 327.561891][ T8915] 8021q: adding VLAN 0 to HW filter on device team1 [ 327.571931][ T30] audit: type=1326 audit(327.543:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 327.660292][ T30] audit: type=1326 audit(327.553:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 327.729953][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.769731][ T30] audit: type=1326 audit(327.553:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 327.821967][ T8923] netlink: 36 bytes leftover after parsing attributes in process `syz.5.985'. [ 327.943396][ T8921] hub 2-0:1.0: USB hub found [ 327.993342][ T8921] hub 2-0:1.0: 1 port detected [ 328.102574][ T8927] loop3: detected capacity change from 0 to 512 [ 328.236226][ T8927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.351310][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 328.351333][ T30] audit: type=1326 audit(328.323:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5038efc9 code=0x7ffc0000 [ 328.511426][ T30] audit: type=1326 audit(328.363:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5038efc9 code=0x7ffc0000 [ 328.574417][ T30] audit: type=1326 audit(328.363:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5038efc9 code=0x7ffc0000 [ 328.598101][ T30] audit: type=1326 audit(328.363:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5038efc9 code=0x7ffc0000 [ 328.675741][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.681815][ T30] audit: type=1326 audit(328.363:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f7f5038efc9 code=0x7ffc0000 [ 328.742905][ T30] audit: type=1326 audit(328.363:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.1.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5038efc9 code=0x7ffc0000 [ 329.331372][ T30] audit: type=1326 audit(329.303:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.4.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 329.417277][ T30] audit: type=1326 audit(329.343:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.4.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 329.563599][ T30] audit: type=1326 audit(329.343:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.4.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 329.645952][ T30] audit: type=1326 audit(329.343:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.4.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786278efc9 code=0x7ffc0000 [ 330.612755][ T8993] loop1: detected capacity change from 0 to 2048 [ 330.675999][ T8993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.732842][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 330.762169][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.770025][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.831671][ T9006] [ 330.834122][ T9006] ============================= [ 330.838973][ T9006] WARNING: suspicious RCU usage [ 330.843935][ T9006] syzkaller #0 Not tainted [ 330.848355][ T9006] ----------------------------- [ 330.853451][ T9006] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 330.862006][ T9006] [ 330.862006][ T9006] other info that might help us debug this: [ 330.862006][ T9006] [ 330.872297][ T9006] [ 330.872297][ T9006] rcu_scheduler_active = 2, debug_locks = 1 [ 330.880364][ T9006] 1 lock held by syz.5.1020/9006: [ 330.885440][ T9006] #0: ffffffff8e3c3ae0 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x357/0xae0 [ 330.896537][ T9006] [ 330.896537][ T9006] stack backtrace: [ 330.902523][ T9006] CPU: 1 UID: 0 PID: 9006 Comm: syz.5.1020 Not tainted syzkaller #0 PREEMPT(full) [ 330.902569][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.902592][ T9006] Call Trace: [ 330.902603][ T9006] [ 330.902617][ T9006] dump_stack_lvl+0x16c/0x1f0 [ 330.902663][ T9006] lockdep_rcu_suspicious+0x166/0x260 [ 330.902733][ T9006] get_callchain_entry+0x278/0x3f0 [ 330.902789][ T9006] get_perf_callchain+0x2d6/0x810 [ 330.902831][ T9006] ? rcu_is_watching+0x10/0xc0 [ 330.902887][ T9006] ? __pfx_get_perf_callchain+0x10/0x10 [ 330.902957][ T9006] __bpf_get_stack+0x4f4/0xa10 [ 330.903010][ T9006] ? __pfx___bpf_get_stack+0x10/0x10 [ 330.903067][ T9006] bpf_get_stack+0x32/0x40 [ 330.903111][ T9006] bpf_get_stack_raw_tp+0x1dd/0x280 [ 330.903168][ T9006] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 330.903202][ T9006] bpf_prog_test_run_syscall+0x461/0xae0 [ 330.903247][ T9006] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 330.903289][ T9006] ? fput+0x9b/0xd0 [ 330.903329][ T9006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.903376][ T9006] ? __bpf_prog_get+0x97/0x2a0 [ 330.903415][ T9006] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 330.903457][ T9006] __sys_bpf+0x1035/0x4980 [ 330.903507][ T9006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.903553][ T9006] ? futex_private_hash_put+0x18a/0x300 [ 330.903620][ T9006] ? __pfx___sys_bpf+0x10/0x10 [ 330.903677][ T9006] ? __pfx_futex_wake+0x10/0x10 [ 330.903745][ T9006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.903797][ T9006] ? do_futex+0x122/0x350 [ 330.903859][ T9006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.903905][ T9006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.903956][ T9006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.904001][ T9006] ? xfd_validate_state+0x61/0x180 [ 330.904074][ T9006] __x64_sys_bpf+0x78/0xc0 [ 330.904124][ T9006] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.904169][ T9006] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.904211][ T9006] do_syscall_64+0xcd/0xfa0 [ 330.904259][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.904296][ T9006] RIP: 0033:0x7fc54078efc9 [ 330.904323][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.904358][ T9006] RSP: 002b:00007fc541697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.904393][ T9006] RAX: ffffffffffffffda RBX: 00007fc5409e5fa0 RCX: 00007fc54078efc9 [ 330.904417][ T9006] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 330.904440][ T9006] RBP: 00007fc540811f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.904463][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.904486][ T9006] R13: 00007fc5409e6038 R14: 00007fc5409e5fa0 R15: 00007ffc62f30438 [ 330.904538][ T9006] [ 331.548699][ T5829] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 331.567367][ T5829] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 331.595552][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.772550][ T8998] $Hÿ: renamed from bond0 (while UP) [ 331.800062][ T8998] $Hÿ: entered promiscuous mode [ 331.812324][ T8998] bond_slave_0: entered promiscuous mode [ 331.818192][ T8998] bond_slave_1: entered promiscuous mode [ 331.845945][ T1147] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.888855][ T1147] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.908223][ T1147] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.946497][ T1147] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.941574][ T5833] Bluetooth: hci3: command 0x0406 tx timeout