last executing test programs: 11m46.122132764s ago: executing program 1 (id=49): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) 11m45.928773168s ago: executing program 1 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='test\x00', 0x42, 0x93) write$P9_RLERRORu(r1, &(0x7f0000001640)=ANY=[], 0x1e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0x7, 0x6, 0x1, 0xe, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) close(r2) write$UHID_INPUT(r4, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) 11m45.609780996s ago: executing program 1 (id=54): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) fstatfs(r0, &(0x7f00000006c0)=""/4096) 11m45.240878105s ago: executing program 1 (id=55): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000019}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 11m44.496343223s ago: executing program 1 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/36, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getpid() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 11m42.567632411s ago: executing program 1 (id=69): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) shutdown(r1, 0x2) 11m42.1502404s ago: executing program 32 (id=69): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) shutdown(r1, 0x2) 11m22.180542868s ago: executing program 5 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 11m22.055016991s ago: executing program 5 (id=129): mkdir(&(0x7f0000000000)='./trace\x00', 0x16c) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, 0x0, 0x0) 11m19.329241968s ago: executing program 5 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) get_robust_list(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) 11m17.900028013s ago: executing program 5 (id=136): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEWQI9O6QHLxocipJ6KFjaDogW0D+BQwmNm34pKiIloUJUr+fGzquzv73ux7M6s3FME3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945dzxE2m7pT9Y293WAAAPwoWxrxw/ue3rPwDwOLj0of79DwAAAAAAAAAAAAAAPAQpingyUsxeWE0T1fOu+vnOwI2b4yOjW1c7kKqa+6ry5Vf9xMlTp7/4wvCZXp7vTK/XH9ztbnw6Xhu7dK7x8sz12bn2/Hx7sjE+3bkyM9ne9h52Wn+zo9UBaFx//cbk1avzjZPPn9rw8s2h9wefODx0dvjZY8/0yo6PjI6OrRep95ev3XNDuu40w2N/FHEsUjz33Z+mVkQUsfNjUd9w7h+4A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGW5+LqA080D7cWTNisWx+2eCjZffGZltzrctT7cbF1txCZ6EzM30xdVtb9qcRRZxJEUsRsbLFX8OBKKIWKb59aDVdjoh9vePwhWpi8J3bUexiH7ehbGdjIGKpeATO2R42GEW8Gil+9s6RuJLHmWqs+XzEq2V+P+KtMl+KSOUH43TEe7s+nPOg1KKIvyzP/9nVNFmNB71x5fxXG1+evjrTV7Y3rnzI68NtI8VDuj4c2JQPxh4fm+pRRKsa8VfTvX+zAwAAAAAAAAAAAAAAAMD9diCK+FSkeOXf/6SaVxzVvPRDZ4f/cOhX++eMP32X/ZRln4+IxWJ7c3L354mBF9PFlB7yXOKPsnoU8ad5/t83H3ZjAAAAAAAAAAAAAAAAAAAAPtKK+EmkePHdI2kp+tcU70xfa1xqXZ7qrgrbW/u3t2b62traWiN1s5lzIudizqWcyzlXckaR6+ds5pzIuZhzKedyzpWcsS/Xz9nMOZFzMedSzuWcKzmjluvnbOacyLmYcykvur+cn6/kjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Him+9fXVFCkimhET0c3lwYfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJiK+F6kaPxR89a2WkSk6v+uI+Ufp6O5v8yPR3O4zJeieS5nq8pa85sPof3szEAq4seRYrD+9q0Tns//QPfZrY9BvPWN9WefrnVzX+/FofcHnzh86Ozw6G88fafHaasGHD3fmb5xszE+Mjo61re5lt/9433bhvL7Fven60TE/Btvvt6ammrP3fuD8iOwg+qP0INU+6j09NF+8Jv3a4dR2wvdeTgP7j52/P+DGKDYVeX1/71I8bvv/kfvgt+9/tfjV7rPbl3h44M/W7/+v7h5R9u8/tc218vX//KavtX1/8m+bS/m70YGahH1heuzA4cj6vNvvHmsc711rX2tPX36+PEvDQ9/6dTxgf0R9audqXb3UYqp9vH7crgAAAAAAAAAAAAAAAAAHpxUxO9HitaPV1MjIm5W87WGzg4/e+yZfbGvmm+1Yd72a2OXzjVenrk+O9een29PNsanO1dmJtvbfbt6Nd1rfGR0VzpzVwd2uf0H6i/PzL4x17n2xwtbvn6wfu7y/MJc68rWL8eBKCKa/VuOVg0eHxmtGj3VaU1XVS9uOZn+wxtIRfxnpLhyupE+m7fl+f+bZ/hvmP+/uHlHuzT//2N928r3TKmIDyLF7/zV0/HZqp0H47Zjlsv9XaQ4euYzuVzsL8v12tC9r0B3jmBZ9n8jxT/9fGPZ3nzIJ9fLntj2gX1ElOf/UKT43l98J34rb9t4/4etz//BzTvapfP/VN+2gxvuV7DjrpPP/7FI8dKTb8fn8rZfdv+P3r03juTCt+7PsUvn/xN924by+/72/ek6AAAAAAAAAADAI20gFfH3keKHo7X0Qt62nd//m9y8o136/a9P9m2bvD/rFd31wY4PKgAAAADsEQOpiJ9EimsLb9+aQ71x/nff/M/fW5//OZI2vVr9nO/XqvsG3M+f//Ubyu87sfNuAwAAAAAAAAAAAAAAAAAAwJ6SUhEv5PXUJ6r5/JN3XE99OVK88t/P5XLpcFmutw78UPVn/cLM9LFzU1MzV1oLrctT7cbYbOtKu6z7VKRY/dvP5LpFtb56b7357hrv62uxz0WK0X/ole2uxd5bm/yp9bInyrIfixT/9Y8by34ul/vEetmTZdm/iRRf+8HtZUuH18ueKst+J1L86GuNXtmDZdne/VE/uV72+R/cuiMCAAAAAAAAAAAAAAAAAAAA3LuBVMSfR4r/ub50ay5/Xv9/oO9p5a1v9K33v8nNap3/oWr9/zs9vpf1/6v7Cize6V0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxlKKINyPF7IXVtDxYPu+qn+9M37g5PjK6dbUDqaq5rypfftVPnDx1+osvDJ/p5S+vf799Kl4bu3Su8fLM9dm59vx8e7IxPt25MjPZ3vYedlp/s6PVAWhcf/3G5NWr842Tz5/a8PLNofcHnzg8dHb42WPP9MqOj4yOjvWVqQ3c87vfJt1h+/4o4q8jxXPf/Wn64WBEETs/Fnf57Oy2A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGD+Bc7EgzYrFsftngo2X3xmZbc63LU+3GxdbcQmehMzN9MXVbW/anEUWcSRFLEbEyePvuBqKI1yPFtw+tpn8ZjNjXOw5fuDD2leMn79yOYhf7uA1lOxsDEUvFI3DO9rDBKOKfI8XP3jkS/zoYUYvuV3w+4tUyvx/xVnTPdyo/GKcj3tvic8SjqRZF/F95/s+upncGy/GgN66c/2rjy9NXZ/rK9saVR/768CDt8bGpHkX8qBrxV9O/+XsNAAAAAAAAAAAAAAAAsIcU8euR4sV3j6RqfvCtOcWd6WuNS63LU91pfb25f70502tra2uN1M1mzomcizmXci7nXMkZRa6fs1lmfW1tIj9fzLmUcznnSs7Yl+vnbOacyLmYcynncs6VnFHL9XM2c07kXMy5lHM550rO2CNz9wAAAAAAAAAAAAAAAAAAgMdLUf2X4ltfX01rg931pSeim8vWA33s/SIAAP//YnX2fg==") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 11m16.896395197s ago: executing program 5 (id=137): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40}, 0x8) 11m15.281724966s ago: executing program 5 (id=142): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11m14.949093824s ago: executing program 33 (id=142): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10m11.64239252s ago: executing program 3 (id=352): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) close(r0) 10m9.792346285s ago: executing program 3 (id=356): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000140)={0x46e6, 0xd, [{0xa, 0x1}, {0x6}, {0x5}, {0x9}, {0x1, 0x1}, {0x2, 0x1}, {0x9}, {0x7, 0x1}, {0xa}, {0xa}, {0x8, 0x1}, {0xb}, {0xb, 0x1}]}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44014) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x600802, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 10m8.320410381s ago: executing program 3 (id=359): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 10m3.509330639s ago: executing program 3 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf95}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$inet(0x2, 0x4000000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r1], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 10m1.192471425s ago: executing program 3 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 9m59.883098647s ago: executing program 3 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) open$dir(0x0, 0x220000, 0x11c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x10, 0x1}, 0x0, 0x0, 0x6, 0x10000, 0x4, 0x4, 0xffffffff, 0xe447, 0x40, 0xd}) 9m44.2071407s ago: executing program 34 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) open$dir(0x0, 0x220000, 0x11c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x10, 0x1}, 0x0, 0x0, 0x6, 0x10000, 0x4, 0x4, 0xffffffff, 0xe447, 0x40, 0xd}) 16.390073155s ago: executing program 2 (id=1962): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = memfd_secret(0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r4, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfb, 0x3}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42014}, 0x20089890) 14.558140739s ago: executing program 7 (id=1971): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffe14, &(0x7f0000000280), 0x130}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='re', 0x2}], 0x1, &(0x7f0000001400)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 13.558264823s ago: executing program 2 (id=1976): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f00000006c0)=[{0x34, '\x00', @data, 0x9}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7}, 0x50) fcntl$setflags(r1, 0x2, 0x0) ioperm(0x0, 0x7c9, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000018) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1) 13.2571359s ago: executing program 4 (id=1977): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000002300)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x6, 0x3c, 0x65, 0x0, 0xa7, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0x6, 0x7, 0x0, 0x4e22, 0x4e24, 0x1, 0x1}}}}}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 13.172349042s ago: executing program 6 (id=1978): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) 13.121137084s ago: executing program 7 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$usbfs(0x0, 0x75, 0x943f41) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, 0x0, &(0x7f0000000180)) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) 11.1689499s ago: executing program 7 (id=1981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = io_uring_setup(0xa2, &(0x7f0000000080)={0x0, 0x592c, 0x2, 0xfffffffc, 0x2, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 11.148222511s ago: executing program 4 (id=1982): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x89, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0004aa0099b6c3590010e2ab9748ab508d479736bff3c60386656748cd68975bf15d76bd9b2082888234ae7fb2fd9a6fe7698ca907f587edee01e5f266b0c15423449812c7d296da16d733a30af97a1f3c82e16dd67867406d8d6db6043cbb86b0d1ea6cb0000000000000000000"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000002840)="$eJzs20tslNUbx/HfM+90mA79/x0uFjAEmmhiBYFesEBqYrjYaMJFC9VIvKTSKVZ6IZ2ilICwVHcuWLp068KVcWtIXBoXBmNYmCAbN7MSd5jzznuboXRmbDtD6fdD4LyX5x3OOc+8c86ZvCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdefVwT6+1uhYAAKCZTp4e7ul/aPxPt6YyAACgKc6w/gcAAFhLTJ5+l2nPhZKd8PfLsscnpi9dHjk2tPBl7SZTSp4f7/5me/v69780cOBgWC5+/XLbplOnzxzuOjozdXG2UCwWxrpGpifOzYwV6n6FpV5fbZffAV1TFy6NjY8Xu/r29lecvpy/t259Z35w4L2jmTB25NjQ0OlETLrtP//vD3nUDD8jTy/I9PH339pJSSktvS9qvHdWWrvfiF1+I0aODfkNmZwYnZ5zJy0VRKUq+yQT9lETcrEkKcnVyzLLs2Zrk6cfZDqyr2SnJHlhP+z2vxiuqz6tkHZLV0ndWgU5e4ytk6cPZLq1L683gn7185+Rrra6clhx6eD+n7GSvel/Hrj7yX1sHn+r6/Xp8ZlErKWCO2q1jw/N9Jh/NmXl6ZR/x5dsWDuTp9a1rlZolnZ5mpIp89Un/rxC/rz0qcEDO3YeSs4wttR4HRe7N7i56hmT24Kpg6Xcn+VvF+qTNU9/ynT/t6y/3x2OAdKNB4td+EdTqoeVZp4mZfrnWsmsal3qJdb3kdU+9q9s/duzR2cuzs9OnP9obsHzuezhD4tzs6PnFj5dXrt6ySO11rHVUo0tyXJWXvF9/mkpui5YA/yvvBfX5pur8Xuhu6oMJd8/9WzXvYptYB7l6mTm6a5M4+9vLY8zyjXcN2uBy/+QTMXSzxZmOsh/8AxYIv8vx/2Xtcoy4uf2/+XvtcK5xLazmx91fCXy7+rk8v+OTEf+3hp8p1HOv1cV6+I6ZXr35vYgLpVxceEDcPnyK45PTBZ6XOwDmTb+FMbKj80FsZvi2F4XW5Tpi1uVseuD2M1xbJ+LvS3TnV8Xjn06ju13sfMuX3e6wtici90RxHbGsXvPzUyO1epWl/8+md6+/pqFbX5k/hP3/42qMvJQzhffXq785xPHbgR5PRvkP10j/1/KNP/X9rDdft+Hb6sN/r9x/t1c+bublbHhgnJjHNtbb7NazeV/g0z3XrkdtTloW7AbZyiZ/2fSlWXUry3K/4bEsXxQr0yDfbEWFeevXBidnCzMssEGG2xEG63+ZEIzuPF/2I3qA56F85hg/O8o78UzpvufxeP/YFUZadH4vzFxbDCYtbSlpezc1MW2LVK2OH9lz8TU6PnC+cJ0//6Bnr5D+3v6D7ZlwsldvFV33z0JXP53y3Ttx1+idUzl/G/h+X+uqoy0KP+bkm2qmNfU3RVrkst/h0wDd29H683F5v/h+r/72coyuv9alP/NiWP5oF4dDfYFAAAAAAAAAAAAAAAAAKwmOfP0nEyXh1+08DdE9Tz/N1ZVRpb/+a/yD5NrPP/VmTg21qTfNTTU0QAAAAAAAAAAAE2SkqevZXpeJbvuDnRIJ5Ilnmj/BgAA//9+z0gL") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 11.125140462s ago: executing program 2 (id=1983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10, 0x1000000}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x97, 0xfd, 0x8, 0xfb, 0x5, 0x2, 0x0, 0x8, 0x5, 0x1, 0xd, 0xfd, 0x0, 0xac}, 0xe) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) 9.601006269s ago: executing program 7 (id=1984): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) lchown(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6(0xa, 0x805, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000000c0), 0x5f) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 9.592138999s ago: executing program 6 (id=1994): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200c0003}, 0x4040080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) unshare(0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/netstat\x00') pread64(r3, &(0x7f0000000080)=""/102352, 0x18fd0, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x26}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) 9.491808701s ago: executing program 4 (id=1985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x48810) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4089, 0xff9}, {&(0x7f00000003c0)=""/63, 0x3f}], 0x2}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x30}}], 0x1, 0x40000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) 9.486526611s ago: executing program 2 (id=1986): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) 8.727506799s ago: executing program 6 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 8.442462806s ago: executing program 0 (id=1988): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) 7.968564038s ago: executing program 4 (id=1989): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = memfd_secret(0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r4, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfb, 0x3}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42014}, 0x20089890) 7.499400119s ago: executing program 0 (id=1990): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000640)={{0x8, 0x4, 0xfff, 0xcf, 'syz0\x00', 0x8d20}, 0x3, 0x1a3, 0x1, 0xffffffffffffffff, 0x0, 0x9, 'syz1\x00', 0x0}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x40, 0x0) r4 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) renameat2(r4, &(0x7f0000000140)='./mnt\x00', r4, &(0x7f0000000180)='./dev\x00', 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11, 0x0, 0xb9, 0x4}}) 7.499221069s ago: executing program 2 (id=1991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000808) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118c", 0x3, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) 6.707599048s ago: executing program 2 (id=1992): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 6.603028911s ago: executing program 7 (id=1993): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) inotify_init() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731ccc"], 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 6.602799091s ago: executing program 4 (id=1995): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x2000000, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000180), 0x1003) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) getxattr(&(0x7f0000000240)='./file7\x00', &(0x7f0000000c80)=@random={'user.', '\xbeZ\xd6|63\xa2\x83?Q\x1bo\x91\xa6%\xfd\v\xcb\xaeZ\x15\xfc\xf5y\x03\xe8\xc9\xc3\x9b\xd0\xea*\xc7U\x8a\x82\x16bW\r7\x7f\xc0\xe9\xc1\xf23\xed8\xe2U{k\xd6\x9ca\xd7\x14t\xea\xb7~\x7f^\xb0\x02\xc6H\xf0\a!\x05\x15\xbf\x0e\x02m\xab\xc9\x8c\x98\x9bY\xe5\x10\xc5g\x97W\x11\xb5\x02\xecg\xdf6\xbaD[\xeb9\x1d&\xa8\xe5\x86I\x83\xeb0\x97\xda\xeb\xfbo\xbdI\f\x02\xdb\x82_\x18o\xf41\xca{\xad\xbb(J\xeeI\xcc\x93\x9b){\xe4\x06\xcc\x10\xae\x12F/\xe6~.s\xc4N\xc1tE-zi\x11;:jc\x05a\xf5j?\x11g\x1a!\nwY\xe9\xae\x98\x1dl\xa992V\x1f\xb6\xe0\xc4\xbb[=\x10f\x9e\xcd\xb6P\x95>\x85\xd3\xd0\xafD/X!5+\x84\xf3Ri[\x9f\xfc0M\xb2x70Ll0A\x8bK\xe6\x89@!\xa2X\xea\x9b\ad\x85z\xa6\x99\xf4\v\xc2Y\xe3\x1cD\x83\xfc\xf3\x82c\x96\xec7\xe9\xc5\xa9\xaee\x88\xf1iFQX\x15\x888\x8f]\x1c\x13\x9eF|\x1b\xb0\xc6\xb8\xd3\x91\xb3v:B\x82\xab\xadW\xab\x02\xc7\xc3\n5\xf0A\xfe\xf6Z=\xca\xdd*\xebp\x9e\xfa\xda\xa6\x18\xff\xcbA\xe7\xf4\xf6\xd5\xd6\xd7\xa0\xeae0c\xdb\xb0\x8d\xbfN\x00q\xc4*5\x9b\x1b\xb9TF\xe2N2u~B\x98\xd8\xa9g\x93\xf0\x12\x9d\x19(n\xac\xee\xcc@6\x9e\xf6\x15\xe9f\xa7NBT\xf6\xf0\xbd\x88{.\xd5\x90\x95\xfde\x13\x8c\xbe\xdc\xd3Z\x16\xd6\xcb\xcf\xb6\x8c\x9b\xd8\x81\xff\xef'}, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='profile\x00&', 0xfef) 4.061046762s ago: executing program 0 (id=1997): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x89, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0004aa0099b6c3590010e2ab9748ab508d479736bff3c60386656748cd68975bf15d76bd9b2082888234ae7fb2fd9a6fe7698ca907f587edee01e5f266b0c15423449812c7d296da16d733a30af97a1f3c82e16dd67867406d8d6db6043cbb86b0d1ea6cb0000000000000000000"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000002840)="$eJzs20tslNUbx/HfM+90mA79/x0uFjAEmmhiBYFesEBqYrjYaMJFC9VIvKTSKVZ6IZ2ilICwVHcuWLp068KVcWtIXBoXBmNYmCAbN7MSd5jzznuboXRmbDtD6fdD4LyX5x3OOc+8c86ZvCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdefVwT6+1uhYAAKCZTp4e7ul/aPxPt6YyAACgKc6w/gcAAFhLTJ5+l2nPhZKd8PfLsscnpi9dHjk2tPBl7SZTSp4f7/5me/v69780cOBgWC5+/XLbplOnzxzuOjozdXG2UCwWxrpGpifOzYwV6n6FpV5fbZffAV1TFy6NjY8Xu/r29lecvpy/t259Z35w4L2jmTB25NjQ0OlETLrtP//vD3nUDD8jTy/I9PH339pJSSktvS9qvHdWWrvfiF1+I0aODfkNmZwYnZ5zJy0VRKUq+yQT9lETcrEkKcnVyzLLs2Zrk6cfZDqyr2SnJHlhP+z2vxiuqz6tkHZLV0ndWgU5e4ytk6cPZLq1L683gn7185+Rrra6clhx6eD+n7GSvel/Hrj7yX1sHn+r6/Xp8ZlErKWCO2q1jw/N9Jh/NmXl6ZR/x5dsWDuTp9a1rlZolnZ5mpIp89Un/rxC/rz0qcEDO3YeSs4wttR4HRe7N7i56hmT24Kpg6Xcn+VvF+qTNU9/ynT/t6y/3x2OAdKNB4td+EdTqoeVZp4mZfrnWsmsal3qJdb3kdU+9q9s/duzR2cuzs9OnP9obsHzuezhD4tzs6PnFj5dXrt6ySO11rHVUo0tyXJWXvF9/mkpui5YA/yvvBfX5pur8Xuhu6oMJd8/9WzXvYptYB7l6mTm6a5M4+9vLY8zyjXcN2uBy/+QTMXSzxZmOsh/8AxYIv8vx/2Xtcoy4uf2/+XvtcK5xLazmx91fCXy7+rk8v+OTEf+3hp8p1HOv1cV6+I6ZXr35vYgLpVxceEDcPnyK45PTBZ6XOwDmTb+FMbKj80FsZvi2F4XW5Tpi1uVseuD2M1xbJ+LvS3TnV8Xjn06ju13sfMuX3e6wtici90RxHbGsXvPzUyO1epWl/8+md6+/pqFbX5k/hP3/42qMvJQzhffXq785xPHbgR5PRvkP10j/1/KNP/X9rDdft+Hb6sN/r9x/t1c+bublbHhgnJjHNtbb7NazeV/g0z3XrkdtTloW7AbZyiZ/2fSlWXUry3K/4bEsXxQr0yDfbEWFeevXBidnCzMssEGG2xEG63+ZEIzuPF/2I3qA56F85hg/O8o78UzpvufxeP/YFUZadH4vzFxbDCYtbSlpezc1MW2LVK2OH9lz8TU6PnC+cJ0//6Bnr5D+3v6D7ZlwsldvFV33z0JXP53y3Ttx1+idUzl/G/h+X+uqoy0KP+bkm2qmNfU3RVrkst/h0wDd29H683F5v/h+r/72coyuv9alP/NiWP5oF4dDfYFAAAAAAAAAAAAAAAAAKwmOfP0nEyXh1+08DdE9Tz/N1ZVRpb/+a/yD5NrPP/VmTg21qTfNTTU0QAAAAAAAAAAAE2SkqevZXpeJbvuDnRIJ5Ilnmj/BgAA//9+z0gL") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 4.060850342s ago: executing program 4 (id=1998): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e8, {0x2}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) 3.334823069s ago: executing program 7 (id=1999): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.204180107s ago: executing program 0 (id=2000): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10, 0x1000000}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x97, 0xfd, 0x8, 0xfb, 0x5, 0x2, 0x0, 0x8, 0x5, 0x1, 0xd, 0xfd, 0x0, 0xac}, 0xe) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) 2.120152829s ago: executing program 6 (id=2001): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r2, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x2014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x10) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x1, 0x349, 0x0, 0x4, 0x85}) 1.906580344s ago: executing program 0 (id=2002): syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x300043) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) 1.170351782s ago: executing program 6 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x92, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x5c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150"}, {}, {0x18}]}}}}}}, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) socket(0x10, 0x3, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 178.506566ms ago: executing program 0 (id=2004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000001000000000000050000000095595bf77710a44bf04fa0eea4885ec94fbba606c0ee29696fb5697ebeef7be04799806c90b1ce78011033bc7d64c0b82e3fae314e8530911fefd33f9f4e5b15d01881c7de2564fe1d375083e0e9aeffcb8587a1553713fe84320e14bfddd65636e7ffccfca4bf5bda3d9457d17506749615e1d6bf95d7af188ea3b2de33f18ca89a48a66bc5b19f5b51864e65faea343f65ffdec0079a5914ad31962937edf314a05eb7f2abb8742ffd32a42a8b86c23c628c2064da3a98d967628c1bc52c"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000300010001", 0x7) write(r0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x16, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 6 (id=2005): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") socket$inet(0xa, 0x801, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x300000a, 0x110, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}}, &(0x7f0000000000)='GPL\x00'}, 0x94) msgctl$IPC_RMID(0x0, 0x0) r3 = inotify_init() socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f48d7b}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): work is pending, handler #02!!! [ 83.332899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.342886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 83.352889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 83.362899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.485626][ T130] usb 2-1: USB disconnect, device number 2 [ 84.793456][ T4546] jffs2: notice: (4546) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.926553][ T4554] netlink: 104 bytes leftover after parsing attributes in process `syz.4.53'. [ 85.029313][ T4558] netlink: 104 bytes leftover after parsing attributes in process `syz.4.53'. [ 85.123741][ T4561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.54'. [ 85.158407][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.165639][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.238283][ T4563] netlink: 76 bytes leftover after parsing attributes in process `syz.1.54'. [ 85.262018][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.269184][ T4563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.278020][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.285162][ T4563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.309044][ T4563] netlink: 52 bytes leftover after parsing attributes in process `syz.1.54'. [ 85.325731][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.333004][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.461733][ T4568] loop1: detected capacity change from 0 to 512 [ 85.491010][ T4568] EXT4-fs: inline encryption not supported [ 85.516022][ T4568] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.529858][ T4568] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.549492][ T4568] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.55: bad orphan inode 131083 [ 85.575625][ T4568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.006917][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.239546][ T4598] loop3: detected capacity change from 0 to 256 [ 86.294694][ T4598] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 86.381299][ T4598] syz.3.63: attempt to access beyond end of device [ 86.381299][ T4598] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 86.429518][ T4598] syz.3.63: attempt to access beyond end of device [ 86.429518][ T4598] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 86.492292][ T27] audit: type=1800 audit(1791378537.198:4): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.63" name="file1" dev="loop3" ino=1048635 res=0 errno=0 [ 86.812033][ T4608] fuse: Unknown parameter 'group_i' [ 87.966913][ T4577] EXT4-fs (loop1): unmounting filesystem. [ 90.121604][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.131355][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.157114][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.165014][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.172748][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.180407][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.376919][ T4649] loop3: detected capacity change from 0 to 512 [ 90.506988][ T4649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.555140][ T4649] EXT4-fs (loop3): unmounting filesystem. [ 90.580662][ T4658] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 91.277414][ T4643] chnl_net:caif_netlink_parms(): no params data found [ 92.029423][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.043017][ T4643] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.051256][ T4643] device bridge_slave_0 entered promiscuous mode [ 92.067010][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.078827][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.091952][ T4643] device bridge_slave_1 entered promiscuous mode [ 92.243138][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 92.371790][ T4643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.703451][ T4643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.035233][ T4643] team0: Port device team_slave_0 added [ 93.202536][ T4643] team0: Port device team_slave_1 added [ 93.284913][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.306973][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.344630][ T4643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.360716][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.373105][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.464058][ T4643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.539647][ T4643] device hsr_slave_0 entered promiscuous mode [ 93.572699][ T4643] device hsr_slave_1 entered promiscuous mode [ 93.580919][ T4643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.628035][ T4643] Cannot create hsr debugfs directory [ 93.750511][ T4706] batman_adv: batadv0: Adding interface: veth0 [ 93.783984][ T4706] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.890861][ T4706] batman_adv: batadv0: Interface activated: veth0 [ 94.327317][ T4710] batman_adv: batadv0: Interface deactivated: veth0 [ 94.374437][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 94.501353][ T4710] batman_adv: batadv0: Removing interface: veth0 [ 94.526247][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.563000][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.603534][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.883245][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.042860][ C0] sched: RT throttling activated [ 96.281035][ T4643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.413119][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 96.510910][ T4643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.043206][ T4643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.293177][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.371758][ T4643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.537880][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 98.543091][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 98.588457][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.635311][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 98.684403][ T4766] loop2: detected capacity change from 0 to 512 [ 98.705843][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 98.751003][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.758996][ T4763] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 98.759072][ T4763] FAT-fs (loop2): Filesystem has been set read-only [ 99.471455][ T4643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.542334][ T14] usb 1-1: Product: syz [ 99.546651][ T14] usb 1-1: Manufacturer: syz [ 99.551261][ T14] usb 1-1: SerialNumber: syz [ 99.614689][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.642560][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.689424][ T4643] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.695408][ T14] usb 1-1: can't set config #1, error -71 [ 99.733213][ T14] usb 1-1: USB disconnect, device number 3 [ 99.773880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.802917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.819680][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.826879][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.849061][ T4775] xt_TCPMSS: Only works on TCP SYN packets [ 100.321580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.445852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.463339][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.470573][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.057272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.515726][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.659115][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.927039][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.965615][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.705321][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.733729][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.867782][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.961636][ T4799] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.989376][ T4799] CIFS: Attempting to mount \\127.0.0.1\share [ 102.997611][ T4799] CIFS: VFS: No username specified [ 103.150303][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.233715][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.448392][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.490825][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.517909][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.958964][ T4316] smpboot: CPU 1 is now offline [ 104.253953][ T4807] x86: Booting SMP configuration: [ 104.286479][ T4807] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 104.768428][ T4643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.070896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.088913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.239544][ T4835] loop0: detected capacity change from 0 to 2048 [ 105.359491][ T4835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.380033][ T4835] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.565268][ T4848] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.114: bg 0: block 345: padding at end of block bitmap is not set [ 105.726333][ T4848] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 105.873861][ T4848] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.873861][ T4848] [ 105.883280][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.898604][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.959850][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.977548][ T4848] EXT4-fs (loop0): Total free blocks count 0 [ 105.978263][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.000140][ T4643] device veth0_vlan entered promiscuous mode [ 106.013723][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.022279][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.039009][ T4848] EXT4-fs (loop0): Free/Dirty block details [ 106.044601][ T4643] device veth1_vlan entered promiscuous mode [ 106.080791][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.081309][ T4848] EXT4-fs (loop0): free_blocks=0 [ 106.090916][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.118953][ T4643] device veth0_macvtap entered promiscuous mode [ 106.130793][ T4848] EXT4-fs (loop0): dirty_blocks=176 [ 106.142186][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.166664][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.183712][ T4848] EXT4-fs (loop0): Block reservation details [ 106.201494][ T4643] device veth1_macvtap entered promiscuous mode [ 106.212633][ T4848] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 106.214090][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.251447][ T4855] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 150 with error 28 [ 106.253901][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.368838][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.392932][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.422884][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.445451][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.481584][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.512873][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.523160][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.543099][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.573384][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.583485][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.592300][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.631916][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.649338][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.660169][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.676347][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.687767][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.702448][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.715219][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.729153][ T4871] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 106.788026][ T4871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.805025][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.814243][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.830233][ T4643] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.841749][ T4643] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.851424][ T4643] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.860751][ T4643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.872448][ T4875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 106.939469][ T4871] bond1: (slave bridge1): making interface the new active one [ 107.108904][ T4871] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 107.150208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 107.238896][ T4678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.266252][ T4678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.281370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.320527][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.331889][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.345307][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.502635][ T4895] netlink: 'syz.5.127': attribute type 1 has an invalid length. [ 109.872223][ T4907] overlayfs: missing 'lowerdir' [ 109.924532][ T4913] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 110.218823][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.226174][ T4903] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.759534][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.809803][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.112345][ T4903] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.121560][ T4903] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.131418][ T4903] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.140544][ T4903] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.364132][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.580617][ T4922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.361852][ T4933] loop5: detected capacity change from 0 to 2048 [ 112.410484][ T4933] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 112.449991][ T4933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.651189][ T4934] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 112.986455][ T4643] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 113.011183][ T4643] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 115.402432][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.657671][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 116.749674][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.040267][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.063378][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.072173][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.081164][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.088875][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 117.096494][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.279567][ T4950] tipc: Enabling of bearer rejected, failed to enable media [ 117.310551][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.333980][ T4944] bridge1: port 1(erspan0) entered blocking state [ 117.345060][ T4944] bridge1: port 1(erspan0) entered disabled state [ 117.364399][ T4961] loop0: detected capacity change from 0 to 2048 [ 117.374459][ T4944] device erspan0 entered promiscuous mode [ 117.391338][ T4944] bridge1: port 1(erspan0) entered blocking state [ 117.397963][ T4944] bridge1: port 1(erspan0) entered forwarding state [ 117.467781][ T4961] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.488102][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.498986][ T4961] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.813802][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 117.871323][ T4975] FAULT_INJECTION: forcing a failure. [ 117.871323][ T4975] name failslab, interval 1, probability 0, space 0, times 1 [ 118.002252][ T4956] chnl_net:caif_netlink_parms(): no params data found [ 118.014446][ T4975] CPU: 0 PID: 4975 Comm: syz.2.148 Not tainted syzkaller #0 [ 118.021796][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.032002][ T4975] Call Trace: [ 118.035305][ T4975] [ 118.038257][ T4975] dump_stack_lvl+0x188/0x24e [ 118.043000][ T4975] ? show_regs_print_info+0x12/0x12 [ 118.048230][ T4975] ? load_image+0x410/0x410 [ 118.052778][ T4975] ? __might_sleep+0xd0/0xd0 [ 118.057393][ T4975] ? __lock_acquire+0x7ea0/0x7ea0 [ 118.062464][ T4975] should_fail_ex+0x390/0x4c0 [ 118.067184][ T4975] should_failslab+0x5/0x20 [ 118.071727][ T4975] slab_pre_alloc_hook+0x59/0x300 [ 118.076794][ T4975] ? tomoyo_encode+0x28a/0x550 [ 118.081596][ T4975] __kmem_cache_alloc_node+0x4f/0x270 [ 118.087016][ T4975] ? tomoyo_encode+0x28a/0x550 [ 118.091902][ T4975] __kmalloc+0xa3/0x240 [ 118.096091][ T4975] tomoyo_encode+0x28a/0x550 [ 118.100735][ T4975] tomoyo_realpath_from_path+0x578/0x5c0 [ 118.106422][ T4975] tomoyo_check_open_permission+0x212/0x440 [ 118.112356][ T4975] ? tomoyo_check_open_permission+0x1bf/0x440 [ 118.118454][ T4975] ? tomoyo_check_path_number_acl+0x280/0x280 [ 118.124584][ T4975] ? __lock_acquire+0x7ea0/0x7ea0 [ 118.129637][ T4975] ? __rwlock_init+0x140/0x140 [ 118.134435][ T4975] ? tomoyo_file_open+0xe9/0x170 [ 118.139415][ T4975] security_file_open+0x5e/0xa0 [ 118.144304][ T4975] do_dentry_open+0x2fd/0x10b0 [ 118.149103][ T4975] ? kernfs_evict_inode+0x60/0x60 [ 118.154161][ T4975] ? memcpy+0x3c/0x60 [ 118.158193][ T4975] path_openat+0x2674/0x2f10 [ 118.162826][ T4975] ? kasan_set_track+0x60/0x70 [ 118.167621][ T4975] ? verify_lock_unused+0x140/0x140 [ 118.172852][ T4975] ? do_sys_openat2+0xdd/0x4f0 [ 118.177641][ T4975] ? do_filp_open+0x420/0x420 [ 118.182358][ T4975] do_filp_open+0x1ee/0x420 [ 118.186905][ T4975] ? vfs_tmpfile+0x470/0x470 [ 118.191548][ T4975] ? _raw_spin_unlock+0x24/0x40 [ 118.196430][ T4975] ? alloc_fd+0x590/0x640 [ 118.200801][ T4975] do_sys_openat2+0x14b/0x4f0 [ 118.205519][ T4975] ? do_sys_open+0xe0/0xe0 [ 118.209973][ T4975] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.215989][ T4975] ? lock_chain_count+0x20/0x20 [ 118.220881][ T4975] __x64_sys_openat+0x135/0x160 [ 118.225774][ T4975] do_syscall_64+0x4c/0xa0 [ 118.230225][ T4975] ? clear_bhb_loop+0x60/0xb0 [ 118.234932][ T4975] ? clear_bhb_loop+0x60/0xb0 [ 118.239643][ T4975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.245581][ T4975] RIP: 0033:0x7f981619e199 [ 118.250025][ T4975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.269671][ T4975] RSP: 002b:00007f9816fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.278121][ T4975] RAX: ffffffffffffffda RBX: 00007f9816425fa0 RCX: 00007f981619e199 [ 118.286119][ T4975] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 118.294118][ T4975] RBP: 00007f98162358e0 R08: 0000000000000000 R09: 0000000000000000 [ 118.302127][ T4975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.310125][ T4975] R13: 00007f9816426038 R14: 00007f9816425fa0 R15: 00007ffc0fc84038 [ 118.318144][ T4975] [ 118.343571][ T4991] fuse: Bad value for 'fd' [ 118.783832][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.791027][ T4956] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.824352][ T4956] device bridge_slave_0 entered promiscuous mode [ 118.919811][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.927291][ T4956] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.952376][ T4956] device bridge_slave_1 entered promiscuous mode [ 119.058491][ T4956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.123057][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 119.150071][ T4956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.263675][ T4956] team0: Port device team_slave_0 added [ 119.280997][ T4956] team0: Port device team_slave_1 added [ 119.414634][ T4956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.422027][ T4956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.506683][ T4956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.760622][ T4956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.768620][ T4956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.852884][ T4956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.102425][ T4956] device hsr_slave_0 entered promiscuous mode [ 120.134744][ T4956] device hsr_slave_1 entered promiscuous mode [ 120.142234][ T4956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.156618][ T4956] Cannot create hsr debugfs directory [ 120.214739][ T34] device hsr_slave_0 left promiscuous mode [ 120.250374][ T34] device hsr_slave_1 left promiscuous mode [ 120.257496][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.271565][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.281831][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.295295][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.303459][ T34] device bridge_slave_1 left promiscuous mode [ 120.311625][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.329320][ T34] device bridge_slave_0 left promiscuous mode [ 120.336698][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.387303][ T34] device veth1_macvtap left promiscuous mode [ 120.396418][ T34] device veth0_macvtap left promiscuous mode [ 120.402744][ T34] device veth1_vlan left promiscuous mode [ 120.413822][ T34] device veth0_vlan left promiscuous mode [ 120.507047][ T4975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.209867][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 121.229128][ T130] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.250834][ T5028] ceph: No mds server is up or the cluster is laggy [ 121.307322][ T34] team0 (unregistering): Port device team_slave_1 removed [ 121.362492][ T34] team0 (unregistering): Port device team_slave_0 removed [ 121.430786][ T130] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 121.440739][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.446669][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.500764][ T130] usb 1-1: Product: syz [ 121.508772][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.516137][ T130] usb 1-1: Manufacturer: syz [ 121.545273][ T130] usb 1-1: SerialNumber: syz [ 121.553412][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 121.566943][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 121.574560][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.584649][ T4286] Workqueue: hci1 hci_rx_work [ 121.589379][ T4286] Call Trace: [ 121.592683][ T4286] [ 121.595642][ T4286] dump_stack_lvl+0x188/0x24e [ 121.600353][ T4286] ? show_regs_print_info+0x12/0x12 [ 121.605591][ T4286] ? load_image+0x410/0x410 [ 121.610142][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 121.615562][ T4286] ? __lock_acquire+0x7ea0/0x7ea0 [ 121.620633][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 121.625360][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 121.630593][ T4286] kobject_add_internal+0x617/0xca0 [ 121.635836][ T4286] kobject_add+0x160/0x230 [ 121.640291][ T4286] ? kobject_init+0x1c0/0x1c0 [ 121.645001][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 121.650314][ T4286] ? klist_children_get+0x50/0x50 [ 121.655369][ T4286] ? get_device_parent+0x121/0x3e0 [ 121.660523][ T4286] device_add+0x470/0x1050 [ 121.665007][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 121.669980][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 121.675316][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 121.681596][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 121.687261][ T4286] ? mutex_unlock+0x10/0x10 [ 121.691880][ T4286] ? skb_pull_data+0xec/0x1f0 [ 121.696600][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 121.702183][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 121.708280][ T4286] hci_event_packet+0x7b3/0x1290 [ 121.713254][ T4286] ? lock_chain_count+0x20/0x20 [ 121.718141][ T4286] ? bis_list+0x280/0x280 [ 121.722494][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.728433][ T4286] ? kcov_remote_start+0x50f/0x810 [ 121.733581][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 121.738818][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 121.744044][ T4286] hci_rx_work+0x3eb/0xd40 [ 121.748494][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 121.753383][ T4286] ? process_one_work+0x7b4/0x1160 [ 121.758536][ T4286] process_one_work+0x8ab/0x1160 [ 121.763543][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 121.769251][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.774338][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.779938][ T4286] ? wq_worker_running+0x97/0x190 [ 121.784998][ T4286] worker_thread+0xaf5/0x12a0 [ 121.789737][ T4286] kthread+0x29d/0x330 [ 121.793835][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 121.798982][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 121.803614][ T4286] ret_from_fork+0x1f/0x30 [ 121.808257][ T4286] [ 121.813998][ T4286] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 121.827459][ T4286] Bluetooth: hci1: failed to register connection device [ 122.171397][ T34] bond0 (unregistering): Released all slaves [ 122.220593][ T130] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 122.261461][ T130] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 122.412420][ T130] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 122.470161][ T130] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 122.508715][ T5046] ip_tables: iptables: counters copy to user failed while replacing table [ 122.518587][ T130] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.558811][ T130] lan78xx: probe of 1-1:1.0 failed with error -71 [ 122.607474][ T130] usb 1-1: USB disconnect, device number 4 [ 122.733703][ T4956] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.780627][ T4956] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.802808][ T4956] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.828982][ T4956] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.115827][ T4956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.143594][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.158899][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.196484][ T4956] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.216809][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.250140][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.259121][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.266287][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.293955][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 123.325157][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.362174][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.371195][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.399429][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.406619][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.445928][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.479060][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.508827][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.545438][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.579054][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.598465][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.620086][ T4956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.664022][ T4956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.707527][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.720425][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.749860][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.779301][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.799477][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.825997][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.482089][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.506546][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.531988][ T4956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.671739][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.680813][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.688405][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.375172][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 125.433764][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.443795][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.471030][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.482368][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.498996][ T4956] device veth0_vlan entered promiscuous mode [ 125.509934][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.521716][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.534254][ T5105] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 125.541161][ T4956] device veth1_vlan entered promiscuous mode [ 125.602436][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.634424][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.652169][ T4956] device veth0_macvtap entered promiscuous mode [ 125.688677][ T4956] device veth1_macvtap entered promiscuous mode [ 125.727289][ T4956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.749710][ T4956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.779745][ T4956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.806538][ T4956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.832075][ T4956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.842865][ T4956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.872183][ T4956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.888362][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.919002][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.932226][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.945079][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.961687][ T4956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.973885][ T4956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.987144][ T4956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.998815][ T4956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.017392][ T4956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.032232][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.046600][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.061604][ T4956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.071012][ T4956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.083547][ T4956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.092286][ T4956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.221678][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.240373][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.284598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.307665][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.322000][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.342754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.612695][ T5133] CIFS: Attempting to mount \\127.0.0.1\share [ 127.467361][ T5133] CIFS: VFS: cifs_mount failed w/return code = -112 [ 129.298696][ T5213] futex_wake_op: syz.0.188 tries to shift op by 144; fix this program [ 130.363135][ T4286] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 131.873041][ T5247] device syzkaller0 entered promiscuous mode [ 132.651359][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657887][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.882725][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.892229][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.899842][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.909103][ T5259] device bridge_slave_0 left promiscuous mode [ 132.915476][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.926617][ T5259] device bridge_slave_1 left promiscuous mode [ 132.933390][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.950466][ T5259] bond0: (slave bond_slave_0): Releasing backup interface [ 132.976402][ T5259] bond0: (slave bond_slave_1): Releasing backup interface [ 133.020456][ T5259] team0: Port device team_slave_0 removed [ 133.063547][ T5259] team0: Port device team_slave_1 removed [ 133.070084][ T5259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.077681][ T5259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.114491][ T5259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.122003][ T5259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.295333][ T5275] PKCS8: Unsupported PKCS#8 version [ 135.438852][ T5303] mmap: syz.6.206 (5303) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.527700][ T5303] loop6: detected capacity change from 0 to 256 [ 135.575947][ T5303] exfat: Deprecated parameter 'utf8' [ 135.581305][ T5303] exfat: Deprecated parameter 'utf8' [ 135.619605][ T5303] exfat: Deprecated parameter 'namecase' [ 135.645240][ T5303] exfat: Deprecated parameter 'namecase' [ 135.695825][ T5303] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 135.757999][ T5304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.083053][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 138.090783][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.191861][ T5334] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 139.278177][ T5352] loop2: detected capacity change from 0 to 512 [ 139.303002][ T5352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.338856][ T5352] EXT4-fs error (device loop2): ext4_init_orphan_info:623: comm syz.2.218: orphan file block 0: bad magic [ 139.397270][ T5352] EXT4-fs (loop2): mount failed [ 139.547170][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 139.699547][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.936750][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.361060][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.408290][ T5356] device bridge_slave_0 left promiscuous mode [ 140.449051][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.510066][ T5356] device bridge_slave_1 left promiscuous mode [ 140.531896][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.707805][ T5356] bond0: (slave bond_slave_0): Releasing backup interface [ 140.787624][ T5356] bond0: (slave bond_slave_1): Releasing backup interface [ 140.897821][ T5356] team0: Port device team_slave_0 removed [ 140.948946][ T5356] team0: Port device team_slave_1 removed [ 140.968924][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.985011][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.004929][ T5356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.018434][ T5356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.306748][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.349162][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.356783][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.385925][ T5388] loop6: detected capacity change from 0 to 256 [ 141.457308][ T5388] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 141.467359][ T5384] team0: Port device bridge0 added [ 141.677216][ T5396] loop2: detected capacity change from 0 to 256 [ 141.703858][ T5396] exfat: Deprecated parameter 'utf8' [ 141.743738][ T5396] exfat: Deprecated parameter 'utf8' [ 141.802352][ T5396] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 142.487079][ T5412] ip_tables: iptables: counters copy to user failed while replacing table [ 146.508126][ T5446] netlink: 276 bytes leftover after parsing attributes in process `syz.6.246'. [ 146.545851][ T5446] tipc: Enabling of bearer rejected, failed to enable media [ 147.160723][ T5466] device ip6gre1 entered promiscuous mode [ 147.337661][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.358399][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.403232][ T4316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.623071][ T4316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.973022][ T4316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.512348][ T5532] loop6: detected capacity change from 0 to 512 [ 150.575002][ T5532] EXT4-fs (loop6): orphan cleanup on readonly fs [ 150.615109][ T5532] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:984: inode #11: comm syz.6.260: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 150.670630][ T5532] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.6.260: ea_inode dec ref err=-117 [ 150.729346][ T5532] EXT4-fs (loop6): 1 orphan inode deleted [ 150.742698][ T5532] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 150.785971][ T5532] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 151.371092][ T4956] EXT4-fs (loop6): unmounting filesystem. [ 151.633936][ T5553] loop0: detected capacity change from 0 to 128 [ 151.683097][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.691685][ T5553] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 151.809565][ T27] audit: type=1800 audit(1791378602.518:5): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.264" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 151.905358][ T5553] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 151.924571][ T27] audit: type=1800 audit(1791378602.518:6): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.264" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 152.058927][ T27] audit: type=1800 audit(1791378602.518:7): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.264" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 153.079046][ T5567] syz.6.266 (5567) used greatest stack depth: 16528 bytes left [ 155.940759][ T5618] loop6: detected capacity change from 0 to 128 [ 155.965267][ T5621] binder: 5616:5621 ioctl 4018620d 0 returned -22 [ 156.011627][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 158.323506][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.286'. [ 158.341956][ T5653] loop0: detected capacity change from 0 to 736 [ 158.721977][ T5672] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 160.423111][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.836050][ T5708] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.291'. [ 164.097626][ T5708] openvswitch: netlink: Key type 386 is out of range max 32 [ 165.035120][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.6.297'. [ 165.057476][ T5750] binder: 5749:5750 ioctl c0306201 200000000080 returned -14 [ 165.213382][ T5756] device ip6gre1 entered promiscuous mode [ 165.220849][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.239081][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.259871][ T2168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.453026][ T2168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.637199][ T5756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.207857][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.277975][ T5769] loop0: detected capacity change from 0 to 128 [ 166.783174][ T27] audit: type=1800 audit(1791378617.468:8): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=1048669 res=0 errno=0 [ 169.192165][ T5813] jffs2: notice: (5813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.204096][ T5814] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 169.283094][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.360020][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.450564][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.506033][ T5816] device bridge_slave_0 left promiscuous mode [ 169.557360][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.623565][ T5816] device bridge_slave_1 left promiscuous mode [ 169.645764][ T5839] netlink: 'syz.3.313': attribute type 11 has an invalid length. [ 169.665217][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.765522][ T5816] bond0: (slave bond_slave_0): Releasing backup interface [ 169.945929][ T5816] bond0: (slave bond_slave_1): Releasing backup interface [ 170.196228][ T5843] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 170.204003][ T5843] Error parsing options; rc = [-22] [ 170.328902][ T5816] team0: Port device team_slave_0 removed [ 170.392503][ T5816] team0: Port device team_slave_1 removed [ 170.421157][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.454926][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.479057][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.496219][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.527760][ T5816] bond1: (slave bridge1): Releasing active interface [ 170.581259][ T5825] bond1: (slave gretap1): making interface the new active one [ 170.608613][ T5825] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 170.694505][ T5843] device vlan0 entered promiscuous mode [ 170.705742][ T5843] team0: Port device vlan0 added [ 170.865831][ T5855] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 170.996318][ T5855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.093519][ T5858] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 171.116640][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 174.192625][ T5886] futex_wake_op: syz.2.332 tries to shift op by 144; fix this program [ 174.596663][ T5893] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4956] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5893] [ 174.911482][ T5894] "syz.0.344" (5894) uses obsolete ecb(arc4) skcipher [ 176.803087][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.228322][ T5919] nvmet: transport type 0 not supported [ 177.317437][ T5921] nvme nvme0: failed to connect socket: -111 [ 177.452979][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.266228][ T5947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.480772][ T5947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.530085][ T5947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.573024][ T5947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.633966][ T5947] device geneve2 entered promiscuous mode [ 180.922191][ T5972] tipc: Started in network mode [ 180.928281][ T5972] tipc: Node identity 080211, cluster identity 4711 [ 180.965158][ T5972] tipc: Enabled bearer , priority 0 [ 182.229492][ T4319] tipc: Node number set to 134353152 [ 183.756440][ T27] audit: type=1800 audit(1791378634.468:9): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.361" name="bus" dev="ramfs" ino=40044 res=0 errno=0 [ 185.923135][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 185.929194][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 185.936149][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 185.942165][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 188.239128][ T6027] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.248425][ T6027] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.257337][ T6027] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.266163][ T6027] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.122598][ T6027] team0: Port device vxlan0 added [ 193.443196][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.501979][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.508551][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.773792][ T6082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.217434][ T6093] syz.0.392 (6093): /proc/6092/oom_adj is deprecated, please use /proc/6092/oom_score_adj instead. [ 205.700691][ T6145] jffs2: notice: (6145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.165786][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 206.179029][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 206.189915][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 206.201024][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 206.211977][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 206.841146][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.857836][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.866562][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.876590][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.884929][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.892334][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.054432][ T6161] tipc: Enabling of bearer rejected, failed to enable media [ 207.377129][ T6153] chnl_net:caif_netlink_parms(): no params data found [ 207.445767][ T6152] tipc: Enabling of bearer rejected, failed to enable media [ 208.678360][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.715239][ T6180] MTD: Couldn't look up './dev/mtdblock0': -2 [ 208.728850][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.737981][ T6153] device bridge_slave_0 entered promiscuous mode [ 208.752703][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.785237][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.803125][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.812629][ T6153] device bridge_slave_1 entered promiscuous mode [ 208.867604][ T6185] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.964897][ T6182] device ip6gre1 entered promiscuous mode [ 208.973384][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 209.113908][ T6186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.244928][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.287324][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.520940][ T6153] team0: Port device team_slave_0 added [ 210.305989][ T6153] team0: Port device team_slave_1 added [ 210.408407][ T6076] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.421192][ T6076] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.459807][ T5808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.477417][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.487342][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.517216][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.537290][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.544420][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.578800][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.583129][ T4381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.648928][ T6153] device hsr_slave_0 entered promiscuous mode [ 210.658309][ T6153] device hsr_slave_1 entered promiscuous mode [ 210.672559][ T6153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.680615][ T6153] Cannot create hsr debugfs directory [ 210.962485][ T6153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 211.001163][ T6153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 211.012569][ T6153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 211.037498][ T6153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 211.044668][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 211.129466][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.162951][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.172003][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.190307][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.258356][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.279404][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.283150][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.301891][ T6218] futex_wake_op: syz.6.425 tries to shift op by 144; fix this program [ 211.318055][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.325235][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.362655][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.397897][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.420640][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.447860][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.455083][ T4678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.498288][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.538885][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.585378][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.622991][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.668004][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.736369][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.759072][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.800076][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.828967][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.874903][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.910847][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.952617][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.210607][ T6225] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6225] [ 213.267951][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 213.429327][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.441483][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.471350][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.555993][ T6241] loop0: detected capacity change from 0 to 2048 [ 213.622560][ T6241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.077175][ T6248] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 214.575520][ T4299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.593855][ T4299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.612749][ T6250] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 214.802950][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.283172][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 215.491555][ T4299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.522854][ T4299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.298100][ T4299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.334460][ T6263] netlink: 44 bytes leftover after parsing attributes in process `syz.4.433'. [ 216.392052][ T4299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.461569][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.485453][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.542107][ T4299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.574515][ T4299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.625836][ T6153] device veth0_vlan entered promiscuous mode [ 216.643191][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.676240][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.716714][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.743287][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.769183][ T6153] device veth1_vlan entered promiscuous mode [ 216.905804][ T6153] device veth0_macvtap entered promiscuous mode [ 216.959757][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.983538][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.023483][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.053798][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.089812][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.134774][ T6153] device veth1_macvtap entered promiscuous mode [ 217.230706][ T6280] tipc: Enabling of bearer rejected, failed to enable media [ 217.319834][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.341906][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.398433][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.441148][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.459387][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.491886][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.542092][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.578731][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.605370][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.616428][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.653600][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.706390][ T6153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.732327][ T6153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.744153][ T6153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.771106][ T6153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.611571][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.646688][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.784508][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.799013][ T6304] jffs2: notice: (6304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.837246][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.883578][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.950547][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.803258][ T6310] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 223.523271][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.827025][ T4299] device hsr_slave_0 left promiscuous mode [ 223.841442][ T4299] device hsr_slave_1 left promiscuous mode [ 223.907122][ T4299] device veth1_macvtap left promiscuous mode [ 223.943125][ T4299] device veth0_macvtap left promiscuous mode [ 223.966569][ T4299] device veth1_vlan left promiscuous mode [ 223.998492][ T4299] device veth0_vlan left promiscuous mode [ 224.173633][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.342905][ T6391] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 225.351697][ T6391] Error parsing options; rc = [-22] [ 226.142279][ T4299] team0 (unregistering): Port device vxlan0 removed [ 226.844717][ T6396] Cannot find set identified by id 0 to match [ 228.841771][ T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 229.016238][ T4299] bond0 (unregistering): Released all slaves [ 229.053057][ T26] usb 8-1: Using ep0 maxpacket: 32 [ 229.071083][ T26] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.094557][ T26] usb 8-1: config 0 has no interfaces? [ 229.102241][ T26] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 229.118546][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.153858][ T26] usb 8-1: config 0 descriptor?? [ 229.257337][ T6419] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 229.276024][ T6420] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 229.338856][ T6444] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 229.565983][ T6452] loop0: detected capacity change from 0 to 128 [ 229.670968][ T6452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 229.728198][ T6452] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.254755][ T128] usb 8-1: USB disconnect, device number 2 [ 232.872766][ T6481] loop7: detected capacity change from 0 to 128 [ 233.933001][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 235.348010][ T6513] loop7: detected capacity change from 0 to 2048 [ 235.528067][ T6513] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 235.631253][ T6513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.273121][ T128] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 238.193057][ T128] usb 8-1: Using ep0 maxpacket: 32 [ 238.200252][ T128] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 238.230793][ T128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.272367][ T128] usb 8-1: config 0 descriptor?? [ 238.313764][ T128] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 239.982909][ T5808] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 240.077103][ T27] audit: type=1326 audit(1791378690.788:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4379e199 code=0x7ffc0000 [ 240.131691][ T27] audit: type=1326 audit(1791378690.788:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4379e199 code=0x7ffc0000 [ 240.135590][ T6590] overlayfs: conflicting lowerdir path [ 240.155646][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.195856][ T5808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.212708][ T5808] usb 1-1: config 0 has no interfaces? [ 240.219969][ T27] audit: type=1326 audit(1791378690.788:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7e4379e199 code=0x7ffc0000 [ 240.226550][ T5808] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 240.300467][ T27] audit: type=1326 audit(1791378690.788:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e4379df02 code=0x7ffc0000 [ 240.314291][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.324191][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.377725][ T5808] usb 1-1: config 0 descriptor?? [ 240.387039][ T27] audit: type=1326 audit(1791378690.798:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7e4375e9ce code=0x7ffc0000 [ 240.436246][ T27] audit: type=1326 audit(1791378690.798:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7e4379dfc7 code=0x7ffc0000 [ 240.502035][ T27] audit: type=1326 audit(1791378690.798:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e4375e9ce code=0x7ffc0000 [ 240.573275][ T27] audit: type=1326 audit(1791378690.798:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7e4375e9ce code=0x7ffc0000 [ 240.692587][ T27] audit: type=1326 audit(1791378690.798:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4379e199 code=0x7ffc0000 [ 240.802993][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.828164][ T27] audit: type=1326 audit(1791378690.818:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.4.507" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e4379e199 code=0x7ffc0000 [ 241.555304][ T128] gspca_vc032x: reg_r err -71 [ 241.560034][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.596223][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.601563][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.647825][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.670217][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.701719][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.722819][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.728159][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.765592][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.770930][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.823227][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.838876][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.859123][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.898170][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.912818][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.935191][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.940538][ T128] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.012840][ T128] gspca_vc032x: Unknown sensor... [ 242.017969][ T128] vc032x: probe of 8-1:0.0 failed with error -22 [ 242.104244][ T128] usb 8-1: USB disconnect, device number 3 [ 243.329073][ T14] usb 1-1: USB disconnect, device number 5 [ 243.472381][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:200' [ 243.482597][ T4276] CPU: 1 PID: 4276 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 243.490189][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.500274][ T4276] Workqueue: hci5 hci_rx_work [ 243.505013][ T4276] Call Trace: [ 243.508293][ T4276] [ 243.511220][ T4276] dump_stack_lvl+0x188/0x24e [ 243.515902][ T4276] ? show_regs_print_info+0x12/0x12 [ 243.521130][ T4276] ? load_image+0x410/0x410 [ 243.525655][ T4276] sysfs_create_dir_ns+0x26a/0x290 [ 243.530772][ T4276] ? __lock_acquire+0x7ea0/0x7ea0 [ 243.535800][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 243.540485][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 243.545714][ T4276] kobject_add_internal+0x617/0xca0 [ 243.550918][ T4276] kobject_add+0x160/0x230 [ 243.555338][ T4276] ? kobject_init+0x1c0/0x1c0 [ 243.560017][ T4276] ? __raw_spin_lock_init+0x41/0x100 [ 243.565387][ T4276] ? klist_children_get+0x50/0x50 [ 243.570428][ T4276] ? get_device_parent+0x121/0x3e0 [ 243.575554][ T4276] device_add+0x470/0x1050 [ 243.579989][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 243.584930][ T4276] hci_sync_conn_complete_evt+0x707/0xab0 [ 243.590649][ T4276] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 243.596623][ T4276] hci_event_packet+0x806/0x1290 [ 243.601564][ T4276] ? lock_chain_count+0x20/0x20 [ 243.606416][ T4276] ? bis_list+0x280/0x280 [ 243.610742][ T4276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 243.616632][ T4276] ? kcov_remote_start+0x50f/0x810 [ 243.621759][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 243.626962][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 243.632161][ T4276] hci_rx_work+0x3eb/0xd40 [ 243.636580][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 243.641435][ T4276] ? process_one_work+0x7b4/0x1160 [ 243.646548][ T4276] process_one_work+0x8ab/0x1160 [ 243.651496][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 243.657133][ T4276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 243.662170][ T4276] ? _raw_spin_lock_irqsave+0x100/0x100 [ 243.667736][ T4276] ? wq_worker_running+0x97/0x190 [ 243.672757][ T4276] worker_thread+0xaf5/0x12a0 [ 243.677456][ T4276] kthread+0x29d/0x330 [ 243.681526][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 243.686638][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 243.691221][ T4276] ret_from_fork+0x1f/0x30 [ 243.695646][ T4276] [ 243.699341][ T4276] kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 243.712793][ T4276] Bluetooth: hci5: failed to register connection device [ 244.896116][ T6665] netlink: 'syz.6.521': attribute type 1 has an invalid length. [ 245.664557][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 245.878982][ T6666] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.960831][ T6666] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.016348][ T6666] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.087106][ T6666] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.231428][ T6666] bond1: (slave geneve2): making interface the new active one [ 246.355221][ T6666] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 246.441593][ T6676] bridge0: port 3(syz_tun) entered blocking state [ 246.450492][ T6676] bridge0: port 3(syz_tun) entered disabled state [ 246.465636][ T6676] device syz_tun entered promiscuous mode [ 246.504970][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.521'. [ 246.985542][ T6698] IPVS: set_ctl: invalid protocol: 137 172.30.0.7:20001 [ 247.688676][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 247.950998][ T6711] loop7: detected capacity change from 0 to 512 [ 248.932550][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.532'. [ 249.832280][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.534'. [ 250.732707][ T6752] tipc: New replicast peer: 172.20.20.187 [ 250.755064][ T6752] tipc: Enabled bearer , priority 10 [ 252.908064][ T6785] netlink: 2 bytes leftover after parsing attributes in process `syz.4.549'. [ 256.545378][ T6836] device bridge2 entered promiscuous mode [ 256.581810][ T6836] team0: Port device bridge2 added [ 256.728168][ T6836] bridge0: port 1(team0) entered blocking state [ 256.757359][ T6836] bridge0: port 1(team0) entered disabled state [ 256.831718][ T6844] netlink: 'syz.6.563': attribute type 4 has an invalid length. [ 257.188265][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 257.212913][ T6861] bond0: option resend_igmp: invalid value (18446744072707910257) [ 257.238200][ T6861] bond0: option resend_igmp: allowed values 0 - 255 [ 259.859118][ T6888] syz.0.572: attempt to access beyond end of device [ 259.859118][ T6888] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 259.872112][ T6888] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 260.783076][ T6897] capability: warning: `syz.6.576' uses deprecated v2 capabilities in a way that may be insecure [ 261.604711][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.611053][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.968027][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.149227][ T4288] Bluetooth: hci3: hcon ffff8880476c2000 sent 2 < count 1025 [ 270.319196][ T7047] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 270.679262][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 270.690108][ T4288] CPU: 1 PID: 4288 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 270.697869][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.707952][ T4288] Workqueue: hci1 hci_rx_work [ 270.712676][ T4288] Call Trace: [ 270.715974][ T4288] [ 270.718927][ T4288] dump_stack_lvl+0x188/0x24e [ 270.723632][ T4288] ? show_regs_print_info+0x12/0x12 [ 270.728860][ T4288] ? load_image+0x410/0x410 [ 270.733411][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 270.738564][ T4288] ? __lock_acquire+0x7ea0/0x7ea0 [ 270.743631][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 270.748345][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 270.753576][ T4288] kobject_add_internal+0x617/0xca0 [ 270.758815][ T4288] kobject_add+0x160/0x230 [ 270.763271][ T4288] ? kobject_init+0x1c0/0x1c0 [ 270.767983][ T4288] ? __raw_spin_lock_init+0x41/0x100 [ 270.773294][ T4288] ? klist_children_get+0x50/0x50 [ 270.778338][ T4288] ? get_device_parent+0x121/0x3e0 [ 270.783490][ T4288] device_add+0x470/0x1050 [ 270.787945][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 270.792914][ T4288] le_conn_complete_evt+0xf93/0x15c0 [ 270.798234][ T4288] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 270.804531][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 270.810201][ T4288] ? mutex_unlock+0x10/0x10 [ 270.814735][ T4288] ? skb_pull_data+0xec/0x1f0 [ 270.819450][ T4288] hci_le_conn_complete_evt+0x183/0x440 [ 270.825033][ T4288] ? hci_remote_host_features_evt+0x230/0x230 [ 270.831140][ T4288] hci_event_packet+0x7b3/0x1290 [ 270.836126][ T4288] ? lock_chain_count+0x20/0x20 [ 270.841020][ T4288] ? bis_list+0x280/0x280 [ 270.845377][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 270.851296][ T4288] ? kcov_remote_start+0x50f/0x810 [ 270.856433][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 270.861663][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 270.866886][ T4288] hci_rx_work+0x3eb/0xd40 [ 270.871337][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 270.876226][ T4288] ? process_one_work+0x7b4/0x1160 [ 270.881365][ T4288] process_one_work+0x8ab/0x1160 [ 270.886349][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 270.892019][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 270.897077][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 270.902658][ T4288] ? wq_worker_running+0x97/0x190 [ 270.907708][ T4288] worker_thread+0xaf5/0x12a0 [ 270.912427][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 270.918368][ T4288] kthread+0x29d/0x330 [ 270.922460][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 270.927510][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 270.932119][ T4288] ret_from_fork+0x1f/0x30 [ 270.936585][ T4288] [ 270.942751][ T4288] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 270.961267][ T4288] Bluetooth: hci1: failed to register connection device [ 271.132292][ T7063] bond2: (slave bridge2): making interface the new active one [ 271.182716][ T7063] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 273.616992][ T7090] tipc: Started in network mode [ 273.622156][ T7090] tipc: Node identity fe5d6a5656e4, cluster identity 4711 [ 273.654184][ T7090] tipc: Enabled bearer , priority 0 [ 273.825048][ T7084] netlink: 'syz.4.607': attribute type 39 has an invalid length. [ 273.848837][ T7084] device syz_tun left promiscuous mode [ 273.854834][ T7084] bridge0: port 3(syz_tun) entered disabled state [ 274.852294][ T5808] tipc: Node number set to 2830723670 [ 274.944707][ T7126] syz.7.616 sent an empty control message without MSG_MORE. [ 275.363107][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 277.314038][ T7163] fuse: Bad value for 'fd' [ 277.931058][ C0] hrtimer: interrupt took 46428 ns [ 281.117295][ T7208] overlayfs: failed to clone lowerpath [ 281.544433][ T7219] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.242945][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.710609][ T7297] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 292.224810][ T7353] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 292.828915][ T7353] team0 (unregistering): Port device team_slave_0 removed [ 292.883224][ T7353] team0 (unregistering): Port device team_slave_1 removed [ 292.899520][ T7367] loop0: detected capacity change from 0 to 64 [ 292.912494][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.947583][ T7367] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 292.958836][ T7353] team0 (unregistering): Port device bridge0 removed [ 293.779399][ T7353] team0 (unregistering): Port device vlan0 removed [ 294.793053][ T7353] team0 (unregistering): Port device bridge2 removed [ 294.951849][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 296.018877][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 296.034011][ T4288] CPU: 1 PID: 4288 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 296.041611][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 296.051714][ T4288] Workqueue: hci5 hci_rx_work [ 296.056428][ T4288] Call Trace: [ 296.059721][ T4288] [ 296.062662][ T4288] dump_stack_lvl+0x188/0x24e [ 296.067453][ T4288] ? show_regs_print_info+0x12/0x12 [ 296.072669][ T4288] ? load_image+0x410/0x410 [ 296.077207][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 296.082342][ T4288] ? __lock_acquire+0x7ea0/0x7ea0 [ 296.087392][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 296.092097][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 296.097316][ T4288] kobject_add_internal+0x617/0xca0 [ 296.102544][ T4288] kobject_add+0x160/0x230 [ 296.106981][ T4288] ? kobject_init+0x1c0/0x1c0 [ 296.111678][ T4288] ? __raw_spin_lock_init+0x41/0x100 [ 296.116983][ T4288] ? klist_children_get+0x50/0x50 [ 296.122021][ T4288] ? get_device_parent+0x121/0x3e0 [ 296.127159][ T4288] device_add+0x470/0x1050 [ 296.131602][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 296.136559][ T4288] le_conn_complete_evt+0xf93/0x15c0 [ 296.141864][ T4288] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 296.148123][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 296.153780][ T4288] ? mutex_unlock+0x10/0x10 [ 296.158299][ T4288] ? skb_pull_data+0xec/0x1f0 [ 296.162995][ T4288] hci_le_conn_complete_evt+0x183/0x440 [ 296.168561][ T4288] ? hci_remote_host_features_evt+0x230/0x230 [ 296.174645][ T4288] hci_event_packet+0x7b3/0x1290 [ 296.179693][ T4288] ? lock_chain_count+0x20/0x20 [ 296.184564][ T4288] ? bis_list+0x280/0x280 [ 296.188903][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 296.194808][ T4288] ? kcov_remote_start+0x50f/0x810 [ 296.199936][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 296.205156][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 296.210371][ T4288] hci_rx_work+0x3eb/0xd40 [ 296.214816][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 296.219708][ T4288] ? process_one_work+0x7b4/0x1160 [ 296.224836][ T4288] process_one_work+0x8ab/0x1160 [ 296.229804][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 296.235459][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 296.240514][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 296.246082][ T4288] ? wq_worker_running+0x97/0x190 [ 296.251121][ T4288] worker_thread+0xaf5/0x12a0 [ 296.255827][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 296.261838][ T4288] kthread+0x29d/0x330 [ 296.265920][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 296.270966][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 296.275572][ T4288] ret_from_fork+0x1f/0x30 [ 296.280020][ T4288] [ 296.297204][ T4288] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 296.310695][ T4288] Bluetooth: hci5: failed to register connection device [ 297.061388][ T7408] netlink: 104 bytes leftover after parsing attributes in process `syz.6.681'. [ 297.838238][ T7416] sctp: [Deprecated]: syz.6.685 (pid 7416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.838238][ T7416] Use struct sctp_sack_info instead [ 298.386888][ T4288] Bluetooth: hci5: unexpected cc 0x042d length: 63 > 7 [ 298.963078][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 299.027475][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 299.073132][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 299.754079][ T7470] jffs2: notice: (7470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 300.819535][ T7491] tipc: Failed to remove unknown binding: 66,0,0/0:1293348860/1293348861 [ 300.830789][ T7491] tipc: Failed to remove unknown binding: 66,0,0/0:1293348860/1293348861 [ 301.917032][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 301.917045][ T27] audit: type=1326 audit(1791378752.628:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b479e199 code=0x7ffc0000 [ 302.070090][ T27] audit: type=1326 audit(1791378752.728:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f22b4797f17 code=0x7ffc0000 [ 302.128156][ T27] audit: type=1326 audit(1791378752.728:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f22b473f519 code=0x7ffc0000 [ 302.273883][ T27] audit: type=1326 audit(1791378752.728:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b479e199 code=0x7ffc0000 [ 302.332835][ T27] audit: type=1326 audit(1791378752.728:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f22b479e199 code=0x7ffc0000 [ 302.379909][ T27] audit: type=1326 audit(1791378752.968:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f22b4797f17 code=0x7ffc0000 [ 302.412807][ T4288] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 302.421493][ T4288] Bluetooth: hci5: Injecting HCI hardware error event [ 302.436524][ T4276] Bluetooth: hci5: hardware error 0x00 [ 302.469689][ T27] audit: type=1326 audit(1791378752.968:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f22b473f519 code=0x7ffc0000 [ 302.501813][ T27] audit: type=1326 audit(1791378752.968:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b479e199 code=0x7ffc0000 [ 302.759312][ T27] audit: type=1326 audit(1791378752.968:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b479e199 code=0x7ffc0000 [ 302.784110][ T27] audit: type=1326 audit(1791378753.018:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.6.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f22b4797f17 code=0x7ffc0000 [ 304.942365][ T4276] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 305.449700][ T7536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.973000][ T4276] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 309.990189][ T7586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.050567][ T4276] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 311.059420][ T4276] Bluetooth: hci0: Injecting HCI hardware error event [ 311.069706][ T4288] Bluetooth: hci0: hardware error 0x00 [ 311.126664][ T4318] nvmet: connect request for invalid subsystem t! [ 311.210604][ T7603] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 311.325200][ T7612] netlink: 'syz.4.740': attribute type 4 has an invalid length. [ 312.152467][ T7628] jffs2: notice: (7628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 312.891066][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.744'. [ 312.953248][ T7633] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 313.364377][ T4288] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 318.430984][ T7678] device bond2 entered promiscuous mode [ 322.091190][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.100171][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.948289][ T7721] netlink: 'syz.2.769': attribute type 4 has an invalid length. [ 328.073780][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 328.101438][ T7743] overlayfs: failed to clone upperpath [ 330.098685][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 330.107857][ T7777] device bridge_slave_1 left promiscuous mode [ 330.114137][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.333219][ T7777] device bridge_slave_0 left promiscuous mode [ 330.339449][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.716483][ T7800] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 333.269973][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 333.287075][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 333.350393][ T7822] netlink: 20 bytes leftover after parsing attributes in process `syz.6.795'. [ 334.081252][ T7816] ceph: No mds server is up or the cluster is laggy [ 334.732363][ T7833] 9pnet_fd: Insufficient options for proto=fd [ 340.088575][ T7894] sctp: [Deprecated]: syz.4.811 (pid 7894) Use of int in max_burst socket option. [ 340.088575][ T7894] Use struct sctp_assoc_value instead [ 346.306786][ T7985] IPv6: sit1: Disabled Multicast RS [ 347.682911][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.271475][ T8063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.529738][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.875'. [ 361.562382][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.894'. [ 361.573448][ T8143] fuse: Bad value for 'rootmode' [ 363.834941][ T8173] 9pnet_fd: Insufficient options for proto=fd [ 367.817224][ T27] kauditd_printk_skb: 120 callbacks suppressed [ 367.817327][ T27] audit: type=1326 audit(1791378818.478:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 368.733630][ T27] audit: type=1326 audit(1791378818.478:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 368.781908][ T27] audit: type=1326 audit(1791378818.478:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 368.917762][ T27] audit: type=1326 audit(1791378818.478:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 368.972836][ T27] audit: type=1326 audit(1791378818.478:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 369.037869][ T27] audit: type=1326 audit(1791378818.478:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 369.147866][ T27] audit: type=1326 audit(1791378818.478:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 369.246535][ T27] audit: type=1326 audit(1791378818.488:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.7.917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c459e199 code=0x7ffc0000 [ 371.330454][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.927'. [ 373.248952][ T8278] mmap: syz.6.932 (8278): VmData 39559168 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 375.881087][ T8298] tipc: Failed to remove unknown binding: 66,0,0/134353152:3120416793/3120416795 [ 376.094744][ T8298] tipc: Failed to remove unknown binding: 66,0,0/134353152:3120416793/3120416794 [ 376.460765][ T8298] tipc: Failed to remove unknown binding: 66,0,0/134353152:3120416793/3120416795 [ 376.670972][ T8298] tipc: Failed to remove unknown binding: 66,0,0/134353152:3120416793/3120416794 [ 382.025694][ T8361] 9pnet_fd: Insufficient options for proto=fd [ 383.934091][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.940482][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.612888][ T8407] Option 'dnserror' to dns_resolver key: bad/missing value [ 387.922489][ T4288] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 387.945471][ T4288] Bluetooth: hci2: Injecting HCI hardware error event [ 387.955087][ T4288] Bluetooth: hci2: hardware error 0x00 [ 390.963013][ T4288] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 396.246618][ T8503] trusted_key: encrypted_key: insufficient parameters specified [ 396.482704][ T3934] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.495276][ T3934] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.512102][ T3934] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.555735][ T3934] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.578866][ T3934] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.602048][ T3934] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.627261][ T3934] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.657151][ T3934] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.998473][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.009322][ T8515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.086939][ T128] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.393496][ T8515] bond1: (slave geneve2): Releasing active interface [ 397.452837][ T8515] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.594311][ T8515] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.612898][ T8515] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.630240][ T8515] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.989344][ T128] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.357293][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 407.394701][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 407.430860][ T8656] device geneve3 entered promiscuous mode [ 408.955582][ T8676] syz.4.1022 uses obsolete (PF_INET,SOCK_PACKET) [ 409.125255][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.652048][ T8700] Cannot find add_set index 2 as target [ 419.000183][ T8792] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 419.000183][ T8792] [ 419.014369][ T8792] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 419.027045][ T8792] CIFS: Attempting to mount \\127.0.0.1\share [ 419.035414][ T8792] CIFS: VFS: Error connecting to socket. Aborting operation. [ 419.043390][ T8792] CIFS: VFS: cifs_mount failed w/return code = -111 [ 424.438831][ T8866] bridge0: port 1(syz_tun) entered blocking state [ 424.463221][ T8866] bridge0: port 1(syz_tun) entered disabled state [ 424.471259][ T8866] device syz_tun entered promiscuous mode [ 424.505095][ T8866] bridge0: port 1(syz_tun) entered blocking state [ 424.511635][ T8866] bridge0: port 1(syz_tun) entered forwarding state [ 424.567160][ T8867] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 429.819385][ T8616] net_ratelimit: 42 callbacks suppressed [ 430.630149][ T8952] futex_wake_op: syz.7.1087 tries to shift op by 144; fix this program [ 431.574324][ T8962] tipc: Enabling of bearer rejected, already enabled [ 431.780745][ T8962] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 434.823748][ T4381] net_ratelimit: 45 callbacks suppressed [ 436.262378][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1112'. [ 436.689148][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 439.843379][ C1] net_ratelimit: 28 callbacks suppressed [ 443.573033][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1135'. [ 445.025516][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.036294][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.202764][ C1] net_ratelimit: 45 callbacks suppressed [ 447.798230][ T9162] capability: warning: `syz.6.1155' uses 32-bit capabilities (legacy support in use) [ 447.998379][ T9167] MPTCP: kernel_bind error, err=-99 [ 451.113042][ C0] net_ratelimit: 49 callbacks suppressed [ 453.218907][ T9217] FAULT_INJECTION: forcing a failure. [ 453.218907][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 453.231588][ T9217] CPU: 0 PID: 9217 Comm: syz.0.1169 Not tainted syzkaller #0 [ 453.238958][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.249035][ T9217] Call Trace: [ 453.252372][ T9217] [ 453.255339][ T9217] dump_stack_lvl+0x188/0x24e [ 453.260106][ T9217] ? show_regs_print_info+0x12/0x12 [ 453.265303][ T9217] ? load_image+0x410/0x410 [ 453.269834][ T9217] ? __might_sleep+0xd0/0xd0 [ 453.274597][ T9217] ? __lock_acquire+0x7ea0/0x7ea0 [ 453.279631][ T9217] should_fail_ex+0x390/0x4c0 [ 453.284379][ T9217] should_failslab+0x5/0x20 [ 453.288933][ T9217] slab_pre_alloc_hook+0x59/0x300 [ 453.294099][ T9217] kmem_cache_alloc+0x56/0x2f0 [ 453.298862][ T9217] ? getname_flags+0xb7/0x500 [ 453.303584][ T9217] getname_flags+0xb7/0x500 [ 453.308082][ T9217] __x64_sys_symlinkat+0x78/0xa0 [ 453.313011][ T9217] do_syscall_64+0x4c/0xa0 [ 453.317414][ T9217] ? clear_bhb_loop+0x60/0xb0 [ 453.322188][ T9217] ? clear_bhb_loop+0x60/0xb0 [ 453.326870][ T9217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.332758][ T9217] RIP: 0033:0x7f3825d9e199 [ 453.337190][ T9217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.356943][ T9217] RSP: 002b:00007f3826d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 453.365407][ T9217] RAX: ffffffffffffffda RBX: 00007f3826025fa0 RCX: 00007f3825d9e199 [ 453.373363][ T9217] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 453.381321][ T9217] RBP: 00007f3825e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 453.389286][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.397252][ T9217] R13: 00007f3826026038 R14: 00007f3826025fa0 R15: 00007fffc71ff6f8 [ 453.405222][ T9217] [ 453.411193][ T9217] kAFS: No cell specified [ 454.529604][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 456.129340][ C1] net_ratelimit: 38 callbacks suppressed [ 461.522755][ C1] net_ratelimit: 37 callbacks suppressed [ 462.644841][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.715236][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.723674][ T4400] net_ratelimit: 48 callbacks suppressed [ 471.762764][ C1] net_ratelimit: 36 callbacks suppressed [ 476.962909][ C0] net_ratelimit: 40 callbacks suppressed [ 480.999941][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 482.009645][ T8616] net_ratelimit: 46 callbacks suppressed [ 486.106496][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.581283][ T9523] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 486.759356][ T9524] syzkaller0: renamed from gre1 [ 487.122751][ C1] net_ratelimit: 49 callbacks suppressed [ 490.032811][ T6076] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 490.135790][ T9565] tipc: Enabling of bearer rejected, failed to enable media [ 490.243535][ T6076] usb 1-1: Using ep0 maxpacket: 8 [ 490.320307][ T6076] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 490.496770][ T6076] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.730323][ T6076] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 490.752796][ T6076] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 490.882741][ T6076] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.926554][ T6076] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 490.963641][ T6076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.318950][ T6076] usb 1-1: usb_control_msg returned -32 [ 491.325541][ T6076] usbtmc 1-1:16.0: can't read capabilities [ 492.157229][ C1] net_ratelimit: 33 callbacks suppressed [ 492.363893][ T5808] usb 1-1: USB disconnect, device number 6 [ 492.369991][ T9550] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 492.421115][ T9587] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 495.134938][ T9620] Cannot find add_set index 2 as target [ 495.165653][ T9620] MPTCP: kernel_bind error, err=-99 [ 497.945838][ T57] net_ratelimit: 50 callbacks suppressed [ 501.434918][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1302'. [ 502.486887][ T9683] Cannot find map_set index 32 as target [ 503.042753][ C1] net_ratelimit: 52 callbacks suppressed [ 506.413357][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.419704][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.140894][ C0] net_ratelimit: 55 callbacks suppressed [ 509.349242][ T9769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.357864][ T9769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.202723][ C1] net_ratelimit: 49 callbacks suppressed [ 518.562741][ C0] net_ratelimit: 39 callbacks suppressed [ 523.693170][ T8620] net_ratelimit: 30 callbacks suppressed [ 528.842158][ T7565] net_ratelimit: 38 callbacks suppressed [ 531.601909][ T9969] trusted_key: encrypted_key: insufficient parameters specified [ 533.947910][ C0] net_ratelimit: 39 callbacks suppressed [ 536.573818][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1402'. [ 539.254479][ T4398] net_ratelimit: 43 callbacks suppressed [ 543.502014][T10059] Cannot find del_set index 4 as target [ 544.332873][ T7823] net_ratelimit: 46 callbacks suppressed [ 549.352515][ T7823] net_ratelimit: 43 callbacks suppressed [ 550.309429][T10139] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 550.309429][T10139] [ 550.323515][T10139] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 550.336105][T10139] CIFS: Attempting to mount \\127.0.0.1\share [ 550.342859][T10139] CIFS: VFS: Error connecting to socket. Aborting operation. [ 550.350294][T10139] CIFS: VFS: cifs_mount failed w/return code = -101 [ 554.803117][ C1] net_ratelimit: 51 callbacks suppressed [ 555.616879][T10202] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 555.616879][T10202] [ 555.630739][T10202] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 555.643367][T10202] CIFS: Attempting to mount \\127.0.0.1\share [ 556.508549][T10202] CIFS: VFS: Error connecting to socket. Aborting operation. [ 556.516387][T10202] CIFS: VFS: cifs_mount failed w/return code = -4 [ 558.136441][T10236] infiniband syz0: set active [ 558.141529][T10236] infiniband syz0: added veth1_to_bridge [ 558.270526][T10236] infiniband syz0: Couldn't open port 1 [ 558.290060][T10236] RDS/IB: syz0: added [ 558.295036][T10236] smc: adding ib device syz0 with port count 1 [ 558.301641][T10236] smc: ib device syz0 port 1 has pnetid [ 560.402868][ C1] net_ratelimit: 64 callbacks suppressed [ 565.442731][ C0] net_ratelimit: 44 callbacks suppressed [ 567.233214][ T2168] libceph: connect (1)[c::]:6789 error -101 [ 567.239354][ T2168] libceph: mon0 (1)[c::]:6789 connect error [ 567.347357][T10328] ceph: No mds server is up or the cluster is laggy [ 567.505883][ T26] libceph: connect (1)[c::]:6789 error -101 [ 567.511972][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 568.447725][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.454163][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.143686][T10354] device ip6gretap0 entered promiscuous mode [ 570.736527][ T52] net_ratelimit: 73 callbacks suppressed [ 574.807565][T10386] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 574.815857][T10386] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 574.824738][T10386] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 574.834668][T10386] Error parsing options; rc = [-22] [ 575.912959][ C1] net_ratelimit: 55 callbacks suppressed [ 581.874876][ C0] net_ratelimit: 35 callbacks suppressed [ 583.282145][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1520'. [ 583.412906][T10464] tipc: Enabling of bearer rejected, failed to enable media [ 586.770450][T10504] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1536'. [ 587.043586][ T4366] net_ratelimit: 51 callbacks suppressed [ 590.654496][T10548] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1549'. [ 592.162856][ C1] net_ratelimit: 52 callbacks suppressed [ 597.202777][ C1] net_ratelimit: 42 callbacks suppressed [ 598.458533][T10634] No such timeout policy "syz1" [ 598.542879][ T14] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 599.285947][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 599.470943][T10641] ceph: No mds server is up or the cluster is laggy [ 599.481895][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 601.258278][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.396629][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 601.427740][ T14] usb 1-1: can't read configurations, error -71 [ 602.242743][ C1] net_ratelimit: 43 callbacks suppressed [ 603.258894][T10691] tipc: Enabling of bearer rejected, failed to enable media [ 604.842581][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1586'. [ 604.879146][T10701] tipc: Disabling bearer [ 605.080338][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.099057][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.112241][T10706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.128671][T10706] device bridge_slave_0 left promiscuous mode [ 605.168229][T10706] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.228938][T10706] device bridge_slave_1 left promiscuous mode [ 605.272379][T10706] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.386498][T10706] bond0: (slave bond_slave_0): Releasing backup interface [ 605.498242][T10706] bond0: (slave bond_slave_1): Releasing backup interface [ 605.696760][T10706] team0: Port device team_slave_0 removed [ 605.784104][T10706] team0: Port device team_slave_1 removed [ 605.797450][T10711] netlink: 'syz.2.1588': attribute type 16 has an invalid length. [ 605.805351][T10711] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1588'. [ 605.816706][T10706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.831132][T10706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.008602][T10706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.172526][T10706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.268411][ C1] net_ratelimit: 42 callbacks suppressed [ 610.207266][T10713] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.017547][T10744] tipc: Enabling of bearer rejected, failed to enable media [ 612.412772][ C1] net_ratelimit: 36 callbacks suppressed [ 616.971269][T10808] device team0 entered promiscuous mode [ 616.987241][T10808] device team_slave_0 entered promiscuous mode [ 616.997579][T10808] device team_slave_1 entered promiscuous mode [ 617.535783][T10808] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 617.762847][ C1] net_ratelimit: 46 callbacks suppressed [ 617.915290][T10815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.181847][T10815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.701707][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1623'. [ 619.143124][T10815] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 619.920196][T10815] bond0 (unregistering): Released all slaves [ 622.995232][ C0] net_ratelimit: 39 callbacks suppressed [ 623.663594][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 623.719446][ T27] audit: type=1326 audit(2000000085.089:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.6.1634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22b479e199 code=0x0 [ 628.012737][ C1] net_ratelimit: 40 callbacks suppressed [ 629.577843][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.584190][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.122691][ C0] net_ratelimit: 40 callbacks suppressed [ 637.249398][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1667'. [ 638.157032][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 638.166527][T11003] block nbd0: Unsupported socket: should be TCP or UNIX. [ 638.192745][ C0] net_ratelimit: 41 callbacks suppressed [ 638.409365][T11012] overlayfs: conflicting options: nfs_export=on,index=off [ 638.911644][T11018] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1673'. [ 640.197138][T11027] block device autoloading is deprecated and will be removed. [ 640.205676][T11027] XFS (loop0): Invalid device [./loop0], error=-16 [ 640.358689][T11035] netlink: 'syz.7.1677': attribute type 11 has an invalid length. [ 641.194530][T11041] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1678'. [ 641.203706][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1678'. [ 641.213381][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1678'. [ 641.222269][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1678'. [ 641.904115][T11036] device wlan0 entered promiscuous mode [ 642.013972][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 642.697501][T11056] atomic_op ffff88807d649998 conn xmit_atomic 0000000000000000 [ 642.706408][T11056] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 643.436082][ C1] net_ratelimit: 40 callbacks suppressed [ 643.497595][T11062] overlayfs: failed to resolve './file1': -2 [ 648.085877][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1691'. [ 648.722728][ C1] net_ratelimit: 41 callbacks suppressed [ 650.301207][T11110] CIFS: Attempting to mount \\127.0.0.1\share [ 650.309935][T11110] CIFS: VFS: Error connecting to socket. Aborting operation. [ 650.317517][T11110] CIFS: VFS: cifs_mount failed w/return code = -101 [ 653.895209][ C1] net_ratelimit: 45 callbacks suppressed [ 659.005899][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1714'. [ 659.015001][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1714'. [ 659.122793][ C1] net_ratelimit: 55 callbacks suppressed [ 660.012984][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.595903][T11193] tipc: Started in network mode [ 663.601000][T11193] tipc: Node identity 4, cluster identity 4711 [ 663.607408][T11193] tipc: Node number set to 4 [ 664.438089][ T8616] net_ratelimit: 39 callbacks suppressed [ 669.460531][ T7565] net_ratelimit: 33 callbacks suppressed [ 672.083681][T11307] netlink: 'syz.6.1740': attribute type 2 has an invalid length. [ 672.091927][T11307] netlink: 'syz.6.1740': attribute type 2 has an invalid length. [ 672.099816][T11307] netlink: 'syz.6.1740': attribute type 2 has an invalid length. [ 672.107646][T11307] netlink: 'syz.6.1740': attribute type 2 has an invalid length. [ 674.554602][T11301] loop0: detected capacity change from 0 to 256 [ 674.642767][ C0] net_ratelimit: 57 callbacks suppressed [ 680.402688][ C1] net_ratelimit: 53 callbacks suppressed [ 685.522669][ C0] net_ratelimit: 58 callbacks suppressed [ 687.341689][T11432] batman_adv: batadv0: Adding interface: ip6gretap1 [ 687.360134][T11432] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.402114][T11432] batman_adv: batadv0: Interface activated: ip6gretap1 [ 689.656220][T11462] rdma_rxe: rxe_register_device failed with error -23 [ 689.667312][T11462] rdma_rxe: failed to add veth1_to_bridge [ 690.450525][T11469] tipc: Enabled bearer , priority 0 [ 690.725972][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.726022][ C0] net_ratelimit: 42 callbacks suppressed [ 690.732329][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.202280][T11568] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 696.362825][ C1] net_ratelimit: 42 callbacks suppressed [ 701.668598][ T4299] net_ratelimit: 46 callbacks suppressed [ 703.447187][T11645] tipc: Enabling of bearer rejected, failed to enable media [ 707.106350][ T8603] net_ratelimit: 38 callbacks suppressed [ 711.226700][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1803'. [ 711.235823][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1803'. [ 712.608554][ C1] net_ratelimit: 34 callbacks suppressed [ 718.127178][ C1] net_ratelimit: 59 callbacks suppressed [ 718.567268][T11799] rdma_rxe: rxe_register_device failed with error -23 [ 718.574984][T11799] rdma_rxe: failed to add veth1_to_bridge [ 722.942843][ T4381] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 723.202701][ T4381] usb 1-1: Using ep0 maxpacket: 16 [ 723.310757][ T4381] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.362643][ C0] net_ratelimit: 52 callbacks suppressed [ 723.628378][ T4381] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 723.726072][T11848] tipc: Enabled bearer , priority 0 [ 723.743933][ T4381] usb 1-1: config 0 interface 0 has no altsetting 0 [ 723.750670][T11848] tipc: Resetting bearer [ 723.798640][ T4381] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 723.798917][T11848] tipc: Disabling bearer [ 723.855952][ T4381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.908856][ T4381] usb 1-1: config 0 descriptor?? [ 724.534772][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1843'. [ 725.819720][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1859'. [ 725.991545][T11868] netlink: 'syz.6.1859': attribute type 1 has an invalid length. [ 726.234735][T11872] rdma_rxe: rxe_register_device failed with error -23 [ 726.241629][T11872] rdma_rxe: failed to add veth1_to_bridge [ 726.298474][T11868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 727.038286][T11868] bond3: (slave gretap1): making interface the new active one [ 727.264640][T11868] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 727.326671][T11806] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 728.484352][T11771] net_ratelimit: 62 callbacks suppressed [ 729.226104][T11882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1851'. [ 729.235147][T11882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1851'. [ 729.658159][ T4381] usbhid 1-1:0.0: can't add hid device: -32 [ 729.666398][ T4381] usbhid: probe of 1-1:0.0 failed with error -32 [ 729.867966][ T4381] usb 1-1: USB disconnect, device number 9 [ 730.100547][T11903] Cannot find add_set index 0 as target [ 733.613336][ C1] net_ratelimit: 66 callbacks suppressed [ 734.637728][T11970] Cannot find map_set index 32 as target [ 739.100606][ C0] net_ratelimit: 38 callbacks suppressed [ 739.180904][T12005] tipc: Enabled bearer , priority 0 [ 739.194308][T12005] tipc: Resetting bearer [ 739.228169][T12005] bridge0: port 1(syz_tun) entered disabled state [ 739.301696][T12005] device syz_tun left promiscuous mode [ 739.316357][T12005] bridge0: port 1(syz_tun) entered disabled state [ 739.330661][T12005] tipc: Disabling bearer [ 739.677865][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 739.973144][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 740.085813][T12035] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 740.241468][T12035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 740.833383][T12042] bond3: (slave gretap1): making interface the new active one [ 740.906649][T12042] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 740.954820][T11762] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 742.743106][ T4288] Bluetooth: hci1: hardware error 0x04 [ 743.950377][T12073] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 743.976057][T12073] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 744.955806][ C1] net_ratelimit: 49 callbacks suppressed [ 745.050702][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 748.075255][T12127] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 748.326483][T12128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.399498][T12128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.468739][T12128] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 748.519395][T12128] bond0 (unregistering): Released all slaves [ 750.322629][ C1] net_ratelimit: 50 callbacks suppressed [ 752.573007][T12145] overlayfs: failed to clone upperpath [ 752.641313][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.647831][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.873368][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 752.897721][T12150] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 753.163065][T12150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.280013][T12157] bond0: (slave gretap1): making interface the new active one [ 753.334904][T12157] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 753.379366][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 755.424370][T11783] net_ratelimit: 46 callbacks suppressed [ 758.567613][T12218] device team0 entered promiscuous mode [ 758.699054][T12218] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 760.198846][T12219] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 760.219756][T12219] bond0 (unregistering): Released all slaves [ 760.493781][T11762] net_ratelimit: 46 callbacks suppressed [ 761.227155][T12243] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1935'. [ 761.336456][T12231] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.345344][T12231] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.354129][T12231] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.362917][T12231] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.402775][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 764.877654][T12264] tipc: Started in network mode [ 764.898087][T12264] tipc: Node identity 4, cluster identity 4711 [ 764.923868][T12264] tipc: Node number set to 4 [ 765.682649][ C1] net_ratelimit: 40 callbacks suppressed [ 766.285307][T12274] tipc: Enabled bearer , priority 0 [ 766.329030][T12274] tipc: Resetting bearer [ 766.435306][T12274] tipc: Disabling bearer [ 769.048460][T12295] xt_CT: No such helper "pptp" [ 769.280198][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1952'. [ 771.362626][ C0] net_ratelimit: 48 callbacks suppressed [ 772.398716][T12343] block device autoloading is deprecated and will be removed. [ 772.406495][T12343] XFS (loop0): Invalid device [./loop0], error=-16 [ 774.657084][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1966'. [ 774.676226][T12367] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1963'. [ 774.685637][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1963'. [ 774.694710][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1963'. [ 774.703639][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1963'. [ 774.993168][T12366] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12366] [ 775.067996][T12362] tipc: Started in network mode [ 775.079673][T12362] tipc: Node identity 4, cluster identity 4711 [ 775.094885][T12362] tipc: Node number set to 4 [ 775.110831][T12362] tipc: Enabling of bearer rejected, failed to enable media [ 777.042606][ C1] net_ratelimit: 47 callbacks suppressed [ 777.623077][T12403] overlayfs: failed to clone upperpath [ 779.683296][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 781.905006][ T27] audit: type=1326 audit(2000000243.279:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.7.1984" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22c459e199 code=0x0 [ 782.482638][ C0] net_ratelimit: 46 callbacks suppressed [ 782.686897][T12454] tipc: Enabling of bearer rejected, failed to enable media [ 786.573820][T12471] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6153] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12471] [ 787.922807][T11773] net_ratelimit: 50 callbacks suppressed [ 788.015170][T12478] loop0: detected capacity change from 0 to 128 [ 788.038411][T12478] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 790.448359][T12502] netlink: 'syz.2.1992': attribute type 11 has an invalid length. [ 791.393096][ T4373] ------------[ cut here ]------------ [ 791.399386][ T4373] WARNING: CPU: 1 PID: 4373 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760 [ 791.409196][ T4373] Modules linked in: [ 791.413223][ T4373] CPU: 1 PID: 4373 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 791.421060][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 791.431193][ T4373] Workqueue: events_unbound io_ring_exit_work [ 791.437773][ T4373] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 791.443640][ T4373] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 be 2f 11 00 48 85 c0 75 40 e8 64 f4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 f4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 791.463448][ T4373] RSP: 0018:ffffc9000475fac0 EFLAGS: 00010293 [ 791.463521][ T4373] [ 791.463529][ T4373] RAX: ffffffff8a2b522b RBX: 1ffff1100ad56603 RCX: ffff888029253c00 [ 791.463544][ T4373] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 791.463562][ T4373] RBP: ffffc9000475fc30 R08: ffffc9000475fa47 R09: 1ffff920008ebf48 [ 791.463574][ T4373] R10: dffffc0000000000 R11: fffff520008ebf49 R12: dffffc0000000000 [ 791.463586][ T4373] R13: 000000010000bf50 R14: 000000010000bf53 R15: ffff888056ab3018 [ 791.463597][ T4373] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 791.463610][ T4373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.463621][ T4373] CR2: 0000200000203000 CR3: 00000000238e3000 CR4: 00000000003506e0 [ 791.463636][ T4373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 791.472680][ T4373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 791.552797][ T4373] Call Trace: [ 791.556100][ T4373] [ 791.559075][ T4373] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 791.564980][ T4373] ? _raw_spin_unlock+0x40/0x40 [ 791.569878][ T4373] ? _raw_spin_unlock_irq+0x1f/0x40 [ 791.575315][ T4373] ? process_one_work+0x7b4/0x1160 [ 791.580564][ T4373] process_one_work+0x8ab/0x1160 [ 791.585633][ T4373] ? worker_detach_from_pool+0x240/0x240 [ 791.591297][ T4373] ? _raw_spin_lock_irq+0xb7/0xf0 [ 791.596547][ T4373] ? _raw_spin_lock_irqsave+0x100/0x100 [ 791.602127][ T4373] ? wq_worker_running+0x97/0x190 [ 791.607461][ T4373] worker_thread+0xaf5/0x12a0 [ 791.612192][ T4373] kthread+0x29d/0x330 [ 791.616364][ T4373] ? worker_clr_flags+0x1a0/0x1a0 [ 791.621413][ T4373] ? kthread_blkcg+0xd0/0xd0 [ 791.626154][ T4373] ret_from_fork+0x1f/0x30 [ 791.630641][ T4373] [ 791.633750][ T4373] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 791.641954][ T4373] CPU: 1 PID: 4373 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 791.648225][T12510] sock ffff888075220c00 [ 791.648943][T12510] sock ffff888075220c00 sk ffff88807a102000 [ 791.649112][T12510] channel 2 len 36 [ 791.649389][T12510] sock ffff888075220c00 sk ffff88807a102000 [ 791.649434][T12510] got 7 bytes [ 791.649598][T12510] channel 2 len 13 [ 791.649658][T12510] 3 [ 791.649697][T12510] hci3 orig refcnt 16 [ 791.649754][T12510] Bluetooth: MGMT ver 1.22 [ 791.649788][T12510] hci3: sock ffff88807a102000 [ 791.652974][T12510] hci3 orig refcnt 17 [ 791.656209][T12506] sock ffff888075220c00 sk ffff88807a102000 [ 791.656251][T12506] channel 2 len 10 [ 791.670296][ C0] virtqueue callback for ffff888025236400 (ffffffff858ab660) [ 791.712939][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 791.722993][ T4373] Workqueue: events_unbound io_ring_exit_work [ 791.729071][ T4373] Call Trace: [ 791.732345][ T4373] [ 791.735277][ T4373] dump_stack_lvl+0x188/0x24e [ 791.739974][ T4373] ? memcpy+0x3c/0x60 [ 791.744095][ T4373] ? show_regs_print_info+0x12/0x12 [ 791.749384][ T4373] ? load_image+0x410/0x410 [ 791.753951][ T4373] panic+0x2d3/0x710 [ 791.757853][ T4373] ? bpf_jit_dump+0xd0/0xd0 [ 791.762450][ T4373] ? ret_from_fork+0x1f/0x30 [ 791.767041][ T4373] __warn+0x2f8/0x4f0 [ 791.771026][ T4373] ? io_ring_exit_work+0x329/0x760 [ 791.776230][ T4373] ? io_ring_exit_work+0x329/0x760 [ 791.781338][ T4373] report_bug+0x2ba/0x4f0 [ 791.785706][ T4373] ? io_ring_exit_work+0x329/0x760 [ 791.790820][ T4373] handle_bug+0x3a/0x70 [ 791.794973][ T4373] exc_invalid_op+0x16/0x40 [ 791.799469][ T4373] asm_exc_invalid_op+0x16/0x20 [ 791.804311][ T4373] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 791.810047][ T4373] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 be 2f 11 00 48 85 c0 75 40 e8 64 f4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 f4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 791.829663][ T4373] RSP: 0018:ffffc9000475fac0 EFLAGS: 00010293 [ 791.835736][ T4373] RAX: ffffffff8a2b522b RBX: 1ffff1100ad56603 RCX: ffff888029253c00 [ 791.843822][ T4373] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 791.851997][ T4373] RBP: ffffc9000475fc30 R08: ffffc9000475fa47 R09: 1ffff920008ebf48 [ 791.859978][ T4373] R10: dffffc0000000000 R11: fffff520008ebf49 R12: dffffc0000000000 [ 791.867948][ T4373] R13: 000000010000bf50 R14: 000000010000bf53 R15: ffff888056ab3018 [ 791.875943][ T4373] ? io_ring_exit_work+0x329/0x760 [ 791.881093][ T4373] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 791.886922][ T4373] ? _raw_spin_unlock+0x40/0x40 [ 791.891767][ T4373] ? _raw_spin_unlock_irq+0x1f/0x40 [ 791.896958][ T4373] ? process_one_work+0x7b4/0x1160 [ 791.902065][ T4373] process_one_work+0x8ab/0x1160 [ 791.907019][ T4373] ? worker_detach_from_pool+0x240/0x240 [ 791.912651][ T4373] ? _raw_spin_lock_irq+0xb7/0xf0 [ 791.914238][ C0] virtqueue callback for ffff888025236400 (ffffffff858ab660) [ 791.925030][ T4373] ? _raw_spin_lock_irqsave+0x100/0x100 [ 791.930574][ T4373] ? wq_worker_running+0x97/0x190 [ 791.935593][ T4373] worker_thread+0xaf5/0x12a0 [ 791.940286][ T4373] kthread+0x29d/0x330 [ 791.944347][ T4373] ? worker_clr_flags+0x1a0/0x1a0 [ 791.949367][ T4373] ? kthread_blkcg+0xd0/0xd0 [ 791.953949][ T4373] ret_from_fork+0x1f/0x30 [ 791.958372][ T4373] [ 791.961631][ T4373] Kernel Offset: disabled [ 791.966037][ T4373] Rebooting in 86400 seconds..