last executing test programs: 3m58.742237481s ago: executing program 1 (id=294): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m58.02324101s ago: executing program 1 (id=298): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="8000102e75243301", 0x8}, {0x0}], 0x2, &(0x7f0000000240)=ANY=[], 0x18}}], 0x1, 0x40000000) 3m57.433718543s ago: executing program 1 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) syz_open_procfs(0x0, 0x0) write$sndseq(r1, 0x0, 0x0) poll(0x0, 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) 3m56.501615288s ago: executing program 1 (id=306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x2) 3m55.606594065s ago: executing program 1 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 3m54.331968946s ago: executing program 1 (id=317): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x181301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r3, @ANYBLOB="0000000020010000300012800b"], 0x50}}, 0x20004010) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb05001800000000e545d7877a54245b76d71f0000000c00002596a48d0cc03ea30c5c24c83f0aca8abee4f5608f962df734f5840d3e92bed7dbdd9ce4c25877b1e8bf7887fc56bfa0abf29303d0b87364936daa87af583d65443e6b374dac31fa385ca58f3a6c68adb5d67a7d68040568badb36f44d798bffb69bb3494d4fa585ff18158ee2067140b8fa62"], 0x0, 0x26, 0x0, 0x2}, 0x28) getsockopt$sock_int(r4, 0x1, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYRESOCT=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r8}, 0x9) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540), 0x188020, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001480)=ANY=[@ANYRES16=r15, @ANYRESDEC, @ANYRES16=r13, @ANYRES16=r15, @ANYRESDEC=r14, @ANYRES16=r12, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r11], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000000)={{r11, 0x8000000000000000, 0xfffffffffffff97a, 0xdd99ab2, 0xff, 0x9, 0x9, 0x7, 0x101, 0x9e48, 0xf, 0x2, 0x7, 0x3, 0x7}, 0x18, [0x0, 0x0, 0x0]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='gtp\x00\xf3\x90F\x0e\xb9cc\xc8\xb1)\xbcI\xf9\x11\xc7>\f\x91\xdc*w\f\xceU\xda\rP\a}\x1a@\xf1M\x92\xa11q6}%\xd4\x8c1\xaf\xfc\x1c\x16y\xc7Vk\xfd\xf8\xd65g?\xc5\xc6\xf0\xa0\x95i\xe6\xfe\xdf\x9aUa\'\xf7\x13C\xe9\xce8\x8fm\x9e\xaf\xce?\xd3\xc9\xd7\x03\xa8\x04W\x04.\xce-\xa0\x85\xcd\x90\xf9\x00\x00\x00\x00\x00\x00\x0e?g\xeeO\"I_\xf1b%V\x9f\x80\x1b\t\xca\xb4O') ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 3m39.122176547s ago: executing program 32 (id=317): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x181301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r3, @ANYBLOB="0000000020010000300012800b"], 0x50}}, 0x20004010) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb05001800000000e545d7877a54245b76d71f0000000c00002596a48d0cc03ea30c5c24c83f0aca8abee4f5608f962df734f5840d3e92bed7dbdd9ce4c25877b1e8bf7887fc56bfa0abf29303d0b87364936daa87af583d65443e6b374dac31fa385ca58f3a6c68adb5d67a7d68040568badb36f44d798bffb69bb3494d4fa585ff18158ee2067140b8fa62"], 0x0, 0x26, 0x0, 0x2}, 0x28) getsockopt$sock_int(r4, 0x1, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYRESOCT=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r8}, 0x9) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540), 0x188020, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001480)=ANY=[@ANYRES16=r15, @ANYRESDEC, @ANYRES16=r13, @ANYRES16=r15, @ANYRESDEC=r14, @ANYRES16=r12, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r11], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000000)={{r11, 0x8000000000000000, 0xfffffffffffff97a, 0xdd99ab2, 0xff, 0x9, 0x9, 0x7, 0x101, 0x9e48, 0xf, 0x2, 0x7, 0x3, 0x7}, 0x18, [0x0, 0x0, 0x0]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='gtp\x00\xf3\x90F\x0e\xb9cc\xc8\xb1)\xbcI\xf9\x11\xc7>\f\x91\xdc*w\f\xceU\xda\rP\a}\x1a@\xf1M\x92\xa11q6}%\xd4\x8c1\xaf\xfc\x1c\x16y\xc7Vk\xfd\xf8\xd65g?\xc5\xc6\xf0\xa0\x95i\xe6\xfe\xdf\x9aUa\'\xf7\x13C\xe9\xce8\x8fm\x9e\xaf\xce?\xd3\xc9\xd7\x03\xa8\x04W\x04.\xce-\xa0\x85\xcd\x90\xf9\x00\x00\x00\x00\x00\x00\x0e?g\xeeO\"I_\xf1b%V\x9f\x80\x1b\t\xca\xb4O') ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 3m10.164721199s ago: executing program 4 (id=456): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m8.996450085s ago: executing program 4 (id=460): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m7.980073332s ago: executing program 4 (id=464): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x10007, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r0, 0x80089203, 0x0) 3m6.051173169s ago: executing program 4 (id=468): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3m4.931486457s ago: executing program 4 (id=472): pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x1, 0x9, 0x3, 0x4, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 3m4.06895794s ago: executing program 4 (id=475): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008815}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000009}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x77, &(0x7f0000001500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000001600), 0x8, 0xce, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x8, 0xf, 0x6, 0x6, 0x1, 0x7, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000080) 2m56.307213636s ago: executing program 3 (id=499): socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x1, 0x9, 0x3, 0x4, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 2m55.283648187s ago: executing program 3 (id=502): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) write(r0, 0x0, 0x0) 2m54.335638253s ago: executing program 3 (id=505): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x5, 0x0, 0x6}]) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r5 = open(&(0x7f0000000240)='./file1\x00', 0xca082, 0x12) sendfile(r5, r5, 0x0, 0x800000009) r6 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x38) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000000)={0x80}) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 2m51.576846279s ago: executing program 3 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000700)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2m50.499503389s ago: executing program 3 (id=517): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 2m47.473973783s ago: executing program 33 (id=517): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 2m47.010514387s ago: executing program 34 (id=475): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008815}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000009}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 1m5.512152618s ago: executing program 5 (id=822): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m4.683783162s ago: executing program 5 (id=826): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m2.950808775s ago: executing program 5 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 1m1.624113446s ago: executing program 5 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 55.740505879s ago: executing program 7 (id=849): prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='gtp\x00\xf3\x90F\x0e\xb9cc\xc8\xb1)\xbcI\xf9\x11\xc7>\f\x91\xdc*w\f\xceU\xda\rP\a}\x1a@\xf1M\x92\xa11q6}%\xd4\x8c1\xaf\xfc\x1c\x16y\xc7Vk\xfd\xf8\xd65g?\xc5\xc6\xf0\xa0\x95i\xe6\xfe\xdf\x9aUa\'\xf7\x13C\xe9\xce8\x8fm\x9e\xaf\xce?\xd3\xc9\xd7\x03\xa8\x04W\x04.\xce-\xa0\x85\xcd\x90\xf9\x00\x00\x00\x00\x00\x00\x0e?g\xeeO\"I_\xf1b%V\x9f\x80\x1b\t\xca\xb4O') r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) 54.010938723s ago: executing program 7 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 52.958022931s ago: executing program 7 (id=857): r0 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = eventfd2(0xd8df, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/157, 0x9d}, {0x0}], 0x2, 0x8, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 51.984699293s ago: executing program 7 (id=862): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r0, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 51.156478754s ago: executing program 7 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f41c489c65e81aa928d167aed2be362c97ccac5adfd0728360b7ce6518f179c2322b720d9d8cb78063addfa7a00f592f7773185c0fce1ef783e19548992429ddb2938d4a6a0011d6f58b545849e4595e08f67602b6f7c744a5326722e2bd19ac877f4b797f1dedb241167be9ddcafdbd9be15733c5dc26ef88decf03ee54c89ae659df114b863cc89c8addc35f"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49dd, 0x2, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x240, 0x4, "00000000000000000000c2041a02003d00"}) r2 = syz_open_pts(r1, 0x20080) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 49.564353317s ago: executing program 7 (id=870): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) accept(0xffffffffffffffff, &(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000440)=0x80) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x0, 'veth0_to_hsr\x00', {}, 0x3ff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) 45.920895703s ago: executing program 35 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 33.797986464s ago: executing program 36 (id=870): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) accept(0xffffffffffffffff, &(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000440)=0x80) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x0, 'veth0_to_hsr\x00', {}, 0x3ff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) 7.700763765s ago: executing program 2 (id=953): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0) 6.667536806s ago: executing program 0 (id=955): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000a1feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8}]}, 0x30}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 6.510697285s ago: executing program 2 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) 6.120977277s ago: executing program 6 (id=957): bpf$ENABLE_STATS(0x20, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 5.042203416s ago: executing program 0 (id=958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3f, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 4.689195514s ago: executing program 6 (id=959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "6970afde620bf587", "9491c12f2665bb0688e28ba814e853080bf0394aa31043dcf5ac7b46fc31fff6", '\x00', "d90ecaa9af7940d8"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) shutdown(r0, 0x1) socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="14000000", 0x4) 4.485222877s ago: executing program 2 (id=960): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) munlockall() 3.746320494s ago: executing program 0 (id=961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) 3.221356124s ago: executing program 6 (id=962): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="002685f042b0bdc5c8e6c5c09477c5d4ff574731", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x33) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000580)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x869f, 0x3a, 'GPL\x00', 0x3a, '-', 0x3a, './file0'}, 0x2c) 3.086822058s ago: executing program 2 (id=963): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee", 0x15}, {&(0x7f0000000040)="aa1d", 0x2}], 0x2) 2.777410038s ago: executing program 0 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.173824797s ago: executing program 6 (id=965): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002d"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.104016581s ago: executing program 2 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000a1feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8}]}, 0x30}}, 0x90) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 1.617011364s ago: executing program 0 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = dup(r1) sendto$packet(r2, &(0x7f00000003c0)='(', 0xfffffffffffffed1, 0x24004090, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.080573891s ago: executing program 6 (id=968): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000220000010000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 692.034319ms ago: executing program 0 (id=969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f00000008c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) 450.3107ms ago: executing program 2 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x8, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x40c}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000140)="4307ed2e", 0x4}], 0x2}, 0x880) 0s ago: executing program 6 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): : release socket [ 318.189510][ T7104] vhci_hcd: connection closed [ 318.191034][ T4286] vhci_hcd vhci_hcd.4: disconnect device [ 318.202339][ T7094] vhci_hcd: connection closed [ 318.202475][ T7100] vhci_hcd: connection closed [ 318.208187][ T7091] vhci_hcd: connection closed [ 318.217536][ T7088] vhci_hcd: connection reset by peer [ 318.261232][ T4286] vhci_hcd vhci_hcd.4: stop threads [ 318.266687][ T4286] vhci_hcd vhci_hcd.4: release socket [ 318.272760][ T4286] vhci_hcd vhci_hcd.4: disconnect device [ 318.342642][ T4286] vhci_hcd vhci_hcd.4: stop threads [ 318.348116][ T4286] vhci_hcd vhci_hcd.4: release socket [ 318.354779][ T4286] vhci_hcd vhci_hcd.4: disconnect device [ 318.408747][ T4286] vhci_hcd vhci_hcd.4: stop threads [ 318.414218][ T4286] vhci_hcd vhci_hcd.4: release socket [ 318.420373][ T4286] vhci_hcd vhci_hcd.4: disconnect device [ 318.470390][ T4286] vhci_hcd vhci_hcd.4: stop threads [ 318.475859][ T4286] vhci_hcd vhci_hcd.4: release socket [ 318.481897][ T4286] vhci_hcd vhci_hcd.4: disconnect device [ 318.561787][ T4286] vhci_hcd vhci_hcd.4: stop threads [ 318.567258][ T4286] vhci_hcd vhci_hcd.4: release socket [ 318.573197][ T4286] vhci_hcd vhci_hcd.4: disconnect device [ 318.610613][ T30] audit: type=1326 audit(1767958077.287:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 318.633546][ T30] audit: type=1326 audit(1767958077.287:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 318.808940][ T30] audit: type=1326 audit(1767958077.347:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 318.832323][ T30] audit: type=1326 audit(1767958077.347:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 318.856937][ T30] audit: type=1326 audit(1767958077.347:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7110 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 319.478850][ T7120] loop3: detected capacity change from 0 to 512 [ 319.612663][ T7120] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 319.682755][ T7120] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.378: bg 0: block 104: invalid block bitmap [ 319.709178][ T7120] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 319.737504][ T7120] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.378: invalid indirect mapped block 1 (level 1) [ 319.822053][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 319.834199][ T7120] EXT4-fs (loop3): 1 truncate cleaned up [ 319.842952][ T7120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.089187][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.130236][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.140490][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.174579][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.191416][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.433819][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.514031][ T7129] loop4: detected capacity change from 0 to 512 [ 320.567151][ T7132] loop0: detected capacity change from 0 to 128 [ 320.665066][ T7129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.679397][ T7129] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.014044][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.024256][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.138598][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 321.138687][ T30] audit: type=1326 audit(1767958079.817:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 321.289375][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.325156][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.348654][ T30] audit: type=1326 audit(1767958079.897:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 321.371693][ T30] audit: type=1326 audit(1767958079.897:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 321.394536][ T30] audit: type=1326 audit(1767958079.907:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 321.419108][ T30] audit: type=1326 audit(1767958079.907:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 321.443069][ T30] audit: type=1326 audit(1767958079.907:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 321.703143][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.189496][ T4409] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.264023][ T4409] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.288894][ T5809] Bluetooth: hci5: command tx timeout [ 322.314189][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 322.401172][ T4409] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.449677][ T4409] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.108920][ T5851] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 323.129360][ T7155] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 323.136149][ T7155] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.144704][ T7155] vhci_hcd vhci_hcd.0: Device attached [ 323.259101][ T7155] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 323.265913][ T7155] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 323.274402][ T7155] vhci_hcd vhci_hcd.0: Device attached [ 323.337594][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 323.379248][ T5856] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 323.394370][ T7155] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 323.401161][ T7155] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.409661][ T7155] vhci_hcd vhci_hcd.0: Device attached [ 323.446957][ T7167] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 323.453837][ T7167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.462538][ T7167] vhci_hcd vhci_hcd.0: Device attached [ 323.489560][ T5856] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 323.584951][ T7170] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 323.591844][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 323.600169][ T7170] vhci_hcd vhci_hcd.0: Device attached [ 323.636037][ T7155] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(9) [ 323.642837][ T7155] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 323.652478][ T7155] vhci_hcd vhci_hcd.0: Device attached [ 323.702513][ T7171] vhci_hcd: connection closed [ 323.703178][ T7173] vhci_hcd: connection closed [ 323.704141][ T7157] vhci_hcd: connection reset by peer [ 323.708614][ T7168] vhci_hcd: connection closed [ 323.718912][ T7162] vhci_hcd: connection closed [ 323.726967][ T7165] vhci_hcd: connection closed [ 323.756969][ T4232] vhci_hcd vhci_hcd.2: stop threads [ 323.768113][ T4232] vhci_hcd vhci_hcd.2: release socket [ 323.775382][ T4232] vhci_hcd vhci_hcd.2: disconnect device [ 323.809044][ T4232] vhci_hcd vhci_hcd.2: stop threads [ 323.814726][ T4232] vhci_hcd vhci_hcd.2: release socket [ 323.820782][ T4232] vhci_hcd vhci_hcd.2: disconnect device [ 323.871466][ T4232] vhci_hcd vhci_hcd.2: stop threads [ 323.876915][ T4232] vhci_hcd vhci_hcd.2: release socket [ 323.884473][ T4232] vhci_hcd vhci_hcd.2: disconnect device [ 323.939277][ T4232] vhci_hcd vhci_hcd.2: stop threads [ 323.944736][ T4232] vhci_hcd vhci_hcd.2: release socket [ 323.951405][ T4232] vhci_hcd vhci_hcd.2: disconnect device [ 324.029297][ T4232] vhci_hcd vhci_hcd.2: stop threads [ 324.034885][ T4232] vhci_hcd vhci_hcd.2: release socket [ 324.041809][ T4232] vhci_hcd vhci_hcd.2: disconnect device [ 324.069768][ T4232] vhci_hcd vhci_hcd.2: stop threads [ 324.075221][ T4232] vhci_hcd vhci_hcd.2: release socket [ 324.081630][ T4232] vhci_hcd vhci_hcd.2: disconnect device [ 324.373487][ T5809] Bluetooth: hci5: command tx timeout [ 324.804173][ T7185] loop2: detected capacity change from 0 to 128 [ 325.627840][ T30] audit: type=1326 audit(1767958084.307:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 325.760563][ T30] audit: type=1326 audit(1767958084.347:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 325.878206][ T7195] loop4: detected capacity change from 0 to 512 [ 326.037937][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.045726][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.053881][ T7126] bridge_slave_0: entered allmulticast mode [ 326.064204][ T7126] bridge_slave_0: entered promiscuous mode [ 326.217250][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.225434][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.233510][ T7126] bridge_slave_1: entered allmulticast mode [ 326.243799][ T7126] bridge_slave_1: entered promiscuous mode [ 326.263192][ T7195] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.397: couldn't read orphan inode 26 (err -116) [ 326.345288][ T7195] EXT4-fs (loop4): Remounting filesystem read-only [ 326.354838][ T7195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.368216][ T7195] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.448993][ T5801] Bluetooth: hci5: command tx timeout [ 326.540442][ T7192] Process accounting resumed [ 326.610705][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.082486][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.863821][ T7126] team0: Port device team_slave_0 added [ 327.959662][ T7126] team0: Port device team_slave_1 added [ 328.376703][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.384087][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.410844][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.528849][ T5801] Bluetooth: hci5: command tx timeout [ 328.544295][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.551810][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.581745][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.599234][ T5856] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 329.087096][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.172001][ T7126] hsr_slave_0: entered promiscuous mode [ 329.183523][ T7126] hsr_slave_1: entered promiscuous mode [ 329.202717][ T7126] debugfs: 'hsr0' already exists in 'hsr' [ 329.208917][ T7126] Cannot create hsr debugfs directory [ 329.895586][ T7227] loop4: detected capacity change from 0 to 128 [ 330.538001][ T7232] netlink: 'syz.3.409': attribute type 30 has an invalid length. [ 330.688759][ T4036] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.697924][ T4036] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.728920][ T4036] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.813780][ T7232] loop3: detected capacity change from 0 to 256 [ 330.814299][ T4036] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.920776][ T7232] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e' [ 331.386876][ T7232] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.482269][ T7126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.559703][ T7232] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.639919][ T7126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.735275][ T7232] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.811561][ T7126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.881682][ T7126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.945830][ T7232] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.695270][ T1102] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.780965][ T7252] usb usb9: usbfs: process 7252 (syz.4.418) did not claim interface 0 before use [ 332.939993][ T4722] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.181560][ T1102] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.191048][ T7255] loop4: detected capacity change from 0 to 128 [ 333.245133][ T7255] EXT4-fs: Mount option(s) incompatible with ext2 [ 333.345633][ T4722] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.518614][ T7257] loop2: detected capacity change from 0 to 128 [ 333.579692][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.800191][ T7257] tipc: Started in network mode [ 333.805392][ T7257] tipc: Node identity 4, cluster identity 4711 [ 333.817246][ T7257] tipc: Node number set to 4 [ 333.871060][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.955393][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.963054][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.092027][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.099726][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.135201][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 334.143644][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 334.146733][ T7248] Bluetooth: hci3: command 0x0406 tx timeout [ 334.155411][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 334.160424][ T7248] Bluetooth: hci2: command 0x0406 tx timeout [ 334.382413][ T7126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.802317][ T30] audit: type=1326 audit(1767958093.467:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 334.919349][ T30] audit: type=1326 audit(1767958093.507:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 334.945333][ T30] audit: type=1326 audit(1767958093.537:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 334.968153][ T30] audit: type=1326 audit(1767958093.537:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 334.991098][ T30] audit: type=1326 audit(1767958093.537:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 335.013842][ T30] audit: type=1326 audit(1767958093.587:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 335.036662][ T30] audit: type=1326 audit(1767958093.587:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 335.059538][ T30] audit: type=1326 audit(1767958093.587:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 335.082195][ T30] audit: type=1326 audit(1767958093.587:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 335.105177][ T30] audit: type=1326 audit(1767958093.587:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 336.740225][ T7283] loop4: detected capacity change from 0 to 2048 [ 336.810043][ T7283] EXT4-fs: quotafile must be on filesystem root [ 337.014742][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.198040][ T7307] loop0: detected capacity change from 0 to 128 [ 338.392349][ T7307] tipc: Cannot configure node identity twice [ 340.255839][ T7321] syz.2.438 (7321) used greatest stack depth: 2344 bytes left [ 340.349282][ T7126] veth0_vlan: entered promiscuous mode [ 340.365835][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 340.365919][ T30] audit: type=1326 audit(1767958099.047:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 340.468704][ T30] audit: type=1326 audit(1767958099.127:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 340.492297][ T30] audit: type=1326 audit(1767958099.127:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 340.520792][ T30] audit: type=1326 audit(1767958099.127:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 340.530612][ T7126] veth1_vlan: entered promiscuous mode [ 340.543530][ T30] audit: type=1326 audit(1767958099.127:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 340.571946][ T30] audit: type=1326 audit(1767958099.137:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f288818f749 code=0x7ffc0000 [ 340.594715][ T30] audit: type=1326 audit(1767958099.137:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f288818f783 code=0x7ffc0000 [ 340.656953][ T7333] loop0: detected capacity change from 0 to 1024 [ 340.669587][ T7333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.863621][ T7333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.897500][ T30] audit: type=1326 audit(1767958099.327:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f288818e1ff code=0x7ffc0000 [ 341.102056][ T30] audit: type=1326 audit(1767958099.767:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f288818f7d7 code=0x7ffc0000 [ 341.208821][ T7126] veth0_macvtap: entered promiscuous mode [ 341.322258][ T7126] veth1_macvtap: entered promiscuous mode [ 341.477032][ T7334] loop3: detected capacity change from 0 to 2048 [ 341.520388][ T30] audit: type=1326 audit(1767958100.147:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.3.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f288818df90 code=0x7ffc0000 [ 341.594576][ T7334] EXT4-fs: quotafile must be on filesystem root [ 341.651657][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.744110][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.891940][ T4055] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.957236][ T4055] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.018663][ T4055] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.027736][ T4055] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.318078][ T7333] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 342.439325][ T7347] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 342.504943][ T7333] team0: Failed to send options change via netlink (err -105) [ 342.513561][ T7333] team0: Port device dummy0 added [ 342.691872][ T7347] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 342.942110][ T7347] team0: Failed to send options change via netlink (err -105) [ 342.952203][ T7347] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 342.963942][ T7347] team0: Port device dummy0 removed [ 342.985851][ T7347] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 345.233814][ T7370] loop4: detected capacity change from 0 to 128 [ 345.546116][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.576449][ T7370] tipc: Started in network mode [ 345.581823][ T7370] tipc: Node identity 4, cluster identity 4711 [ 345.588165][ T7370] tipc: Node number set to 4 [ 346.800983][ T5074] Bluetooth: hci6: Frame reassembly failed (-84) [ 346.958910][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 346.958999][ T30] audit: type=1326 audit(1767958105.627:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 346.988582][ T30] audit: type=1326 audit(1767958105.627:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 347.014039][ T30] audit: type=1326 audit(1767958105.637:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 347.038124][ T30] audit: type=1326 audit(1767958105.647:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 347.061613][ T30] audit: type=1326 audit(1767958105.657:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 347.084807][ T30] audit: type=1326 audit(1767958105.657:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 347.109405][ T30] audit: type=1326 audit(1767958105.657:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7988f8f749 code=0x7ffc0000 [ 347.133351][ T30] audit: type=1326 audit(1767958105.657:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7988f8f783 code=0x7ffc0000 [ 347.155985][ T30] audit: type=1326 audit(1767958105.757:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7988f8e1ff code=0x7ffc0000 [ 347.457314][ T7389] loop4: detected capacity change from 0 to 2048 [ 347.524935][ T7389] EXT4-fs: quotafile must be on filesystem root [ 347.878657][ T30] audit: type=1326 audit(1767958106.117:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7988f8f7d7 code=0x7ffc0000 [ 348.782264][ T5798] Bluetooth: hci6: command 0x1003 tx timeout [ 348.789003][ T5097] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 350.385883][ T7426] loop2: detected capacity change from 0 to 128 [ 351.619829][ T7436] loop0: detected capacity change from 0 to 2048 [ 351.702045][ T7436] EXT4-fs: quotafile must be on filesystem root [ 351.917759][ T4722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.927625][ T4722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.027518][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 352.027603][ T30] audit: type=1326 audit(1767958110.687:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.133874][ T7445] vlan2: entered promiscuous mode [ 352.139458][ T7445] gretap0: entered promiscuous mode [ 352.209289][ T30] audit: type=1326 audit(1767958110.767:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.233769][ T30] audit: type=1326 audit(1767958110.767:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.258184][ T30] audit: type=1326 audit(1767958110.767:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.282476][ T30] audit: type=1326 audit(1767958110.847:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.305236][ T30] audit: type=1326 audit(1767958110.867:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.330790][ T30] audit: type=1326 audit(1767958110.877:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.353809][ T30] audit: type=1326 audit(1767958110.877:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 352.376753][ T30] audit: type=1326 audit(1767958110.877:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25f7991667 code=0x7ffc0000 [ 352.399471][ T30] audit: type=1326 audit(1767958110.877:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f25f79915dc code=0x7ffc0000 [ 352.711368][ T4036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.719834][ T4036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.070930][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 353.080452][ T7450] netlink: 56 bytes leftover after parsing attributes in process `syz.3.469'. [ 353.202251][ T7450] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 353.211211][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.469'. [ 353.220735][ T7450] dummy0: entered promiscuous mode [ 353.234115][ T7450] bridge0: port 3(dummy0) entered blocking state [ 353.241517][ T7450] bridge0: port 3(dummy0) entered disabled state [ 353.248802][ T7450] dummy0: entered allmulticast mode [ 353.565365][ T7453] lo speed is unknown, defaulting to 1000 [ 353.572069][ T7453] lo speed is unknown, defaulting to 1000 [ 353.579585][ T7453] lo speed is unknown, defaulting to 1000 [ 353.601084][ T7453] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.649748][ T7453] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 353.825413][ T7453] lo speed is unknown, defaulting to 1000 [ 353.842754][ T7453] lo speed is unknown, defaulting to 1000 [ 353.852269][ T7453] lo speed is unknown, defaulting to 1000 [ 353.861816][ T7453] lo speed is unknown, defaulting to 1000 [ 353.873685][ T7453] lo speed is unknown, defaulting to 1000 [ 353.883866][ T7453] lo speed is unknown, defaulting to 1000 [ 354.515315][ T7466] syz.2.474 uses obsolete (PF_INET,SOCK_PACKET) [ 354.885406][ T7471] loop5: detected capacity change from 0 to 128 [ 355.003532][ T7470] loop4: detected capacity change from 0 to 164 [ 355.111534][ T7471] tipc: Started in network mode [ 355.116642][ T7471] tipc: Node identity 4, cluster identity 4711 [ 355.124905][ T7471] tipc: Node number set to 4 [ 355.202684][ T7475] netlink: 188 bytes leftover after parsing attributes in process `syz.3.478'. [ 355.243747][ T7468] syz.4.475: attempt to access beyond end of device [ 355.243747][ T7468] loop4: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 355.258462][ T7468] syz.4.475: attempt to access beyond end of device [ 355.258462][ T7468] loop4: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 355.858571][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'. [ 356.192787][ T7486] loop5: detected capacity change from 0 to 512 [ 356.206966][ T7479] loop2: detected capacity change from 0 to 2048 [ 356.342177][ T7479] EXT4-fs: quotafile must be on filesystem root [ 356.398871][ T7486] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.564684][ T7486] EXT4-fs (loop5): 1 orphan inode deleted [ 356.572022][ T7486] EXT4-fs (loop5): 1 truncate cleaned up [ 356.580496][ T7486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.806689][ T7486] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 356.836632][ T7492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.484'. [ 356.858127][ T7486] EXT4-fs (loop5): Remounting filesystem read-only [ 356.892434][ T7486] Cannot find add_set index 0 as target [ 356.911547][ T7491] netlink: 'syz.0.483': attribute type 10 has an invalid length. [ 356.920025][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.483'. [ 356.929462][ T7491] dummy0: entered promiscuous mode [ 357.021146][ T7491] bond0: (slave dummy0): Releasing backup interface [ 357.071095][ T7491] bridge0: port 3(dummy0) entered blocking state [ 357.078157][ T7491] bridge0: port 3(dummy0) entered disabled state [ 357.085579][ T7491] dummy0: entered allmulticast mode [ 357.316498][ T7126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.675763][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.682793][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.873068][ T7497] loop2: detected capacity change from 0 to 512 [ 358.011138][ T7497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.167609][ T7499] loop5: detected capacity change from 0 to 164 [ 358.203048][ T7497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.251989][ T7497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.302092][ T7499] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 358.398124][ T7499] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 358.500597][ T7499] Symlink component flag not implemented [ 358.506579][ T7499] Symlink component flag not implemented [ 358.513081][ T7499] Symlink component flag not implemented (7) [ 358.519599][ T7499] Symlink component flag not implemented (116) [ 359.165838][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.097286][ T7515] loop0: detected capacity change from 0 to 128 [ 360.436790][ T7515] tipc: Cannot configure node identity twice [ 361.823864][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 361.823955][ T30] audit: type=1326 audit(1767958120.507:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 361.990595][ T30] audit: type=1326 audit(1767958120.547:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 362.013926][ T30] audit: type=1326 audit(1767958120.567:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 362.036707][ T30] audit: type=1326 audit(1767958120.577:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 362.059949][ T30] audit: type=1326 audit(1767958120.577:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 362.082693][ T30] audit: type=1326 audit(1767958120.617:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 362.105541][ T30] audit: type=1326 audit(1767958120.617:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25f798f783 code=0x7ffc0000 [ 362.128135][ T30] audit: type=1326 audit(1767958120.757:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25f798e1ff code=0x7ffc0000 [ 362.526753][ T7536] loop0: detected capacity change from 0 to 2048 [ 362.635435][ T7536] EXT4-fs: quotafile must be on filesystem root [ 362.771678][ T30] audit: type=1326 audit(1767958121.207:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f25f798f7d7 code=0x7ffc0000 [ 362.794504][ T30] audit: type=1326 audit(1767958121.207:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25f798df90 code=0x7ffc0000 [ 364.311470][ T7560] loop3: detected capacity change from 0 to 512 [ 364.446009][ T7560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.459584][ T7560] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.872368][ T7564] serio: Serial port ptm0 [ 364.984774][ T7567] loop5: detected capacity change from 0 to 128 [ 366.712285][ T5806] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 366.779266][ T5806] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 367.305132][ T1102] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.416413][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.437924][ T1102] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.570088][ T1102] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.598225][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 367.605136][ T30] audit: type=1326 audit(1767958126.277:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 367.714351][ T7584] bridge_slave_0: left allmulticast mode [ 367.723429][ T7584] bridge_slave_0: left promiscuous mode [ 367.736559][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.822222][ T7584] bridge_slave_1: left allmulticast mode [ 367.828103][ T7584] bridge_slave_1: left promiscuous mode [ 367.835944][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.859674][ T30] audit: type=1326 audit(1767958126.347:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 367.883682][ T30] audit: type=1326 audit(1767958126.347:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 367.909765][ T30] audit: type=1326 audit(1767958126.417:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 367.935088][ T30] audit: type=1326 audit(1767958126.417:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 367.959164][ T30] audit: type=1326 audit(1767958126.417:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 367.982149][ T30] audit: type=1326 audit(1767958126.417:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25f798f783 code=0x7ffc0000 [ 368.006125][ T30] audit: type=1326 audit(1767958126.547:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25f798e1ff code=0x7ffc0000 [ 368.101465][ T7584] bond0: (slave bond_slave_0): Releasing backup interface [ 368.201990][ T7584] bond0: (slave bond_slave_1): Releasing backup interface [ 368.204012][ T7585] loop0: detected capacity change from 0 to 2048 [ 368.263998][ T7585] EXT4-fs: quotafile must be on filesystem root [ 368.399189][ T30] audit: type=1326 audit(1767958126.867:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f25f798f7d7 code=0x7ffc0000 [ 368.416839][ T7584] team0: Port device team_slave_0 removed [ 368.424123][ T30] audit: type=1326 audit(1767958126.887:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25f798df90 code=0x7ffc0000 [ 368.576468][ T7584] team0: Port device team_slave_1 removed [ 368.588779][ T7584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.596374][ T7584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.754288][ T7584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.762384][ T7584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.842832][ T7584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.877061][ T1102] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.391224][ T1102] dummy0: left allmulticast mode [ 369.397299][ T1102] bridge0: port 3(dummy0) entered disabled state [ 369.438200][ T1102] bridge_slave_1: left allmulticast mode [ 369.445595][ T1102] bridge_slave_1: left promiscuous mode [ 369.452699][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.492561][ T1102] bridge_slave_0: left allmulticast mode [ 369.498580][ T1102] bridge_slave_0: left promiscuous mode [ 369.505241][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.010438][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.055141][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.072632][ T1102] bond0 (unregistering): Released all slaves [ 370.240654][ T1102] tipc: Left network mode [ 370.554545][ T1102] hsr_slave_0: left promiscuous mode [ 370.588824][ T1102] hsr_slave_1: left promiscuous mode [ 371.283789][ T7601] loop5: detected capacity change from 0 to 128 [ 371.332472][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 371.419749][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 372.344535][ T1102] IPVS: stop unused estimator thread 0... [ 372.528919][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.554795][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.565192][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.579959][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.592595][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.682498][ T7612] loop0: detected capacity change from 0 to 128 [ 372.886023][ T7612] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.973864][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.987549][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.998056][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.103961][ T7612] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 373.249178][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.291315][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.774628][ T5804] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.551880][ T4138] bridge_slave_1: left allmulticast mode [ 374.557769][ T4138] bridge_slave_1: left promiscuous mode [ 374.564940][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.580621][ T4138] bridge_slave_0: left allmulticast mode [ 374.586477][ T4138] bridge_slave_0: left promiscuous mode [ 374.594760][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.728644][ T5798] Bluetooth: hci0: command tx timeout [ 374.856946][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 374.857037][ T30] audit: type=1326 audit(1767958133.537:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 374.925919][ T30] audit: type=1326 audit(1767958133.577:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 374.950196][ T30] audit: type=1326 audit(1767958133.587:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 374.975270][ T30] audit: type=1326 audit(1767958133.587:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 374.998909][ T30] audit: type=1326 audit(1767958133.587:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 375.021893][ T30] audit: type=1326 audit(1767958133.587:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 375.045495][ T30] audit: type=1326 audit(1767958133.587:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c2fb8f783 code=0x7ffc0000 [ 375.070183][ T30] audit: type=1326 audit(1767958133.607:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c2fb8e1ff code=0x7ffc0000 [ 375.247019][ T7636] loop2: detected capacity change from 0 to 2048 [ 375.250620][ T4138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.330719][ T7636] EXT4-fs: quotafile must be on filesystem root [ 375.348693][ T4138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.401379][ T4138] bond0 (unregistering): Released all slaves [ 375.468896][ T5798] Bluetooth: hci3: command tx timeout [ 375.683277][ T30] audit: type=1326 audit(1767958133.917:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4c2fb8f7d7 code=0x7ffc0000 [ 375.706230][ T30] audit: type=1326 audit(1767958133.927:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c2fb8df90 code=0x7ffc0000 [ 376.145993][ T7643] loop5: detected capacity change from 0 to 512 [ 376.521296][ T4138] hsr_slave_0: left promiscuous mode [ 376.543170][ T7643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.579679][ T4138] hsr_slave_1: left promiscuous mode [ 376.588163][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.601155][ T7643] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.622645][ T4138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.768665][ T5798] Bluetooth: hci0: command tx timeout [ 377.152065][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'. [ 377.212707][ T7643] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.529: iget: bad i_size value: 2533274857506816 [ 377.490993][ T5798] Bluetooth: hci3: command tx timeout [ 377.572732][ T7661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.585741][ T4138] team0 (unregistering): Port device team_slave_1 removed [ 377.599188][ T7663] loop2: detected capacity change from 0 to 128 [ 377.619222][ T4138] team0 (unregistering): Port device team_slave_0 removed [ 378.006864][ T7613] chnl_net:caif_netlink_parms(): no params data found [ 378.311589][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 378.604604][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.534'. [ 378.849034][ T5798] Bluetooth: hci0: command tx timeout [ 379.579024][ T5798] Bluetooth: hci3: command tx timeout [ 380.172793][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.180550][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.191810][ T7620] bridge_slave_0: entered allmulticast mode [ 380.201984][ T7620] bridge_slave_0: entered promiscuous mode [ 380.232122][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.242983][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.251082][ T7620] bridge_slave_1: entered allmulticast mode [ 380.261333][ T7620] bridge_slave_1: entered promiscuous mode [ 380.362986][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 380.363089][ T30] audit: type=1326 audit(1767958138.997:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 380.478002][ T30] audit: type=1326 audit(1767958139.087:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 380.775298][ T7685] loop0: detected capacity change from 0 to 2048 [ 380.821311][ T7685] EXT4-fs: quotafile must be on filesystem root [ 380.856350][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.867252][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.875219][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.928993][ T5798] Bluetooth: hci0: command tx timeout [ 380.952985][ T7613] bridge_slave_0: entered allmulticast mode [ 380.997043][ T7613] bridge_slave_0: entered promiscuous mode [ 381.029761][ T7690] netlink: 'syz.2.540': attribute type 30 has an invalid length. [ 381.181696][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.199245][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.206939][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.215220][ T7613] bridge_slave_1: entered allmulticast mode [ 381.225658][ T7613] bridge_slave_1: entered promiscuous mode [ 381.333568][ T7694] loop2: detected capacity change from 0 to 256 [ 381.426050][ T7694] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e' [ 381.649934][ T5798] Bluetooth: hci3: command tx timeout [ 381.943294][ T30] audit: type=1326 audit(1767958140.627:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 382.000361][ T30] audit: type=1326 audit(1767958140.657:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd30598df90 code=0x7ffc0000 [ 382.007083][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.023398][ T30] audit: type=1326 audit(1767958140.657:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 382.058113][ T30] audit: type=1326 audit(1767958140.657:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 382.081242][ T30] audit: type=1326 audit(1767958140.667:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.5.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 382.093505][ T7620] team0: Port device team_slave_0 added [ 382.229850][ T7620] team0: Port device team_slave_1 added [ 382.543873][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.587974][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.595367][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.624054][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.959316][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.966641][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.993127][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.054204][ T7613] team0: Port device team_slave_0 added [ 383.104479][ T7713] loop7: detected capacity change from 0 to 16384 [ 383.179007][ T7613] team0: Port device team_slave_1 added [ 383.567765][ T7719] loop7: detected capacity change from 16384 to 0 [ 383.640657][ C0] I/O error, dev loop7, sector 896 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 383.760345][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.767506][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.797652][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.125488][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.133919][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.161393][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.301992][ T7620] hsr_slave_0: entered promiscuous mode [ 384.313622][ T7620] hsr_slave_1: entered promiscuous mode [ 384.323095][ T7620] debugfs: 'hsr0' already exists in 'hsr' [ 384.329168][ T7620] Cannot create hsr debugfs directory [ 384.937901][ T7613] hsr_slave_0: entered promiscuous mode [ 384.949078][ T7613] hsr_slave_1: entered promiscuous mode [ 384.959781][ T7613] debugfs: 'hsr0' already exists in 'hsr' [ 384.965705][ T7613] Cannot create hsr debugfs directory [ 385.566141][ T7740] netlink: 'syz.0.552': attribute type 30 has an invalid length. [ 385.584800][ T30] audit: type=1326 audit(1767958144.267:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 385.608514][ T30] audit: type=1326 audit(1767958144.267:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 385.735890][ T7743] loop0: detected capacity change from 0 to 256 [ 385.739203][ T4409] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.828880][ T4409] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.837682][ T4409] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.865920][ T7743] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e' [ 385.879977][ T1162] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.900683][ T30] audit: type=1326 audit(1767958144.587:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 386.006352][ T7741] loop2: detected capacity change from 0 to 2048 [ 386.040006][ T30] audit: type=1326 audit(1767958144.617:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7738 comm="syz.2.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 386.102542][ T7741] EXT4-fs: quotafile must be on filesystem root [ 386.841677][ T7620] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 387.080191][ T7620] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 387.111936][ T7620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 387.150975][ T7620] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 387.206108][ T30] audit: type=1326 audit(1767958145.847:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 387.229290][ T30] audit: type=1326 audit(1767958145.847:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 387.254027][ T30] audit: type=1326 audit(1767958145.887:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 387.277537][ T30] audit: type=1326 audit(1767958145.887:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 387.300559][ T30] audit: type=1326 audit(1767958145.887:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 387.321516][ T7613] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.323507][ T30] audit: type=1326 audit(1767958145.887:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7751 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 387.514160][ T7755] loop0: detected capacity change from 0 to 128 [ 387.541917][ T7613] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.720246][ T7613] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 387.869956][ T7755] tipc: Cannot configure node identity twice [ 387.940638][ T7613] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.049297][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.346923][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.425449][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.459923][ T4138] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.467509][ T4138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.590254][ T4138] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.597831][ T4138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.802123][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.000445][ T4138] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.008036][ T4138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.171944][ T7620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.239709][ T4138] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.247276][ T4138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.599501][ T7783] netlink: 'syz.2.565': attribute type 30 has an invalid length. [ 390.699848][ T7613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.845190][ T7783] loop2: detected capacity change from 0 to 256 [ 390.880660][ T7778] loop0: detected capacity change from 0 to 2048 [ 390.961772][ T7778] EXT4-fs: quotafile must be on filesystem root [ 390.986088][ T7783] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e' [ 392.989249][ T7807] mmap: syz.2.569 (7807) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 393.019371][ T4409] bridge_slave_1: left allmulticast mode [ 393.025267][ T4409] bridge_slave_1: left promiscuous mode [ 393.032173][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.163248][ T4409] bridge_slave_0: left allmulticast mode [ 393.169651][ T4409] bridge_slave_0: left promiscuous mode [ 393.176584][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.533267][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.592174][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.623027][ T4409] bond0 (unregistering): Released all slaves [ 393.815677][ T4409] tipc: Left network mode [ 393.864096][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.269282][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.379069][ T4409] hsr_slave_0: left promiscuous mode [ 394.415563][ T4409] hsr_slave_1: left promiscuous mode [ 394.426178][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.501452][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.560840][ T4409] pim6reg (unregistering): left allmulticast mode [ 394.992140][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 394.992230][ T30] audit: type=1326 audit(1767958153.677:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 395.025075][ T30] audit: type=1326 audit(1767958153.677:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 395.048033][ T30] audit: type=1326 audit(1767958153.707:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 395.303336][ T30] audit: type=1326 audit(1767958153.907:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 395.330094][ T30] audit: type=1326 audit(1767958153.907:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 395.470897][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 395.503358][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 395.526678][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 395.536037][ T7834] netlink: 44 bytes leftover after parsing attributes in process `syz.5.577'. [ 395.582131][ T7829] loop0: detected capacity change from 0 to 2048 [ 395.627941][ T7829] EXT4-fs: quotafile must be on filesystem root [ 395.768844][ T30] audit: type=1326 audit(1767958154.437:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 395.791970][ T30] audit: type=1326 audit(1767958154.437:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 395.816350][ T30] audit: type=1326 audit(1767958154.447:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 396.199065][ T30] audit: type=1326 audit(1767958154.537:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 396.225498][ T30] audit: type=1326 audit(1767958154.537:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 396.800969][ T4409] IPVS: stop unused estimator thread 0... [ 396.956228][ T7848] netlink: 'syz.0.580': attribute type 30 has an invalid length. [ 397.129749][ T7848] loop0: detected capacity change from 0 to 256 [ 397.162475][ T7848] vfat: Unknown parameter 'codepag¢ès‘³¼]¯e' [ 397.573293][ T7848] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.737900][ T7848] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.969520][ T7848] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.163067][ T7848] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.476421][ T7620] veth0_vlan: entered promiscuous mode [ 398.609795][ T7613] veth0_vlan: entered promiscuous mode [ 398.636510][ T7620] veth1_vlan: entered promiscuous mode [ 398.757307][ T7613] veth1_vlan: entered promiscuous mode [ 398.979416][ T3005] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.117677][ T3005] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.289402][ T4232] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.305199][ T7620] veth0_macvtap: entered promiscuous mode [ 399.383692][ T7613] veth0_macvtap: entered promiscuous mode [ 399.525705][ T7620] veth1_macvtap: entered promiscuous mode [ 399.536471][ T1162] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.565552][ T7613] veth1_macvtap: entered promiscuous mode [ 399.741488][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.856431][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.896938][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.974196][ T1162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.000605][ T1162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.046789][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.059736][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 400.059823][ T30] audit: type=1326 audit(1767958158.727:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 400.096118][ T1162] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.152210][ T1162] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.259382][ T1162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.319828][ T30] audit: type=1326 audit(1767958158.817:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 400.346149][ T30] audit: type=1326 audit(1767958158.817:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 400.379444][ T30] audit: type=1326 audit(1767958158.827:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 400.402255][ T30] audit: type=1326 audit(1767958158.827:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 400.425267][ T30] audit: type=1326 audit(1767958158.827:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 400.448063][ T30] audit: type=1326 audit(1767958158.827:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 400.471012][ T30] audit: type=1326 audit(1767958158.827:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c2fb8f783 code=0x7ffc0000 [ 400.494476][ T30] audit: type=1326 audit(1767958158.907:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c2fb8e1ff code=0x7ffc0000 [ 400.525857][ T1162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.752078][ T4286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.813820][ T4286] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.854340][ T7876] loop2: detected capacity change from 0 to 2048 [ 400.910871][ T7876] EXT4-fs: quotafile must be on filesystem root [ 401.378757][ T30] audit: type=1326 audit(1767958159.357:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4c2fb8f7d7 code=0x7ffc0000 [ 401.913664][ T7892] netlink: 'syz.2.592': attribute type 3 has an invalid length. [ 401.922333][ T7892] netlink: 'syz.2.592': attribute type 3 has an invalid length. [ 401.980132][ T7894] netlink: 36 bytes leftover after parsing attributes in process `syz.5.591'. [ 402.351484][ T7899] loop0: detected capacity change from 0 to 128 [ 402.532671][ T7899] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.614540][ T7899] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.886879][ T7905] loop2: detected capacity change from 0 to 128 [ 403.441507][ T5804] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.075598][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 405.075687][ T30] audit: type=1326 audit(1767958163.747:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 405.279487][ T30] audit: type=1326 audit(1767958163.797:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25f7991667 code=0x7ffc0000 [ 405.302290][ T30] audit: type=1326 audit(1767958163.807:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f25f79915dc code=0x7ffc0000 [ 405.325261][ T30] audit: type=1326 audit(1767958163.817:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f25f7991514 code=0x7ffc0000 [ 405.350900][ T30] audit: type=1326 audit(1767958163.817:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f25f7991514 code=0x7ffc0000 [ 405.373588][ T30] audit: type=1326 audit(1767958163.817:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25f798e3aa code=0x7ffc0000 [ 405.398069][ T30] audit: type=1326 audit(1767958163.827:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 405.421693][ T30] audit: type=1326 audit(1767958163.847:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 405.444390][ T30] audit: type=1326 audit(1767958163.847:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 405.467257][ T30] audit: type=1326 audit(1767958163.877:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7937 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 406.844097][ T7961] SET target dimension over the limit! [ 406.883900][ T7966] loop2: detected capacity change from 0 to 128 [ 408.585134][ T4036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.593526][ T4036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.936988][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.945425][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.000218][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.008542][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.146039][ T4722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.154612][ T4722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.083296][ T30] audit: type=1326 audit(1767958169.737:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 411.106499][ T30] audit: type=1326 audit(1767958169.737:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 411.133884][ T30] audit: type=1326 audit(1767958169.737:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 411.158123][ T30] audit: type=1326 audit(1767958169.737:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 411.693574][ T8004] netlink: 'syz.5.615': attribute type 3 has an invalid length. [ 411.702762][ T8004] netlink: 'syz.5.615': attribute type 3 has an invalid length. [ 412.259924][ T30] audit: type=1326 audit(1767958169.887:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 412.282945][ T30] audit: type=1326 audit(1767958169.907:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 412.306261][ T30] audit: type=1326 audit(1767958169.907:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 412.329337][ T30] audit: type=1326 audit(1767958169.977:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 412.357007][ T30] audit: type=1326 audit(1767958169.987:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 412.381504][ T30] audit: type=1326 audit(1767958169.987:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.7.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4f98f749 code=0x7ffc0000 [ 412.885205][ T8009] loop0: detected capacity change from 0 to 128 [ 413.089205][ T8014] netlink: 60 bytes leftover after parsing attributes in process `syz.5.618'. [ 413.175959][ T8009] tipc: Cannot configure node identity twice [ 417.056767][ T8046] loop6: detected capacity change from 0 to 1024 [ 417.384664][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 417.384755][ T30] audit: type=1326 audit(1767958176.067:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 417.628827][ T30] audit: type=1326 audit(1767958176.117:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 417.652478][ T30] audit: type=1326 audit(1767958176.117:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 417.676176][ T30] audit: type=1326 audit(1767958176.117:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 417.699187][ T30] audit: type=1326 audit(1767958176.127:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 417.722543][ T30] audit: type=1326 audit(1767958176.187:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 417.745298][ T30] audit: type=1326 audit(1767958176.187:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd30598f783 code=0x7ffc0000 [ 417.769038][ T30] audit: type=1326 audit(1767958176.187:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd30598f807 code=0x7ffc0000 [ 417.792022][ T30] audit: type=1326 audit(1767958176.207:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd305946bdd code=0x7ffc0000 [ 417.817001][ T30] audit: type=1326 audit(1767958176.207:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd3059c3e89 code=0x7ffc0000 [ 418.195734][ T8046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 418.330823][ T8046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 418.607455][ T8065] loop2: detected capacity change from 0 to 128 [ 419.113365][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.120165][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.878063][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.5.632'. [ 422.621390][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 422.696089][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 422.737126][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 422.809812][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 423.701404][ T8109] netlink: 36 bytes leftover after parsing attributes in process `syz.5.646'. [ 427.611762][ T8141] netlink: 'syz.0.657': attribute type 3 has an invalid length. [ 427.620485][ T8141] netlink: 'syz.0.657': attribute type 3 has an invalid length. [ 428.020722][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.658'. [ 428.084220][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.7.658'. [ 428.470851][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'. [ 428.501105][ T8153] loop0: detected capacity change from 0 to 512 [ 428.648870][ T8153] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 428.799897][ T8153] EXT4-fs (loop0): 1 truncate cleaned up [ 428.808579][ T8153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.104739][ T8162] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.662: Logical block already allocated [ 429.169919][ T8162] EXT4-fs (loop0): Remounting filesystem read-only [ 429.700641][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.203196][ T8172] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 431.109251][ T8182] netlink: 'syz.0.672': attribute type 3 has an invalid length. [ 431.117769][ T8182] netlink: 'syz.0.672': attribute type 3 has an invalid length. [ 431.825253][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 431.825349][ T30] audit: type=1326 audit(1767958190.507:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 431.855212][ T30] audit: type=1326 audit(1767958190.507:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.098746][ T30] audit: type=1326 audit(1767958190.567:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.123309][ T30] audit: type=1326 audit(1767958190.567:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.149758][ T30] audit: type=1326 audit(1767958190.567:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.172637][ T30] audit: type=1326 audit(1767958190.567:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.195281][ T30] audit: type=1326 audit(1767958190.567:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.218887][ T30] audit: type=1326 audit(1767958190.577:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.242245][ T30] audit: type=1326 audit(1767958190.577:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 432.265291][ T30] audit: type=1326 audit(1767958190.607:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.5.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd30598f749 code=0x7ffc0000 [ 434.217677][ T8218] loop7: detected capacity change from 0 to 764 [ 434.399630][ T8218] Symlink component flag not implemented [ 434.405845][ T8218] Symlink component flag not implemented (116) [ 434.919207][ T8226] netlink: 'syz.6.687': attribute type 3 has an invalid length. [ 434.927856][ T8226] netlink: 'syz.6.687': attribute type 3 has an invalid length. [ 436.826191][ T8251] loop6: detected capacity change from 0 to 512 [ 436.895574][ T8251] EXT4-fs: Ignoring removed i_version option [ 436.902153][ T8251] EXT4-fs: Ignoring removed bh option [ 437.226881][ T8251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.333335][ T8251] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.925516][ T7613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.575901][ T8272] netlink: 'syz.2.702': attribute type 3 has an invalid length. [ 438.584944][ T8272] netlink: 'syz.2.702': attribute type 3 has an invalid length. [ 439.204285][ T8277] netlink: 'syz.7.704': attribute type 10 has an invalid length. [ 439.212549][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.7.704'. [ 439.221961][ T8277] dummy0: entered promiscuous mode [ 439.231498][ T8277] bridge0: port 3(dummy0) entered blocking state [ 439.238658][ T8277] bridge0: port 3(dummy0) entered disabled state [ 439.245678][ T8277] dummy0: entered allmulticast mode [ 439.257381][ T8277] bridge0: port 3(dummy0) entered blocking state [ 439.264433][ T8277] bridge0: port 3(dummy0) entered forwarding state [ 441.163035][ T8301] loop2: detected capacity change from 0 to 512 [ 441.230869][ T8301] EXT4-fs: Ignoring removed i_version option [ 441.237280][ T8301] EXT4-fs: Ignoring removed bh option [ 441.461920][ T8301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.559302][ T8301] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 442.015763][ T8313] netlink: 'syz.6.715': attribute type 3 has an invalid length. [ 442.024394][ T8313] netlink: 'syz.6.715': attribute type 3 has an invalid length. [ 442.070844][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.346667][ T8331] loop7: detected capacity change from 0 to 512 [ 443.532204][ T8331] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 443.544189][ T8331] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 443.554810][ T8331] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.722: Corrupt directory, running e2fsck is recommended [ 443.710293][ T8331] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 443.720248][ T8331] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.722: corrupted in-inode xattr: e_name out of bounds [ 443.791228][ T8338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.857791][ T8331] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.722: couldn't read orphan inode 15 (err -117) [ 443.884059][ T8331] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.953307][ T8331] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 443.965464][ T8331] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 443.976084][ T8331] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.722: Corrupt directory, running e2fsck is recommended [ 444.110781][ T8331] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 444.127187][ T8331] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 444.137805][ T8331] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.722: Corrupt directory, running e2fsck is recommended [ 444.358597][ T8344] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 444.371131][ T8344] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 444.381787][ T8344] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.722: Corrupt directory, running e2fsck is recommended [ 444.557664][ T8350] loop0: detected capacity change from 0 to 512 [ 444.624228][ T8349] loop6: detected capacity change from 0 to 512 [ 444.746907][ T8349] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 444.864550][ T8350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.960817][ T7620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.970810][ T8349] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.728: bg 0: block 104: invalid block bitmap [ 444.987781][ T8350] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.011334][ T8349] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 445.037383][ T8349] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.728: invalid indirect mapped block 1 (level 1) [ 445.128119][ T8349] EXT4-fs (loop6): 1 truncate cleaned up [ 445.143539][ T8356] netlink: 'syz.5.729': attribute type 3 has an invalid length. [ 445.152210][ T8356] netlink: 'syz.5.729': attribute type 3 has an invalid length. [ 445.167590][ T8349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.281047][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.6.728'. [ 445.311489][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.728'. [ 445.374295][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 445.462807][ T8350] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.727: iget: bad i_size value: 2533274857506816 [ 445.590190][ T8346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.867168][ T7613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.227974][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 446.228063][ T30] audit: type=1326 audit(1767958204.907:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.371315][ T30] audit: type=1326 audit(1767958204.977:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.394508][ T30] audit: type=1326 audit(1767958205.027:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.417370][ T30] audit: type=1326 audit(1767958205.027:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.441722][ T30] audit: type=1326 audit(1767958205.037:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.464970][ T30] audit: type=1326 audit(1767958205.047:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.709664][ T30] audit: type=1326 audit(1767958205.177:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.733261][ T30] audit: type=1326 audit(1767958205.187:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.757801][ T30] audit: type=1326 audit(1767958205.197:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.781219][ T30] audit: type=1326 audit(1767958205.197:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.0.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 446.813281][ T5798] Bluetooth: hci5: command 0x0406 tx timeout [ 447.214472][ T8367] netlink: 'syz.0.733': attribute type 10 has an invalid length. [ 447.222883][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.733'. [ 447.256170][ T8367] ipvlan2: entered promiscuous mode [ 447.272875][ T8367] bridge0: port 4(ipvlan2) entered blocking state [ 447.280420][ T8367] bridge0: port 4(ipvlan2) entered disabled state [ 447.287542][ T8367] ipvlan2: entered allmulticast mode [ 447.293314][ T8367] bridge0: entered allmulticast mode [ 447.301659][ T8367] ipvlan2: left allmulticast mode [ 447.306895][ T8367] bridge0: left allmulticast mode [ 449.267160][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.742'. [ 449.297480][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 454.099599][ T8428] macsec0: entered allmulticast mode [ 457.601701][ T8466] veth1_macvtap: left promiscuous mode [ 457.607428][ T8466] macsec0: entered allmulticast mode [ 458.035144][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 459.233410][ T8478] tipc: Started in network mode [ 459.240538][ T8478] tipc: Node identity 4, cluster identity 4711 [ 459.246896][ T8478] tipc: Node number set to 4 [ 460.948997][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 461.020666][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.780'. [ 461.943716][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 461.943807][ T30] audit: type=1326 audit(1767958220.627:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 462.062507][ T30] audit: type=1326 audit(1767958220.677:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 462.085629][ T30] audit: type=1326 audit(1767958220.697:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 462.113663][ T30] audit: type=1326 audit(1767958220.697:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 462.138014][ T30] audit: type=1326 audit(1767958220.697:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 462.292247][ T8525] tipc: Started in network mode [ 462.297333][ T8525] tipc: Node identity 4, cluster identity 4711 [ 462.304004][ T8525] tipc: Node number set to 4 [ 464.275100][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.794'. [ 464.364322][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.6.794'. [ 465.867460][ T8563] tipc: Cannot configure node identity twice [ 466.580521][ T8568] loop6: detected capacity change from 0 to 1024 [ 466.648390][ T8568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.771089][ T8568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.840546][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 468.106110][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 468.259521][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 468.404945][ T30] audit: type=1326 audit(1767958227.077:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8593 comm="syz.7.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x0 [ 468.788713][ T5884] IPVS: starting estimator thread 0... [ 469.349528][ T8598] IPVS: using max 144 ests per chain, 7200 per kthread [ 471.831493][ T8626] loop2: detected capacity change from 0 to 512 [ 471.923030][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.816'. [ 472.177169][ T8626] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.818: error while reading EA inode 32 err=-116 [ 472.212864][ T8626] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.818: error while reading EA inode 32 err=-116 [ 472.358975][ T8626] EXT4-fs (loop2): 1 orphan inode deleted [ 472.367550][ T8626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.444899][ T7613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.004099][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'. [ 473.012552][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.806729][ T5856] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 473.979938][ T5856] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 474.272775][ T30] audit: type=1326 audit(1767958232.937:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.7.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f98f749 code=0x0 [ 478.442396][ T8688] loop7: detected capacity change from 0 to 256 [ 478.529146][ T8688] msdos: Bad value for 'uid' [ 478.533983][ T8688] msdos: Bad value for 'uid' [ 479.755090][ T30] audit: type=1326 audit(1767958238.437:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.6.840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3ac18f749 code=0x0 [ 480.301698][ T5856] IPVS: starting estimator thread 0... [ 480.409547][ T8710] IPVS: using max 144 ests per chain, 7200 per kthread [ 480.585617][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.592855][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 482.369235][ T8728] loop6: detected capacity change from 0 to 512 [ 482.461220][ T8728] EXT4-fs: Ignoring removed i_version option [ 482.467790][ T8728] EXT4-fs: Ignoring removed bh option [ 482.885296][ T8728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.969912][ T8737] netlink: 664 bytes leftover after parsing attributes in process `syz.0.848'. [ 482.985849][ T8728] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.088892][ T7613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.948764][ T30] audit: type=1326 audit(1767958243.617:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 485.095282][ T30] audit: type=1326 audit(1767958243.687:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 485.118757][ T30] audit: type=1326 audit(1767958243.687:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 485.141885][ T30] audit: type=1326 audit(1767958243.687:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 485.168484][ T30] audit: type=1326 audit(1767958243.757:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 485.193800][ T30] audit: type=1326 audit(1767958243.757:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 485.216729][ T30] audit: type=1326 audit(1767958243.767:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 485.240187][ T30] audit: type=1326 audit(1767958243.767:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 486.221246][ T8768] 9pnet: p9_errstr2errno: server reported unknown error [ 487.159657][ T30] audit: type=1326 audit(1767958245.837:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25f798f749 code=0x0 [ 488.372924][ T8793] netlink: 'syz.6.867': attribute type 27 has an invalid length. [ 494.350737][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 494.574717][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.586153][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.596646][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.623530][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.652033][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.769054][ T5810] Bluetooth: hci1: command tx timeout [ 497.210965][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 498.049783][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 498.058569][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 498.877052][ T5798] Bluetooth: hci1: command tx timeout [ 499.410467][ T8871] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 499.418741][ T8871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.889'. [ 500.928876][ T5798] Bluetooth: hci1: command tx timeout [ 500.990512][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.998113][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.010639][ T8834] bridge_slave_0: entered allmulticast mode [ 501.029283][ T8834] bridge_slave_0: entered promiscuous mode [ 501.292990][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.305381][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.313463][ T8834] bridge_slave_1: entered allmulticast mode [ 501.323754][ T8834] bridge_slave_1: entered promiscuous mode [ 501.650388][ T8885] loop6: detected capacity change from 0 to 1024 [ 501.706986][ T8885] EXT4-fs: Ignoring removed orlov option [ 501.923834][ T8885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.114455][ T30] audit: type=1804 audit(1767958260.797:1177): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.893" name="/newroot/56/bus/bus" dev="loop6" ino=18 res=1 errno=0 [ 502.315803][ T4722] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.474853][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.614176][ T4722] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.740763][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.846292][ T4722] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.019473][ T5798] Bluetooth: hci1: command tx timeout [ 503.095760][ T7613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.308100][ T4722] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.647832][ T8834] team0: Port device team_slave_0 added [ 503.789525][ T8834] team0: Port device team_slave_1 added [ 505.272151][ T8911] netlink: 'syz.2.901': attribute type 10 has an invalid length. [ 505.281096][ T8911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.901'. [ 505.423506][ T4722] bond0 (unregistering): Released all slaves [ 505.572314][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.579628][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.606569][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.804611][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.812176][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.840557][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.857628][ T4722] tipc: Left network mode [ 506.146610][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 506.516843][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 506.627223][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 506.640267][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 506.667421][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 506.679607][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.806231][ T8921] loop2: detected capacity change from 0 to 512 [ 507.060009][ T8921] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 507.075121][ T8921] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 507.086690][ T8921] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.905: Corrupt directory, running e2fsck is recommended [ 507.171843][ T4722] hsr_slave_0: left promiscuous mode [ 507.206396][ T8921] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 507.226044][ T4722] hsr_slave_1: left promiscuous mode [ 507.270205][ T8921] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.905: corrupted in-inode xattr: e_name out of bounds [ 507.347780][ T4722] veth1_macvtap: left promiscuous mode [ 507.354081][ T4722] veth0_macvtap: left promiscuous mode [ 507.360285][ T4722] veth1_vlan: left promiscuous mode [ 507.365870][ T4722] veth0_vlan: left promiscuous mode [ 507.398531][ T8921] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.905: couldn't read orphan inode 15 (err -117) [ 507.552031][ T8921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.772005][ T8931] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 507.787278][ T8931] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 507.802489][ T8931] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.905: Corrupt directory, running e2fsck is recommended [ 507.974197][ T8921] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 507.987484][ T8921] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 507.998512][ T8921] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.905: Corrupt directory, running e2fsck is recommended [ 508.203920][ T8931] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 508.217911][ T8931] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 508.228985][ T8931] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.905: Corrupt directory, running e2fsck is recommended [ 508.369750][ T8926] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 508.860099][ T5097] Bluetooth: hci5: command tx timeout [ 509.261862][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.633915][ T8834] hsr_slave_0: entered promiscuous mode [ 509.644674][ T8834] hsr_slave_1: entered promiscuous mode [ 509.656698][ T8834] debugfs: 'hsr0' already exists in 'hsr' [ 509.662820][ T8834] Cannot create hsr debugfs directory [ 510.988151][ T5097] Bluetooth: hci5: command tx timeout [ 511.663151][ T8955] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 511.673195][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.913'. [ 512.523993][ T8920] chnl_net:caif_netlink_parms(): no params data found [ 512.791434][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 513.018724][ T5097] Bluetooth: hci5: command tx timeout [ 513.072436][ T8834] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 513.277542][ T8966] loop2: detected capacity change from 0 to 512 [ 513.297143][ T8834] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 513.431343][ T8834] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 513.483432][ T8966] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 513.495633][ T8966] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 513.506551][ T8966] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.917: Corrupt directory, running e2fsck is recommended [ 513.524645][ T8834] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 513.635802][ T8969] pim6reg: entered allmulticast mode [ 513.641989][ T8966] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 513.650848][ T8966] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.917: corrupted in-inode xattr: e_name out of bounds [ 513.779132][ T8975] pim6reg: left allmulticast mode [ 513.798998][ T8966] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.917: couldn't read orphan inode 15 (err -117) [ 513.832041][ T8966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.011712][ T8966] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.027455][ T8966] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 514.039059][ T8966] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.917: Corrupt directory, running e2fsck is recommended [ 514.182845][ T8978] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.195112][ T8978] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 514.205833][ T8978] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.917: Corrupt directory, running e2fsck is recommended [ 515.088480][ T5097] Bluetooth: hci5: command tx timeout [ 515.133602][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.354898][ T8920] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.362660][ T8920] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.370745][ T8920] bridge_slave_0: entered allmulticast mode [ 519.381593][ T8920] bridge_slave_0: entered promiscuous mode [ 519.522078][ T8920] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.530187][ T8920] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.538004][ T8920] bridge_slave_1: entered allmulticast mode [ 519.548840][ T8920] bridge_slave_1: entered promiscuous mode [ 519.716500][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.313205][ T8920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.383099][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.468926][ T30] audit: type=1326 audit(1767958279.147:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 520.486586][ T8920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.492850][ T30] audit: type=1326 audit(1767958279.147:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 520.589518][ T4055] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.597100][ T4055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.853411][ T4055] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.861120][ T4055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.938468][ T30] audit: type=1326 audit(1767958279.307:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 520.962569][ T30] audit: type=1326 audit(1767958279.307:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 520.985373][ T30] audit: type=1326 audit(1767958279.347:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 521.010028][ T30] audit: type=1326 audit(1767958279.347:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 521.033154][ T30] audit: type=1326 audit(1767958279.407:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 521.055926][ T30] audit: type=1326 audit(1767958279.417:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 521.078737][ T30] audit: type=1326 audit(1767958279.437:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 521.102482][ T30] audit: type=1326 audit(1767958279.437:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f798f749 code=0x7ffc0000 [ 521.231502][ T8920] team0: Port device team_slave_0 added [ 521.359929][ T8920] team0: Port device team_slave_1 added [ 521.949708][ T9035] loop2: detected capacity change from 0 to 512 [ 521.964292][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.973356][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.000110][ T8920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.225276][ T8920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.233137][ T8920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.250445][ T9035] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.933: couldn't read orphan inode 26 (err -116) [ 522.259787][ T8920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.389450][ T9035] EXT4-fs (loop2): Remounting filesystem read-only [ 522.399144][ T9035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.412495][ T9035] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.942020][ T8920] hsr_slave_0: entered promiscuous mode [ 522.953545][ T8920] hsr_slave_1: entered promiscuous mode [ 522.963195][ T8920] debugfs: 'hsr0' already exists in 'hsr' [ 522.969264][ T8920] Cannot create hsr debugfs directory [ 523.051372][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.478745][ T9060] loop6: detected capacity change from 0 to 512 [ 524.695744][ T9060] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 524.707743][ T9060] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 524.719558][ T9060] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.939: Corrupt directory, running e2fsck is recommended [ 524.747870][ T9060] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 524.757148][ T9060] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.939: corrupted in-inode xattr: e_name out of bounds [ 524.821140][ T9060] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.939: couldn't read orphan inode 15 (err -117) [ 524.940451][ T9060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.997817][ T9060] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 525.010361][ T9060] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 525.020989][ T9060] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.939: Corrupt directory, running e2fsck is recommended [ 525.917754][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.976305][ T7613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.056351][ T8920] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 526.220496][ T8920] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 526.340273][ T8920] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 526.496333][ T8920] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 526.649513][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 526.649599][ T30] audit: type=1326 audit(1767958285.337:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.6.943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3ac18f749 code=0x0 [ 526.920516][ T9078] netlink: 3 bytes leftover after parsing attributes in process `syz.6.943'. [ 526.933980][ T9078] 0ªX¹¦À: renamed from caif0 [ 527.076115][ T9078] 0ªX¹¦À: entered allmulticast mode [ 527.082120][ T9078] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 527.412669][ T9085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.944'. [ 528.749681][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.065484][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.247962][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.255668][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.492177][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.499863][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.468646][ T8834] veth0_vlan: entered promiscuous mode [ 530.606913][ T8834] veth1_vlan: entered promiscuous mode [ 531.262033][ T8834] veth0_macvtap: entered promiscuous mode [ 531.326363][ T8834] veth1_macvtap: entered promiscuous mode [ 531.647504][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.822305][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.016114][ T4036] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.082873][ T4036] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.138026][ T4138] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.199893][ T30] audit: type=1326 audit(1767958290.877:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.0.955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25f798f749 code=0x0 [ 532.280260][ T4138] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.384329][ T9129] netlink: 3 bytes leftover after parsing attributes in process `syz.0.955'. [ 532.395258][ T9129] 1ªX¹¦À: renamed from 60ªX¹¦À [ 532.584901][ T9132] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 532.592951][ T9129] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 532.664577][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 532.801407][ T9132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.895138][ T9135] bond1 (unregistering): Released all slaves [ 533.467367][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.799566][ T9145] tipc: Cannot configure node identity twice [ 534.315201][ T30] audit: type=1326 audit(1767958292.957:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 534.339839][ T30] audit: type=1326 audit(1767958292.957:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 534.363959][ T30] audit: type=1326 audit(1767958292.977:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 534.388046][ T30] audit: type=1326 audit(1767958292.977:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 534.413886][ T30] audit: type=1326 audit(1767958293.047:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 534.437817][ T30] audit: type=1326 audit(1767958293.047:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 534.461492][ T30] audit: type=1326 audit(1767958293.047:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 534.484411][ T30] audit: type=1326 audit(1767958293.077:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 535.445068][ T30] audit: type=1326 audit(1767958293.247:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c2fb8f749 code=0x7ffc0000 [ 536.771471][ T9176] netlink: 3 bytes leftover after parsing attributes in process `syz.2.966'. [ 536.782250][ T9176] 0ªX¹¦À: renamed from caif0 [ 536.948747][ T9176] 0ªX¹¦À: entered allmulticast mode [ 536.954188][ T9176] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 537.897719][ T8920] veth0_vlan: entered promiscuous mode [ 538.046685][ T8920] veth1_vlan: entered promiscuous mode [ 538.316750][ T9189] ===================================================== [ 538.324265][ T9189] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 538.332796][ T9189] bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 538.338877][ T9189] do_xdp_generic+0xd52/0x1690 [ 538.343869][ T9189] tun_get_user+0x506b/0x6c60 [ 538.348866][ T9189] tun_chr_write_iter+0x3e9/0x5c0 [ 538.354124][ T9189] vfs_write+0xbe2/0x15d0 [ 538.359007][ T9189] __x64_sys_write+0x1fb/0x4d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.363987][ T9189] x64_sys_call+0x30ab/0x3e70 [ 538.369007][ T9189] do_syscall_64+0xd3/0xf80 [ 538.373783][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.380003][ T9189] [ 538.382424][ T9189] Uninit was stored to memory at: [ 538.387794][ T9189] pskb_expand_head+0x310/0x15d0 [ 538.393144][ T9189] do_xdp_generic+0xa79/0x1690 [ 538.398259][ T9189] tun_get_user+0x506b/0x6c60 [ 538.403170][ T9189] tun_chr_write_iter+0x3e9/0x5c0 [ 538.408516][ T9189] vfs_write+0xbe2/0x15d0 [ 538.413050][ T9189] __x64_sys_write+0x1fb/0x4d0 [ 538.418046][ T9189] x64_sys_call+0x30ab/0x3e70 [ 538.423045][ T9189] do_syscall_64+0xd3/0xf80 [ 538.427778][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.434003][ T9189] [ 538.436422][ T9189] Uninit was created at: [ 538.441102][ T9189] __kmalloc_node_track_caller_noprof+0xb77/0x1c90 [ 538.447890][ T9189] kmalloc_reserve+0x22f/0x4b0 [ 538.452956][ T9189] __alloc_skb+0x805/0x1040 [ 538.457653][ T9189] alloc_skb_with_frags+0xc5/0xa60 [ 538.463089][ T9189] sock_alloc_send_pskb+0xacc/0xc60 [ 538.468634][ T9189] tun_get_user+0x1142/0x6c60 [ 538.473533][ T9189] tun_chr_write_iter+0x3e9/0x5c0 [ 538.478887][ T9189] vfs_write+0xbe2/0x15d0 [ 538.483425][ T9189] __x64_sys_write+0x1fb/0x4d0 [ 538.488513][ T9189] x64_sys_call+0x30ab/0x3e70 [ 538.493415][ T9189] do_syscall_64+0xd3/0xf80 [ 538.498254][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.504350][ T9189] [ 538.506792][ T9189] CPU: 1 UID: 0 PID: 9189 Comm: syz.0.969 Not tainted syzkaller #0 PREEMPT(none) [ 538.516393][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.526717][ T9189] ===================================================== [ 538.533903][ T9189] Disabling lock debugging due to kernel taint [ 538.540288][ T9189] Kernel panic - not syncing: kmsan.panic set ... [ 538.546868][ T9189] CPU: 1 UID: 0 PID: 9189 Comm: syz.0.969 Tainted: G B syzkaller #0 PREEMPT(none) [ 538.557869][ T9189] Tainted: [B]=BAD_PAGE [ 538.562137][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.572343][ T9189] Call Trace: [ 538.575735][ T9189] [ 538.578783][ T9189] __dump_stack+0x26/0x30 [ 538.583388][ T9189] dump_stack_lvl+0x50/0x1c0 [ 538.588182][ T9189] ? dump_stack+0x12/0x25 [ 538.592727][ T9189] dump_stack+0x1e/0x25 [ 538.597109][ T9189] vpanic+0x435/0xd30 [ 538.601332][ T9189] panic+0x15d/0x160 [ 538.605501][ T9189] kmsan_report+0x31c/0x320 [ 538.610264][ T9189] ? __msan_warning+0x1b/0x30 [ 538.615149][ T9189] ? bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 538.621273][ T9189] ? do_xdp_generic+0xd52/0x1690 [ 538.626421][ T9189] ? tun_get_user+0x506b/0x6c60 [ 538.631482][ T9189] ? tun_chr_write_iter+0x3e9/0x5c0 [ 538.636891][ T9189] ? vfs_write+0xbe2/0x15d0 [ 538.641597][ T9189] ? __x64_sys_write+0x1fb/0x4d0 [ 538.646758][ T9189] ? x64_sys_call+0x30ab/0x3e70 [ 538.651821][ T9189] ? do_syscall_64+0xd3/0xf80 [ 538.656717][ T9189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.662980][ T9189] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.669042][ T9189] ? ___bpf_prog_run+0xea65/0xeba0 [ 538.674382][ T9189] ? __bpf_prog_run32+0xc2/0xf0 [ 538.679421][ T9189] ? kmsan_get_metadata+0xfb/0x160 [ 538.684785][ T9189] __msan_warning+0x1b/0x30 [ 538.689496][ T9189] bpf_prog_run_generic_xdp+0x18e5/0x1fc0 [ 538.695459][ T9189] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.701582][ T9189] do_xdp_generic+0xd52/0x1690 [ 538.706577][ T9189] ? tun_get_user+0x4bd1/0x6c60 [ 538.711658][ T9189] ? filter_irq_stacks+0x49/0x190 [ 538.716921][ T9189] ? kmsan_get_metadata+0xfb/0x160 [ 538.722292][ T9189] ? tun_get_user+0x4fea/0x6c60 [ 538.727359][ T9189] tun_get_user+0x506b/0x6c60 [ 538.732268][ T9189] ? stack_depot_save_flags+0x35/0x790 [ 538.737930][ T9189] ? kmsan_get_metadata+0xfb/0x160 [ 538.743285][ T9189] ? kmsan_get_metadata+0xfb/0x160 [ 538.748633][ T9189] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 538.755280][ T9189] tun_chr_write_iter+0x3e9/0x5c0 [ 538.760542][ T9189] vfs_write+0xbe2/0x15d0 [ 538.765110][ T9189] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 538.770888][ T9189] __x64_sys_write+0x1fb/0x4d0 [ 538.775882][ T9189] x64_sys_call+0x30ab/0x3e70 [ 538.780796][ T9189] do_syscall_64+0xd3/0xf80 [ 538.785517][ T9189] ? clear_bhb_loop+0x40/0x90 [ 538.790382][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.796465][ T9189] RIP: 0033:0x7f25f798e1ff [ 538.801044][ T9189] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 538.820844][ T9189] RSP: 002b:00007f25f8763000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 538.829444][ T9189] RAX: ffffffffffffffda RBX: 00007f25f7be5fa0 RCX: 00007f25f798e1ff [ 538.837563][ T9189] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 538.845676][ T9189] RBP: 00007f25f7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.853792][ T9189] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 538.861904][ T9189] R13: 00007f25f7be6038 R14: 00007f25f7be5fa0 R15: 00007ffe4436fe88 [ 538.870073][ T9189] [ 538.873557][ T9189] Kernel Offset: disabled [ 538.877959][ T9189] Rebooting in 86400 seconds..