last executing test programs: 11m32.445622438s ago: executing program 0 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000040)={0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 11m30.966438405s ago: executing program 0 (id=52): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x5000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000000a40)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000400)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) getpgid(0x0) 11m29.244678107s ago: executing program 0 (id=56): msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 11m27.168932769s ago: executing program 0 (id=65): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0xffffffff, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 11m21.807832003s ago: executing program 0 (id=63): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r5, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 11m18.29243864s ago: executing program 0 (id=66): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregs(0xf, r0, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) 11m3.198500096s ago: executing program 32 (id=66): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setregs(0xf, r0, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) 18.375936616s ago: executing program 3 (id=1254): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40)) mknod$loop(0x0, 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = timerfd_create(0x7, 0x0) readv(r4, &(0x7f00000003c0)=[{0x0}], 0x1) 17.069437482s ago: executing program 1 (id=1256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000240)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsu(0x0, 0xffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r4, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f00000008c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000900)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x42}) sched_setattr(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r8 = socket(0x10, 0x80002, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x808, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg$unix(r8, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x100, 0x0) 16.059685449s ago: executing program 4 (id=1258): open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) mlock(&(0x7f0000800000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) 15.309196689s ago: executing program 1 (id=1260): sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x1, 0x6, 0x401}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x7, r8, 0x41}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="0e", 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 13.01509656s ago: executing program 1 (id=1263): syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) syz_open_pts(r0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x3, @local}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x325, 0x0, 0x0, 0x0, 0xffe8, 0x0, 0x6, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 12.614317341s ago: executing program 1 (id=1264): sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x1, 0x6, 0x401}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) 11.514021611s ago: executing program 3 (id=1265): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$dmmidi(&(0x7f0000000340), 0x2, 0x80000) pselect6(0x40, &(0x7f0000000380)={0x1, 0x8000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) unshare(0x8040480) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 11.103976082s ago: executing program 1 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) r1 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) 10.155970747s ago: executing program 4 (id=1268): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f0000000280)="90afa2", 0x0, 0x0, 0x0, 0xcbf, r0}, 0x38) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') set_mempolicy(0x6005, &(0x7f00000008c0)=0xfffffffffffffffd, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='numa_maps\x00') read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r2, 0x5) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "12"}], 0x18}, 0x0) 9.427068076s ago: executing program 3 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000200)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)=ANY=[@ANYBLOB="600000000206030000000000b8791fa800000000140007800800124000000000050015000100000005000100060000"], 0x60}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 7.119685149s ago: executing program 3 (id=1271): sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x1, 0x6, 0x401}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x7, r8, 0x41}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="0e", 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 6.999980592s ago: executing program 2 (id=1272): r0 = gettid() capset(&(0x7f00000007c0)={0x19980330, r0}, &(0x7f0000000800)={0x6, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@delqdisc={0x30, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = getpgrp(0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='mounts\x00') r6 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000500)={0x9000000d}) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0, &(0x7f0000000580)={0x6, 0xfb}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0xa00, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0x0, 0x405, 0x1, 0x0, {0x2, 0x0, 0xa00}}], {0x14, 0xa01, 0x1, 0x0, 0x0, {0x2, 0x0, 0xa00}}}, 0x3c}}, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 6.535009464s ago: executing program 4 (id=1273): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}, {[@lsrr={0x83, 0x7, 0x78, [@broadcast]}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, "3dd0e8", 0x3, "94125f"}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x200048c4}, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r3, &(0x7f0000000140)='./file0\x00', 0x200) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 6.527326605s ago: executing program 2 (id=1274): sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x1, 0x6, 0x401}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) 5.902217291s ago: executing program 2 (id=1275): r0 = io_uring_setup(0xe67, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000001080)={0x98f904, 0x0, @value=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 5.846478553s ago: executing program 1 (id=1276): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r1}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 4.82144247s ago: executing program 4 (id=1277): mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) 4.787680901s ago: executing program 2 (id=1278): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000400)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, {0xa, 0x5, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x848a}, r6, 0x210000}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000000)={0x12, 0x6, 0xfa00, {0x0, r6, r0}}, 0x18) 3.540164605s ago: executing program 2 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000200)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)=ANY=[@ANYBLOB="600000000206030000000000b8791fa800000000140007800800124000000000050015000100000005000100060000"], 0x60}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 3.500819616s ago: executing program 4 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000001f40)=""/4110, 0x100e}, {&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f0000000c00)=""/101, 0x65}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000340)=""/274, 0x112}], 0x8}, 0x3}], 0x1, 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000300)={[{@nodecompose}, {@barrier}]}, 0x2, 0x6b9, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x55, 0x0, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) socketpair(0x1e, 0xa, 0x3ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000817000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x9, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) read$FUSE(r3, &(0x7f0000002cc0)={0x2020}, 0x2020) 2.328379767s ago: executing program 2 (id=1281): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000840)) 1.361995083s ago: executing program 3 (id=1282): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x7f, 0x4, 0xfffffe01}, {0x5, 0x21, 0x7, 0xfffffff8}]}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@quota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) 1.191918868s ago: executing program 4 (id=1283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000001f40)=""/4110, 0x100e}, {&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f0000000c00)=""/101, 0x65}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000340)=""/274, 0x112}], 0x8}, 0x3}], 0x1, 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000300)={[{@nodecompose}, {@barrier}]}, 0x2, 0x6b9, &(0x7f0000000b00)="$eJzs3U+IXVcdB/DvfXl5kxclnf5LoxQ6JFC0wWQmj5oIQqOIZBEk6KbbIZk0QyZpmUwlLWJe1FZw5Uq6cFGRuOhKRIS6EutaENy4yj7gzkUEdeTed9+bNzNvJjPJTN6k/Xzg5p57zz3n/M6P++f9yfACfGadez37uyly7vj5m+X23Tudhbt3Otf65SQTSRpJs7dK0U6KT5Kz6S35Qrmz7q7YaJxX731cND/4qNPbatZLdXzZabe11YBHjtBNDgw29iWZ6hX/s9Ve1/dXLVU/F1f6e0jFIO4yYcf6iYNxW16nu1LZeGDzDa934Mlxq/fcXGcyOZje07V8HZD67vDgO8P4bXhv+vfquxwAAAA8qUa+lx/21P3cz80cejzhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0fvNwKJeGv3yVIr+7/+3hn5TvzXmcB/Re5er1XefGncgAAAAAAAAAPBIXrqf+7mZQ/3t5aL6zv/oRLnxXLXrc3k7NzKXxZzIzcxmKUtZzEySyaGOWjdnl5YWZ3I0a1r+ImXL5eXlW3XLUyNbnlodV3dtoKP+p8G6gwAAAAAAAADgM+tHObfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwFRbKvt6qW5/rlyTSa9SGtYmpweGtsge6QP407AAAAANh97Xp9qPhfr7BcVO/5D1fv+w/k7VzPUuazlIXM5VL1WUDvXX/jb93Owt07nWvlsr7jb/xzW3FUPab32cPokaerI54ftDiXb+d7OZ6pXMhi5vP9zGYpc5nKt6rSbIpM1p9eTN69004/1vXxnl21dWFtbC/lwKBcxnekiqSdy5mvYjuRi61+6I36uCNDo/2hlawZ8XaZneK12hZzdKlelzP6eb3eQc2HbzpZzXz/ICPTde7LbDw9nPf1ud/mebJ2pJk0Bp9BPbcySrm5dqSHyvnBel3m+v2dz/mwbX6UtjoT3Z+VW/2z7/DmOU++/Pc/X7jSuH71yuUbx3dxSo/H2nOiM5SJF7aUiYX9V69c7j5CJg48Svw7p1Vno3cX3d7d8mjV9lDm8528mUuZy+lMZyZnMp2v5VQ6OTWU1+c3z2t1rTW2d60d+1JdKJ9JPx16Nj02ExtVlHl9eiivw3e6yapueM9Klp7ZQpaKVkZn6R8jQ2l+sS6UY/x46IkzfmszMTOUiWc3z8Sv/ruc5MbC9auLV2bf2uJ4L9fr8rJ9b/W9+dc7MqHtq6dbni/P9B+p72fV2VHWPTt43K7OV6v+xqVZd7aqrpXqeu7VPehKLXs6fHtUT726F0aO0qnqjgzVrXqVkzezMHgVAsAedvCVg632vfZf2x+2f9K+0j5/4JsTZyZebGX/X5p/3Pfbxm8aXy9eyYf5YQ6NO1IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg0uPHOu1dnFxbmFvdgIY0d7vD2yKp+Knp7Wntj7k9qYWKzM+p3STZp3tqlwD6/2THtJHsidWk+hrEmMqLq/GBPO2kM4klydY/8wB2wG04uXXvr5I133v3K/LXZN+bemLt+6szp1053vjpz6+Tl+YW56d6/444S2A0rLwPGHQkAAAAAAAAAAACwVTv/lwaZXLdnvaI7hrkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT6Zzr2d/N0Vmpk9Ml9t373QWyqVfXjmymaSRpPhBUnySnE1vyeRQd8VG47x67+NfvvzBR52Vvpr94xtr2v3+X8vL25xFt14ylWRfva69uHGziS31d3Gov+42A+spBjMsE3asnzgYt/8HAAD//ws5CrY=") openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x55, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) socketpair(0x1e, 0xa, 0x3ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000817000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x9, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 0s ago: executing program 3 (id=1284): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x1ff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}]}, 0x38}}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 80.814400][ T5764] cgroup: Unknown subsys name 'net' [ 80.927824][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.581182][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.029102][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.038984][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.047983][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.055985][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.064358][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.071753][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.081372][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.088801][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.096742][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.104469][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.113463][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.121436][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.131408][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.139736][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.145126][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.154601][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.169177][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.178258][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.185980][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.193384][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.201067][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.210477][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.221743][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.229220][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.335658][ T5779] (null): rxe_set_mtu: Set mtu to 1024 [ 85.345232][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.354404][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.364004][ T5776] (null): rxe_set_mtu: Set mtu to 1024 [ 85.365614][ T5777] (null): rxe_set_mtu: Set mtu to 1024 [ 85.370890][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 85.383739][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.390425][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.391137][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.399263][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.665599][ T5779] infiniband rxe0: set active [ 85.673010][ T5779] infiniband rxe0: added rxe_eth0 [ 85.693419][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.736502][ T5779] RDS/IB: rxe0: added [ 85.757283][ T5779] smc: adding ib device rxe0 with port count 1 [ 85.764803][ T5779] smc: ib device rxe0 port 1 has pnetid [ 85.777977][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.819156][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.126770][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.172170][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 86.281494][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.318814][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.571124][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.579277][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.586767][ T5778] bridge_slave_0: entered allmulticast mode [ 86.595037][ T5778] bridge_slave_0: entered promiscuous mode [ 86.613396][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.620590][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.627743][ T5776] bridge_slave_0: entered allmulticast mode [ 86.635275][ T5776] bridge_slave_0: entered promiscuous mode [ 86.666714][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.675536][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.684337][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.693900][ T5778] bridge_slave_1: entered allmulticast mode [ 86.702771][ T5778] bridge_slave_1: entered promiscuous mode [ 86.723940][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.731198][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.739064][ T5776] bridge_slave_1: entered allmulticast mode [ 86.746738][ T5776] bridge_slave_1: entered promiscuous mode [ 86.772619][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.782628][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.790010][ T5777] bridge_slave_0: entered allmulticast mode [ 86.797999][ T5777] bridge_slave_0: entered promiscuous mode [ 86.840403][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.847682][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.860418][ T5777] bridge_slave_1: entered allmulticast mode [ 86.867997][ T5777] bridge_slave_1: entered promiscuous mode [ 86.884062][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.901416][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.917333][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.026426][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.044899][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.069772][ T5778] team0: Port device team_slave_0 added [ 87.112588][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.127899][ T5778] team0: Port device team_slave_1 added [ 87.138963][ T5776] team0: Port device team_slave_0 added [ 87.203460][ T5776] team0: Port device team_slave_1 added [ 87.209552][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.239341][ T5793] Bluetooth: hci2: command tx timeout [ 87.245455][ T5793] Bluetooth: hci0: command tx timeout [ 87.272699][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.288283][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.318473][ T5793] Bluetooth: hci1: command tx timeout [ 87.324249][ T5793] Bluetooth: hci3: command tx timeout [ 87.348639][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.396310][ T5777] team0: Port device team_slave_0 added [ 87.421376][ T5777] team0: Port device team_slave_1 added [ 87.460692][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.467735][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.528328][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.549698][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.556700][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.589563][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.660127][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.667159][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.697498][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.717264][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.724698][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.751295][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.763900][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.771364][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.797541][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.849471][ T5778] hsr_slave_0: entered promiscuous mode [ 87.856011][ T5778] hsr_slave_1: entered promiscuous mode [ 87.912984][ T5777] hsr_slave_0: entered promiscuous mode [ 87.920028][ T5777] hsr_slave_1: entered promiscuous mode [ 87.926267][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.935102][ T5777] Cannot create hsr debugfs directory [ 88.007989][ T5776] hsr_slave_0: entered promiscuous mode [ 88.015386][ T5776] hsr_slave_1: entered promiscuous mode [ 88.022582][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.030268][ T5776] Cannot create hsr debugfs directory [ 88.408799][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.517962][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.550610][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.561599][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.583743][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591095][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.600148][ T5779] bridge_slave_0: entered allmulticast mode [ 88.607583][ T5779] bridge_slave_0: entered promiscuous mode [ 88.616652][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.624215][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.634735][ T5779] bridge_slave_1: entered allmulticast mode [ 88.642255][ T5779] bridge_slave_1: entered promiscuous mode [ 88.649409][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.716122][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.743324][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.771819][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.782883][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.809701][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.822135][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.836958][ T5779] team0: Port device team_slave_0 added [ 88.849279][ T5779] team0: Port device team_slave_1 added [ 88.917725][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.924994][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.952921][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.986360][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.993579][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.020411][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.046249][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.085364][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.101728][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.113697][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.146239][ T5779] hsr_slave_0: entered promiscuous mode [ 89.155926][ T5779] hsr_slave_1: entered promiscuous mode [ 89.162324][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.173007][ T5779] Cannot create hsr debugfs directory [ 89.319327][ T5793] Bluetooth: hci2: command tx timeout [ 89.319358][ T5783] Bluetooth: hci0: command tx timeout [ 89.398798][ T5783] Bluetooth: hci1: command tx timeout [ 89.419877][ T5783] Bluetooth: hci3: command tx timeout [ 89.439755][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.496681][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.520755][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.532222][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.544213][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.555390][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.597115][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.610941][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.633458][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.640899][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.674198][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.681434][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.692695][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.699893][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.727371][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.734621][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.787459][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.883407][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.929318][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.936529][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.951903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.959240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.988066][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.112978][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.174939][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.182207][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.250774][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.257951][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.417301][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.571849][ T5777] veth0_vlan: entered promiscuous mode [ 90.616307][ T5777] veth1_vlan: entered promiscuous mode [ 90.647794][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.683431][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.777625][ T5777] veth0_macvtap: entered promiscuous mode [ 90.801828][ T5777] veth1_macvtap: entered promiscuous mode [ 90.866355][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.881886][ T5778] veth0_vlan: entered promiscuous mode [ 90.895058][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.913271][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.927611][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.944489][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.953316][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.962621][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.993529][ T5776] veth0_vlan: entered promiscuous mode [ 91.006478][ T5778] veth1_vlan: entered promiscuous mode [ 91.040681][ T5776] veth1_vlan: entered promiscuous mode [ 91.147982][ T5778] veth0_macvtap: entered promiscuous mode [ 91.190173][ T5778] veth1_macvtap: entered promiscuous mode [ 91.207069][ T5776] veth0_macvtap: entered promiscuous mode [ 91.214282][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.228156][ T5779] veth0_vlan: entered promiscuous mode [ 91.245390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.267557][ T5776] veth1_macvtap: entered promiscuous mode [ 91.282419][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.293655][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.309629][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.349384][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.362229][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.373661][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.387049][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.396519][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.406440][ T5783] Bluetooth: hci0: command tx timeout [ 91.409261][ T5793] Bluetooth: hci2: command tx timeout [ 91.415524][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.426301][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.439510][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.450282][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.465658][ T5779] veth1_vlan: entered promiscuous mode [ 91.479002][ T5793] Bluetooth: hci3: command tx timeout [ 91.479021][ T5783] Bluetooth: hci1: command tx timeout [ 91.564355][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.580360][ T5777] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.609816][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.621051][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.631625][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.645833][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.685890][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.703717][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.714933][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.732432][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.747021][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.776092][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.786387][ T28] audit: type=1326 audit(1792680658.249:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 91.822477][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.836965][ T28] audit: type=1326 audit(1792680658.249:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 91.871658][ T28] audit: type=1326 audit(1792680658.279:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 91.906347][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.915585][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.925659][ T28] audit: type=1326 audit(1792680658.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 91.952925][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.963376][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.975532][ T28] audit: type=1326 audit(1792680658.279:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 92.008895][ T28] audit: type=1326 audit(1792680658.279:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 92.036581][ T28] audit: type=1326 audit(1792680658.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 92.071885][ T5779] veth0_macvtap: entered promiscuous mode [ 92.082480][ T23] cfg80211: failed to load regulatory.db [ 92.090232][ T28] audit: type=1326 audit(1792680658.279:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 92.119941][ T28] audit: type=1326 audit(1792680658.279:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 92.144312][ T28] audit: type=1326 audit(1792680658.289:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.3.4" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 92.201003][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.215028][ T5870] syz.3.4[5870]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.224226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.245191][ T5779] veth1_macvtap: entered promiscuous mode [ 92.339992][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.377379][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.390150][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.401063][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.411335][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.424555][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.453892][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.495890][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.533326][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.547102][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.558711][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.570017][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.581526][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.601801][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.666691][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699892][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.718294][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.743312][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.198307][ T5783] Bluetooth: hci0: command tx timeout [ 95.203876][ T5783] Bluetooth: hci2: command tx timeout [ 95.209395][ T5793] Bluetooth: hci1: command tx timeout [ 95.209428][ T5793] Bluetooth: hci3: command tx timeout [ 95.350025][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.358026][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.907283][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.016028][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.300551][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.348984][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.442432][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.472367][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.425836][ T5892] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.624899][ T5894] loop1: detected capacity change from 0 to 8192 [ 97.638650][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 97.638666][ T28] audit: type=1326 audit(1792680664.109:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 97.690807][ T5894] ======================================================= [ 97.690807][ T5894] WARNING: The mand mount option has been deprecated and [ 97.690807][ T5894] and is ignored by this kernel. Remove the mand [ 97.690807][ T5894] option from the mount to silence this warning. [ 97.690807][ T5894] ======================================================= [ 97.761454][ T28] audit: type=1326 audit(1792680664.109:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 97.850418][ T28] audit: type=1326 audit(1792680664.109:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 97.932974][ T28] audit: type=1326 audit(1792680664.139:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 97.984109][ T28] audit: type=1326 audit(1792680664.139:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 98.016688][ T28] audit: type=1326 audit(1792680664.149:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 98.096835][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.105495][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.129692][ T28] audit: type=1326 audit(1792680664.149:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 98.199615][ T5898] bridge0: entered allmulticast mode [ 98.273231][ T28] audit: type=1326 audit(1792680664.149:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 98.680119][ T28] audit: type=1326 audit(1792680664.149:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 98.745526][ T5898] bridge_slave_1: left allmulticast mode [ 98.776000][ T5898] bridge_slave_1: left promiscuous mode [ 98.809872][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.826022][ T28] audit: type=1326 audit(1792680664.149:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.3.9" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f79b319f559 code=0x7ffc0000 [ 98.896933][ T5898] bridge_slave_0: left allmulticast mode [ 98.928501][ T5898] bridge_slave_0: left promiscuous mode [ 98.934337][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.349725][ T5766] IPVS: starting estimator thread 0... [ 99.492312][ T5914] IPVS: using max 18 ests per chain, 43200 per kthread [ 103.558210][ C1] sched: RT throttling activated [ 103.775678][ T5939] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.630317][ T5973] loop3: detected capacity change from 0 to 512 [ 107.646016][ T5973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.676685][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.806538][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.876526][ T5973] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.035560][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.904326][ T6000] jffs2: notice: (6000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.248266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 114.409677][ T6018] process 'syz.3.30' launched './file1' with NULL argv: empty string added [ 114.498665][ T6018] loop3: detected capacity change from 0 to 512 [ 114.801305][ T6018] EXT4-fs error (device loop3): ext4_quota_enable:7140: inode #4: comm syz.3.30: iget: checksum invalid [ 114.818523][ T6018] EXT4-fs error (device loop3): ext4_quota_enable:7143: comm syz.3.30: Bad quota inode: 4, type: 1 [ 114.834577][ T6018] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 114.866050][ T6018] EXT4-fs (loop3): mount failed [ 118.368263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.488244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.899677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.048303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 126.291876][ T6082] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 126.404963][ T6084] loop2: detected capacity change from 0 to 256 [ 127.649323][ T6084] syz.2.36: attempt to access beyond end of device [ 127.649323][ T6084] loop2: rw=2049, sector=24288, nr_sectors = 1624 limit=256 [ 127.828865][ T12] kworker/u4:1: attempt to access beyond end of device [ 127.828865][ T12] loop2: rw=1, sector=256, nr_sectors = 288 limit=256 [ 127.859469][ T12] kworker/u4:1: attempt to access beyond end of device [ 127.859469][ T12] loop2: rw=1, sector=608, nr_sectors = 416 limit=256 [ 127.900072][ T12] kworker/u4:1: attempt to access beyond end of device [ 127.900072][ T12] loop2: rw=1, sector=1056, nr_sectors = 5896 limit=256 [ 127.928149][ T12] kworker/u4:1: attempt to access beyond end of device [ 127.928149][ T12] loop2: rw=1, sector=6952, nr_sectors = 4768 limit=256 [ 127.972979][ T12] kworker/u4:1: attempt to access beyond end of device [ 127.972979][ T12] loop2: rw=1, sector=11720, nr_sectors = 8152 limit=256 [ 128.010862][ T12] kworker/u4:1: attempt to access beyond end of device [ 128.010862][ T12] loop2: rw=1, sector=19872, nr_sectors = 4416 limit=256 [ 128.052741][ T12] kworker/u4:1: attempt to access beyond end of device [ 128.052741][ T12] loop2: rw=1, sector=25920, nr_sectors = 6912 limit=256 [ 128.074682][ T12] kworker/u4:1: attempt to access beyond end of device [ 128.074682][ T12] loop2: rw=1, sector=25912, nr_sectors = 8 limit=256 [ 129.636808][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 129.636825][ T28] audit: type=1800 audit(1792680696.109:168): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="idVendor" dev="configfs" ino=8038 res=0 errno=0 [ 129.722137][ T28] audit: type=1800 audit(1792680696.129:169): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="idProduct" dev="configfs" ino=8039 res=0 errno=0 [ 129.753012][ T6104] Config c/1 of g1 needs at least one function. [ 129.768751][ T6104] udc dummy_udc.0: failed to start g1: -22 [ 129.774771][ T28] audit: type=1800 audit(1792680696.139:170): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="serialnumber" dev="configfs" ino=8041 res=0 errno=0 [ 129.801261][ T6104] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 129.818613][ T28] audit: type=1800 audit(1792680696.199:171): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="report_desc" dev="configfs" ino=7006 res=0 errno=0 [ 129.835528][ T6104] UDC core: g1: couldn't find an available UDC or it's busy [ 129.844484][ T28] audit: type=1800 audit(1792680696.229:172): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="UDC" dev="configfs" ino=7007 res=0 errno=0 [ 129.853721][ T6109] loop2: detected capacity change from 0 to 1024 [ 129.992731][ T6109] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.012414][ T6109] EXT4-fs: Ignoring removed oldalloc option [ 130.057352][ T6109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.103967][ T6109] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.271075][ T6117] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.45: bg 0: block 112: padding at end of block bitmap is not set [ 131.290537][ T6117] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 52 with error 28 [ 131.309473][ T6117] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.309473][ T6117] [ 131.319780][ T6117] EXT4-fs (loop2): Total free blocks count 0 [ 131.325938][ T6117] EXT4-fs (loop2): Free/Dirty block details [ 131.332395][ T6117] EXT4-fs (loop2): free_blocks=0 [ 131.337526][ T6117] EXT4-fs (loop2): dirty_blocks=64 [ 131.346487][ T6117] EXT4-fs (loop2): Block reservation details [ 131.353055][ T6117] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 131.612283][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.020300][ T6127] loop2: detected capacity change from 0 to 8 [ 133.003545][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.028378][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.769151][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.777434][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.831543][ T6141] bridge0: entered allmulticast mode [ 136.859932][ T6142] bridge_slave_1: left allmulticast mode [ 136.869417][ T6142] bridge_slave_1: left promiscuous mode [ 136.887654][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.898901][ T6142] bridge_slave_0: left allmulticast mode [ 136.918370][ T6142] bridge_slave_0: left promiscuous mode [ 136.938536][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.226512][ T6157] loop1: detected capacity change from 0 to 512 [ 138.263712][ T6157] EXT4-fs: Ignoring removed nobh option [ 139.275347][ T6157] EXT4-fs (loop1): 1 truncate cleaned up [ 139.288734][ T5847] IPVS: starting estimator thread 0... [ 139.316935][ T6157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.398466][ T6167] IPVS: using max 18 ests per chain, 43200 per kthread [ 140.308496][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.478977][ T6157] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.088549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.718624][ T6242] syzkaller0: entered promiscuous mode [ 156.724310][ T6242] syzkaller0: entered allmulticast mode [ 159.528003][ T6255] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 159.811364][ T6261] loop2: detected capacity change from 0 to 32768 [ 161.047287][ T6268] orangefs_mount: mount request failed with -4 [ 163.422414][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.437382][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.462739][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.496877][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.528505][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.536996][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.871590][ T6282] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.072625][ T3477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.211523][ T3477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.341456][ T3477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.527761][ T3477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.584576][ T5780] Bluetooth: hci4: command tx timeout [ 165.779746][ T6282] chnl_net:caif_netlink_parms(): no params data found [ 168.680201][ T5780] Bluetooth: hci4: command tx timeout [ 169.809369][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.816590][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.899434][ T6282] bridge_slave_0: entered allmulticast mode [ 169.970856][ T6282] bridge_slave_0: entered promiscuous mode [ 170.758492][ T5783] Bluetooth: hci4: command tx timeout [ 170.924819][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.958331][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.986230][ T6282] bridge_slave_1: entered allmulticast mode [ 171.030173][ T6282] bridge_slave_1: entered promiscuous mode [ 171.036996][ T6333] tipc: Started in network mode [ 171.053077][ T6333] tipc: Node identity 86ec31c5b5fb, cluster identity 4711 [ 171.069607][ T6333] tipc: Enabled bearer , priority 0 [ 171.093583][ T6341] syzkaller0: entered promiscuous mode [ 171.100096][ T6341] syzkaller0: entered allmulticast mode [ 171.149051][ T6344] tipc: Resetting bearer [ 171.207791][ T6332] tipc: Resetting bearer [ 171.289541][ T6332] tipc: Disabling bearer [ 172.838387][ T5783] Bluetooth: hci4: command tx timeout [ 173.620016][ T6366] loop3: detected capacity change from 0 to 512 [ 173.627088][ T6366] EXT4-fs: Ignoring removed nobh option [ 173.764815][ T6366] EXT4-fs (loop3): 1 truncate cleaned up [ 173.774816][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.797530][ T5783] Bluetooth: Wrong link type (-71) [ 173.883817][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.963966][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.995592][ T6366] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.468591][ T6282] team0: Port device team_slave_0 added [ 174.566547][ T6282] team0: Port device team_slave_1 added [ 175.679375][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 175.991579][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.028755][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.108324][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.188765][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.195814][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.298275][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.701677][ T6282] hsr_slave_0: entered promiscuous mode [ 177.741161][ T6282] hsr_slave_1: entered promiscuous mode [ 177.774552][ T6282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.811464][ T6282] Cannot create hsr debugfs directory [ 178.618207][ T3477] hsr_slave_0: left promiscuous mode [ 178.634209][ T3477] hsr_slave_1: left promiscuous mode [ 178.645291][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.664630][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.705876][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.745707][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.789211][ T3477] bridge_slave_1: left allmulticast mode [ 178.794939][ T3477] bridge_slave_1: left promiscuous mode [ 178.854488][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.949239][ T3477] bridge_slave_0: left allmulticast mode [ 178.954984][ T3477] bridge_slave_0: left promiscuous mode [ 178.961307][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.058134][ T3477] veth1_macvtap: left promiscuous mode [ 179.068557][ T3477] veth0_macvtap: left promiscuous mode [ 179.074298][ T3477] veth1_vlan: left promiscuous mode [ 179.102050][ T3477] veth0_vlan: left promiscuous mode [ 180.516153][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 180.561696][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 180.602336][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.650223][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.996539][ T3477] bond0 (unregistering): Released all slaves [ 181.116426][ T6429] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 182.411735][ T6441] loop2: detected capacity change from 0 to 512 [ 182.693243][ T6441] EXT4-fs: Ignoring removed nobh option [ 182.723472][ T6441] EXT4-fs (loop2): 1 truncate cleaned up [ 182.733998][ T6442] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 182.786818][ T6441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.961536][ T6282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.016101][ T6282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.091386][ T6282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.173480][ T6282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.183468][ T6441] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.673309][ T3477] IPVS: stop unused estimator thread 0... [ 185.405902][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.785279][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.876165][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.883406][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.965716][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.973906][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.577772][ T6282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.155236][ T6478] syz.1.122 (6478) used greatest stack depth: 20552 bytes left [ 187.196425][ T6282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.478082][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.318082][ T6282] veth0_vlan: entered promiscuous mode [ 194.442876][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.450484][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.047559][ T6282] veth1_vlan: entered promiscuous mode [ 195.442138][ T6282] veth0_macvtap: entered promiscuous mode [ 195.482207][ T6282] veth1_macvtap: entered promiscuous mode [ 195.564450][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.618355][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.157025][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.520763][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.571059][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.607045][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.621620][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.651699][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.678467][ T27] IPVS: starting estimator thread 0... [ 196.687819][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.718376][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.751405][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.768306][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.807445][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.818488][ T6569] IPVS: using max 22 ests per chain, 52800 per kthread [ 196.849160][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.895819][ T6282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.918288][ T6282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.938329][ T6282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.968335][ T6282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.186286][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.244403][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.378957][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.394895][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.912987][ T6597] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 202.399621][ T6618] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 202.510700][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.593926][ T6620] macvlan2: entered promiscuous mode [ 202.658401][ T6620] macvlan2: entered allmulticast mode [ 205.639939][ T6656] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 205.659047][ T6653] loop4: detected capacity change from 0 to 16 [ 205.783709][ T6653] erofs: (device loop4): mounted with root inode @ nid 36. [ 205.957728][ T6653] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 205.999946][ T6653] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 206.064048][ T6653] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 206.138383][ T6653] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 206.228961][ T28] audit: type=1800 audit(1792680772.649:173): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.149" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 211.077558][ T6694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 212.573046][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 212.573071][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.573142][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 213.304997][ T6704] loop4: detected capacity change from 0 to 512 [ 213.378433][ T6704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.513128][ T6704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.525893][ T6704] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.789126][ T6711] Cannot find add_set index 0 as target [ 215.089794][ T6282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.328622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 224.543597][ T6775] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 225.033818][ T6782] 9pnet_virtio: no channels available for device 127.0.0.1 [ 226.376559][ T6788] loop4: detected capacity change from 0 to 4096 [ 226.551488][ T6788] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.969535][ T6788] EXT4-fs: Ignoring removed orlov option [ 226.986748][ T6788] EXT4-fs (loop4): Test dummy encryption mode enabled [ 227.070136][ T6788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.858501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 229.524163][ T6282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.756290][ T6822] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 231.763251][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.772615][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 232.310276][ T175] vhci_hcd: vhci_device speed not set [ 233.578232][ T6823] vhci_hcd: connection closed [ 234.043375][ T1131] vhci_hcd: stop threads [ 234.073491][ T175] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 234.109264][ T1131] vhci_hcd: release socket [ 234.151309][ T1131] vhci_hcd: disconnect device [ 234.321797][ T6832] syzkaller0: entered promiscuous mode [ 234.338304][ T6832] syzkaller0: entered allmulticast mode [ 234.679058][ T6830] capability: warning: `syz.1.183' uses deprecated v2 capabilities in a way that may be insecure [ 236.922913][ T6864] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 239.508194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 239.638666][ T175] vhci_hcd: vhci_device speed not set [ 241.294701][ T6901] loop4: detected capacity change from 0 to 512 [ 241.378552][ T6901] EXT4-fs (loop4): Test dummy encryption mode enabled [ 241.385848][ T6901] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 241.600076][ T6901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.308048][ T6901] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.195: bad orphan inode 131083 [ 242.475556][ T6901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.589344][ T6282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.536669][ T6938] loop4: detected capacity change from 0 to 4096 [ 244.978762][ T6938] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 245.070351][ T6938] ntfs3: loop4: Failed to load $Extend (-22). [ 245.076979][ T6938] ntfs3: loop4: Failed to initialize $Extend. [ 247.297396][ T6976] loop4: detected capacity change from 0 to 256 [ 247.827749][ T6983] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 247.928964][ T5783] Bluetooth: hci4: command tx timeout [ 247.995894][ T6983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.008295][ T7017] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 251.206221][ T7017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.868191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 255.667605][ T7067] tipc: Enabling of bearer rejected, failed to enable media [ 255.786488][ T7074] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 256.016308][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.022970][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.791155][ T7108] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 258.813301][ T7096] syz.2.233 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.835935][ T7108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.167081][ T7132] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 261.208506][ T7132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.638763][ T7180] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 265.059806][ T7180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.125328][ T7182] macvlan2: entered promiscuous mode [ 265.138457][ T7182] macvlan2: entered allmulticast mode [ 265.144419][ T7182] bond3: entered allmulticast mode [ 265.178361][ T7182] bond3: entered promiscuous mode [ 265.184856][ T7182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.230506][ T7182] team0: Port device macvlan2 added [ 267.139685][ T7216] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 267.249891][ T7216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.264959][ T7221] macvlan3: entered promiscuous mode [ 267.271385][ T7221] macvlan3: entered allmulticast mode [ 267.277198][ T7221] bond4: entered allmulticast mode [ 267.282816][ T7221] bond4: entered promiscuous mode [ 267.299055][ T7221] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 267.307490][ T7221] team0: Port device macvlan3 added [ 269.236419][ T7238] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 269.362253][ T7238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.790316][ T7258] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 270.800323][ T7258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.864523][ T7267] bond3: (slave ip6gretap1): making interface the new active one [ 270.903278][ T7267] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 274.431319][ T7304] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 274.614143][ T7304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.879171][ T7329] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 277.945814][ T7329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.708833][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 288.679254][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 289.782733][ T7403] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 289.977274][ T7403] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.333867][ T7413] UBIFS error (pid: 7413): cannot open "(null)", error -22 [ 297.127000][ T7456] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 297.244749][ T7456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.322479][ T7459] macvlan2: entered promiscuous mode [ 297.327883][ T7459] macvlan2: entered allmulticast mode [ 297.616161][ T7463] IPVS: dh: FWM 3 0x00000003 - no destination available [ 298.817961][ T7471] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 298.825706][ T7471] Error parsing options; rc = [-22] [ 301.306742][ T7471] vlan0: entered promiscuous mode [ 301.324501][ T7471] team0: Port device vlan0 added [ 301.513184][ T7481] bond0: (slave bond_slave_0): Releasing backup interface [ 301.551757][ T7481] bond0: (slave bond_slave_1): Releasing backup interface [ 302.245130][ T7481] team0: Port device team_slave_0 removed [ 302.313998][ T7481] team0: Port device team_slave_1 removed [ 302.337102][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.362381][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.453745][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.499459][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.600630][ T7485] team0: Mode changed to "broadcast" [ 306.536034][ T7513] trusted_key: encrypted_key: insufficient parameters specified [ 310.258486][ T7534] IPVS: dh: FWM 3 0x00000003 - no destination available [ 317.325192][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.331972][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.509086][ T7595] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 317.642764][ T7598] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 318.333897][ T7610] ip_tables: iptables: counters copy to user failed while replacing table [ 318.352168][ T7595] veth3: entered promiscuous mode [ 318.373470][ T7595] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 318.383414][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.339'. [ 318.403693][ T136] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 318.423318][ T7598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.564552][ T32] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 321.574612][ T27] libceph: connect (1)[c::]:6789 error -101 [ 321.609183][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 321.619126][ T7623] ceph: No mds server is up or the cluster is laggy [ 322.698639][ T5783] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 322.707409][ T5783] Bluetooth: hci2: Injecting HCI hardware error event [ 322.717385][ T5793] Bluetooth: hci2: hardware error 0x00 [ 324.918715][ T5793] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 329.008701][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 332.319003][ T7711] IPVS: dh: FWM 3 0x00000003 - no destination available [ 333.851321][ T7721] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 337.642509][ T7747] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.663538][ T7755] netlink: 'syz.1.378': attribute type 3 has an invalid length. [ 341.281101][ T7782] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 341.303873][ T7777] Zero length message leads to an empty skb [ 342.763405][ T7800] ip_tables: iptables: counters copy to user failed while replacing table [ 345.910260][ T7827] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 345.948275][ T7827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.162887][ T7868] sctp: [Deprecated]: syz.2.408 (pid 7868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.162887][ T7868] Use struct sctp_sack_info instead [ 350.182129][ T7867] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.825169][ T7883] netlink: 'syz.2.412': attribute type 1 has an invalid length. [ 351.939959][ T7883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.963421][ T7885] macvlan2: entered promiscuous mode [ 353.588745][ T7885] macvlan2: entered allmulticast mode [ 354.074730][ T7885] bond4: entered allmulticast mode [ 354.149216][ T7885] bond4: entered promiscuous mode [ 354.170589][ T7885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.198016][ T7885] team0: Port device macvlan2 added [ 354.564847][ T7902] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 356.318880][ T7923] IPVS: dh: FWM 3 0x00000003 - no destination available [ 357.535221][ T7931] bridge0: port 1(syz_tun) entered blocking state [ 357.653828][ T7931] bridge0: port 1(syz_tun) entered disabled state [ 357.692899][ T7931] syz_tun: entered allmulticast mode [ 357.740373][ T7931] syz_tun: entered promiscuous mode [ 359.337223][ T7948] netlink: 'syz.4.428': attribute type 1 has an invalid length. [ 359.628942][ T7948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.051737][ T7954] macvlan2: entered promiscuous mode [ 360.057320][ T7954] macvlan2: entered allmulticast mode [ 360.066208][ T7954] bond6: entered allmulticast mode [ 360.076961][ T7954] bond6: entered promiscuous mode [ 360.085576][ T7954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 360.100646][ T7954] team0: Port device macvlan2 added [ 363.459292][ T7992] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 363.602477][ T7992] 8021q: adding VLAN 0 to HW filter on device bond5 [ 363.847229][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 363.915863][ T8001] IPVS: dh: FWM 3 0x00000003 - no destination available [ 367.836783][ T8038] IPVS: dh: FWM 3 0x00000003 - no destination available [ 368.291970][ T8041] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 368.571197][ T8041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.400110][ T9] IPVS: starting estimator thread 0... [ 371.059452][ T8063] IPVS: using max 17 ests per chain, 40800 per kthread [ 373.354869][ T175] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 373.963649][ T8082] ceph: No mds server is up or the cluster is laggy [ 374.095843][ T175] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 375.242004][ T8102] IPVS: dh: FWM 3 0x00000003 - no destination available [ 376.311983][ T8111] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 377.044242][ T8111] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.648179][ T8126] IPVS: dh: FWM 3 0x00000003 - no destination available [ 379.013327][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.019855][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.774947][ T8138] bridge0: port 3(syz_tun) entered blocking state [ 379.797773][ T8138] bridge0: port 3(syz_tun) entered disabled state [ 379.805517][ T8138] syz_tun: entered allmulticast mode [ 379.813626][ T8138] syz_tun: entered promiscuous mode [ 379.819955][ T8138] bridge0: port 3(syz_tun) entered blocking state [ 379.827547][ T8138] bridge0: port 3(syz_tun) entered forwarding state [ 380.629159][ T8151] ip_tables: iptables: counters copy to user failed while replacing table [ 381.703964][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 383.117170][ T8165] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 383.215794][ T8165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.355075][ T8168] bond5: (slave ip6gretap1): making interface the new active one [ 383.386141][ T8168] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 388.831058][ T8216] ip_tables: iptables: counters copy to user failed while replacing table [ 388.852218][ T8218] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 388.954034][ T8218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.539523][ T8242] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.902418][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 393.923095][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 394.044236][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.156938][ T8245] bond6: (slave bond0): making interface the new active one [ 394.229805][ T8245] bond6: (slave bond0): Enslaving as an active interface with an up link [ 394.348710][ T8253] netlink: 'syz.1.502': attribute type 4 has an invalid length. [ 394.389901][ T8253] netlink: 152 bytes leftover after parsing attributes in process `syz.1.502'. [ 394.423122][ T8253] .`: renamed from bond0 (while UP) [ 394.765014][ T8263] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 395.025398][ T8263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.109580][ T8303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.121177][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 401.130496][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 401.353876][ T8307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.380347][ T8307] bond6: (slave bond0): making interface the new active one [ 401.399188][ T8307] bond6: (slave bond0): Enslaving as an active interface with an up link [ 401.434335][ T8314] netlink: 'syz.3.517': attribute type 4 has an invalid length. [ 401.468223][ T8314] netlink: 152 bytes leftover after parsing attributes in process `syz.3.517'. [ 402.430053][ T8314] .`: renamed from bond0 (while UP) [ 405.281091][ T8352] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 405.415305][ T8352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 405.424141][ T8338] ceph: No mds server is up or the cluster is laggy [ 407.801437][ T8371] bridge_slave_0: left allmulticast mode [ 407.807271][ T8371] bridge_slave_0: left promiscuous mode [ 407.817610][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.863557][ T8371] bridge_slave_1: left allmulticast mode [ 407.880291][ T8371] bridge_slave_1: left promiscuous mode [ 407.886072][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.111893][ T8371] bond0: (slave bond_slave_0): Releasing backup interface [ 408.983471][ T8371] bond0: (slave bond_slave_1): Releasing backup interface [ 409.842889][ T8371] team0: Port device team_slave_0 removed [ 410.219756][ T8371] team0: Port device team_slave_1 removed [ 410.226637][ T8371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.247720][ T8371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.271247][ T8371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.288200][ T8371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.340399][ T8371] team0: Port device vlan0 removed [ 410.376484][ T8371] bond3: (slave ip6gretap1): Releasing active interface [ 410.402458][ T8371] bond6: left allmulticast mode [ 410.407678][ T8371] bond6: left promiscuous mode [ 410.434674][ T8371] team0: Port device macvlan2 removed [ 410.539357][ T8397] 9pnet_fd: Insufficient options for proto=fd [ 410.611403][ T8373] team0: Port device xfrm0 added [ 410.633291][ T8397] ip_tables: iptables: counters copy to user failed while replacing table [ 410.666616][ T8376] tipc: Started in network mode [ 410.688546][ T8376] tipc: Node identity 7e428cb35da, cluster identity 4711 [ 410.776867][ T8376] tipc: Enabled bearer , priority 0 [ 410.913480][ T27] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 411.321198][ T974] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 412.059224][ T8400] ceph: No mds server is up or the cluster is laggy [ 412.075205][ T974] tipc: Node number set to 602049715 [ 412.082684][ T974] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 419.698128][ T8468] ceph: No mds server is up or the cluster is laggy [ 420.983992][ T8484] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 426.431654][ T23] IPVS: starting estimator thread 0... [ 426.548963][ T8523] IPVS: using max 18 ests per chain, 43200 per kthread [ 429.128334][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 432.724910][ T8572] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.550703][ T8579] bond0: (slave bond_slave_0): Releasing backup interface [ 433.865051][ T8579] bond0: (slave bond_slave_1): Releasing backup interface [ 434.013098][ T8579] team0: Port device team_slave_0 removed [ 435.233662][ T8579] team0: Port device team_slave_1 removed [ 435.280385][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.343554][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.453628][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.505566][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.689879][ T8579] bond4: left allmulticast mode [ 435.709474][ T8579] bond4: left promiscuous mode [ 435.803550][ T8579] team0: Port device macvlan2 removed [ 435.932493][ T8580] team0: Port device xfrm0 added [ 435.989212][ T8581] tipc: Started in network mode [ 436.017465][ T8581] tipc: Node identity e65106f4a60e, cluster identity 4711 [ 436.050739][ T8581] tipc: Enabled bearer , priority 0 [ 436.184860][ T8595] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 437.179639][ T5782] tipc: Node number set to 1079969524 [ 440.218625][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.225021][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.180031][ T8686] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 449.343009][ T8694] ceph: No mds server is up or the cluster is laggy [ 450.239369][ T8709] tipc: Enabling of bearer rejected, failed to enable media [ 453.507250][ T8739] ip6t_REJECT: ECHOREPLY is not supported [ 463.399485][ T8807] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 463.407195][ T8807] Error parsing options; rc = [-22] [ 463.505487][ T8807] vlan0: entered promiscuous mode [ 467.591036][ T8843] jffs2: notice: (8843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 471.502017][ T8880] 8021q: adding VLAN 0 to HW filter on device .` [ 471.523909][ T8880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.008476][ T8896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.468333][ T8892] netlink: 72 bytes leftover after parsing attributes in process `syz.2.663'. [ 476.477300][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 476.486679][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 491.424675][ T8988] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8988] [ 492.387493][ T8992] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 492.396713][ T8992] Error parsing options; rc = [-22] [ 492.412344][ T8992] vlan0: entered promiscuous mode [ 499.322395][ T9021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.364505][ T9035] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9035] [ 500.613210][ T9037] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 500.857309][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.918290][ T9042] macvlan4: entered promiscuous mode [ 500.946086][ T9042] macvlan4: entered allmulticast mode [ 501.733597][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.744706][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.788866][ T9042] bond0: entered allmulticast mode [ 501.810458][ T9042] bond0: entered promiscuous mode [ 501.816202][ T9042] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 501.834155][ T9042] team0: Port device macvlan4 added [ 502.171277][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 502.201499][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 502.211841][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 502.222785][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 502.232998][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 505.488253][ T9063] capability: warning: `syz.1.709' uses 32-bit capabilities (legacy support in use) [ 508.364560][ T9081] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6282] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9081] [ 509.859654][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 509.900341][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 509.911954][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 509.923706][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 509.933655][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 513.528817][ T9113] sctp: failed to load transform for md5: -4 [ 513.937403][ T9129] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 514.829538][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 514.853597][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 514.865379][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 514.876802][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 514.886768][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 527.168209][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 527.194004][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 527.204341][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 527.215444][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 527.225300][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 527.258853][ T5793] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 530.378074][ T9277] @0Ù: renamed from dummy0 (while UP) [ 532.402000][ T9286] ceph: No mds server is up or the cluster is laggy [ 532.500190][ T5782] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 533.101907][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 533.126252][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 533.136432][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 533.147437][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 533.157402][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 545.453888][ T9367] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9367] [ 554.488532][ T9437] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 554.648617][ T9437] 8021q: adding VLAN 0 to HW filter on device bond7 [ 554.705265][ T9439] macvlan5: entered promiscuous mode [ 554.744759][ T9439] macvlan5: entered allmulticast mode [ 554.751389][ T9439] bond7: entered allmulticast mode [ 554.756622][ T9439] bond7: entered promiscuous mode [ 554.763064][ T9439] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 554.778784][ T9439] team0: Port device macvlan5 added [ 557.942961][ T9474] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6282] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9474] [ 561.430802][ T9502] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 561.489290][ T9502] 8021q: adding VLAN 0 to HW filter on device bond9 [ 563.143737][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.150565][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.054463][ T5793] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 565.118461][ T9523] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 565.126304][ T9523] Error parsing options; rc = [-22] [ 565.148637][ T9523] team0: Device vlan0 is of different type [ 568.049725][ T9536] o2cb: This node has not been configured. [ 568.055854][ T9536] o2cb: Cluster check failed. Fix errors before retrying. [ 568.063181][ T9536] (syz.1.821,9536,1):user_dlm_register:674 ERROR: status = -22 [ 568.070808][ T9536] (syz.1.821,9536,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 569.653242][ T9556] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 569.940901][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.985488][ T9558] macvlan2: entered promiscuous mode [ 569.998548][ T9558] macvlan2: entered allmulticast mode [ 570.055421][ T9558] bond0: entered allmulticast mode [ 570.060995][ T9558] bond0: entered promiscuous mode [ 570.068881][ T9558] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 570.109923][ T9558] team0: Port device macvlan2 added [ 572.001161][ T9566] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 573.293820][ T9566] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.768568][ T5793] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 580.629341][ T9630] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 580.962924][ T9630] 8021q: adding VLAN 0 to HW filter on device bond8 [ 582.299653][ T9632] macvlan3: entered promiscuous mode [ 582.305107][ T9632] macvlan3: entered allmulticast mode [ 582.338776][ T9632] bond8: entered allmulticast mode [ 582.418515][ T9632] bond8: entered promiscuous mode [ 582.600149][ T9632] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 582.820421][ T9632] team0: Device macvlan3 is of different type [ 582.914997][ T9632] bond8: left allmulticast mode [ 582.925802][ T9632] bond8: left promiscuous mode [ 584.912779][ T9685] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 584.921884][ T9685] Error parsing options; rc = [-22] [ 584.951110][ T9685] team0: Port device vlan0 added [ 587.902787][ T9712] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 588.128589][ T9712] 8021q: adding VLAN 0 to HW filter on device bond9 [ 588.948986][ T9718] macvlan3: entered promiscuous mode [ 588.954377][ T9718] macvlan3: entered allmulticast mode [ 588.989434][ T9718] bond9: entered allmulticast mode [ 589.023699][ T9718] bond9: entered promiscuous mode [ 589.055226][ T9718] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 589.149226][ T9718] team0: Device macvlan3 is of different type [ 589.231997][ T9718] bond9: left allmulticast mode [ 589.277894][ T9718] bond9: left promiscuous mode [ 590.888196][ T9741] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 590.896136][ T9741] Error parsing options; rc = [-22] [ 590.927364][ T9741] team0: Port device vlan0 added [ 591.613630][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 595.980543][ T9780] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 596.113600][ T9780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 596.175738][ T9784] macvlan3: entered promiscuous mode [ 596.234607][ T9784] macvlan3: entered allmulticast mode [ 596.291723][ T9784] bond7: entered allmulticast mode [ 596.297055][ T9784] bond7: entered promiscuous mode [ 596.358651][ T9784] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 596.425481][ T9784] team0: Port device macvlan3 added [ 597.407435][ T9794] 8021q: adding VLAN 0 to HW filter on device bond10 [ 600.256439][ T9798] macvlan3: entered promiscuous mode [ 600.275795][ T9798] macvlan3: entered allmulticast mode [ 600.322659][ T9798] bond10: entered allmulticast mode [ 600.327944][ T9798] bond10: entered promiscuous mode [ 600.355791][ T9798] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 600.440558][ T9798] team0: Device macvlan3 is of different type [ 600.462991][ T9798] bond10: left allmulticast mode [ 600.494328][ T9798] bond10: left promiscuous mode [ 601.107696][ T9816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'. [ 602.401201][ T9824] sctp: [Deprecated]: syz.4.887 (pid 9824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.401201][ T9824] Use struct sctp_sack_info instead [ 603.859418][ T9830] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 603.999833][ T9830] 8021q: adding VLAN 0 to HW filter on device bond10 [ 604.090184][ T9832] macvlan3: entered promiscuous mode [ 604.138023][ T9832] macvlan3: entered allmulticast mode [ 604.143900][ T9832] bond10: entered allmulticast mode [ 604.182300][ T9832] bond10: entered promiscuous mode [ 604.299059][ T9832] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 604.318602][ T9832] team0: Device macvlan3 is of different type [ 605.173002][ T9832] bond10: left allmulticast mode [ 605.188574][ T9832] bond10: left promiscuous mode [ 607.202644][ T9847] 8021q: adding VLAN 0 to HW filter on device bond11 [ 607.351452][ T9852] macvlan3: entered promiscuous mode [ 607.410624][ T9852] macvlan3: entered allmulticast mode [ 607.455422][ T9852] bond11: entered allmulticast mode [ 607.479508][ T9852] bond11: entered promiscuous mode [ 607.514755][ T9852] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 607.547402][ T9852] team0: Device macvlan3 is of different type [ 607.606648][ T9852] bond11: left allmulticast mode [ 607.637156][ T9852] bond11: left promiscuous mode [ 608.129754][ T9860] bridge0: port 1(syz_tun) entered blocking state [ 608.136406][ T9860] bridge0: port 1(syz_tun) entered disabled state [ 608.181646][ T9860] syz_tun: entered allmulticast mode [ 608.207068][ T9860] syz_tun: entered promiscuous mode [ 609.352468][ T9860] bridge0: port 1(syz_tun) entered blocking state [ 609.359117][ T9860] bridge0: port 1(syz_tun) entered forwarding state [ 609.442617][ T9866] bridge0: port 1(syz_tun) entered disabled state [ 609.477320][ T9866] tipc: Resetting bearer [ 609.497605][ T9866] tipc: Resetting bearer [ 609.707927][ T1138] tipc: Resetting bearer [ 611.587919][ T9890] : renamed from bond_slave_0 [ 612.509965][ T9892] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 613.382011][ T9892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 613.599883][ T9908] kAFS: No cell specified [ 619.642462][ T9954] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 619.652172][ T9954] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.850202][ T9975] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 623.174407][ T9975] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.047179][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.054084][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.665501][T10029] netlink: 76 bytes leftover after parsing attributes in process `syz.3.932'. [ 629.001200][T10032] netlink: 'syz.3.936': attribute type 1 has an invalid length. [ 629.099554][T10032] 8021q: adding VLAN 0 to HW filter on device bond9 [ 639.214765][T10128] netlink: 'syz.3.961': attribute type 10 has an invalid length. [ 639.249349][T10128] netlink: 'syz.3.961': attribute type 10 has an invalid length. [ 639.309003][T10128] bond6: (slave .`): Releasing backup interface [ 639.342163][T10128] 8021q: adding VLAN 0 to HW filter on device .` [ 639.382003][T10128] team0: Port device .` added [ 639.971744][T10145] No such timeout policy "syz1" [ 640.774338][T10149] bond6: option mode: unable to set because the bond device has slaves [ 640.819534][T10149] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 641.002547][T10153] xt_nat: multiple ranges no longer supported [ 641.790500][T10149] bond6: (slave macvlan6): Enslaving as a backup interface with an up link [ 642.105827][T10149] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 642.621547][T10149] netlink: 14 bytes leftover after parsing attributes in process `syz.1.966'. [ 643.045309][T10149] bond6: (slave .`): Releasing backup interface [ 643.053559][T10149] bond6: (slave .`): the permanent HWaddr of slave - aa:aa:aa:aa:aa:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 643.108605][T10149] bond6: (slave macvlan6): making interface the new active one [ 643.167930][T10149] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.185305][T10149] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.563647][T10149] .` (unregistering): Released all slaves [ 644.743269][T10149] syz.1.966 (10149) used greatest stack depth: 18056 bytes left [ 645.236489][T10181] netlink: 76 bytes leftover after parsing attributes in process `syz.4.978'. [ 648.643711][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 651.999113][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'. [ 667.397826][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1021'. [ 668.960918][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 668.972790][T10405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1025'. [ 668.981966][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1025'. [ 668.991242][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 678.511119][T10480] fuse: Bad value for 'fd' [ 679.462574][T10489] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 685.903276][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 685.916750][T10530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1056'. [ 685.925924][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 685.935206][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 686.417182][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.433235][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.222500][T10539] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 688.421929][T10539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 689.941190][T10544] 8021q: adding VLAN 0 to HW filter on device bond9 [ 690.005748][T10544] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 690.055281][T10544] bond9: (slave gre1): Error -95 calling set_mac_address [ 691.211896][T10546] gretap1: entered promiscuous mode [ 691.270792][T10546] bond9: (slave gretap1): making interface the new active one [ 691.285997][T10546] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 691.330963][T10539] macvlan7: entered promiscuous mode [ 691.356751][T10539] macvlan7: entered allmulticast mode [ 691.373820][T10539] bond9: entered promiscuous mode [ 691.390457][T10539] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 691.657886][T10565] futex_wake_op: syz.3.1057 tries to shift op by 144; fix this program [ 693.058254][T10539] bond9: (slave macvlan7): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 693.092132][T10539] bond9: left promiscuous mode [ 698.934263][T10603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1066'. [ 700.109891][T10611] veth1_to_bond: entered allmulticast mode [ 700.799014][T10611] veth1_to_bond: entered promiscuous mode [ 700.979920][T10611] veth1_to_bond: left promiscuous mode [ 700.986267][T10611] veth1_to_bond: left allmulticast mode [ 703.806942][ T28] audit: type=1326 audit(1792681526.334:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.1.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25e7d9f559 code=0x0 [ 705.898592][T10642] fuse: Bad value for 'fd' [ 712.837896][T10695] af_packet: tpacket_rcv: packet too big, clamped from 324 to 4294967272. macoff=96 [ 716.692364][T10725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1103'. [ 716.701827][T10725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1103'. [ 716.710917][T10725] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 718.069511][T10734] futex_wake_op: syz.4.1106 tries to shift op by 144; fix this program [ 720.597172][ T28] audit: type=1326 audit(1792681543.024:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.4.1116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86f559f559 code=0x0 [ 725.621214][T10786] tipc: Enabling of bearer rejected, failed to enable media [ 726.400829][T10786] tipc: Enabling of bearer rejected, failed to enable media [ 729.546866][T10805] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 736.414605][T10848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.481308][T10872] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 739.177628][T10870] overlayfs: failed to clone upperpath [ 742.760088][T10933] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 745.507431][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 747.760971][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.767499][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.485651][T10968] netlink: 'syz.3.1164': attribute type 49 has an invalid length. [ 750.037394][T10980] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 753.228137][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 753.239630][T11012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1169'. [ 753.249946][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 753.259556][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 756.434732][T11052] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 756.511283][T11052] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 765.185241][T11117] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 769.779019][T11156] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 769.960899][T11156] bond12: (slave lo): Enslaving as an active interface with an up link [ 770.016548][T11156] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 770.620166][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'. [ 776.951817][T11197] syz.3.1205 uses obsolete (PF_INET,SOCK_PACKET) [ 781.487846][T11236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.185365][T11315] sctp: [Deprecated]: syz.1.1224 (pid 11315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.185365][T11315] Use struct sctp_sack_info instead [ 800.746848][T11391] overlayfs: missing 'lowerdir' [ 800.854453][T11389] netlink: 'syz.2.1244': attribute type 49 has an invalid length. [ 802.481692][T11410] xt_policy: output policy not valid in PREROUTING and INPUT [ 806.642089][T11443] futex_wake_op: syz.2.1259 tries to shift op by 144; fix this program [ 808.380235][T11450] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1261'. [ 809.179821][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.204261][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.987003][T11493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1270'. [ 819.788097][T11527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1279'. [ 821.841685][T11548] ip_tables: iptables: counters copy to user failed while replacing table [ 822.645607][ T11] ------------[ cut here ]------------ [ 822.651730][ T11] WARNING: CPU: 0 PID: 11 at io_uring/io_uring.c:3219 io_ring_exit_work+0x3b9/0x830 [ 822.661272][ T11] Modules linked in: [ 822.665271][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 822.672677][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 822.682815][ T11] Workqueue: iou_exit io_ring_exit_work [ 822.688489][ T11] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 822.694316][ T11] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 d1 01 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 a1 20 01 f7 e9 b1 fd ff ff e8 97 20 01 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 822.714159][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 822.720431][ T11] RAX: ffffffff8a86b349 RBX: ffff88814d97e000 RCX: ffff88801d243c00 [ 822.728517][ T11] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 822.736804][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 822.745296][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 822.753308][ T11] R13: 000000010000cb3f R14: 000000010000cb40 R15: ffff88814d97e510 [ 822.761629][ T11] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 822.770652][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.777366][ T11] CR2: 0000000000000000 CR3: 00000000622b2000 CR4: 00000000003506f0 [ 822.785428][ T11] Call Trace: [ 822.788736][ T11] [ 822.791708][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 822.797597][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 822.802832][ T11] ? process_scheduled_works+0x975/0x1600 [ 822.808710][ T11] ? process_scheduled_works+0x975/0x1600 [ 822.814498][ T11] process_scheduled_works+0xa60/0x1600 [ 822.820123][ T11] ? worker_attach_to_pool+0x370/0x370 [ 822.825717][ T11] ? assign_work+0x3cc/0x5d0 [ 822.830462][ T11] worker_thread+0xa5e/0xfe0 [ 822.835185][ T11] kthread+0x2fa/0x390 [ 822.839502][ T11] ? pr_cont_work+0x550/0x550 [ 822.844241][ T11] ? kthread_blkcg+0xd0/0xd0 [ 822.848956][ T11] ret_from_fork+0x48/0x80 [ 822.853410][ T11] ? kthread_blkcg+0xd0/0xd0 [ 822.858069][ T11] ret_from_fork_asm+0x11/0x20 [ 822.862899][ T11] [ 822.866023][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 822.873343][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 822.880735][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 822.890812][ T11] Workqueue: iou_exit io_ring_exit_work [ 822.896403][ T11] Call Trace: [ 822.899726][ T11] [ 822.902675][ T11] dump_stack_lvl+0x18c/0x250 [ 822.907409][ T11] ? show_regs_print_info+0x20/0x20 [ 822.912747][ T11] ? load_image+0x420/0x420 [ 822.917323][ T11] panic+0x2ca/0x720 [ 822.921253][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 822.925795][ T11] ? ret_from_fork_asm+0x11/0x20 [ 822.930777][ T11] __warn+0x2e0/0x470 [ 822.934797][ T11] ? io_ring_exit_work+0x3b9/0x830 [ 822.939949][ T11] ? io_ring_exit_work+0x3b9/0x830 [ 822.945097][ T11] report_bug+0x2be/0x4f0 [ 822.949560][ T11] ? io_ring_exit_work+0x3b9/0x830 [ 822.954703][ T11] ? io_ring_exit_work+0x3b9/0x830 [ 822.959962][ T11] ? io_ring_exit_work+0x3bb/0x830 [ 822.965113][ T11] handle_bug+0xcf/0x120 [ 822.969406][ T11] exc_invalid_op+0x1a/0x50 [ 822.973955][ T11] asm_exc_invalid_op+0x1a/0x20 [ 822.978834][ T11] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 822.984605][ T11] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 d1 01 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 a1 20 01 f7 e9 b1 fd ff ff e8 97 20 01 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 823.004235][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 823.010337][ T11] RAX: ffffffff8a86b349 RBX: ffff88814d97e000 RCX: ffff88801d243c00 [ 823.018348][ T11] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 823.026359][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 823.034363][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 823.042386][ T11] R13: 000000010000cb3f R14: 000000010000cb40 R15: ffff88814d97e510 [ 823.050397][ T11] ? io_ring_exit_work+0x3b9/0x830 [ 823.055570][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 823.061438][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 823.066673][ T11] ? process_scheduled_works+0x975/0x1600 [ 823.072451][ T11] ? process_scheduled_works+0x975/0x1600 [ 823.078208][ T11] process_scheduled_works+0xa60/0x1600 [ 823.083823][ T11] ? worker_attach_to_pool+0x370/0x370 [ 823.089324][ T11] ? assign_work+0x3cc/0x5d0 [ 823.093963][ T11] worker_thread+0xa5e/0xfe0 [ 823.098618][ T11] kthread+0x2fa/0x390 [ 823.102739][ T11] ? pr_cont_work+0x550/0x550 [ 823.107453][ T11] ? kthread_blkcg+0xd0/0xd0 [ 823.112093][ T11] ret_from_fork+0x48/0x80 [ 823.116545][ T11] ? kthread_blkcg+0xd0/0xd0 [ 823.121177][ T11] ret_from_fork_asm+0x11/0x20 [ 823.126000][ T11] [ 823.129627][ T11] Kernel Offset: disabled [ 823.134041][ T11] Rebooting in 86400 seconds..