last executing test programs: 28m24.507081227s ago: executing program 2 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfffb, 0x7}, {0xfff2, 0x4}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r4) 28m24.055704448s ago: executing program 2 (id=101): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 28m23.038765332s ago: executing program 2 (id=109): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20000000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 28m21.936208399s ago: executing program 2 (id=114): r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1812471, 0x0) 28m21.448255041s ago: executing program 2 (id=115): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 28m20.996111472s ago: executing program 2 (id=118): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x92}, 0x9}, 0x80) 28m20.799126587s ago: executing program 32 (id=118): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x92}, 0x9}, 0x80) 27m48.936730188s ago: executing program 4 (id=262): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r0, 0xe, 0xffffffffffffffff) 27m48.110655758s ago: executing program 4 (id=271): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@noblock_validity}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@abort}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x0) fallocate(r1, 0x1, 0x1, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x180) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 27m47.283637068s ago: executing program 4 (id=269): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") 27m45.942184851s ago: executing program 4 (id=273): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)={[{@fat=@showexec}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 27m45.598936549s ago: executing program 4 (id=276): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x16b0, &(0x7f0000000040)={0x0, 0x81fa, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x1007721, 0x16, 0x0, 0x31) 27m44.876097107s ago: executing program 4 (id=279): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 27m44.265954411s ago: executing program 33 (id=279): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 13m36.173483983s ago: executing program 5 (id=5123): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c8c, 0x0, 0x0, 0x0, 0xff}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13m32.295146967s ago: executing program 5 (id=5130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 13m29.71054959s ago: executing program 5 (id=5137): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@noblock_validity}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 13m22.648827472s ago: executing program 5 (id=5147): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x2, 0xfffffffc, 0x0, 0x7, 0x4}) r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x6000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13m13.283919779s ago: executing program 5 (id=5153): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 13m4.775083785s ago: executing program 5 (id=5161): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 12m47.225314562s ago: executing program 34 (id=5161): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 12m14.306329811s ago: executing program 3 (id=5198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 12m11.243591715s ago: executing program 3 (id=5201): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020) 12m9.40047945s ago: executing program 3 (id=5204): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) fchdir(r1) r2 = fanotify_init(0x1a, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r2, 0x541, 0x1023, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 12m7.294955261s ago: executing program 3 (id=5208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 12m5.67933909s ago: executing program 3 (id=5211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 12m4.702982554s ago: executing program 3 (id=5212): syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) pause() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 12m1.250506208s ago: executing program 0 (id=5215): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 11m58.806779237s ago: executing program 0 (id=5218): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0xa5, 0x5, 0xfb, 0x9, 0x1, 0xff, 0x8, 0x84, 0xc, 0x7}, 0xe) sendto$inet6(r1, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x0) 11m57.335863863s ago: executing program 0 (id=5221): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001480)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x821) 11m55.117244317s ago: executing program 0 (id=5225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 11m53.988161264s ago: executing program 0 (id=5226): mkdirat(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 11m49.274313769s ago: executing program 35 (id=5212): syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) pause() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 11m38.695737205s ago: executing program 36 (id=5226): mkdirat(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 16.931800119s ago: executing program 1 (id=6354): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 15.727011178s ago: executing program 1 (id=6356): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000045) r4 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/snmp\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x4003f, 0x80) 14.392531251s ago: executing program 1 (id=6357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000740), 0x800000, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38) 12.192911414s ago: executing program 6 (id=6365): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000840)='./file0\x00', 0x1200000, &(0x7f0000000240)=ANY=[], 0xa1, 0x1fd, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 12.044789818s ago: executing program 7 (id=6367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdea}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x1, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0xe, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x4, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xfffffffe, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x402, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x7ef, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xff, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x4400004], [0x5, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x1, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfae, 0x1000, 0xfffffff6, 0x5, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0xf2ed, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0xfd, 0x10000, 0x7, 0x8003, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0x4, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10.986584133s ago: executing program 6 (id=6369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.622475802s ago: executing program 6 (id=6371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x0) 9.711903794s ago: executing program 8 (id=6372): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x1, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) 9.711602424s ago: executing program 7 (id=6373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x3}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) 8.694503879s ago: executing program 7 (id=6374): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xffff}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x2f87, 0xc000, 0x1, 0xa0002f7}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @empty, 0xff000000, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x0, 0xa, [0x15, 0x1d, 0x3, 0x3b, 0x5, 0x16, 0x26, 0xa, 0x2b, 0x20, 0x29, 0x3, 0x25, 0x15, 0x32, 0x24], 0x0, 0x100, 0x10001}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x16, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x0, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x5, 0x7, 0x2, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1b}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.667760159s ago: executing program 6 (id=6375): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x24004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 8.620061381s ago: executing program 8 (id=6376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 7.466659548s ago: executing program 8 (id=6377): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='1', 0x1) 7.38930861s ago: executing program 7 (id=6378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x28, 0x801, 0x0) r5 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x30000009}) 7.332040752s ago: executing program 6 (id=6379): r0 = inotify_init() r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1379, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 5.672954122s ago: executing program 7 (id=6380): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 5.38097827s ago: executing program 1 (id=6381): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r0, 0x0, 0x0) creat(0x0, 0xd931d3864d39dcdb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) open(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.910735511s ago: executing program 8 (id=6382): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x3, 0xff) clock_getres(0x6, 0x0) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9"], 0x18) 3.841529857s ago: executing program 8 (id=6383): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 3.841309607s ago: executing program 1 (id=6384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) 3.840539367s ago: executing program 6 (id=6385): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 2.541201998s ago: executing program 1 (id=6386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 2.311433034s ago: executing program 8 (id=6387): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 7 (id=6388): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) kernel console output (not intermixed with test programs): cc 0x0c38 length: 249 > 2 [ 1176.564211][T22002] vlan3: entered allmulticast mode [ 1176.570882][T22002] bond13: entered allmulticast mode [ 1176.604303][T22004] bond13: (slave ip6gre1): refused to change device type [ 1177.430753][T22010] netlink: 'syz.1.5266': attribute type 1 has an invalid length. [ 1177.584637][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.596183][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.819472][T21563] Bluetooth: hci1: command tx timeout [ 1177.877137][T22010] bond14: entered promiscuous mode [ 1177.889909][T22010] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1178.425465][T22013] veth19: entered promiscuous mode [ 1178.431865][T22013] veth19: entered allmulticast mode [ 1178.440667][T21563] Bluetooth: hci2: command tx timeout [ 1178.457204][T22013] bond14: (slave veth19): Enslaving as a backup interface with a down link [ 1178.832521][T22007] lo speed is unknown, defaulting to 1000 [ 1179.412364][ T9170] hsr_slave_0: left promiscuous mode [ 1179.441554][ T9170] hsr_slave_1: left promiscuous mode [ 1179.593645][ T9170] virt_wifi0: left promiscuous mode [ 1180.518745][T21563] Bluetooth: hci2: command tx timeout [ 1181.669637][ T9170] bond8 (unregistering): Released all slaves [ 1182.334617][ T9170] bond0 (unregistering): Released all slaves [ 1182.509556][ T9170] bond7 (unregistering): Released all slaves [ 1182.603297][T21563] Bluetooth: hci2: command tx timeout [ 1182.843155][ T9170] bond6 (unregistering): Released all slaves [ 1183.025226][ T9170] bond5 (unregistering): Released all slaves [ 1183.631215][ T9170] bond4 (unregistering): Released all slaves [ 1184.167457][ T9170] bond3 (unregistering): Released all slaves [ 1184.677331][T21563] Bluetooth: hci2: command tx timeout [ 1184.729171][ T9170] bond2 (unregistering): Released all slaves [ 1185.274319][ T9170] bond1 (unregistering): Released all slaves [ 1187.875060][ T9170]  (unregistering): Released all slaves [ 1188.284992][T21816] lo speed is unknown, defaulting to 1000 [ 1189.082258][T21972] chnl_net:caif_netlink_parms(): no params data found [ 1189.229412][T21979] chnl_net:caif_netlink_parms(): no params data found [ 1189.938486][ T9170] IPVS: stop unused estimator thread 0... [ 1190.592688][T21972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.639895][T21972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.669809][T21972] bridge_slave_0: entered allmulticast mode [ 1190.705575][T21972] bridge_slave_0: entered promiscuous mode [ 1190.746221][T21979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.798903][T21979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.825336][T21979] bridge_slave_0: entered allmulticast mode [ 1190.860651][T21979] bridge_slave_0: entered promiscuous mode [ 1190.899596][T21979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.935502][T21979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.944272][T21979] bridge_slave_1: entered allmulticast mode [ 1190.969211][T21979] bridge_slave_1: entered promiscuous mode [ 1190.979928][T21972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.005086][T21972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.020051][T21972] bridge_slave_1: entered allmulticast mode [ 1191.044852][T21972] bridge_slave_1: entered promiscuous mode [ 1191.255155][T22007] chnl_net:caif_netlink_parms(): no params data found [ 1191.350552][T21972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.478931][T21979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.523280][T21972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.666895][T21979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.380981][T21972] team0: Port device team_slave_0 added [ 1192.642362][T21972] team0: Port device team_slave_1 added [ 1192.840905][T21979] team0: Port device team_slave_0 added [ 1192.862689][T21979] team0: Port device team_slave_1 added [ 1192.941340][T21972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.949897][T21972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.980895][T21972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.387909][T21972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.413911][T21972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.523713][T21972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.735920][T21979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.759598][T21979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.790782][T21979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.851319][T21979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.873695][T21979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.925128][T21979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.019144][T22007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.072764][T22007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.104028][T22007] bridge_slave_0: entered allmulticast mode [ 1194.134157][T22007] bridge_slave_0: entered promiscuous mode [ 1194.167704][T22007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.196631][T22007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.244163][T22007] bridge_slave_1: entered allmulticast mode [ 1194.287075][T22007] bridge_slave_1: entered promiscuous mode [ 1194.458227][T21972] hsr_slave_0: entered promiscuous mode [ 1194.505528][T21972] hsr_slave_1: entered promiscuous mode [ 1195.195606][T22007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.262433][T22007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.678281][T21979] hsr_slave_0: entered promiscuous mode [ 1195.711879][T21979] hsr_slave_1: entered promiscuous mode [ 1195.755907][T21979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1195.765489][T21979] Cannot create hsr debugfs directory [ 1195.876422][T22007] team0: Port device team_slave_0 added [ 1196.300053][T22007] team0: Port device team_slave_1 added [ 1197.008576][T22007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.042511][T22007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.099903][T22007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.468060][T22007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.477332][T22007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.536004][T22007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.152658][T22007] hsr_slave_0: entered promiscuous mode [ 1198.174473][T22007] hsr_slave_1: entered promiscuous mode [ 1198.193363][T22007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1198.226352][T22007] Cannot create hsr debugfs directory [ 1201.828160][T21972] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1201.896460][T21972] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1202.444837][T21972] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1202.801741][T21972] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1203.995904][ T9170] hsr_slave_0: left promiscuous mode [ 1204.004941][ T9170] hsr_slave_1: left promiscuous mode [ 1204.016220][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.033612][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.046899][ T9170] bridge_slave_1: left allmulticast mode [ 1204.054020][ T9170] bridge_slave_1: left promiscuous mode [ 1204.061163][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.075399][ T9170] bridge_slave_0: left allmulticast mode [ 1204.082931][ T9170] bridge_slave_0: left promiscuous mode [ 1204.089830][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.134198][ T9170] hsr_slave_0: left promiscuous mode [ 1204.142225][ T9170] hsr_slave_1: left promiscuous mode [ 1204.149884][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.166860][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.176602][ T9170] bridge_slave_1: left allmulticast mode [ 1204.184024][ T9170] bridge_slave_1: left promiscuous mode [ 1204.191727][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.221211][ T9170] bridge_slave_0: left allmulticast mode [ 1204.228133][ T9170] bridge_slave_0: left promiscuous mode [ 1204.235501][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.278441][ T9170] hsr_slave_0: left promiscuous mode [ 1204.288730][ T9170] hsr_slave_1: left promiscuous mode [ 1204.297344][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.312703][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.324335][ T9170] bridge_slave_1: left allmulticast mode [ 1204.332135][ T9170] bridge_slave_1: left promiscuous mode [ 1204.339656][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.356868][ T9170] bridge_slave_0: left allmulticast mode [ 1204.363921][ T9170] bridge_slave_0: left promiscuous mode [ 1204.371525][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.353755][ T9170] team0 (unregistering): Port device team_slave_1 removed [ 1205.452130][ T9170] team0 (unregistering): Port device team_slave_0 removed [ 1205.546476][ T9170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.643205][ T9170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.298081][ T9170] bond0 (unregistering): Released all slaves [ 1207.407488][ T9170] team0 (unregistering): Port device team_slave_1 removed [ 1207.530885][ T9170] team0 (unregistering): Port device team_slave_0 removed [ 1207.642333][ T9170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.724917][ T9170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.248302][ T9170] bond0 (unregistering): Released all slaves [ 1209.140755][ T9170] team0 (unregistering): Port device team_slave_1 removed [ 1209.245225][ T9170] team0 (unregistering): Port device team_slave_0 removed [ 1209.345691][ T9170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.439744][ T9170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.950564][ T9170] bond0 (unregistering): Released all slaves [ 1211.203211][T21979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1211.260933][T21979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1211.324283][T21979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1211.504291][T21979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1212.105964][T21972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.356864][T21972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.460882][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.469469][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.717161][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.725783][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.452821][T22007] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1213.515749][T22007] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1213.634130][T22007] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1213.670036][T22007] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1214.689437][T21979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.996095][T21979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.204052][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.212680][ T9166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.382980][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.391570][ T9174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.895594][T22007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.290136][T22007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.440586][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.449181][ T9166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.477773][T21972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.573576][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.582231][ T9166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.187569][T21979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.579932][T21972] veth0_vlan: entered promiscuous mode [ 1219.712602][T21972] veth1_vlan: entered promiscuous mode [ 1219.810821][T22007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.143289][T21972] veth0_macvtap: entered promiscuous mode [ 1220.256238][T21972] veth1_macvtap: entered promiscuous mode [ 1220.655863][T21972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.868622][T21972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.998973][T21972] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.045780][T21972] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.108389][T21972] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.168989][T21972] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.640772][T21979] veth0_vlan: entered promiscuous mode [ 1222.953382][T21979] veth1_vlan: entered promiscuous mode [ 1223.391543][T22007] veth0_vlan: entered promiscuous mode [ 1223.528232][T21979] veth0_macvtap: entered promiscuous mode [ 1223.601050][T22007] veth1_vlan: entered promiscuous mode [ 1223.678824][T21979] veth1_macvtap: entered promiscuous mode [ 1224.188322][T22007] veth0_macvtap: entered promiscuous mode [ 1224.349154][T22007] veth1_macvtap: entered promiscuous mode [ 1224.608340][T22007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.749455][T22007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.858980][T22007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.216433][T22007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.323988][T22007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.412329][T22007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.565970][T22007] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.620544][T22007] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.672892][T22007] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.773261][T22007] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.330420][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1226.363795][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1226.384239][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1226.404873][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1226.428200][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1226.437364][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1227.187370][ T6790] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.787148][T21563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1227.809293][T21563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1227.817446][ T6790] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.852927][T21563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1227.879130][T21563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1227.940133][T21563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1227.962502][T21563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1228.239730][ T6790] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.504295][T21563] Bluetooth: hci0: command tx timeout [ 1228.649473][ T6790] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.268283][T21031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.296969][T21031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.912830][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.936946][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.102567][T21563] Bluetooth: hci1: command tx timeout [ 1230.581656][T21563] Bluetooth: hci0: command tx timeout [ 1231.605858][T22179] chnl_net:caif_netlink_parms(): no params data found [ 1232.186622][T21563] Bluetooth: hci1: command tx timeout [ 1232.661582][T21563] Bluetooth: hci0: command tx timeout [ 1239.558572][T21563] Bluetooth: hci1: command tx timeout [ 1239.564804][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.565059][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.581765][ T5791] Bluetooth: hci0: command tx timeout [ 1240.029220][T22183] chnl_net:caif_netlink_parms(): no params data found [ 1240.960813][ T6790] hsr_slave_0: left promiscuous mode [ 1241.005071][ T6790] hsr_slave_1: left promiscuous mode [ 1241.046380][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.072939][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.151337][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.198732][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.251077][ T6790] bridge_slave_1: left allmulticast mode [ 1241.298741][ T6790] bridge_slave_1: left promiscuous mode [ 1241.305809][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.431318][ T6790] bridge_slave_0: left allmulticast mode [ 1241.486736][ T6790] bridge_slave_0: left promiscuous mode [ 1241.548940][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.618559][T21563] Bluetooth: hci1: command tx timeout [ 1241.999381][ T6790] veth1_macvtap: left promiscuous mode [ 1242.041250][ T6790] veth0_macvtap: left promiscuous mode [ 1242.078825][ T6790] veth1_vlan: left promiscuous mode [ 1242.085550][ T6790] veth0_vlan: left promiscuous mode [ 1246.419558][ T6790] team0 (unregistering): Port device team_slave_1 removed [ 1246.581348][ T6790] team0 (unregistering): Port device team_slave_0 removed [ 1246.750071][ T6790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.913456][ T6790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.247087][ T6790] bond0 (unregistering): Released all slaves [ 1248.789670][T22243] tipc: Enabling of bearer rejected, failed to enable media [ 1248.825079][T22179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.856921][T22179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.926436][T22179] bridge_slave_0: entered allmulticast mode [ 1248.940355][T22179] bridge_slave_0: entered promiscuous mode [ 1248.958996][T22179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.967809][T22179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.977930][T22179] bridge_slave_1: entered allmulticast mode [ 1249.011770][T22179] bridge_slave_1: entered promiscuous mode [ 1250.149520][T22179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.880359][T22179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.281742][T22183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.362068][T22183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.425658][T22183] bridge_slave_0: entered allmulticast mode [ 1251.511188][T22183] bridge_slave_0: entered promiscuous mode [ 1251.889197][T22183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.979280][T22183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.057698][T22183] bridge_slave_1: entered allmulticast mode [ 1252.142601][T22183] bridge_slave_1: entered promiscuous mode [ 1252.278685][T22179] team0: Port device team_slave_0 added [ 1252.370037][T22179] team0: Port device team_slave_1 added [ 1252.809795][T22183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.843310][T22179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.913379][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.028296][T22179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.156682][T22179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.204410][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.318537][T22179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.457985][T22183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.625423][T22281] loop8: detected capacity change from 0 to 512 [ 1253.924213][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5282'. [ 1254.194547][T22164] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1254.321122][T22283] netlink: 'syz.1.5282': attribute type 5 has an invalid length. [ 1254.356884][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5282'. [ 1254.434337][T22164] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.452906][T22183] team0: Port device team_slave_0 added [ 1254.484623][T22164] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1254.560065][T22164] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1254.563474][T22183] team0: Port device team_slave_1 added [ 1254.620863][T22164] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.661553][T22164] usb 9-1: Product: syz [ 1254.673798][T22164] usb 9-1: Manufacturer: syz [ 1254.680622][T22164] usb 9-1: SerialNumber: syz [ 1254.834708][T22164] usb-storage 9-1:1.0: USB Mass Storage device detected [ 1254.897675][T22164] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1255.037486][T22164] scsi host1: usb-storage 9-1:1.0 [ 1255.221812][T22179] hsr_slave_0: entered promiscuous mode [ 1255.283525][T22179] hsr_slave_1: entered promiscuous mode [ 1255.895731][T22183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.933391][T22183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.120814][T22183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.135127][T11393] usb 9-1: USB disconnect, device number 2 [ 1256.856535][T22293] bond8: option mode: unable to set because the bond device is up [ 1256.888021][T22183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.933777][T22183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.103117][T22183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.376022][T22295] bond8: (slave vlan4): Enslaving as an active interface with a down link [ 1259.992585][T22309] loop8: detected capacity change from 0 to 1024 [ 1260.170367][T22183] hsr_slave_0: entered promiscuous mode [ 1260.223570][T22183] hsr_slave_1: entered promiscuous mode [ 1260.262027][T22183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1260.271274][T22183] Cannot create hsr debugfs directory [ 1260.361416][T22309] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1260.481929][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1260.481994][ T28] audit: type=1804 audit(1786401998.086:1509): pid=22309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.5288" name="/newroot/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop8" ino=2 res=1 errno=0 [ 1260.665984][T22309] hfsplus: bad catalog file entry [ 1261.158276][ T9166] hfsplus: b-tree write err: -5, ino 3 [ 1261.184835][ T9166] hfsplus: bad catalog file entry [ 1266.550255][T22179] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1266.610924][T22179] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1267.101289][T22179] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1267.543532][ T6790] hsr_slave_0: left promiscuous mode [ 1267.597031][T22341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.623791][ T6790] hsr_slave_1: left promiscuous mode [ 1267.692817][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.776945][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.812520][ T6790] bridge_slave_1: left allmulticast mode [ 1267.838751][ T6790] bridge_slave_1: left promiscuous mode [ 1267.875084][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.918201][ T6790] bridge_slave_0: left allmulticast mode [ 1267.925660][ T6790] bridge_slave_0: left promiscuous mode [ 1267.934912][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.288516][ T6790] veth1_macvtap: left promiscuous mode [ 1268.309704][ T6790] veth0_macvtap: left promiscuous mode [ 1268.316619][ T6790] veth1_vlan: left promiscuous mode [ 1268.370136][ T6790] veth0_vlan: left promiscuous mode [ 1274.181029][ T6790] team0 (unregistering): Port device team_slave_1 removed [ 1274.335063][ T6790] team0 (unregistering): Port device team_slave_0 removed [ 1274.498583][ T6790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.634512][ T6790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.866141][ T6790] bond0 (unregistering): Released all slaves [ 1276.123721][T22179] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1276.391679][T22362] netlink: 'syz.1.5298': attribute type 9 has an invalid length. [ 1281.645553][T22179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.994012][T22183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1282.162622][T22183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1282.288251][T22179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.307907][T22183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1282.480159][T22183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1283.946467][T22183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.276580][T22183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.521399][T20406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.530358][T20406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.916921][T20406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.925828][T20406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.157544][T21810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1287.214859][T21810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1287.241496][T21810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1287.285941][T21810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1287.317231][T21810] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1287.332169][T21810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1289.284965][T21810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1289.320605][T21810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1289.347955][T21810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1289.385465][T21810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1289.424217][T21810] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1289.437487][T21810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1289.447414][T21810] Bluetooth: hci0: command tx timeout [ 1291.530964][T21563] Bluetooth: hci0: command tx timeout [ 1291.606828][T21563] Bluetooth: hci1: command tx timeout [ 1292.197471][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5309'. [ 1292.229371][T22411] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.240460][T22411] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.251344][T22411] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.262205][T22411] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.467659][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5309'. [ 1293.382135][T22395] chnl_net:caif_netlink_parms(): no params data found [ 1293.602138][T21563] Bluetooth: hci0: command tx timeout [ 1293.682368][T21563] Bluetooth: hci1: command tx timeout [ 1295.568175][T22402] chnl_net:caif_netlink_parms(): no params data found [ 1295.681256][T21563] Bluetooth: hci0: command tx timeout [ 1295.761122][T21563] Bluetooth: hci1: command tx timeout [ 1297.840343][T21563] Bluetooth: hci1: command tx timeout [ 1300.422125][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.431234][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.262956][ T69] hsr_slave_0: left promiscuous mode [ 1302.271372][ T69] hsr_slave_1: left promiscuous mode [ 1302.282735][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.292287][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.312419][ T69] bridge_slave_1: left allmulticast mode [ 1302.320162][ T69] bridge_slave_1: left promiscuous mode [ 1302.334457][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.364467][ T69] bridge_slave_0: left allmulticast mode [ 1302.416251][ T69] bridge_slave_0: left promiscuous mode [ 1302.453230][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.485113][T21563] Bluetooth: hci2: command 0x0406 tx timeout [ 1304.882521][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1305.304037][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1305.529842][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.829038][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.679143][ T69] bond0 (unregistering): Released all slaves [ 1308.919209][T22402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.928431][T22402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.938106][T22402] bridge_slave_0: entered allmulticast mode [ 1308.999239][T22402] bridge_slave_0: entered promiscuous mode [ 1309.054897][T22402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.078156][T22402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.137455][T22402] bridge_slave_1: entered allmulticast mode [ 1309.181812][T22402] bridge_slave_1: entered promiscuous mode [ 1309.543427][T22395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.575932][T22395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.585258][T22395] bridge_slave_0: entered allmulticast mode [ 1309.601744][T22395] bridge_slave_0: entered promiscuous mode [ 1309.727113][T22395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.751648][T22395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.777985][T22395] bridge_slave_1: entered allmulticast mode [ 1309.821394][T22395] bridge_slave_1: entered promiscuous mode [ 1310.168961][T22402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.364406][T22402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.502674][T22395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.640594][T22395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.875400][T22402] team0: Port device team_slave_0 added [ 1311.054982][T22402] team0: Port device team_slave_1 added [ 1311.161482][T22395] team0: Port device team_slave_0 added [ 1311.294186][T22402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.302776][T22402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.334389][T22402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.377074][T22395] team0: Port device team_slave_1 added [ 1311.590134][T22402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.626715][T22402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.729030][T22402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.929517][T22395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.938203][T22395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.970587][T22395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.063690][T22395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.075263][T22395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.176049][T22395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.193042][T22402] hsr_slave_0: entered promiscuous mode [ 1314.242736][T22402] hsr_slave_1: entered promiscuous mode [ 1314.841086][T22395] hsr_slave_0: entered promiscuous mode [ 1314.892837][T22395] hsr_slave_1: entered promiscuous mode [ 1314.914232][T22395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.944502][T22395] Cannot create hsr debugfs directory [ 1322.587824][T22518] netlink: 'syz.8.5338': attribute type 1 has an invalid length. [ 1322.948932][T22521] veth3: entered allmulticast mode [ 1323.012125][T22521] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1323.022668][T22520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5339'. [ 1323.290387][T22524] bond1: (slave veth0_to_bond): making interface the new active one [ 1323.380152][T22524] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1325.186498][ T69] hsr_slave_0: left promiscuous mode [ 1325.242873][ T69] hsr_slave_1: left promiscuous mode [ 1325.316613][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.385246][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.425675][ T69] bridge_slave_1: left allmulticast mode [ 1325.444015][ T69] bridge_slave_1: left promiscuous mode [ 1325.451011][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.546778][ T69] bridge_slave_0: left allmulticast mode [ 1325.575900][ T69] bridge_slave_0: left promiscuous mode [ 1325.652927][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.603730][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1327.854476][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1327.995268][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.135336][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.592527][ T69] bond0 (unregistering): Released all slaves [ 1330.111951][T22542] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5345'. [ 1330.123508][T22542] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1330.419140][T22402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1330.538121][T22402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1331.073343][T22402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1331.199131][T22402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1332.369501][T22560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5350'. [ 1332.787346][T22402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.517856][T22402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.597296][T22395] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1333.704192][T22395] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1333.823175][T22395] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1333.884394][T22395] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1333.965212][T16401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.973816][T16401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.948378][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.957048][ T9166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.540294][T22395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.771086][T22395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.077776][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.086660][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.301328][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.309912][ T9174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.684423][T22395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1345.714747][T22402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.117768][T21563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1349.169793][T21563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1349.193602][T21563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1349.226535][T21563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1349.251655][T21563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1349.262830][T21563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1351.435411][T21810] Bluetooth: hci0: command tx timeout [ 1351.627509][T21563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1351.659023][T21563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1351.701453][T21563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1351.723196][T21563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1351.750195][T21563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1351.762942][T21563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1352.922917][ T28] audit: type=1326 audit(1786402090.563:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1353.034441][ T28] audit: type=1326 audit(1786402090.563:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1353.221731][ T28] audit: type=1326 audit(1786402090.603:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1353.310575][ T28] audit: type=1326 audit(1786402090.603:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1353.504606][T21810] Bluetooth: hci0: command tx timeout [ 1353.519451][ T28] audit: type=1326 audit(1786402090.603:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1353.551601][ T28] audit: type=1326 audit(1786402090.603:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1353.697395][ T28] audit: type=1326 audit(1786402090.623:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1353.949745][T21810] Bluetooth: hci1: command tx timeout [ 1354.032892][ T28] audit: type=1326 audit(1786402090.623:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1354.118413][T22647] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5364'. [ 1354.258377][ T28] audit: type=1326 audit(1786402090.623:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22635 comm="syz.8.5362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9bd3f9e0d9 code=0x7ffc0000 [ 1355.474702][T22658] loop8: detected capacity change from 0 to 2048 [ 1355.531447][T22658] EXT4-fs: Ignoring removed i_version option [ 1355.583501][T21810] Bluetooth: hci0: command tx timeout [ 1355.750930][T22623] chnl_net:caif_netlink_parms(): no params data found [ 1355.805959][T22658] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.821669][T22658] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.994011][T21810] Bluetooth: hci1: command tx timeout [ 1356.437856][T22664] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.670121][T21810] Bluetooth: hci0: command tx timeout [ 1358.063268][T21810] Bluetooth: hci1: command tx timeout [ 1358.575113][T22631] chnl_net:caif_netlink_parms(): no params data found [ 1359.151267][T22623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.173060][T22623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.250271][T22623] bridge_slave_0: entered allmulticast mode [ 1359.287192][T22623] bridge_slave_0: entered promiscuous mode [ 1359.554481][T22623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.613719][T22623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.622849][T22623] bridge_slave_1: entered allmulticast mode [ 1359.634385][T22623] bridge_slave_1: entered promiscuous mode [ 1360.183273][T21810] Bluetooth: hci1: command tx timeout [ 1360.768820][T22623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.814976][T22623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.907432][ T6812] hsr_slave_0: left promiscuous mode [ 1360.956506][ T6812] hsr_slave_1: left promiscuous mode [ 1361.007898][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.066607][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.107263][ T6812] bridge_slave_1: left allmulticast mode [ 1361.141860][ T6812] bridge_slave_1: left promiscuous mode [ 1361.148948][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.239085][ T6812] bridge_slave_0: left allmulticast mode [ 1361.281635][ T6812] bridge_slave_0: left promiscuous mode [ 1361.288734][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.848246][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.862859][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.633005][T22702] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[22706] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[22702] [ 1373.085737][ T6812] team0 (unregistering): Port device team_slave_1 removed [ 1373.380550][ T6812] team0 (unregistering): Port device team_slave_0 removed [ 1373.685312][ T6812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.092883][ T6812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.550783][T22719] netlink: 'syz.8.5378': attribute type 2 has an invalid length. [ 1375.245036][ T6812] bond0 (unregistering): Released all slaves [ 1375.435665][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5379'. [ 1375.932955][T22712] syz_tun: entered allmulticast mode [ 1375.976297][T22712] syz_tun: left allmulticast mode [ 1376.047323][T22631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.097876][T22631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.128109][T22631] bridge_slave_0: entered allmulticast mode [ 1376.191046][T22631] bridge_slave_0: entered promiscuous mode [ 1376.274127][T22631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.314158][T22631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.328577][T22631] bridge_slave_1: entered allmulticast mode [ 1376.340524][T22631] bridge_slave_1: entered promiscuous mode [ 1379.275473][T22623] team0: Port device team_slave_0 added [ 1379.410942][T22623] team0: Port device team_slave_1 added [ 1379.647429][T22631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.708165][T22631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.059544][T22631] team0: Port device team_slave_0 added [ 1380.421771][T22623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.523914][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.745502][T22623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.802316][T22631] team0: Port device team_slave_1 added [ 1381.192876][T22623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.306096][T22623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.493743][T22623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.968238][T22631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.003883][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.040854][T22631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.056944][T22738] netlink: 'syz.1.5385': attribute type 11 has an invalid length. [ 1382.094620][T22631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.144250][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.270143][T22631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.220049][T22741] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 1383.275539][T22741] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 1383.723633][T22623] hsr_slave_0: entered promiscuous mode [ 1383.818965][T22623] hsr_slave_1: entered promiscuous mode [ 1383.875869][T22623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1383.945352][T22623] Cannot create hsr debugfs directory [ 1384.482062][T22631] hsr_slave_0: entered promiscuous mode [ 1384.513573][T22631] hsr_slave_1: entered promiscuous mode [ 1384.548343][T22631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.575887][T22631] Cannot create hsr debugfs directory [ 1389.766873][T22784] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1393.336503][T22623] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1393.449103][T22623] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1393.884547][T22623] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1394.325102][T22623] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1395.690078][ T6812] tipc: Disabling bearer [ 1399.601974][ T6812] tipc: Disabling bearer [ 1399.608795][ T6812] tipc: Left network mode [ 1401.123111][T22820] tipc: Failed to remove unknown binding: 66,0,0/0:76728475/76728477 [ 1401.191227][T22820] tipc: Failed to remove unknown binding: 66,0,0/0:76728475/76728476 [ 1401.203543][ T6812] bond13: (slave ip6gretap0): Releasing active interface [ 1401.318342][T22820] tipc: Failed to remove unknown binding: 66,0,0/0:76728475/76728477 [ 1401.404100][T22820] tipc: Failed to remove unknown binding: 66,0,0/0:76728475/76728476 [ 1409.509928][ T6812] bond12: (slave vti0): Releasing backup interface [ 1409.517845][ T6812] vti0 (unregistering): left allmulticast mode [ 1409.683415][ T6812] bond12: Destroying bond [ 1409.796922][ T6812] bond12 (unregistering): Released all slaves [ 1410.379302][T21563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1410.410332][T21563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1410.425427][T21563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1410.443800][T21563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1410.458677][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1410.468795][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1411.351924][T22855] syzkaller0: entered promiscuous mode [ 1411.412760][T22855] syzkaller0: entered allmulticast mode [ 1412.048522][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.462254][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.607645][T21810] Bluetooth: hci4: command tx timeout [ 1412.789981][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1412.825334][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1412.865402][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1412.915748][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1412.917594][ T6812] batman_adv: batadv0: Interface deactivated: gretap2 [ 1412.962333][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1412.971821][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1413.087579][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.794317][ T6812] batman_adv: batadv0: Removing interface: gretap2 [ 1414.128003][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.708002][ T5791] Bluetooth: hci4: command tx timeout [ 1414.853646][T22875] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5411'. [ 1415.087005][ T5791] Bluetooth: hci0: command tx timeout [ 1415.186223][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.504954][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.207062][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.287437][ T6812] IPVS: stopping backup sync thread 10247 ... [ 1416.445714][T22895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.605233][T22895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.756873][T22895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.777910][ T5791] Bluetooth: hci4: command tx timeout [ 1417.186237][ T5791] Bluetooth: hci0: command tx timeout [ 1417.247326][T22017] net_ratelimit: 3 callbacks suppressed [ 1417.247363][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.289418][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.390235][ T6812] veth1: left allmulticast mode [ 1418.439970][ T6812] veth1: left promiscuous mode [ 1418.498409][ T6812] bridge0: port 2(veth1) entered disabled state [ 1418.526709][T11393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.541069][T16401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.552490][T21815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.581186][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.851037][ T5791] Bluetooth: hci4: command tx timeout [ 1418.945878][ T6812] hsr_slave_0: left promiscuous mode [ 1419.036985][ T6812] hsr_slave_1: left promiscuous mode [ 1419.146692][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.189939][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.245673][ T5791] Bluetooth: hci0: command tx timeout [ 1419.260629][ T6812] bridge_slave_1: left allmulticast mode [ 1419.284742][ T6812] bridge_slave_1: left promiscuous mode [ 1419.306202][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.325889][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.339232][ T6812] bridge_slave_0: left allmulticast mode [ 1419.346406][ T6812] bridge_slave_0: left promiscuous mode [ 1419.353412][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.369427][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.696606][T21816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.896057][ T6812] bond14 (unregistering): Released all slaves [ 1421.341384][ T5791] Bluetooth: hci0: command tx timeout [ 1421.411831][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.680307][ T6812] bond13 (unregistering): Released all slaves [ 1422.473584][T21408] net_ratelimit: 1 callbacks suppressed [ 1422.473621][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.752516][ T6812] bond11 (unregistering): Released all slaves [ 1423.258002][ T6812] bond10 (unregistering): Released all slaves [ 1423.265659][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.273237][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.389473][ T6812] bond9 (unregistering): Released all slaves [ 1423.484993][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.840483][ T6812] bond8 (unregistering): Released all slaves [ 1423.885979][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.897014][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.921712][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.337522][ T6812] bond7 (unregistering): Released all slaves [ 1424.537073][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.798885][ T6812] bond6 (unregistering): Released all slaves [ 1424.859289][ T6812] bond5 (unregistering): Released all slaves [ 1425.418962][ T6812] bond4 (unregistering): Released all slaves [ 1425.564483][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.590225][ T6812] bond3 (unregistering): Released all slaves [ 1426.226137][ T6812] bond2 (unregistering): Released all slaves [ 1426.629287][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.736157][ T6812] bond1 (unregistering): Released all slaves [ 1427.014386][T21816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.671094][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.652121][ T6812] bond0 (unregistering): Released all slaves [ 1428.683429][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.033798][ T6812] team0 (unregistering): Port device team_slave_1 removed [ 1429.117777][ T6812] team0 (unregistering): Port device team_slave_0 removed [ 1429.203051][ T6812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.281851][ T6812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.653246][ T6790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.668244][T21816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.680433][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.731213][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.866157][ T6812] bond0 (unregistering): Released all slaves [ 1430.102692][T22916] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 1430.118496][T22916] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1430.293082][T21815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.679627][T22950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.767251][T22017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.809697][T22866] chnl_net:caif_netlink_parms(): no params data found [ 1430.917695][T22857] chnl_net:caif_netlink_parms(): no params data found [ 1431.191314][T22961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1431.407102][T22866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.430053][T22866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.469012][T22866] bridge_slave_0: entered allmulticast mode [ 1431.500022][T22866] bridge_slave_0: entered promiscuous mode [ 1431.577620][T22866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.602464][T22866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.637228][T22866] bridge_slave_1: entered allmulticast mode [ 1431.671328][T22866] bridge_slave_1: entered promiscuous mode [ 1431.739774][T22857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.763369][T22857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.770792][T22857] bridge_slave_0: entered allmulticast mode [ 1431.788788][T22857] bridge_slave_0: entered promiscuous mode [ 1431.874155][T22866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.930065][T22857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.942164][T22857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.963088][T22857] bridge_slave_1: entered allmulticast mode [ 1431.991370][T22857] bridge_slave_1: entered promiscuous mode [ 1432.044369][T22866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.237475][T22866] team0: Port device team_slave_0 added [ 1432.298255][T22866] team0: Port device team_slave_1 added [ 1432.403216][T22857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.474641][T22857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.608752][ T6812] IPVS: stop unused estimator thread 0... [ 1432.615261][T22857] team0: Port device team_slave_0 added [ 1432.635331][T22857] team0: Port device team_slave_1 added [ 1432.642891][T22866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.649920][T22866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.723153][T22866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.749252][T22866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.762071][T21815] net_ratelimit: 1 callbacks suppressed [ 1432.762087][T21815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.770539][T22866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.813915][T22866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.842396][T11384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.883012][T22857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.890150][T22857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.941796][T22857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.964321][T22857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.971342][T22857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.036826][T22857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1433.218141][T22866] hsr_slave_0: entered promiscuous mode [ 1433.233344][T22866] hsr_slave_1: entered promiscuous mode [ 1433.297679][T22857] hsr_slave_0: entered promiscuous mode [ 1433.305012][T22857] hsr_slave_1: entered promiscuous mode [ 1433.318549][T22857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1433.326686][T22857] Cannot create hsr debugfs directory [ 1433.891093][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.941279][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.230801][ T28] audit: type=1326 audit(1786402172.856:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23032 comm="syz.1.5434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4af919e0d9 code=0x0 [ 1435.963466][T21816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.248061][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.442069][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.949411][T21408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.004495][T22164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.286217][T23080] netlink: 'syz.8.5439': attribute type 4 has an invalid length. [ 1439.721072][T22866] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1440.029097][T22866] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1440.077445][T22866] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1440.089565][T22866] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1440.564651][ T6812] hsr_slave_0: left promiscuous mode [ 1440.575252][ T6812] hsr_slave_1: left promiscuous mode [ 1440.585745][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.600770][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.617062][ T6812] bridge_slave_1: left allmulticast mode [ 1440.623657][ T6812] bridge_slave_1: left promiscuous mode [ 1440.629484][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.643729][ T6812] bridge_slave_0: left allmulticast mode [ 1440.649742][ T6812] bridge_slave_0: left promiscuous mode [ 1440.655591][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.683316][ T6812] hsr_slave_0: left promiscuous mode [ 1440.689325][ T6812] hsr_slave_1: left promiscuous mode [ 1440.697962][T23110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5445'. [ 1440.707479][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.716772][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.726130][ T6812] bridge_slave_1: left allmulticast mode [ 1440.733176][ T6812] bridge_slave_1: left promiscuous mode [ 1440.739078][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.749030][ T6812] bridge_slave_0: left allmulticast mode [ 1440.755208][ T6812] bridge_slave_0: left promiscuous mode [ 1440.761567][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.093212][ T6812] team0 (unregistering): Port device team_slave_1 removed [ 1441.143716][ T6812] team0 (unregistering): Port device team_slave_0 removed [ 1441.199041][ T6812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.260088][ T6812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.495171][ T6812] bond0 (unregistering): Released all slaves [ 1441.952989][ T6812] team0 (unregistering): Port device team_slave_1 removed [ 1442.067945][ T6812] team0 (unregistering): Port device team_slave_0 removed [ 1442.144124][ T6812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.247595][ T6812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.494144][ T6812] bond0 (unregistering): Released all slaves [ 1442.726026][T23120] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5448'. [ 1442.802465][T22866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.875586][T23121] bond2: entered promiscuous mode [ 1442.887336][T23121] bond2: entered allmulticast mode [ 1442.952183][T22866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.977700][T22857] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1443.013911][T22857] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1443.090303][T23124] bond12: (slave veth0_to_bond): Releasing active interface [ 1443.137273][T23124] bond14: (slave veth19): Releasing backup interface [ 1443.158469][T23124] bond8: (slave vlan4): Releasing active interface [ 1443.299895][T22857] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1443.321964][T22857] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1443.336865][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.344176][ T9166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.357553][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.364805][ T9166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.681318][T22857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.698303][ T28] audit: type=1800 audit(1786402182.349:1520): pid=23126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5450" name="bus" dev="ramfs" ino=61564 res=0 errno=0 [ 1444.765071][T22857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.819817][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.827047][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.906818][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.914101][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.187495][T22866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.397983][T22857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.940102][T22866] veth0_vlan: entered promiscuous mode [ 1447.002761][T22866] veth1_vlan: entered promiscuous mode [ 1447.166670][T22866] veth0_macvtap: entered promiscuous mode [ 1447.223971][T22866] veth1_macvtap: entered promiscuous mode [ 1447.330841][T22866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.365351][T22866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.409696][T22866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1447.472623][T22866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1447.488163][T22866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.509649][T22866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1447.544144][T22866] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.568006][T22866] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.576790][T22866] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.588394][T22866] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.604519][T22857] veth0_vlan: entered promiscuous mode [ 1447.666780][T22857] veth1_vlan: entered promiscuous mode [ 1447.813149][T22857] veth0_macvtap: entered promiscuous mode [ 1447.843680][T22857] veth1_macvtap: entered promiscuous mode [ 1447.891161][ T6790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.917547][ T6790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.962904][T22857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.977258][T22857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.988211][T22857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.999469][T22857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.011665][T22857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.033591][ T9170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.058529][ T9170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.063384][T22857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.077307][T22857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.089046][T22857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.099988][T22857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.119981][T22857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.162829][T22857] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.177374][T22857] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.186912][T22857] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.200574][T22857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.511030][ T9166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.555277][ T9166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.799797][ T6812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.926272][ T6812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.844612][T23203] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1454.425141][T23225] netlink: 'syz.8.5468': attribute type 1 has an invalid length. [ 1454.712448][T23225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1454.751426][T23230] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5468'. [ 1455.356003][T23230] bond3: entered promiscuous mode [ 1455.397206][T23230] bond3: entered allmulticast mode [ 1455.639593][T23231] bond3: (slave dummy0): making interface the new active one [ 1455.669579][T23231] dummy0: entered promiscuous mode [ 1455.675042][T23231] dummy0: entered allmulticast mode [ 1455.703225][T23231] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1456.560478][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1456.614850][T23268] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1457.937970][T23301] tipc: Started in network mode [ 1457.953560][T23301] tipc: Node identity 4, cluster identity 4711 [ 1457.961132][T23301] tipc: Node number set to 4 [ 1458.425309][T23307] tipc: Failed to remove unknown binding: 66,0,0/0:3412855674/3412855676 [ 1458.453262][T23307] tipc: Failed to remove unknown binding: 66,0,0/0:3412855674/3412855675 [ 1458.489732][T23308] tipc: Failed to remove unknown binding: 66,0,0/0:3412855674/3412855676 [ 1458.513571][T23308] tipc: Failed to remove unknown binding: 66,0,0/0:3412855674/3412855675 [ 1459.168043][T23329] netlink: zone id is out of range [ 1459.174375][T23329] netlink: zone id is out of range [ 1459.194514][T23329] netlink: zone id is out of range [ 1459.200562][T23329] netlink: zone id is out of range [ 1459.209150][T23329] netlink: zone id is out of range [ 1459.215359][T23329] netlink: zone id is out of range [ 1459.220685][T23329] netlink: zone id is out of range [ 1459.226574][T23329] netlink: zone id is out of range [ 1459.231898][T23329] netlink: zone id is out of range [ 1459.237930][T23329] netlink: zone id is out of range [ 1459.881832][T23346] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1459.954709][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 1460.047246][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 1460.056795][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 1460.067484][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 1461.915529][T23382] xt_CONNSECMARK: invalid mode: 0 [ 1462.975446][T23397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5507'. [ 1462.995742][T23397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5507'. [ 1463.036200][T23397] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.045809][T23397] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.054772][T23397] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.063480][T23397] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.133434][T23401] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.202635][T23401] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.242771][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5505'. [ 1463.503476][T23411] loop7: detected capacity change from 0 to 128 [ 1463.970252][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5512'. [ 1464.873813][T21815] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1465.086400][T21815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.107961][T21815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.126590][T21815] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1465.172769][T21815] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1465.193866][T21815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.231297][T21815] usb 7-1: config 0 descriptor?? [ 1465.444724][T23462] netlink: 'syz.8.5521': attribute type 8 has an invalid length. [ 1465.576682][T23439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1465.795885][T21815] usbhid 7-1:0.0: can't add hid device: -71 [ 1465.820418][T21815] usbhid: probe of 7-1:0.0 failed with error -71 [ 1465.893870][T21815] usb 7-1: USB disconnect, device number 2 [ 1465.921702][T23474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5525'. [ 1465.991902][T23474] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5525'. [ 1469.603983][T23533] loop7: detected capacity change from 0 to 512 [ 1469.623588][T23533] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1469.663348][T23533] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.5540: inode has both inline data and extents flags [ 1469.678638][T23533] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.5540: couldn't read orphan inode 15 (err -117) [ 1469.715844][T23533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.128682][T23544] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8266] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[23544] [ 1470.237483][T23533] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1471.911086][T22857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.350884][T11393] IPVS: starting estimator thread 0... [ 1472.463977][T23594] IPVS: using max 18 ests per chain, 43200 per kthread [ 1473.888690][T23612] netlink: 'syz.8.5555': attribute type 1 has an invalid length. [ 1474.055034][T23612] bond4: entered promiscuous mode [ 1474.060894][T23612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1474.223557][T23621] bond4: (slave bridge2): making interface the new active one [ 1474.287671][T23621] bridge2: entered promiscuous mode [ 1474.332837][T23621] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1474.404410][T23615] vlan2: entered allmulticast mode [ 1474.472286][T23615] bond4: entered allmulticast mode [ 1474.481980][T23615] bridge2: entered allmulticast mode [ 1474.684527][T23637] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5562'. [ 1474.977712][T23645] IPVS: Error joining to the multicast group [ 1475.144659][T23651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5567'. [ 1475.201188][T23651] tipc: Enabling of bearer rejected, already enabled [ 1475.919798][T23663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1476.090880][T23665] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1476.166644][T23668] futex_wake_op: syz.6.5571 tries to shift op by 144; fix this program [ 1477.671249][T23688] loop6: detected capacity change from 0 to 256 [ 1477.777580][T23688] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1477.974386][ T28] audit: type=1800 audit(1786402214.995:1521): pid=23688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5575" name="file1" dev="loop6" ino=1048679 res=0 errno=0 [ 1479.028266][T23716] loop6: detected capacity change from 0 to 128 [ 1479.171460][T23716] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1479.304699][T23716] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.732792][T23716] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1480.646483][T23739] netlink: 'syz.7.5586': attribute type 1 has an invalid length. [ 1480.749236][T23739] bond1: entered promiscuous mode [ 1480.779420][T23739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1480.791901][T23744] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5586'. [ 1480.874658][T23744] bond1: entered allmulticast mode [ 1481.192559][T23744] bond1: (slave bridge1): making interface the new active one [ 1481.210037][T23744] bridge1: entered promiscuous mode [ 1481.218210][T23744] bridge1: entered allmulticast mode [ 1481.232073][T23744] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1481.260568][T23759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.268218][T23759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.339371][T23759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.347137][T23759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.356800][T23759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.364066][T23759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.425640][ T28] audit: type=1326 audit(1786402218.485:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23765 comm="syz.6.5589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x0 [ 1481.547437][T23759] team0: Port device bridge0 added [ 1481.675178][T23763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.686170][T23763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.751323][T23763] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 1481.772581][T23763] bond2: left promiscuous mode [ 1481.781440][T23763] bond3: left promiscuous mode [ 1481.789228][T23763] dummy0: left promiscuous mode [ 1481.799209][T23763] bond4: left promiscuous mode [ 1481.806035][T23763] bridge2: left promiscuous mode [ 1483.521250][T23806] gretap1: entered promiscuous mode [ 1483.798856][T23814] syzkaller0: entered promiscuous mode [ 1483.824140][T23814] syzkaller0: entered allmulticast mode [ 1484.681162][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.687953][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.301465][T23839] futex_wake_op: syz.7.5604 tries to shift op by 144; fix this program [ 1486.224297][T23870] netlink: 'syz.1.5615': attribute type 5 has an invalid length. [ 1488.477047][T23902] futex_wake_op: syz.8.5623 tries to shift op by 144; fix this program [ 1492.262466][T23958] futex_wake_op: syz.1.5636 tries to shift op by 144; fix this program [ 1493.389748][T23941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.397664][T23941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.946929][T23941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.972361][T23941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.211513][T23941] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.232153][T23941] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.267037][T23941] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.312912][T23941] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.821845][T23969] netlink: 'syz.7.5639': attribute type 1 has an invalid length. [ 1495.864384][T23969] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1495.908404][T23970] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1495.937128][T23970] bond2 (unregistering): Released all slaves [ 1496.240648][T24011] bridge_slave_0: left allmulticast mode [ 1496.276714][T24011] bridge_slave_0: left promiscuous mode [ 1497.464005][T24011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.501375][T24011] bridge_slave_1: left allmulticast mode [ 1497.519509][T24011] bridge_slave_1: left promiscuous mode [ 1497.541398][T24011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.589914][T24011] bond0: (slave bond_slave_0): Releasing backup interface [ 1497.640813][T24011] bond0: (slave bond_slave_1): Releasing backup interface [ 1498.994406][T24011] team0: Port device team_slave_0 removed [ 1499.074557][T24011] team0: Port device team_slave_1 removed [ 1499.081505][T24011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.113875][T24011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.134570][T24011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.142062][T24011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.203309][T24011] bond1: (slave bridge1): Releasing backup interface [ 1499.232250][T24011] bridge1: left promiscuous mode [ 1499.243375][T24011] bridge1: left allmulticast mode [ 1500.838805][T24047] tipc: Started in network mode [ 1500.863854][T24047] tipc: Node identity 4, cluster identity 4711 [ 1500.900933][T24047] tipc: Node number set to 4 [ 1501.743210][T24054] futex_wake_op: syz.8.5650 tries to shift op by 144; fix this program [ 1501.807214][T24056] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1502.599334][T24077] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1503.537703][T24093] syzkaller0: entered promiscuous mode [ 1503.553474][T24093] syzkaller0: entered allmulticast mode [ 1503.597034][T24093] tipc: Enabled bearer , priority 0 [ 1503.637197][T24092] tipc: Resetting bearer [ 1503.709706][T24092] tipc: Disabling bearer [ 1503.728674][T24099] tipc: Enabled bearer , priority 0 [ 1503.906281][T24107] netlink: 'syz.7.5668': attribute type 4 has an invalid length. [ 1505.271730][T24134] ceph: No mds server is up or the cluster is laggy [ 1506.954065][T24144] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 1506.962855][T24144] ref_ctr increment failed for inode: 0xfc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d109300 [ 1507.032036][T24128] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 1507.085212][T24128] ref_ctr decrement failed for inode: 0xfc offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d109300 [ 1507.506336][T24153] netlink: 'syz.6.5676': attribute type 322 has an invalid length. [ 1514.159807][T24259] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1517.396473][T24283] syz.7.5698 (24283): drop_caches: 2 [ 1517.469191][T24303] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1517.516358][T24303] bond15 (unregistering): Released all slaves [ 1517.838710][T24314] loop7: detected capacity change from 0 to 4096 [ 1517.855030][T24314] EXT4-fs: Ignoring removed i_version option [ 1517.897705][T24314] EXT4-fs: Ignoring removed oldalloc option [ 1517.940076][T24314] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1517.955921][T24314] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 1517.988919][T24322] wg1: entered promiscuous mode [ 1518.004408][T24322] wg1: entered allmulticast mode [ 1518.365208][T24339] loop5: detected capacity change from 0 to 6 [ 1518.436417][ T6790] loop: Write error at byte offset 0, length 3072. [ 1518.477800][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1518.487380][ C0] buffer_io_error: 5 callbacks suppressed [ 1518.487394][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1521.303049][T24371] tipc: Enabling of bearer rejected, already enabled [ 1521.923784][T11391] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1522.172847][T11391] usb 8-1: not running at top speed; connect to a high speed hub [ 1522.193886][T11391] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.298722][T11391] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1522.480272][T11391] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1522.494894][T24403] futex_wake_op: syz.1.5717 tries to shift op by 32; fix this program [ 1522.538104][T11391] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1522.629606][T11391] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1522.669107][T11391] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.710085][T11391] usb 8-1: Product: syz [ 1522.722412][T11391] usb 8-1: Manufacturer: syz [ 1522.739402][T11391] usb 8-1: SerialNumber: syz [ 1524.083974][T11391] usb 8-1: 0:2 : does not exist [ 1525.319125][T11391] usb 8-1: USB disconnect, device number 2 [ 1526.441464][T24210] udevd[24210]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1526.657647][T24435] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5722'. [ 1532.823863][ T28] audit: type=1326 audit(1786402269.875:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1532.853077][T24544] net_ratelimit: 23 callbacks suppressed [ 1532.853095][T24544] sock: sock_set_timeout: `syz.6.5744' (pid 24544) tries to set negative timeout [ 1532.914404][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 1532.974203][ T28] audit: type=1326 audit(1786402269.875:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1533.140398][ T28] audit: type=1326 audit(1786402269.875:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1533.273941][ T28] audit: type=1326 audit(1786402269.875:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1533.389186][ T28] audit: type=1326 audit(1786402269.875:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1533.819513][ T28] audit: type=1326 audit(1786402269.875:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1533.961056][ T28] audit: type=1326 audit(1786402269.875:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1534.128794][ T28] audit: type=1326 audit(1786402269.875:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1534.198358][T24564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5749'. [ 1534.312178][ T28] audit: type=1326 audit(1786402269.875:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1534.391366][ T28] audit: type=1326 audit(1786402269.875:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.6.5744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb019e0d9 code=0x7ffc0000 [ 1537.953920][T21810] Bluetooth: hci0: command 0x0406 tx timeout [ 1542.838106][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5767'. [ 1544.007949][T24652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5767'. [ 1544.424780][T24652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.608976][T24652] bond1: (slave bond0): making interface the new active one [ 1544.630518][T24652] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1544.696994][T24647] netlink: 'syz.6.5767': attribute type 4 has an invalid length. [ 1544.739365][T24647] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5767'. [ 1544.859594][T24647] .`: renamed from bond0 (while UP) [ 1546.404354][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.410743][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.563937][T21810] Bluetooth: hci0: command 0x0406 tx timeout [ 1550.325315][T24725] bridge0: port 1(syz_tun) entered blocking state [ 1550.346316][T24725] bridge0: port 1(syz_tun) entered disabled state [ 1550.394446][T24725] syz_tun: entered allmulticast mode [ 1550.406643][T24725] syz_tun: left allmulticast mode [ 1550.633259][T24735] netlink: 'syz.7.5783': attribute type 10 has an invalid length. [ 1550.724610][T24735] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1550.743813][T24736] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5783'. [ 1552.229878][T24736] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1552.288987][T24736] bond0 (unregistering): Released all slaves [ 1555.360268][T24763] loop7: detected capacity change from 0 to 4096 [ 1556.141816][T24766] bridge0: port 3(syz_tun) entered blocking state [ 1556.185032][T24766] bridge0: port 3(syz_tun) entered disabled state [ 1556.191880][T24766] syz_tun: entered allmulticast mode [ 1556.392220][T24766] syz_tun: entered promiscuous mode [ 1557.470200][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5796'. [ 1557.483041][T24778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5796'. [ 1557.741261][T24778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.020191][T24778] bond5: (slave bond0): making interface the new active one [ 1558.203736][T24778] bond5: (slave bond0): Enslaving as an active interface with an up link [ 1558.288663][T24783] netlink: 'syz.8.5796': attribute type 4 has an invalid length. [ 1558.307155][T24783] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5796'. [ 1558.354835][T24783] .`: renamed from bond0 (while UP) [ 1559.882876][ T5791] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1559.959038][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1559.968299][T24801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1560.034932][T24801] netlink: 'syz.1.5808': attribute type 4 has an invalid length. [ 1560.042769][T24801] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1561.385286][T24801] .`: renamed from bond0 [ 1561.808393][T24817] loop7: detected capacity change from 0 to 128 [ 1565.230322][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5812'. [ 1565.294413][T24847] syz_tun (unregistering): left allmulticast mode [ 1565.313258][T24847] syz_tun (unregistering): left promiscuous mode [ 1565.324802][T24847] bridge0: port 3(syz_tun) entered disabled state [ 1566.775269][T24871] Set syz1 is full, maxelem 2 reached [ 1569.574837][T24915] CIFS: Attempting to mount //127.0.0.1/share [ 1570.339129][T24915] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1570.400859][T24915] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1570.584511][T24943] xt_l2tp: invalid flags combination: 0 [ 1572.958182][T24957] Invalid ELF header type: 2 != 1 [ 1574.629288][T24973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5838'. [ 1576.167553][T24995] loop7: detected capacity change from 0 to 512 [ 1576.226406][T24995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1576.293217][T24995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.383897][T24995] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1576.710299][T25009] EXT4-fs (loop7): shut down requested (1) [ 1577.002583][T22857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.012228][T20406] __quota_error: 22 callbacks suppressed [ 1577.012243][T20406] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1579.753073][T25086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1581.733735][T21816] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1581.760946][T25123] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1581.835595][T25126] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5876'. [ 1581.968513][T21816] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1582.013699][T21816] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1582.063662][T21816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1582.115941][T21816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1582.149600][T21816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1582.186859][T21816] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1582.213787][T21816] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1582.237729][T21816] usb 8-1: Product: syz [ 1582.255924][T21816] usb 8-1: Manufacturer: syz [ 1582.304233][T21816] cdc_wdm 8-1:1.0: skipping garbage [ 1582.337566][T21816] cdc_wdm 8-1:1.0: skipping garbage [ 1582.395365][T21816] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1582.426036][T21816] cdc_wdm 8-1:1.0: Unknown control protocol [ 1583.185718][T11391] usb 8-1: USB disconnect, device number 3 [ 1583.463218][T25159] netlink: 'syz.6.5875': attribute type 1 has an invalid length. [ 1583.560515][T25161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1583.593691][T25161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1583.633359][T25161] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1583.662647][T25161] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1583.701372][T25161] bond0: (slave geneve3): making interface the new active one [ 1583.721586][T25161] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1583.757219][T25159] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5875'. [ 1583.810234][T25159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.401504][T25181] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5879'. [ 1585.284210][T25186] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5881'. [ 1587.381850][ T28] audit: type=1326 audit(1786402324.435:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25223 comm="syz.8.5887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bd3f9e0d9 code=0x0 [ 1587.594172][T25242] overlayfs: failed to clone lowerpath [ 1591.001029][T25292] syzkaller0: entered promiscuous mode [ 1591.016523][T25292] syzkaller0: entered allmulticast mode [ 1600.470303][T25387] tipc: Enabling of bearer rejected, already enabled [ 1600.830083][T25394] batman_adv: batadv0: Adding interface: macsec2 [ 1600.851427][T25394] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1600.877795][T25394] batman_adv: batadv0: Interface activated: macsec2 [ 1603.409816][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5908'. [ 1604.017038][T25438] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1605.956332][T25460] netlink: 'syz.1.5933': attribute type 1 has an invalid length. [ 1605.988148][T25460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.099900][T25460] bond0: entered allmulticast mode [ 1606.234211][T25460] bond0: (slave ip6gretap1): making interface the new active one [ 1606.250819][T25460] ip6gretap1: entered allmulticast mode [ 1606.260495][T25460] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1607.594585][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.652349][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.145783][ T5791] Bluetooth: hci4: unexpected event for opcode 0x080d [ 1608.149648][T25490] loop7: detected capacity change from 0 to 128 [ 1608.308422][T25348] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1608.449969][T25490] loop7: detected capacity change from 0 to 2048 [ 1608.509227][T25490] loop7: p1 < > p2 p3 < p5 p6 > p4 [ 1608.531811][T25490] loop7: partition table partially beyond EOD, truncated [ 1608.550048][T25490] loop7: p1 start 4278190080 is beyond EOD, truncated [ 1608.573688][T25490] loop7: p2 start 16908800 is beyond EOD, truncated [ 1608.614131][T25490] loop7: p4 start 11326 is beyond EOD, truncated [ 1608.646287][T25490] loop7: p5 start 16908800 is beyond EOD, truncated [ 1608.673428][T25490] loop7: p6 start 11326 is beyond EOD, truncated [ 1609.006187][T23991] IPVS: starting estimator thread 0... [ 1609.017866][T25499] udevd[25499]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1609.144636][T25505] IPVS: using max 17 ests per chain, 40800 per kthread [ 1612.966539][ T5791] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1612.977996][ T5791] Bluetooth: hci4: Injecting HCI hardware error event [ 1612.989128][T21810] Bluetooth: hci4: hardware error 0x00 [ 1614.734216][ T28] audit: type=1326 audit(1786402351.685:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1615.169296][T21810] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1615.273839][ T28] audit: type=1326 audit(1786402351.685:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1615.398157][ T28] audit: type=1326 audit(1786402351.685:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1615.517016][ T28] audit: type=1326 audit(1786402351.685:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1615.579440][ T28] audit: type=1326 audit(1786402351.685:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1615.810503][ T28] audit: type=1326 audit(1786402351.695:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1616.293502][ T28] audit: type=1326 audit(1786402351.695:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1616.536259][ T28] audit: type=1326 audit(1786402351.695:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1616.560975][ T28] audit: type=1326 audit(1786402351.695:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1616.585322][ T28] audit: type=1326 audit(1786402351.695:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.7.5949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d1f9e0d9 code=0x7ffc0000 [ 1617.193415][T25587] loop7: detected capacity change from 0 to 2048 [ 1617.359879][T21810] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1617.868205][T25587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1617.943820][T25587] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.164141][T24378] Bluetooth: hci1: Frame reassembly failed (-84) [ 1618.181488][T25587] netlink: 'syz.7.5956': attribute type 12 has an invalid length. [ 1618.214291][T25587] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1618.319425][T25606] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1618.838814][T25622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5962'. [ 1620.194292][ T5791] Bluetooth: hci1: command 0x1003 tx timeout [ 1620.208394][T21810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1620.315892][T22857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.683040][T25659] netlink: 'syz.7.5967': attribute type 2 has an invalid length. [ 1623.816310][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1623.816328][ T28] audit: type=1326 audit(1786402360.025:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af919e0d9 code=0x7fc00000 [ 1624.547470][ T28] audit: type=1326 audit(1786402360.125:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25683 comm="syz.1.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4af913f459 code=0x7fc00000 [ 1628.134604][T25729] team0: Port device bridge0 added [ 1628.165354][T25732] wg1: left promiscuous mode [ 1630.321198][T25764] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.5986'. [ 1631.969128][T25769] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5990'. [ 1632.308461][T25769] veth3: entered allmulticast mode [ 1632.336414][T25769] bond0: (slave veth3): Enslaving as an active interface with an up link [ 1632.737880][T25790] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5995'. [ 1640.906389][T25872] loop7: detected capacity change from 0 to 128 [ 1640.978212][T25872] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1641.051354][T25872] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1641.102385][T25872] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.199216][T22857] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1644.056798][T25917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6020'. [ 1651.290497][T26005] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6046'. [ 1654.669904][T26067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1655.344553][T26093] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6053'. [ 1655.439123][T26093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.494831][T26099] loop7: detected capacity change from 0 to 128 [ 1655.650636][T26096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1655.698783][T26096] bond0: (slave bond6): Enslaving as an active interface with an up link [ 1657.280698][T26100] bond0 (unregistering): (slave bond6): Releasing backup interface [ 1657.303176][T26100] bond0 (unregistering): Released all slaves [ 1658.415520][T26148] veth0_vlan: entered allmulticast mode [ 1658.569990][T26157] xt_hashlimit: max too large, truncated to 1048576 [ 1658.831467][T26148] ªªªªªª: renamed from vlan0 [ 1660.993835][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6068'. [ 1661.183320][T26205] UHID_CREATE from different security context by process 491 (syz.7.6069), this is not allowed. [ 1661.268280][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6071'. [ 1663.022153][T26235] wg1: entered promiscuous mode [ 1663.048057][T26235] wg1: entered allmulticast mode [ 1665.671475][T26258] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8266] was attempted by " [ 1667.464871][T26270] tipc: Enabling of bearer rejected, already enabled [ 1669.189431][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.195881][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.402750][T26270] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1669.503931][T26270] tipc: Enabling of bearer rejected, failed to enable media [ 1674.355921][T26333] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6107'. [ 1675.144735][T26339] tipc: Failed to remove unknown binding: 66,0,0/4:3558109773/3558109775 [ 1675.154167][T26338] tipc: Failed to remove unknown binding: 66,0,0/4:3323534623/3323534624 [ 1675.162628][T26338] tipc: Failed to remove unknown binding: 66,0,0/4:3323534623/3323534624 [ 1675.189378][T21810] Bluetooth: hci0: unexpected subevent 0x0e length: 32 > 15 [ 1676.178541][T26359] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.6105'. [ 1676.187934][T26359] openvswitch: netlink: ct_state flags 00030000 unsupported [ 1676.522169][T26363] loop7: detected capacity change from 0 to 64 [ 1680.154279][T26396] Invalid ELF header type: 2 != 1 [ 1681.535441][T26417] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1683.112261][T26441] loop7: detected capacity change from 0 to 764 [ 1687.132025][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6127'. [ 1688.992455][T26506] Bluetooth: MGMT ver 1.22 [ 1689.245265][T26506] loop7: detected capacity change from 0 to 8192 [ 1689.874000][T26529] xt_CONNSECMARK: invalid mode: 0 [ 1692.286968][T26559] syzkaller0: entered promiscuous mode [ 1692.350075][T26559] syzkaller0: entered allmulticast mode [ 1693.392507][T26575] netlink: 'syz.7.6148': attribute type 1 has an invalid length. [ 1693.838631][T26580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1694.148360][T26581] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1694.180545][T26581] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1694.194741][T26581] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1694.220977][T26581] bond2: (slave geneve2): making interface the new active one [ 1694.260403][T26581] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1694.284111][T26575] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6148'. [ 1694.336335][T26575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1703.094164][T26666] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6168'. [ 1705.123298][T26681] netlink: 'syz.8.6170': attribute type 1 has an invalid length. [ 1705.366093][T26683] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1705.442249][T26687] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6170'. [ 1705.509070][T26687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1705.522816][T24374] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1705.598852][T26689] netlink: 'syz.1.6172': attribute type 1 has an invalid length. [ 1705.657583][T26689] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1705.688118][T26690] bond16: (slave gretap2): making interface the new active one [ 1705.699764][T26690] bond16: (slave gretap2): Enslaving as an active interface with an up link [ 1705.709595][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6173'. [ 1705.960056][ T6790] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1707.103250][T26710] netlink: 168 bytes leftover after parsing attributes in process `syz.8.6177'. [ 1707.186607][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6180'. [ 1708.322458][T26733] loop7: detected capacity change from 0 to 512 [ 1708.966656][T26733] EXT4-fs (loop7): 1 truncate cleaned up [ 1709.025295][T26733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1710.810481][T26747] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6184'. [ 1711.876336][T22857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.055035][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6203'. [ 1721.370392][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6203'. [ 1724.634697][T26868] loop7: detected capacity change from 0 to 40427 [ 1724.739065][T26868] F2FS-fs (loop7): invalid crc value [ 1724.754137][T26868] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1724.836076][T26868] F2FS-fs (loop7): Start checkpoint disabled! [ 1724.846243][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1724.866009][T26868] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1725.263752][T26882] netlink: 'syz.7.6212': attribute type 1 has an invalid length. [ 1726.122979][T24377] kworker/u4:8: attempt to access beyond end of device [ 1726.122979][T24377] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1726.199455][T24377] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1726.225298][T24377] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1726.960240][T26900] bond1: option mode: unable to set because the bond device has slaves [ 1727.039502][T26900] geneve3: entered promiscuous mode [ 1727.070799][T26900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1727.103068][T26900] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1729.794107][T26924] netlink: 'syz.7.6224': attribute type 11 has an invalid length. [ 1730.937464][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.944015][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.916714][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6241'. [ 1744.388619][T27075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1751.804759][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1751.986873][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1753.616165][T27149] netlink: 'syz.1.6266': attribute type 12 has an invalid length. [ 1754.597384][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6274'. [ 1755.348856][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6274'. [ 1755.616273][T27180] netlink: 184 bytes leftover after parsing attributes in process `syz.8.6276'. [ 1755.643695][T27180] .`: entered allmulticast mode [ 1755.664088][T27180] bond_slave_0: entered allmulticast mode [ 1755.683874][T27180] bond_slave_1: entered allmulticast mode [ 1760.557084][T27226] loop7: detected capacity change from 0 to 512 [ 1760.575675][T27227] netlink: 'syz.1.6288': attribute type 1 has an invalid length. [ 1760.618293][T27226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 1760.626565][T27226] System zones: 1-12 [ 1760.671103][T27226] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.6289: corrupted in-inode xattr: e_value size too large [ 1760.945571][T27232] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1761.271568][T27233] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1761.289211][T27226] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.6289: couldn't read orphan inode 15 (err -117) [ 1761.370373][T27226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1761.781148][T27246] dns_resolver: Unsupported server list version (6) [ 1762.328424][T22857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.436403][ T28] audit: type=1800 audit(1786402499.475:1572): pid=27238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6292" name="bus" dev="ramfs" ino=71560 res=0 errno=0 [ 1764.891595][T27280] netlink: 'syz.6.6299': attribute type 1 has an invalid length. [ 1765.714440][T27283] veth3: entered allmulticast mode [ 1765.747222][T27283] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1765.813987][T27290] netlink: 'syz.1.6302': attribute type 1 has an invalid length. [ 1765.932717][T27284] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1766.011740][T27285] macvlan3: entered promiscuous mode [ 1768.047704][T27285] macvlan3: entered allmulticast mode [ 1768.074766][T27285] bond2: entered promiscuous mode [ 1768.094018][T27285] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1768.122805][T27285] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1768.145840][T27285] bond2: left promiscuous mode [ 1768.335257][T27290] bridge14: entered promiscuous mode [ 1768.395342][T27290] bond17: (slave bridge14): making interface the new active one [ 1768.454917][T27290] bond17: (slave bridge14): Enslaving as an active interface with an up link [ 1768.485617][T27302] bridge15: entered promiscuous mode [ 1768.496174][T27302] bond17: (slave bridge15): Enslaving as a backup interface with an up link [ 1775.900845][ T28] audit: type=1107 audit(1786402512.955:1573): pid=27358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1777.470228][T27378] atomic_op ffff88805d9b0198 conn xmit_atomic 0000000000000000 [ 1778.800543][T27395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1782.036250][T27409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1782.149244][T27409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1783.641502][T27409] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.651020][T27409] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.661537][T27409] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.670590][T27409] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.793493][T27409] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1783.803025][T27409] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1783.812039][T27409] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1783.821227][T27409] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1783.900757][T27409] batman_adv: batadv0: Interface deactivated: macsec2 [ 1784.271949][T27472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.282097][T27472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.434028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.443260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.451934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.473899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.482208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.490589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.614246][T27486] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1785.627419][T27486] bond3 (unregistering): Released all slaves [ 1786.513923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.522149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.633804][ C1] net_ratelimit: 8 callbacks suppressed [ 1789.633827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.647747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.656191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.280669][T27535] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8266] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[27535] [ 1790.673807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.682041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.690466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.293346][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1791.321129][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1791.713764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.722059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.730490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.738748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.762125][T27552] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6353'. [ 1791.882394][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.888972][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.833746][ C1] net_ratelimit: 6 callbacks suppressed [ 1794.833766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.847752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.856233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.791694][T27608] tipc: Enabling of bearer rejected, failed to enable media [ 1795.873759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.881997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.890362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.914176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.922396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.930799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.939048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.240449][T27645] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6368'. [ 1797.484853][T27645] tipc: Enabling of bearer rejected, failed to enable media [ 1798.141419][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6371'. [ 1798.216183][T27663] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6370'. [ 1798.978899][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6371'. [ 1800.033825][ C1] net_ratelimit: 6 callbacks suppressed [ 1800.033846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.047870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.056370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.073795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.081977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.090417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.113792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.122007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.130407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.138627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.233772][ C1] net_ratelimit: 6 callbacks suppressed [ 1805.233794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.247692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.256089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.273761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.282112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.290564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.313760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.322043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.330452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.338700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.401113][T27749] xt_CONNSECMARK: invalid mode: 0 [ 1808.977086][T27755] [ 1808.979501][T27755] ====================================================== [ 1808.986564][T27755] WARNING: possible circular locking dependency detected [ 1808.993730][T27755] syzkaller #0 Not tainted [ 1808.998202][T27755] ------------------------------------------------------ [ 1809.005297][T27755] syz.7.6388/27755 is trying to acquire lock: [ 1809.011398][T27755] ffff888020019ab0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 1809.023019][T27755] [ 1809.023019][T27755] but task is already holding lock: [ 1809.030418][T27755] ffff88802d01ad20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1809.039726][T27755] [ 1809.039726][T27755] which lock already depends on the new lock. [ 1809.039726][T27755] [ 1809.050170][T27755] [ 1809.050170][T27755] the existing dependency chain (in reverse order) is: [ 1809.059220][T27755] [ 1809.059220][T27755] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1809.066933][T27755] __mutex_lock+0x135/0xc80 [ 1809.072113][T27755] tcm_set_name+0x2a/0x90 [ 1809.077024][T27755] function_make+0x199/0x350 [ 1809.082474][T27755] configfs_mkdir+0x515/0x9e0 [ 1809.087734][T27755] vfs_mkdir+0x2a5/0x470 [ 1809.092571][T27755] do_mkdirat+0x1dc/0x450 [ 1809.097507][T27755] __x64_sys_mkdirat+0x89/0xa0 [ 1809.102850][T27755] do_syscall_64+0x55/0xb0 [ 1809.107915][T27755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.114480][T27755] [ 1809.114480][T27755] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1809.122831][T27755] __mutex_lock+0x135/0xc80 [ 1809.127919][T27755] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1809.134768][T27755] configfs_symlink+0x5a5/0xfe0 [ 1809.140188][T27755] vfs_symlink+0x138/0x2b0 [ 1809.145272][T27755] do_symlinkat+0x1ba/0x400 [ 1809.150359][T27755] __x64_sys_symlinkat+0x99/0xb0 [ 1809.155872][T27755] do_syscall_64+0x55/0xb0 [ 1809.160862][T27755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.167321][T27755] [ 1809.167321][T27755] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 1809.176084][T27755] __lock_acquire+0x37ef/0x7d80 [ 1809.181540][T27755] lock_acquire+0x19e/0x420 [ 1809.186726][T27755] down_write+0x97/0x200 [ 1809.191550][T27755] configfs_depend_item_unlocked+0x157/0x430 [ 1809.198106][T27755] usbg_make_tpg+0x1f7/0x580 [ 1809.203275][T27755] target_fabric_make_tpg+0xa4/0x6d0 [ 1809.209175][T27755] configfs_mkdir+0x515/0x9e0 [ 1809.214422][T27755] vfs_mkdir+0x2a5/0x470 [ 1809.219234][T27755] do_mkdirat+0x1dc/0x450 [ 1809.224126][T27755] __x64_sys_mkdirat+0x89/0xa0 [ 1809.229451][T27755] do_syscall_64+0x55/0xb0 [ 1809.234435][T27755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.240895][T27755] [ 1809.240895][T27755] other info that might help us debug this: [ 1809.240895][T27755] [ 1809.251157][T27755] Chain exists of: [ 1809.251157][T27755] &sb->s_type->i_mutex_key#26 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1809.251157][T27755] [ 1809.265912][T27755] Possible unsafe locking scenario: [ 1809.265912][T27755] [ 1809.273417][T27755] CPU0 CPU1 [ 1809.278814][T27755] ---- ---- [ 1809.284213][T27755] lock(&opts->dep_lock); [ 1809.288690][T27755] lock(gadget_subsys.su_mutex); [ 1809.296275][T27755] lock(&opts->dep_lock); [ 1809.303246][T27755] lock(&sb->s_type->i_mutex_key#26); [ 1809.308751][T27755] [ 1809.308751][T27755] *** DEADLOCK *** [ 1809.308751][T27755] [ 1809.316921][T27755] 5 locks held by syz.7.6388/27755: [ 1809.322150][T27755] #0: ffff8881422fc418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1809.331494][T27755] #1: ffff888079579090 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 1809.342365][T27755] #2: ffffffff8db2ae90 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 1809.352178][T27755] #3: ffffffff8de58768 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 1809.361920][T27755] #4: ffff88802d01ad20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1809.371508][T27755] [ 1809.371508][T27755] stack backtrace: [ 1809.377460][T27755] CPU: 0 PID: 27755 Comm: syz.7.6388 Not tainted syzkaller #0 [ 1809.384973][T27755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1809.395099][T27755] Call Trace: [ 1809.398427][T27755] [ 1809.401413][T27755] dump_stack_lvl+0x18c/0x250 [ 1809.406299][T27755] ? load_image+0x420/0x420 [ 1809.410994][T27755] ? show_regs_print_info+0x20/0x20 [ 1809.416273][T27755] ? print_circular_bug+0x12b/0x1a0 [ 1809.421554][T27755] check_noncircular+0x2fc/0x400 [ 1809.426555][T27755] ? print_deadlock_bug+0x5d0/0x5d0 [ 1809.431808][T27755] ? lockdep_lock+0xf5/0x230 [ 1809.436457][T27755] ? __lock_acquire+0x357f/0x7d80 [ 1809.441540][T27755] ? _find_first_zero_bit+0xd6/0x100 [ 1809.446892][T27755] __lock_acquire+0x37ef/0x7d80 [ 1809.451804][T27755] ? is_bpf_text_address+0x28f/0x2a0 [ 1809.457327][T27755] ? verify_lock_unused+0x140/0x140 [ 1809.462611][T27755] lock_acquire+0x19e/0x420 [ 1809.467214][T27755] ? configfs_depend_item_unlocked+0x157/0x430 [ 1809.473425][T27755] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1809.479658][T27755] ? __might_sleep+0xe0/0xe0 [ 1809.484303][T27755] ? rcu_is_watching+0x15/0xb0 [ 1809.489127][T27755] ? read_lock_is_recursive+0x20/0x20 [ 1809.494634][T27755] ? trace_contention_end+0x39/0xe0 [ 1809.499883][T27755] ? __mutex_lock+0x30d/0xc80 [ 1809.504613][T27755] ? do_syscall_64+0x55/0xb0 [ 1809.509257][T27755] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.515566][T27755] down_write+0x97/0x200 [ 1809.519869][T27755] ? configfs_depend_item_unlocked+0x157/0x430 [ 1809.526082][T27755] ? down_read_killable+0x340/0x340 [ 1809.531374][T27755] configfs_depend_item_unlocked+0x157/0x430 [ 1809.537433][T27755] usbg_make_tpg+0x1f7/0x580 [ 1809.542446][T27755] ? usbg_drop_tport+0x20/0x20 [ 1809.547274][T27755] ? vscnprintf+0x80/0x80 [ 1809.551710][T27755] target_fabric_make_tpg+0xa4/0x6d0 [ 1809.557060][T27755] ? target_fabric_release_wwn+0xb0/0xb0 [ 1809.562773][T27755] configfs_mkdir+0x515/0x9e0 [ 1809.567522][T27755] vfs_mkdir+0x2a5/0x470 [ 1809.571846][T27755] do_mkdirat+0x1dc/0x450 [ 1809.576239][T27755] ? vfs_mkdir+0x470/0x470 [ 1809.580721][T27755] __x64_sys_mkdirat+0x89/0xa0 [ 1809.585544][T27755] do_syscall_64+0x55/0xb0 [ 1809.590020][T27755] ? clear_bhb_loop+0x40/0x90 [ 1809.594762][T27755] ? clear_bhb_loop+0x40/0x90 [ 1809.599502][T27755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.605469][T27755] RIP: 0033:0x7fb9d1f9e0d9 [ 1809.609949][T27755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.629615][T27755] RSP: 002b:00007fb9d2ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1809.638180][T27755] RAX: ffffffffffffffda RBX: 00007fb9d2225fa0 RCX: 00007fb9d1f9e0d9 [ 1809.646302][T27755] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 1809.654334][T27755] RBP: 00007fb9d2035024 R08: 0000000000000000 R09: 0000000000000000 [ 1809.662357][T27755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1809.670381][T27755] R13: 00007fb9d2226038 R14: 00007fb9d2225fa0 R15: 00007fff7534e748 [ 1809.678423][T27755] [ 1810.434003][ C1] net_ratelimit: 6 callbacks suppressed [ 1810.434023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.447826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.456154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.473692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.481872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.490163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.513759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.521948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.530245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.538415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.633803][ C1] net_ratelimit: 6 callbacks suppressed [ 1815.633825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.647659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.655980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.673736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.681909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.690239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.713719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.721926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.730277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.738502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog