last executing test programs: 25m45.287265418s ago: executing program 32 (id=139): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000800, &(0x7f0000000340)=ANY=[], 0x7, 0x249, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x54381, 0x9) 25m40.991939133s ago: executing program 33 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='syzkaller\x00', 0x4, 0xff0, &(0x7f0000003a80)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) 25m38.011751497s ago: executing program 34 (id=169): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1008800, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/855], 0x4, 0x287, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys\x00', 0x1ff) 25m17.943040093s ago: executing program 35 (id=229): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 25m10.993423163s ago: executing program 36 (id=248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000004c0)=0x3, 0x4) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f00000006c0)="2d76b41cfadba8c9e82b39a58fade4a1e1c7ef34f18f9ee7ea705a387831c57c3f007c87ff6a6d56a0412772be538a3a9da7d06107b64274af1202839475620c45529c8e1e684c2118de638371ec1ba4ff979185630a5fad24e8eac0e002159a4516f523cc596c18dea7d58a7fc7d7c536f144c2a3cd4b3c32712d9df8e06635edabc3756f4574734399c629e21514de00ca9cb5db71b1fd95c571fc14e0935bce3b828d3e9544db3e5d6dd7711292bade41db1468879a5ae363c0e350", 0xffc3) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="cd", 0x1}], 0x1) 24m57.039239181s ago: executing program 37 (id=288): r0 = fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r1, 0x16, 0x0, @void}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000180)=0x6945, 0x4) 24m53.040291526s ago: executing program 38 (id=302): connect$pppl2tp(0xffffffffffffffff, &(0x7f00000016c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0xfffffffd}}, 0x2e) unshare(0x22020600) r0 = open(&(0x7f0000001600)='.\x00', 0x51a382, 0x78e22799f4a46e8e) pwritev(r0, &(0x7f0000001640)=[{&(0x7f0000001680)="591e78ffdb", 0x5}], 0x10000000000000ba, 0x0, 0x0) 24m46.228459771s ago: executing program 39 (id=312): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)="bf769a546c6a0cdfbf301849e3ba74b746965c") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x4000000, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x4e23, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x100000000000080, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x7, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 23m11.148175211s ago: executing program 40 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xa04080, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000002dc0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000008380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000083c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000008440)=@file={0x0, './file1\x00'}, 0x6e) getpeername$netlink(r0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000084c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000008500), 0x4000087, 0x2, 0x0) socket(0x2a, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780), 0x208e24b) 22m45.563847407s ago: executing program 41 (id=759): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000280)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000740), 0x80002c1, 0x2, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000780), &(0x7f00000007c0)='./file1\x00', 0x10048, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x2a5, &(0x7f0000000940)="$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") getdents(r4, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4010d00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc\x00', 0x180) openat(0xffffffffffffff9c, 0x0, 0x842, 0x40) 22m43.845150342s ago: executing program 42 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xa04080, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f0000002dc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000008380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000083c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000008440)=@file={0x0, './file1\x00'}, 0x6e) getpeername$netlink(r0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000084c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000008500), 0x4000087, 0x2, 0x0) socket(0x2a, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780), 0x208e24b) 22m9.213419446s ago: executing program 6 (id=1126): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) lsm_list_modules(0x0, &(0x7f0000000340)=0x18, 0x0) 22m8.944496863s ago: executing program 6 (id=1131): mkdirat(0xffffffffffffffff, 0x0, 0x147) mount(0x0, 0x0, &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./dev\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000340)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000380)="d5", 0xfffffedf) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000003c0)={0x1, 0x9, 0x5, 0xae, 0x36, "668787fe4150caf251a42dcbffe468fb06bc47", 0x7f, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 22m8.493470636s ago: executing program 6 (id=1136): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40), 0x100}, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events.local\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 22m7.761915074s ago: executing program 6 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000540)={0x8}) 22m7.339747526s ago: executing program 6 (id=1149): r0 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x100000000e2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x24008051, &(0x7f00000001c0)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x105f2, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000011100)='./file2\x00', 0x109141, 0xd6) pwrite64(r3, 0x0, 0x0, 0x7ff) close_range(r2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x84000, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x40000000) 22m6.724750035s ago: executing program 6 (id=1156): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000580)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) 22m5.979297314s ago: executing program 43 (id=1156): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000580)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) 14m47.25588526s ago: executing program 8 (id=4287): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f0000000200), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x44860) ftruncate(r1, 0x8800000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000680)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x40}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(r5, r1, 0x0, 0x1000009) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="141b9ffef64e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e21, 0x8}}}}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) 14m39.862191656s ago: executing program 8 (id=4308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x3, 0xf6b957206198b356) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000005b40)={{0x7, 0x3, 0xe, 0x10, '\x00', 0x8001}, 0x1, [0x6, 0x9, 0xf, 0xffffffffffff2d8c, 0x6, 0x5, 0x7, 0x3, 0x56ef, 0x6, 0x100, 0x7fffffffffffffff, 0x0, 0x3, 0xb03, 0x0, 0xffff, 0xffffffffffffffff, 0x5, 0x4, 0x6, 0xfffffffffffffff7, 0x81, 0xea6b, 0xffffffffffffffc3, 0x6, 0x6, 0x7e, 0x7, 0xfffffffffffffffb, 0x9, 0x6, 0x40, 0x6, 0x7, 0x5, 0x800, 0x3, 0x7, 0x8, 0xcb9, 0x800, 0x3, 0x9, 0x10001, 0x4, 0x0, 0x1, 0x6, 0x9, 0x3, 0x2, 0x1, 0x4, 0x2, 0x1, 0xaabe, 0x7, 0xfffffffffffffff7, 0x6, 0x10000, 0x8, 0x101, 0xc, 0x80, 0xd09, 0x5e, 0x8489, 0xffffffffffffffff, 0x0, 0x9, 0x6, 0xfff, 0xed5, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0xea, 0xd, 0x1ff, 0x8, 0x1000, 0xffffffffffffffff, 0x9, 0x5, 0x7, 0x5, 0x2, 0x0, 0x9, 0x6e5, 0x1, 0x81, 0xffffffffffffffff, 0x0, 0xb, 0x8, 0x4, 0x6, 0x2, 0x800000, 0xf6, 0x6, 0x6, 0x8, 0xe, 0x100000001, 0x6, 0xce32, 0xfffffffffffffff9, 0x0, 0x4, 0x2, 0x1, 0x1261, 0x9, 0xfffffffffffffff8, 0xd75, 0xffffffff, 0x5, 0x667c9b49, 0xea6, 0x1, 0x4df21eb6, 0x1, 0x6]}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) 14m36.993604688s ago: executing program 8 (id=4316): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff20) 14m35.569807321s ago: executing program 8 (id=4320): unshare(0x20040400) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000140)=0x5d5cf9a2af73e135) 14m34.722292924s ago: executing program 8 (id=4324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000002850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3}, 0x2d) syz_emit_ethernet(0x4a, &(0x7f00000011c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) 14m33.626964449s ago: executing program 8 (id=4326): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x6044001}, 0x4000054) 14m18.296949109s ago: executing program 44 (id=4326): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x6044001}, 0x4000054) 5m17.601991311s ago: executing program 1 (id=6568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) setpgid(0x0, 0x0) setpgid(0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x1001}, 0xe) listen(r2, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x1001, 0x40}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_info_rsp={{0xb, 0x1, 0x8}, {0x2, 0x0, '\b\x00\x00\x00'}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_conf_req={{0x4, 0x3, 0xf}, {0x40, 0x0, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0xa, 0x3, 0x64, 0x3e8, 0x2a0}}]}}]}}, 0x1e) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) 5m15.113335306s ago: executing program 1 (id=6574): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x20fe, &(0x7f0000000600)=0x0) io_submit(r1, 0x3, &(0x7f0000000f80)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x1, r0, 0x0, 0x0, 0x1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0]) 5m12.413192151s ago: executing program 1 (id=6580): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001640)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000016c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001740)=0x6) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) setreuid(0xffffffffffffffff, 0xee00) openat$cgroup_int(r5, &(0x7f0000000280)='pids.max\x00', 0x2, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x5, 0xe, 0x3, 0xffffffffffff7fff, 0x8, 0x7ff, 0xb1, 0x6f7}, 0x0, 0x0, 0x0, 0x0) 5m10.550196511s ago: executing program 1 (id=6587): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="994b7372433f40b7dc8743e65285b2f966dd667ba378d42a5d28e7755590ab29f26bc78bfdb6d6f80e94c469c6126d556a04e65a31f8a53e9313b0f7be0b4df0f29938b84f3ddb13a659a36c31bf50e780e3c414aa91f1d3bb7f633196aafc5d28d7196a0b7d9cc94134d9c8d36990d05a66c22efce3df34cbbb257201d8cb03f7488b2ba731a04910e873232c5e9b123fce3873fe20fa7e2afd0d24a7b9e22ec740ddd30fbc1ae5b9b1dfbe6895c3a81990058f09b4967ccc8b1de924e8114f43e4f77edefee8a5e6603003c2a02bbbb9fee5754a531bda8b57b3f6f73118e36674dc2cd985eae7a2ba", 0xea}], 0x1) 5m9.344567202s ago: executing program 1 (id=6591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000000400)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f2, 0x10, &(0x7f0000000580), 0xfffffe51}, 0x2f) 5m7.912004262s ago: executing program 1 (id=6593): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') mknodat(0xffffffffffffffff, 0x0, 0xe204, 0x4) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004580)=ANY=[@ANYBLOB="01000000326ab588eb7c04000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd"], 0x164}}, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0x80000001, 0x4) write(r3, &(0x7f0000004600)="08001800000020a3", 0x8) recvmmsg(r3, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000004680), 0x10001, 0x2) prlimit64(0x0, 0xe, &(0x7f00000046c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004700)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000004740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000047c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004840), 0x651, 0x0) recvmmsg(r6, &(0x7f0000004880), 0x4000087, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000048c0)={0x1, @pix={0x7ff, 0xcf6, 0x47425247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2, 0x0, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004480)={&(0x7f00000044c0)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x54}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000bfa200000000000007020700f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095000000000000007cdbf3e88b70e995fa8114836b1fcc1de01b84"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000004540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0xe, 0x0, &(0x7f0000000280)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m52.297637422s ago: executing program 45 (id=6593): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') mknodat(0xffffffffffffffff, 0x0, 0xe204, 0x4) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004580)=ANY=[@ANYBLOB="01000000326ab588eb7c04000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd"], 0x164}}, 0x0) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0x80000001, 0x4) write(r3, &(0x7f0000004600)="08001800000020a3", 0x8) recvmmsg(r3, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000004680), 0x10001, 0x2) prlimit64(0x0, 0xe, &(0x7f00000046c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004700)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000004740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000047c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004840), 0x651, 0x0) recvmmsg(r6, &(0x7f0000004880), 0x4000087, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000048c0)={0x1, @pix={0x7ff, 0xcf6, 0x47425247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2, 0x0, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004480)={&(0x7f00000044c0)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x54}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000bfa200000000000007020700f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095000000000000007cdbf3e88b70e995fa8114836b1fcc1de01b84"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000004540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0xe, 0x0, &(0x7f0000000280)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m40.17123626s ago: executing program 0 (id=7267): open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) 1m39.525799906s ago: executing program 0 (id=7270): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f000001a340)) 1m39.179984441s ago: executing program 0 (id=7272): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x8031, r1, 0x5957d000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x8880, 0x4) getdents(r2, &(0x7f0000000300)=""/202, 0xca) getdents(r2, &(0x7f0000000400)=""/184, 0xb8) 1m38.829312407s ago: executing program 0 (id=7274): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x4ae, &(0x7f00000000c0)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/crypto\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x92042, 0x6d) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000003380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000033c0)=0x6) pread64(r0, &(0x7f0000003240)=""/149, 0x95, 0xd059) 1m37.742598109s ago: executing program 0 (id=7275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="994b7372433f40b7dc8743e65285b2f966dd667ba378d42a5d28e7755590ab29f26bc78bfdb6d6f80e94c469c6126d556a04e65a31f8a53e9313b0f7be0b4df0f29938b84f3ddb13a659a36c31bf50e780e3c414aa91f1d3bb7f633196aafc5d28d7196a0b7d9cc94134d9c8d36990d05a66c22efce3df34cbbb257201d8cb03f7488b2ba731a04910e873232c5e9b123fce3873fe20fa7e2afd0d24a7b9e22ec740ddd30fbc1ae5b9b1dfbe6895c3a81990058f09b4967ccc8b1de924e8114f43e4f77edefee8a5e6603003c2a02bbbb9fee5754a531bda8b57b3f6f73118e36674dc2cd985eae7a2ba", 0xea}], 0x1) 1m36.453146573s ago: executing program 0 (id=7279): mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000522000/0x3000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f00004b7000/0x1000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) socket$inet(0x2, 0x5, 0x3) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) 1m21.315632783s ago: executing program 46 (id=7279): mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000522000/0x3000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f00004b7000/0x1000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) socket$inet(0x2, 0x5, 0x3) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) 24.821410307s ago: executing program 4 (id=7512): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f0000000200), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(r4, r1, 0x0, 0x1000009) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) 20.175513856s ago: executing program 5 (id=7527): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x1e) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) 19.958016877s ago: executing program 5 (id=7529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000000400)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f2, 0x10, &(0x7f0000000580), 0xfffffe51}, 0x2f) 18.172896482s ago: executing program 5 (id=7532): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001f80)={'pcl816\x00', [0x100, 0x3, 0x0, 0x8, 0xe, 0x5, 0x79, 0x3, 0x8000a, 0x2, 0x5, 0x1, 0x7, 0x1, 0x2, 0x200000fc, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x88, 0xca9f, 0x0, 0x20401e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x5ab7c328, 0x1, 0xffffffff]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 18.028404245s ago: executing program 4 (id=7534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17.735827541s ago: executing program 5 (id=7537): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000200)={0x23, 0x0, 0x58}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000240)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 15.473621855s ago: executing program 4 (id=7543): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x8, 0x10, &(0x7f00000005c0), 0x10}, 0x94) 13.737586211s ago: executing program 5 (id=7549): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000480), 0x318, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000380)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x5c}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000440)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 11.365354595s ago: executing program 5 (id=7554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='200000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f00000002c0)={0x0, 0x0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3010808, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5fe, &(0x7f0000000580)="$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") unlinkat(r2, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x7b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x101201, 0x108) getdents64(r3, 0x0, 0x0) unshare(0x40000000) 7.932397186s ago: executing program 3 (id=7564): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000b00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000cc0)={0x6000}, 0x18, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000d40)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000d80)={0x210a, r4}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) clock_gettime(0xfffffffffffffffc, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='memory.events\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x82c0, 0x101) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x8, 0x101, 0x1, 0x0, 0x0, [{}]}) 7.365725832s ago: executing program 7 (id=7566): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0xa2c65) 6.436523879s ago: executing program 3 (id=7567): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f0000000200), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(r4, r1, 0x0, 0x1000009) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) 5.995176494s ago: executing program 4 (id=7569): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000380)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 5.578040206s ago: executing program 7 (id=7571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000000100)='100', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}}, 0x14}, 0x1, 0x3000, 0x0, 0x1}, 0x4080040) 4.377782065s ago: executing program 9 (id=7574): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'syz_tun\x00', 0x101}) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 4.377645781s ago: executing program 2 (id=7575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000ff0800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804) 3.994652867s ago: executing program 2 (id=7576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000000400)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x1f2, 0x10, &(0x7f0000000580), 0xfffffe51}, 0x2f) 3.033722482s ago: executing program 4 (id=7577): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000880)="0303ec58000000004500001c00000000402f0000ac14140b7f0000014e214e24", 0xffeb, 0x0, &(0x7f00000008c0)={0x2, 0x0, @dev}, 0x10) 2.80948361s ago: executing program 2 (id=7578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.795154938s ago: executing program 3 (id=7579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000001980)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000019c0)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x1, 0x3, &(0x7f0000003040)=ANY=[@ANYBLOB="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"], &(0x7f0000003e00)='GPL\x00', 0x4, 0x436, &(0x7f0000003e40)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000003f00), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000003f40)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000004040)=')\x00C', 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f00000040c0)="f5bf5def", 0x4}], 0x1}}], 0x2, 0x0) 2.568406021s ago: executing program 9 (id=7580): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0xcc}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x7, 0x2, [0x1, 0x6]}, 0xc) 2.504080186s ago: executing program 4 (id=7581): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000008c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x8, 0x10, &(0x7f00000005c0), 0x10}, 0x94) 2.3258553s ago: executing program 9 (id=7582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xacf}, 0x94) 2.297989657s ago: executing program 7 (id=7583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='270', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_clone(0x9001080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400"], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 2.018010347s ago: executing program 9 (id=7584): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a"], 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 1.783741032s ago: executing program 2 (id=7585): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x1e, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 1.635182503s ago: executing program 2 (id=7586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x1c02, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000d0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 1.536093441s ago: executing program 9 (id=7587): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000015c0)={0x28, 0x0, 0x0, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000, 0xffffffffffffffff}) 1.447349619s ago: executing program 3 (id=7588): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi1\x00', 0x0, 0x0) ioctl(r0, 0x40946400, &(0x7f0000000540)='dt2811-pgh\x00\x00\x00\x00\x00\x00\x00') 1.378347145s ago: executing program 7 (id=7589): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) listen(r0, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0xa00008, &(0x7f00000007c0), 0x3, 0x7b0, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) chdir(&(0x7f00000010c0)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x1c, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)='INVITE sip:x SIP/2.0\r\nCall-Id: test1234@local\r', 0x2e, 0x0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) 1.235152264s ago: executing program 7 (id=7590): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @vbi={0x9, 0x9, 0xfffff7ae, 0x32344d59, [0x3, 0x2], [0x79e3, 0xff], 0x1}}) 1.158445929s ago: executing program 9 (id=7591): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f0000000200), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(r4, r1, 0x0, 0x1000009) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) 1.053820522s ago: executing program 2 (id=7592): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0xddb005f0375206d, 0x0, 0x0, @by_dev={r1}, [@cache={0x0, 0x10, 0x0, 0xa0, 'cache\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '128', 0x20, '1 no_discard_passdown', 0x20, 'smq 2 migration_threshold 1024'}}]}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) 1.053546426s ago: executing program 3 (id=7593): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000b00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c80)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000cc0)={0x6000}, 0x18, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000d40)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000d80)={0x210a, r4}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) clock_gettime(0xfffffffffffffffc, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='memory.events\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x82c0, 0x101) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x8, 0x101, 0x1, 0x0, 0x0, [{}]}) 76.900647ms ago: executing program 3 (id=7594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001240)={'wlan0\x00', @remote}) 0s ago: executing program 7 (id=7595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010405010000000000000000010004000500"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) close(r1) kernel console output (not intermixed with test programs): 81] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.300726][T24881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.780112][T24881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.783039][T24881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.790511][T24881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1268.790547][T24881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1268.800111][T24881] veth1_vlan: left promiscuous mode [ 1268.811075][T24881] veth0_vlan: left promiscuous mode [ 1268.830047][T24881] veth0_vlan: entered promiscuous mode [ 1268.867207][T24881] veth1_vlan: entered promiscuous mode [ 1268.988084][T24881] veth1_macvtap: left promiscuous mode [ 1269.002904][T24881] veth0_macvtap: left promiscuous mode [ 1269.015107][T24881] veth0_macvtap: entered promiscuous mode [ 1269.027250][T24881] veth1_macvtap: entered promiscuous mode [ 1269.093372][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1269.109911][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1269.124806][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1269.137727][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1269.746608][T24852] rxe_eth0 speed is unknown, defaulting to 1000 [ 1269.771646][ T62] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.781625][T22042] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.781702][T22042] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.781767][T22042] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.868396][T20667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.868535][T20667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.882158][T20667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.882283][T20667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.092147][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1274.279153][T24852] lo speed is unknown, defaulting to 1000 [ 1274.280224][T24900] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1274.659680][T24913] fuse: fd is not a fuse device [ 1275.360310][T24926] sch_fq: defrate 7 ignored. [ 1275.730373][T24932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6117'. [ 1277.413272][T24961] syz.5.6126 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1280.656119][T25004] fuse: fd is not a fuse device [ 1281.523439][T25008] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6141'. [ 1281.874815][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6145'. [ 1282.320194][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1282.320223][ T30] audit: type=1326 audit(1793282389.465:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25033 comm="syz.7.6150" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f940fd9f559 code=0x0 [ 1282.830976][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1282.840524][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1282.841115][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1284.365906][T25076] Cannot find set identified by id 0 to match [ 1285.954834][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1285.955161][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1285.955302][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1286.011370][ T30] audit: type=1326 audit(1793282393.155:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25111 comm="syz.7.6176" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f940fd9f559 code=0x0 [ 1286.308986][T25129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.309011][T25129] IPv6: NLM_F_CREATE should be set when creating new route [ 1286.405522][T25131] fuse: fd is not a fuse device [ 1286.879628][T25145] fuse: fd is not a fuse device [ 1287.991670][T17464] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 1288.129079][T25166] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6192'. [ 1288.297736][T25172] fuse: fd is not a fuse device [ 1288.379777][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1288.379992][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1288.380547][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1290.868041][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1291.809404][T25221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6212'. [ 1291.977073][T25227] fuse: fd is not a fuse device [ 1292.201134][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1292.215658][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1292.217117][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1292.421773][T25251] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1293.718709][T25264] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6231'. [ 1294.167173][T25278] fuse: fd is not a fuse device [ 1294.193352][T25283] fuse: fd is not a fuse device [ 1294.221228][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1294.221587][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1294.221821][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1294.234032][T25284] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6240'. [ 1294.954759][T25300] netlink: 112 bytes leftover after parsing attributes in process `syz.9.6247'. [ 1295.261973][T25314] fuse: Bad value for 'fd' [ 1295.500547][T25319] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6256'. [ 1298.112152][T17464] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1298.943094][T25332] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1299.190597][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1299.191120][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1299.192527][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1299.689836][T25357] fuse: Bad value for 'fd' [ 1299.696307][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.696383][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.095736][T25365] overlayfs: failed to resolve './file2': -2 [ 1302.776139][T25398] fuse: Bad value for 'fd' [ 1303.086423][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1303.088302][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1303.090738][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1303.284240][T25407] fuse: fd is not a fuse device [ 1303.670458][T25414] fuse: fd is not a fuse device [ 1303.918375][T25417] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[15580] was attempted by " \x0c   \x0b , ÿÿÿÿ"[25417] [ 1304.220927][T25425] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6297'. [ 1305.365221][T25439] fuse: Unknown parameter '0x0000000000000003' [ 1305.635077][T25441] overlayfs: failed to clone upperpath [ 1305.903723][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1305.904663][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1305.904858][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1307.187836][T25477] fuse: Unknown parameter '0x0000000000000003' [ 1307.243442][T25479] fuse: fd is not a fuse device [ 1307.295509][T25478] fuse: fd is not a fuse device [ 1309.009718][T17464] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1309.020933][T17464] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1309.021170][T17464] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1309.171340][T25510] fuse: Unknown parameter '0x0000000000000003' [ 1309.363689][T25517] fuse: fd is not a fuse device [ 1309.741305][T25523] fuse: fd is not a fuse device [ 1312.248632][T25568] fuse: fd is not a fuse device [ 1313.277264][T25579] overlayfs: failed to clone upperpath [ 1313.986888][T25597] fuse: fd is not a fuse device [ 1313.990524][T25597] fuse: fd is not a fuse device [ 1314.389527][T25604] rxe_eth0 speed is unknown, defaulting to 1000 [ 1315.197946][T25604] lo speed is unknown, defaulting to 1000 [ 1317.452916][T25638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6377'. [ 1317.819336][T25648] ip_tables: iptables: counters copy to user failed while replacing table [ 1321.853766][T17464] Bluetooth: hci0: command 0x0c24 tx timeout [ 1324.170653][T25701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6400'. [ 1329.315238][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1329.315511][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1329.318102][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1330.662192][T25775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6428'. [ 1331.288772][T25788] fuse: fd is not a fuse device [ 1332.278082][T25807] fuse: fd is not a fuse device [ 1334.592406][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1334.592669][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1334.593647][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1334.694557][T25829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6446'. [ 1337.480712][T25870] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6460'. [ 1338.622016][T25878] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6464'. [ 1338.826636][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1338.826979][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1338.827266][T17464] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1338.857651][T25875] batman_adv: batadv0: Interface deactivated: dummy0 [ 1339.247637][T25875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.266918][T25875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.760229][T25887] syz_tun: entered allmulticast mode [ 1339.761107][T25887] syz_tun: left allmulticast mode [ 1340.018737][T25888] dvmrp6: entered allmulticast mode [ 1340.031098][ T50] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 31488 - 0 [ 1340.031280][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.042772][T22042] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 31488 - 0 [ 1340.042829][T22042] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.045664][T20667] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 31488 - 0 [ 1340.045718][T20667] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.045779][T20667] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 31488 - 0 [ 1340.045830][T20667] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.562605][T25928] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6482'. [ 1342.836637][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1342.839333][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1342.861202][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1343.396802][T25945] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6491'. [ 1343.396889][T25945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6491'. [ 1347.288261][T25980] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6500'. [ 1349.286740][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1349.286811][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1349.286867][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1355.874469][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1355.890037][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1355.890286][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1361.345495][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.345577][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.776894][T26123] fuse: fd is not a fuse device [ 1362.072071][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1362.095850][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1362.097821][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1366.661493][T26168] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 1367.112690][T26181] fuse: fd is not a fuse device [ 1368.439392][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1368.439708][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1368.440089][T17464] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1372.628071][T26217] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1372.628725][T26217] vxlan0: left promiscuous mode [ 1372.628746][T26217] vxlan0: left allmulticast mode [ 1373.120035][T26226] fuse: fd is not a fuse device [ 1375.119106][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1375.129863][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1375.142518][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1378.119974][T26270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6593'. [ 1378.590374][T26274] bond1: option lp_interval: invalid value (0) [ 1378.590409][T26274] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1378.672618][T26274] bond1 (unregistering): Released all slaves [ 1379.232449][ T30] audit: type=1326 audit(1793282486.115:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739f559 code=0x7ffc0000 [ 1379.232836][ T30] audit: type=1326 audit(1793282486.115:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739f559 code=0x7ffc0000 [ 1379.233157][ T30] audit: type=1326 audit(1793282486.125:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee0739f559 code=0x7ffc0000 [ 1379.233573][ T30] audit: type=1326 audit(1793282486.125:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739f559 code=0x7ffc0000 [ 1379.233910][ T30] audit: type=1326 audit(1793282486.135:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739f559 code=0x7ffc0000 [ 1379.234238][ T30] audit: type=1326 audit(1793282486.135:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee0739f559 code=0x7ffc0000 [ 1379.234718][ T30] audit: type=1326 audit(1793282486.135:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee0739f2c2 code=0x7ffc0000 [ 1379.235058][ T30] audit: type=1326 audit(1793282486.145:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee0735fd8e code=0x7ffc0000 [ 1379.235756][ T30] audit: type=1326 audit(1793282486.175:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fee0739f387 code=0x7ffc0000 [ 1379.237783][ T30] audit: type=1326 audit(1793282486.185:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26279 comm="syz.2.6598" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee0735fd8e code=0x7ffc0000 [ 1380.518512][T26288] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1382.298035][T26298] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6602'. [ 1385.697272][T26323] overlayfs: failed to clone upperpath [ 1386.902639][T26331] netlink: 'syz.5.6614': attribute type 3 has an invalid length. [ 1387.005748][T26332] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1394.952683][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1394.955826][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1394.956547][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1394.957384][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1395.002209][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1395.483564][T26401] pimreg3: entered allmulticast mode [ 1396.555555][T26424] fuse: fd is not a fuse device [ 1396.628858][ T4946] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1396.629189][ T4946] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1396.666624][ T4946] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1397.064132][ T4946] Bluetooth: hci3: command tx timeout [ 1397.185164][T26427] ip_tables: iptables: counters copy to user failed while replacing table [ 1398.221357][T26400] rxe_eth0 speed is unknown, defaulting to 1000 [ 1398.848981][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.849155][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.849392][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.889687][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.889903][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.937260][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.937481][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.937816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.937987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.989037][T26460] ip6gre1: entered allmulticast mode [ 1399.132033][ T4946] Bluetooth: hci3: command tx timeout [ 1399.690741][T26400] lo speed is unknown, defaulting to 1000 [ 1399.788743][T26479] fuse: fd is not a fuse device [ 1400.558995][T26493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.212058][ T4946] Bluetooth: hci3: command tx timeout [ 1403.352141][ T4946] Bluetooth: hci3: command tx timeout [ 1403.716016][T22042] net_ratelimit: 8 callbacks suppressed [ 1403.716045][T22042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.716287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.959852][T26400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.960085][T26400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.960250][T26400] bridge_slave_0: entered allmulticast mode [ 1403.964658][T26400] bridge_slave_0: entered promiscuous mode [ 1403.969605][T26400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.969722][T26400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.971518][T26400] bridge_slave_1: entered allmulticast mode [ 1403.977230][T26400] bridge_slave_1: entered promiscuous mode [ 1404.076923][T26400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.113253][T26400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.159602][T26530] overlayfs: failed to clone upperpath [ 1404.413048][T26400] team0: Port device team_slave_0 added [ 1404.466955][T26400] team0: Port device team_slave_1 added [ 1404.493853][T20893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.652473][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.663558][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.691354][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.706734][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.804353][T26537] pim6reg: entered allmulticast mode [ 1404.811550][T26400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.811574][T26400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.860475][T26400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.935219][T26400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.935246][T26400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.935298][T26400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.375193][T26400] hsr_slave_0: entered promiscuous mode [ 1405.380276][T26400] hsr_slave_1: entered promiscuous mode [ 1405.397699][T26400] debugfs: 'hsr0' already exists in 'hsr' [ 1405.397734][T26400] Cannot create hsr debugfs directory [ 1405.576073][T26557] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6687'. [ 1405.933710][T22042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.933897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.483815][T26588] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6698'. [ 1407.533621][T20893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.579431][T20668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.579664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.572682][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.748657][T20670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.748873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.618413][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.092744][ T6086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.258756][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.397485][ T6086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.893007][T20670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.893158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.031802][ T6086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.204580][ T6086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.362481][T26400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1416.388584][T26400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1416.390686][T26400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1416.415480][T26400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1416.418524][T26400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1416.449234][T26400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1416.450455][T26400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1416.548235][T26400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1416.663220][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.454046][T20669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.454253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.699218][ T6086] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.105558][T26738] bridge0: entered promiscuous mode [ 1418.201606][T26400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.119644][T26748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.120045][T26748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.122242][T26748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.139606][T26748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.139824][T26748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.290242][T26400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.411203][T22042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.411334][T22042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.494922][T22042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.495087][T22042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.039763][ T6086] bridge_slave_1: left allmulticast mode [ 1420.039804][ T6086] bridge_slave_1: left promiscuous mode [ 1420.040061][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.100464][ T6086] bridge_slave_0: left allmulticast mode [ 1420.100511][ T6086] bridge_slave_0: left promiscuous mode [ 1420.100758][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.601335][T26786] fuse: fd is not a fuse device [ 1420.655093][ T154] net_ratelimit: 14 callbacks suppressed [ 1420.655131][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.655392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.905405][T26793] fuse: fd is not a fuse device [ 1421.358800][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.397066][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.425552][ T6086] bond0 (unregistering): Released all slaves [ 1422.575652][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.575712][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.689800][T26826] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 1422.736024][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.848661][T26834] fuse: fd is not a fuse device [ 1423.213762][T22042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.213934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.320191][T26841] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1423.386644][T26843] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6770'. [ 1423.864246][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.306889][ T6086] hsr_slave_0: left promiscuous mode [ 1424.321246][ T6086] hsr_slave_1: left promiscuous mode [ 1424.332778][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.332805][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.358303][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.358336][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.403163][ T6086] veth1_macvtap: left promiscuous mode [ 1424.403216][ T6086] veth0_macvtap: left promiscuous mode [ 1424.403487][ T6086] veth0_vlan: left promiscuous mode [ 1425.682530][T26894] fuse: fd is not a fuse device [ 1425.776574][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.141579][T26904] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6786'. [ 1426.415060][T20670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.415215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.930631][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 1426.967954][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 1427.410637][T22042] smbdirect: ib_dev[syz0] removed [ 1427.634508][T20893] infiniband syz0: ib_query_port failed (-19) [ 1428.826058][T20893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.972846][ T7460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.973125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.099102][T26400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.211674][T26400] veth0_vlan: entered promiscuous mode [ 1429.275597][T26400] veth1_vlan: entered promiscuous mode [ 1429.493186][T26400] veth0_macvtap: entered promiscuous mode [ 1429.534721][T26400] veth1_macvtap: entered promiscuous mode [ 1429.589073][T26400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.638134][T26400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.660866][T26963] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6799'. [ 1429.678168][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.816724][T22042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.821055][T20670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.821124][T20670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.942018][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.942053][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.007621][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.007656][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.025824][T20893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.126980][T27005] nvme_fabrics: found same hostid 72c58773-66ac-4944-9dca-5ad1eabced41 but different hostnqn nqÐpÉV [ 1432.174813][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.175034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.870620][T17464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1432.885992][T17464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1432.887599][T17464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1432.910347][T17464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1432.922407][T17464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1433.028944][T27031] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1433.453102][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.069815][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1434.073185][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1434.093070][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1434.297542][T27051] syzkaller1: entered promiscuous mode [ 1434.297568][T27051] syzkaller1: entered allmulticast mode [ 1434.743087][ T8142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.743304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.972429][T17464] Bluetooth: hci1: command tx timeout [ 1435.055271][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.717309][T27082] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6828'. [ 1436.367809][T27099] fuse: fd is not a fuse device [ 1436.497550][T27100] loop3: detected capacity change from 0 to 2048 [ 1436.546943][T27100] loop3: p1 < > p3 [ 1436.571927][T27100] loop3: p3 size 134217728 extends beyond EOD, truncated [ 1436.968885][T27023] rxe_eth0 speed is unknown, defaulting to 1000 [ 1437.052843][T17464] Bluetooth: hci1: command tx timeout [ 1437.303326][ T7460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.303515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.094687][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.118669][T17464] Bluetooth: Frame is too long (len 25, expected len 23) [ 1439.144194][T17464] Bluetooth: hci1: command tx timeout [ 1439.327803][T27151] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6841'. [ 1440.091425][T27168] fuse: fd is not a fuse device [ 1440.496661][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.496908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.132670][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.212241][T17464] Bluetooth: hci1: command tx timeout [ 1441.806834][T27023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.810298][T27023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.820937][T27023] bridge_slave_0: entered allmulticast mode [ 1441.858365][T27023] bridge_slave_0: entered promiscuous mode [ 1441.892313][T27023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.892443][T27023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.892602][T27023] bridge_slave_1: entered allmulticast mode [ 1441.973058][T27023] bridge_slave_1: entered promiscuous mode [ 1442.257697][T27023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.289438][T27023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.587237][T27023] team0: Port device team_slave_0 added [ 1442.706070][T27023] team0: Port device team_slave_1 added [ 1443.057208][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.072959][ T6462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.073124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.228471][T27023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.228493][T27023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.228531][T27023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.295520][T27023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.295548][T27023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.295600][T27023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.739530][T27023] hsr_slave_0: entered promiscuous mode [ 1443.748604][T27023] hsr_slave_1: entered promiscuous mode [ 1443.752134][T27023] debugfs: 'hsr0' already exists in 'hsr' [ 1443.752163][T27023] Cannot create hsr debugfs directory [ 1444.173266][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.358799][T27228] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.930976][T27023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 1444.931029][T27023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.931084][T27023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1445.022203][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1445.022864][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1445.040902][T17464] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1445.622211][ T7460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.622391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.934094][T27023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 1446.021430][T27023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.021477][T27023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1446.522623][T27023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 1446.522671][T27023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.522720][T27023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1447.084941][T27258] overlayfs: failed to resolve './file2': -2 [ 1447.804717][T27023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 1447.804765][T27023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.804804][T27023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1447.871494][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.818131][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.818333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.030671][T27276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.031346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.151422][T27277] loop3: detected capacity change from 0 to 512 [ 1450.061988][T27289] fuse: fd is not a fuse device [ 1450.314800][T27023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1450.417018][T27023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1450.418094][T27023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1450.452737][T27023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1450.457847][T27023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1450.503840][T27023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1450.506532][T27023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1450.551742][T27023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1450.653048][ T6462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.653318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.786942][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1450.787270][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1450.787457][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1450.787732][T17464] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1450.892764][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.900166][T27023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.134954][T27023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.299497][T20670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.299596][T20670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.401692][T22042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.401886][T22042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.598376][T27313] netlink: 'syz.5.6879': attribute type 16 has an invalid length. [ 1451.598402][T27313] netlink: 'syz.5.6879': attribute type 17 has an invalid length. [ 1452.653523][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.005082][T27328] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1453.005108][T27328] block device autoloading is deprecated and will be removed. [ 1453.932927][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.145087][T27347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6888'. [ 1454.575982][T22042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.576166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.720868][T27354] fuse: fd is not a fuse device [ 1455.862592][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.862779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.846430][T17464] Bluetooth: hci3: link tx timeout [ 1456.846459][T17464] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1456.880236][T17464] Bluetooth: Frame is too long (len 25, expected len 23) [ 1456.880357][T17464] Bluetooth: hci3: link tx timeout [ 1456.880378][T17464] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1456.972866][T26784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.330893][T27394] fuse: fd is not a fuse device [ 1458.375722][T27023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.736783][T27023] veth0_vlan: entered promiscuous mode [ 1458.802145][T27023] veth1_vlan: entered promiscuous mode [ 1458.892368][T17464] Bluetooth: hci3: command 0x0406 tx timeout [ 1458.999328][T27023] veth0_macvtap: entered promiscuous mode [ 1459.104609][T27023] veth1_macvtap: entered promiscuous mode [ 1459.355994][T27023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.477488][T27023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.589946][T22042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.590062][T22042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.590110][T22042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.604583][ T6462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.622470][T22042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.622706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.027252][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.298378][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.298404][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.322463][T27416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6903'. [ 1460.482437][T19894] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1460.634660][T27416] hsr_slave_1 (unregistering): left promiscuous mode [ 1460.659475][T19894] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1460.659522][T19894] usb 4-1: no configurations [ 1460.659539][T19894] usb 4-1: can't read configurations, error -22 [ 1460.814031][T19894] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1460.986118][T19894] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1460.986166][T19894] usb 4-1: no configurations [ 1460.986184][T19894] usb 4-1: can't read configurations, error -22 [ 1460.986419][T19894] usb usb4-port1: attempt power cycle [ 1461.282147][ T6462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.282182][ T6462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.331977][T19894] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1461.358421][T19894] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1461.358492][T19894] usb 4-1: no configurations [ 1461.358516][T19894] usb 4-1: can't read configurations, error -22 [ 1461.486927][T19894] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1461.519355][T19894] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1461.519419][T19894] usb 4-1: no configurations [ 1461.519442][T19894] usb 4-1: can't read configurations, error -22 [ 1461.519804][T19894] usb usb4-port1: unable to enumerate USB device [ 1461.623183][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.623403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.269103][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.058705][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.902497][ T6462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.902676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.092630][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.761269][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.761495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.188518][T17464] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1467.204990][T17464] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1467.219321][T17464] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1467.231417][T17464] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1467.251397][T17464] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1469.132220][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.292212][T17464] Bluetooth: hci5: command tx timeout [ 1470.957559][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.957779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.009383][T20893] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1471.200618][T20893] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1471.248625][T20893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.248658][T20893] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1471.280474][T20893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.280507][T20893] usb 4-1: Product: syz [ 1471.280528][T20893] usb 4-1: Manufacturer: syz [ 1471.280548][T20893] usb 4-1: SerialNumber: syz [ 1471.315901][T20893] usb 4-1: config 0 descriptor?? [ 1471.374731][T17464] Bluetooth: hci5: command tx timeout [ 1471.506300][T16592] batman_adv: batadv0: Interface deactivated: syz_tun [ 1471.823563][ T9] usb 4-1: USB disconnect, device number 11 [ 1471.824885][T16592] batman_adv: batadv0: Removing interface: syz_tun [ 1471.854628][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.194591][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.444161][T27480] rxe_eth0 speed is unknown, defaulting to 1000 [ 1472.493651][T20670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.493862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.275867][ T62] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.416067][T27522] FAULT_INJECTION: forcing a failure. [ 1473.416067][T27522] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.416111][T27522] CPU: 0 UID: 0 PID: 27522 Comm: syz.3.6927 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1473.416156][T27522] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1473.416168][T27522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1473.416187][T27522] Call Trace: [ 1473.416198][T27522] [ 1473.416210][T27522] dump_stack_lvl+0x100/0x190 [ 1473.416262][T27522] should_fail_ex.cold+0x5/0xa [ 1473.416307][T27522] should_failslab+0xc2/0x120 [ 1473.416352][T27522] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1473.416391][T27522] ? prepare_creds+0x2c/0x950 [ 1473.416431][T27522] prepare_creds+0x2c/0x950 [ 1473.416468][T27522] restrict_one_thread_callback+0x17a/0xb70 [ 1473.416524][T27522] ? _raw_spin_unlock_irq+0x23/0x50 [ 1473.416560][T27522] task_work_run+0x150/0x240 [ 1473.416591][T27522] ? __pfx_task_work_run+0x10/0x10 [ 1473.416621][T27522] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1473.416657][T27522] ? blk_mq_flush_plug_list+0x145/0x600 [ 1473.416702][T27522] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1473.416744][T27522] get_signal+0x1bd/0x21d0 [ 1473.416792][T27522] ? __pfx_get_signal+0x10/0x10 [ 1473.416823][T27522] ? lock_acquire+0x1d1/0x380 [ 1473.416860][T27522] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 1473.416898][T27522] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1473.416934][T27522] ? find_held_lock+0x2b/0x80 [ 1473.416968][T27522] arch_do_signal_or_restart+0x91/0x7e0 [ 1473.417021][T27522] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1473.417085][T27522] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1473.417127][T27522] exit_to_user_mode_loop+0x139/0x700 [ 1473.417172][T27522] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1473.417208][T27522] ? rcu_is_watching+0x13/0xc0 [ 1473.417241][T27522] do_syscall_64+0x661/0x790 [ 1473.417282][T27522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.417313][T27522] RIP: 0033:0x7f6c2fd9f559 [ 1473.417337][T27522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.417366][T27522] RSP: 002b:00007f6c30c5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1473.417394][T27522] RAX: 0000000000000001 RBX: 00007f6c30025fa0 RCX: 00007f6c2fd9f559 [ 1473.417414][T27522] RDX: 00002000000001c0 RSI: 1fffffffffffff10 RDI: 00007f6c30c3a000 [ 1473.417434][T27522] RBP: 00007f6c2fe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1473.417453][T27522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1473.417471][T27522] R13: 00007f6c30026038 R14: 00007f6c30025fa0 R15: 00007ffc2929d108 [ 1473.417515][T27522] [ 1473.457990][T17464] Bluetooth: hci5: command tx timeout [ 1474.108619][T27527] FAULT_INJECTION: forcing a failure. [ 1474.108619][T27527] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.108663][T27527] CPU: 0 UID: 0 PID: 27527 Comm: syz.0.6929 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1474.108708][T27527] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1474.108721][T27527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1474.108739][T27527] Call Trace: [ 1474.108749][T27527] [ 1474.108761][T27527] dump_stack_lvl+0x100/0x190 [ 1474.108812][T27527] should_fail_ex.cold+0x5/0xa [ 1474.108856][T27527] should_failslab+0xc2/0x120 [ 1474.108900][T27527] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1474.108942][T27527] ? kasprintf+0xc7/0x100 [ 1474.108998][T27527] kvasprintf+0xbc/0x150 [ 1474.109041][T27527] ? __pfx_kvasprintf+0x10/0x10 [ 1474.109099][T27527] kasprintf+0xc7/0x100 [ 1474.109142][T27527] ? __pfx_kasprintf+0x10/0x10 [ 1474.109188][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.109224][T27527] ? rcu_is_watching+0x13/0xc0 [ 1474.109255][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.109290][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.109326][T27527] ? lockdep_init_map_type+0x5c/0x250 [ 1474.109367][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.109410][T27527] drm_debugfs_clients_add+0x48/0x210 [ 1474.109450][T27527] drm_file_alloc+0x5c6/0xb40 [ 1474.109500][T27527] drm_open_helper+0x1fc/0x540 [ 1474.109549][T27527] drm_open+0x1a0/0x3e0 [ 1474.109591][T27527] ? __pfx_drm_open+0x10/0x10 [ 1474.109633][T27527] drm_stub_open+0x20f/0x380 [ 1474.109677][T27527] ? __pfx_drm_stub_open+0x10/0x10 [ 1474.109719][T27527] chrdev_open+0x234/0x6a0 [ 1474.109763][T27527] ? __pfx_apparmor_file_open+0x10/0x10 [ 1474.109804][T27527] ? __pfx_chrdev_open+0x10/0x10 [ 1474.109851][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.109887][T27527] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1474.109932][T27527] do_dentry_open+0x674/0x1470 [ 1474.109987][T27527] ? __pfx_chrdev_open+0x10/0x10 [ 1474.110033][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.110074][T27527] vfs_open_consume+0xcc/0x460 [ 1474.110102][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.110143][T27527] path_openat+0x1547/0x23f0 [ 1474.110196][T27527] ? __pfx_path_openat+0x10/0x10 [ 1474.110254][T27527] do_file_open+0x20e/0x430 [ 1474.110304][T27527] ? __pfx_do_file_open+0x10/0x10 [ 1474.110377][T27527] ? _raw_spin_unlock+0x28/0x50 [ 1474.110407][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.110443][T27527] ? alloc_fd+0x471/0x7a0 [ 1474.110502][T27527] do_sys_openat2+0x163/0x1d0 [ 1474.110533][T27527] ? __pfx_do_sys_openat2+0x10/0x10 [ 1474.110560][T27527] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1474.110608][T27527] __x64_sys_openat+0x12d/0x210 [ 1474.110639][T27527] ? __pfx___x64_sys_openat+0x10/0x10 [ 1474.110672][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.110712][T27527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1474.110754][T27527] do_syscall_64+0x123/0x790 [ 1474.110795][T27527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.110826][T27527] RIP: 0033:0x7fc1c195fd8e [ 1474.110850][T27527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1474.110879][T27527] RSP: 002b:00007fc1c278eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1474.110907][T27527] RAX: ffffffffffffffda RBX: 00007fc1c278f6c0 RCX: 00007fc1c195fd8e [ 1474.110927][T27527] RDX: 0000000000000000 RSI: 00007fc1c278ec00 RDI: ffffffffffffff9c [ 1474.110947][T27527] RBP: 00007fc1c278ec00 R08: 0000000000000000 R09: 0000000000000000 [ 1474.110965][T27527] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1474.110988][T27527] R13: 00007fc1c1c26038 R14: 00007fc1c1c25fa0 R15: 00007ffcf0a232f8 [ 1474.111028][T27527] [ 1475.010621][ T62] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.224297][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.532189][T17464] Bluetooth: hci5: command tx timeout [ 1475.998002][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1476.251816][ T62] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.276308][T27553] FAULT_INJECTION: forcing a failure. [ 1476.276308][T27553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.276365][T27553] CPU: 1 UID: 0 PID: 27553 Comm: syz.0.6935 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1476.276430][T27553] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1476.276448][T27553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1476.276482][T27553] Call Trace: [ 1476.276496][T27553] [ 1476.276507][T27553] dump_stack_lvl+0x100/0x190 [ 1476.276559][T27553] should_fail_ex.cold+0x5/0xa [ 1476.276604][T27553] _copy_to_user+0x32/0xd0 [ 1476.276651][T27553] bpf_vlog_reverse_ubuf+0x315/0x470 [ 1476.276711][T27553] bpf_vlog_finalize+0x2bf/0x360 [ 1476.276763][T27553] bpf_log_attr_finalize+0x86/0x1a0 [ 1476.276831][T27553] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1476.276917][T27553] btf_new_fd+0x712/0x39d0 [ 1476.276965][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277016][T27553] ? __lock_acquire+0x5c0/0x1f40 [ 1476.277070][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277105][T27553] ? lock_acquire+0x1d1/0x380 [ 1476.277150][T27553] ? __pfx_btf_new_fd+0x10/0x10 [ 1476.277182][T27553] ? rcu_is_watching+0x13/0xc0 [ 1476.277213][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277248][T27553] ? apparmor_capable+0x1d7/0x4d0 [ 1476.277288][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277323][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277358][T27553] ? security_capable+0x80/0x260 [ 1476.277393][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277428][T27553] ? ns_capable+0xcd/0xf0 [ 1476.277463][T27553] __sys_bpf+0x2400/0x4b60 [ 1476.277516][T27553] ? __pfx___sys_bpf+0x10/0x10 [ 1476.277553][T27553] ? find_held_lock+0x2b/0x80 [ 1476.277582][T27553] ? futex_wake+0x4ea/0x5e0 [ 1476.277620][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277658][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277730][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277783][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277819][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277854][T27553] ? __x64_sys_futex+0x358/0x4d0 [ 1476.277896][T27553] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1476.277946][T27553] ? xfd_validate_state+0x129/0x190 [ 1476.277998][T27553] ? __x64_sys_bpf+0xce/0x140 [ 1476.278039][T27553] __x64_sys_bpf+0xce/0x140 [ 1476.278080][T27553] ? do_syscall_64+0xae/0x790 [ 1476.278119][T27553] do_syscall_64+0x123/0x790 [ 1476.278159][T27553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.278190][T27553] RIP: 0033:0x7fc1c199f559 [ 1476.278214][T27553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.278243][T27553] RSP: 002b:00007fc1c278f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1476.278271][T27553] RAX: ffffffffffffffda RBX: 00007fc1c1c25fa0 RCX: 00007fc1c199f559 [ 1476.278291][T27553] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 1476.278311][T27553] RBP: 00007fc1c1a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1476.278329][T27553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1476.278348][T27553] R13: 00007fc1c1c26038 R14: 00007fc1c1c25fa0 R15: 00007ffcf0a232f8 [ 1476.278387][T27553] [ 1476.376321][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.376558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.317150][ T62] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.404196][ T5785] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1477.564936][ T5785] usb 1-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1477.566151][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.566181][ T5785] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1477.613644][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.613678][ T5785] usb 1-1: Product: syz [ 1477.613699][ T5785] usb 1-1: Manufacturer: syz [ 1477.613721][ T5785] usb 1-1: SerialNumber: syz [ 1477.660596][ T5785] usb 1-1: config 0 descriptor?? [ 1477.966220][T19894] usb 1-1: USB disconnect, device number 32 [ 1478.263939][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.274957][T23996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.275117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.922628][T27578] loop3: detected capacity change from 0 to 128 [ 1479.834332][ T62] bridge_slave_1: left allmulticast mode [ 1479.834362][ T62] bridge_slave_1: left promiscuous mode [ 1479.835317][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.937096][ T62] bridge_slave_0: left allmulticast mode [ 1479.937134][ T62] bridge_slave_0: left promiscuous mode [ 1479.965434][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.088159][T27598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6945'. [ 1481.889893][T27620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1481.889917][T27620] block device autoloading is deprecated and will be removed. [ 1482.125814][ T9] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1482.196483][ T62] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1482.237458][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.273024][ T9] usb 1-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1482.274489][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.274530][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1482.280446][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.280488][ T9] usb 1-1: Product: syz [ 1482.280516][ T9] usb 1-1: Manufacturer: syz [ 1482.280546][ T9] usb 1-1: SerialNumber: syz [ 1482.339036][ T9] usb 1-1: config 0 descriptor?? [ 1482.403669][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.439714][ T62] bond0 (unregistering): Released all slaves [ 1482.631341][ T5785] usb 1-1: USB disconnect, device number 33 [ 1482.734990][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1482.790726][ T62] tipc: Left network mode [ 1484.021339][T27645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1484.029203][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.029279][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.257435][T27480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.264711][T27480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.264865][T27480] bridge_slave_0: entered allmulticast mode [ 1484.352908][T27480] bridge_slave_0: entered promiscuous mode [ 1484.649688][T27480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.659132][T27480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.659284][T27480] bridge_slave_1: entered allmulticast mode [ 1484.690712][T27480] bridge_slave_1: entered promiscuous mode [ 1484.848266][T27656] FAULT_INJECTION: forcing a failure. [ 1484.848266][T27656] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.848308][T27656] CPU: 0 UID: 0 PID: 27656 Comm: syz.3.6962 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1484.848354][T27656] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1484.848368][T27656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1484.848387][T27656] Call Trace: [ 1484.848398][T27656] [ 1484.848410][T27656] dump_stack_lvl+0x100/0x190 [ 1484.848462][T27656] should_fail_ex.cold+0x5/0xa [ 1484.848509][T27656] should_failslab+0xc2/0x120 [ 1484.848554][T27656] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1484.848593][T27656] ? prepare_creds+0x2c/0x950 [ 1484.848634][T27656] prepare_creds+0x2c/0x950 [ 1484.848671][T27656] __sys_setfsgid+0xde/0x3b0 [ 1484.848711][T27656] do_syscall_64+0x123/0x790 [ 1484.848753][T27656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.848785][T27656] RIP: 0033:0x7f6c2fd9f559 [ 1484.848809][T27656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.848838][T27656] RSP: 002b:00007f6c30c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 1484.848867][T27656] RAX: ffffffffffffffda RBX: 00007f6c30025fa0 RCX: 00007f6c2fd9f559 [ 1484.848887][T27656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 1484.848906][T27656] RBP: 00007f6c2fe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1484.848925][T27656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1484.848944][T27656] R13: 00007f6c30026038 R14: 00007f6c30025fa0 R15: 00007ffc2929d108 [ 1484.848984][T27656] [ 1485.168689][T27480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.409850][T27480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.752425][T27480] team0: Port device team_slave_0 added [ 1485.785223][T27480] team0: Port device team_slave_1 added [ 1486.388652][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1486.390513][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1486.390762][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1486.402774][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1486.519205][T27480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.519226][T27480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.519262][T27480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.916561][T27480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.916588][T27480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.916637][T27480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.095365][ T62] hsr_slave_0: left promiscuous mode [ 1487.128916][ T62] hsr_slave_1: left promiscuous mode [ 1487.131032][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.131064][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.174748][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.174783][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.311216][ T62] veth1_macvtap: left promiscuous mode [ 1487.311270][ T62] veth0_macvtap: left promiscuous mode [ 1487.311422][ T62] veth1_vlan: left promiscuous mode [ 1487.311537][ T62] veth0_vlan: left promiscuous mode [ 1487.720311][T27695] netlink: 'syz.0.6972': attribute type 20 has an invalid length. [ 1490.945568][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1491.055760][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1492.131519][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1492.184152][T27729] tipc: Enabling of bearer rejected, failed to enable media [ 1492.574421][T27480] hsr_slave_0: entered promiscuous mode [ 1492.576826][T27480] hsr_slave_1: entered promiscuous mode [ 1492.607612][T27480] debugfs: 'hsr0' already exists in 'hsr' [ 1492.607639][T27480] Cannot create hsr debugfs directory [ 1492.973578][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1493.139019][ T24] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1493.151705][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.151736][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1493.188616][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.188662][ T24] usb 4-1: Product: syz [ 1493.188690][ T24] usb 4-1: Manufacturer: syz [ 1493.188718][ T24] usb 4-1: SerialNumber: syz [ 1493.251093][ T24] usb 4-1: config 0 descriptor?? [ 1493.347229][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1493.360429][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1493.370606][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1493.382147][T17464] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1493.523741][ T24] usb 4-1: USB disconnect, device number 12 [ 1496.492791][T27773] FAULT_INJECTION: forcing a failure. [ 1496.492791][T27773] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.492832][T27773] CPU: 1 UID: 0 PID: 27773 Comm: syz.0.6992 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1496.492877][T27773] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1496.492890][T27773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1496.492908][T27773] Call Trace: [ 1496.492919][T27773] [ 1496.492931][T27773] dump_stack_lvl+0x100/0x190 [ 1496.492983][T27773] should_fail_ex.cold+0x5/0xa [ 1496.493034][T27773] should_failslab+0xc2/0x120 [ 1496.493079][T27773] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1496.493117][T27773] ? prepare_creds+0x2c/0x950 [ 1496.493158][T27773] prepare_creds+0x2c/0x950 [ 1496.493195][T27773] restrict_one_thread_callback+0x17a/0xb70 [ 1496.493246][T27773] ? _raw_spin_unlock_irq+0x23/0x50 [ 1496.493283][T27773] task_work_run+0x150/0x240 [ 1496.493314][T27773] ? __pfx_task_work_run+0x10/0x10 [ 1496.493344][T27773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1496.493381][T27773] ? blk_mq_flush_plug_list+0x145/0x600 [ 1496.493427][T27773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1496.493470][T27773] get_signal+0x1bd/0x21d0 [ 1496.493530][T27773] ? __pfx_get_signal+0x10/0x10 [ 1496.493564][T27773] ? lock_acquire+0x1d1/0x380 [ 1496.493602][T27773] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 1496.493645][T27773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1496.493682][T27773] ? find_held_lock+0x2b/0x80 [ 1496.493716][T27773] arch_do_signal_or_restart+0x91/0x7e0 [ 1496.493768][T27773] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1496.493833][T27773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1496.493876][T27773] exit_to_user_mode_loop+0x139/0x700 [ 1496.493922][T27773] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1496.493959][T27773] ? rcu_is_watching+0x13/0xc0 [ 1496.493992][T27773] do_syscall_64+0x661/0x790 [ 1496.494041][T27773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.494081][T27773] RIP: 0033:0x7fc1c199f559 [ 1496.494105][T27773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.494134][T27773] RSP: 002b:00007fc1c278f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1496.494163][T27773] RAX: 0000000000000001 RBX: 00007fc1c1c25fa0 RCX: 00007fc1c199f559 [ 1496.494183][T27773] RDX: 00002000000001c0 RSI: 1fffffffffffff10 RDI: 00007fc1c276e000 [ 1496.494203][T27773] RBP: 00007fc1c1a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1496.494222][T27773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1496.494241][T27773] R13: 00007fc1c1c26038 R14: 00007fc1c1c25fa0 R15: 00007ffcf0a232f8 [ 1496.494280][T27773] [ 1497.104862][T27782] loop3: detected capacity change from 0 to 256 [ 1498.900779][T27795] fuse: fd is not a fuse device [ 1499.048459][T27792] syzkaller0: entered promiscuous mode [ 1499.048495][T27792] syzkaller0: entered allmulticast mode [ 1499.093140][T27792] tipc: Started in network mode [ 1499.093175][T27792] tipc: Node identity 62917c307a81, cluster identity 4711 [ 1499.093304][T27792] tipc: Enabled bearer , priority 0 [ 1499.139725][T27790] tipc: Resetting bearer [ 1499.223289][T27790] tipc: Disabling bearer [ 1499.366102][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1499.702958][T17464] Bluetooth: hci1: link tx timeout [ 1499.703010][T17464] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1499.739340][T17464] Bluetooth: Frame is too long (len 25, expected len 23) [ 1499.739879][T17464] Bluetooth: hci1: link tx timeout [ 1499.741097][T17464] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1500.001611][T19894] Process accounting resumed [ 1501.584318][T17464] Bluetooth: hci1: link tx timeout [ 1501.584341][T17464] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1501.783807][T17464] Bluetooth: hci1: command 0x0406 tx timeout [ 1501.798147][T27480] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1501.927678][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1501.944278][ T940] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1501.960896][T27480] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1502.017415][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1502.032961][T27480] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1502.103979][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1502.126125][ T940] usb 4-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1502.146017][T27480] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1502.166194][ T940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.166235][ T940] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1502.217194][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.217230][ T940] usb 4-1: Product: syz [ 1502.217251][ T940] usb 4-1: Manufacturer: syz [ 1502.217272][ T940] usb 4-1: SerialNumber: syz [ 1502.247182][ T940] usb 4-1: config 0 descriptor?? [ 1502.268126][T27480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1502.378076][T27824] netlink: 'syz.2.7006': attribute type 4 has an invalid length. [ 1502.448299][T27824] netlink: 'syz.2.7006': attribute type 4 has an invalid length. [ 1502.548309][ T9] usb 4-1: USB disconnect, device number 13 [ 1503.258135][T27480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.424077][T27480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.517855][T23996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.517989][T23996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.556753][T23996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.556882][T23996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.323671][T27866] bond0: option downdelay: invalid value (18446744073709551609) [ 1505.323714][T27866] bond0: option downdelay: allowed values 0 - 2147483647 [ 1507.300255][ T4946] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1507.300605][ T4946] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1507.326805][ T4946] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1507.326857][ T4946] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1508.635369][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1509.048965][T27901] fuse: fd is not a fuse device [ 1510.301404][T27480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.126476][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1512.157561][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1512.177859][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1512.182130][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1512.335377][T27947] ip_tables: iptables: counters copy to user failed while replacing table [ 1513.740592][T27480] veth0_vlan: entered promiscuous mode [ 1513.847266][T27480] veth1_vlan: entered promiscuous mode [ 1513.985452][T27480] veth0_macvtap: entered promiscuous mode [ 1514.038175][T27480] veth1_macvtap: entered promiscuous mode [ 1515.136488][T27480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1515.275245][T27480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.478041][ T62] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.478200][ T62] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.503051][ T62] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.653333][T23996] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.359700][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.359733][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.588325][T20670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.588351][T20670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.394189][T28005] FAULT_INJECTION: forcing a failure. [ 1518.394189][T28005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.394234][T28005] CPU: 1 UID: 0 PID: 28005 Comm: syz.3.7048 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1518.394278][T28005] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1518.394291][T28005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1518.394310][T28005] Call Trace: [ 1518.394320][T28005] [ 1518.394332][T28005] dump_stack_lvl+0x100/0x190 [ 1518.394384][T28005] should_fail_ex.cold+0x5/0xa [ 1518.394428][T28005] _copy_from_user+0x2e/0xd0 [ 1518.394494][T28005] __sys_bpf+0x2f5/0x4b60 [ 1518.394543][T28005] ? __pfx___sys_bpf+0x10/0x10 [ 1518.394579][T28005] ? find_held_lock+0x2b/0x80 [ 1518.394607][T28005] ? futex_wake+0x4ea/0x5e0 [ 1518.394645][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.394683][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.394742][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.394777][T28005] ? kmem_cache_free+0x127/0x6c0 [ 1518.394807][T28005] ? do_sys_openat2+0x1ae/0x1d0 [ 1518.394834][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.394876][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.394930][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.394965][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.395002][T28005] ? __x64_sys_futex+0x358/0x4d0 [ 1518.395035][T28005] ? __x64_sys_openat+0x12d/0x210 [ 1518.395066][T28005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.395101][T28005] ? xfd_validate_state+0x129/0x190 [ 1518.395142][T28005] ? __x64_sys_bpf+0xce/0x140 [ 1518.395180][T28005] __x64_sys_bpf+0xce/0x140 [ 1518.395220][T28005] ? do_syscall_64+0xae/0x790 [ 1518.395260][T28005] do_syscall_64+0x123/0x790 [ 1518.395300][T28005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.395331][T28005] RIP: 0033:0x7f6c2fd9f559 [ 1518.395355][T28005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.395383][T28005] RSP: 002b:00007f6c30c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1518.395412][T28005] RAX: ffffffffffffffda RBX: 00007f6c30025fa0 RCX: 00007f6c2fd9f559 [ 1518.395432][T28005] RDX: 0000000000000028 RSI: 00002000000011c0 RDI: 0000000000000012 [ 1518.395451][T28005] RBP: 00007f6c2fe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1518.395475][T28005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1518.395493][T28005] R13: 00007f6c30026038 R14: 00007f6c30025fa0 R15: 00007ffc2929d108 [ 1518.395534][T28005] [ 1518.734188][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1518.738231][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1518.740770][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1518.741082][ T4946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1521.942052][T17464] Bluetooth: hci3: command 0x0406 tx timeout [ 1524.696079][T28063] syzkaller1: entered promiscuous mode [ 1524.696106][T28063] syzkaller1: entered allmulticast mode [ 1526.239174][ T4946] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1526.261962][ T4946] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1526.270202][ T4946] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1526.270512][ T4946] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1526.414684][T28090] FAULT_INJECTION: forcing a failure. [ 1526.414684][T28090] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.414726][T28090] CPU: 1 UID: 0 PID: 28090 Comm: syz.9.7069 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1526.414770][T28090] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1526.414784][T28090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1526.414801][T28090] Call Trace: [ 1526.414812][T28090] [ 1526.414824][T28090] dump_stack_lvl+0x100/0x190 [ 1526.414876][T28090] should_fail_ex.cold+0x5/0xa [ 1526.414924][T28090] should_failslab+0xc2/0x120 [ 1526.414969][T28090] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1526.415016][T28090] ? prepare_creds+0x2c/0x950 [ 1526.415073][T28090] prepare_creds+0x2c/0x950 [ 1526.415115][T28090] restrict_one_thread_callback+0x17a/0xb70 [ 1526.415165][T28090] ? _raw_spin_unlock_irq+0x23/0x50 [ 1526.415201][T28090] task_work_run+0x150/0x240 [ 1526.415233][T28090] ? __pfx_task_work_run+0x10/0x10 [ 1526.415263][T28090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.415299][T28090] ? blk_mq_flush_plug_list+0x145/0x600 [ 1526.415344][T28090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.415387][T28090] get_signal+0x1bd/0x21d0 [ 1526.415435][T28090] ? __pfx_get_signal+0x10/0x10 [ 1526.415470][T28090] ? lock_acquire+0x1d1/0x380 [ 1526.415509][T28090] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 1526.415547][T28090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.415582][T28090] ? find_held_lock+0x2b/0x80 [ 1526.415617][T28090] arch_do_signal_or_restart+0x91/0x7e0 [ 1526.415669][T28090] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1526.415733][T28090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.415775][T28090] exit_to_user_mode_loop+0x139/0x700 [ 1526.415821][T28090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1526.415856][T28090] ? rcu_is_watching+0x13/0xc0 [ 1526.415890][T28090] do_syscall_64+0x661/0x790 [ 1526.415932][T28090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.415963][T28090] RIP: 0033:0x7f3d47b9f559 [ 1526.415988][T28090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1526.416016][T28090] RSP: 002b:00007f3d48a91028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1526.416045][T28090] RAX: 0000000000000001 RBX: 00007f3d47e25fa0 RCX: 00007f3d47b9f559 [ 1526.416064][T28090] RDX: 00002000000001c0 RSI: 1fffffffffffff10 RDI: 00007f3d48a70000 [ 1526.416084][T28090] RBP: 00007f3d47c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1526.416103][T28090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1526.416121][T28090] R13: 00007f3d47e26038 R14: 00007f3d47e25fa0 R15: 00007ffcb8ca0688 [ 1526.416162][T28090] [ 1528.980838][T28099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7071'. [ 1529.247958][T28109] bridge_slave_1: left allmulticast mode [ 1529.248006][T28109] bridge_slave_1: left promiscuous mode [ 1529.248274][T28109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.450164][T28109] bridge_slave_0: left allmulticast mode [ 1529.450195][T28109] bridge_slave_0: left promiscuous mode [ 1529.450402][T28109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.440337][T28154] FAULT_INJECTION: forcing a failure. [ 1534.440337][T28154] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.440378][T28154] CPU: 1 UID: 0 PID: 28154 Comm: syz.0.7083 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1534.440423][T28154] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1534.440435][T28154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1534.440453][T28154] Call Trace: [ 1534.440468][T28154] [ 1534.440480][T28154] dump_stack_lvl+0x100/0x190 [ 1534.440531][T28154] should_fail_ex.cold+0x5/0xa [ 1534.440575][T28154] should_failslab+0xc2/0x120 [ 1534.440619][T28154] __kmalloc_noprof+0xfc/0x840 [ 1534.440655][T28154] ? __alloc_workqueue+0x5d8/0x1900 [ 1534.440705][T28154] __alloc_workqueue+0x5d8/0x1900 [ 1534.440755][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.440798][T28154] alloc_workqueue_noprof+0xc7/0x130 [ 1534.440842][T28154] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1534.440894][T28154] ? __pfx___debug_object_init+0x10/0x10 [ 1534.440937][T28154] nci_register_device+0x511/0xb80 [ 1534.440973][T28154] ? __pfx_nci_register_device+0x10/0x10 [ 1534.441008][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.441044][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.441079][T28154] ? lockdep_init_map_type+0x5c/0x250 [ 1534.441121][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.441162][T28154] virtual_ncidev_open+0x141/0x220 [ 1534.441196][T28154] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1534.441228][T28154] misc_open+0x26d/0x450 [ 1534.441258][T28154] ? __pfx_misc_open+0x10/0x10 [ 1534.441287][T28154] chrdev_open+0x234/0x6a0 [ 1534.441331][T28154] ? __pfx_apparmor_file_open+0x10/0x10 [ 1534.441369][T28154] ? __pfx_chrdev_open+0x10/0x10 [ 1534.441416][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.441452][T28154] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1534.441502][T28154] do_dentry_open+0x674/0x1470 [ 1534.441542][T28154] ? __pfx_chrdev_open+0x10/0x10 [ 1534.441587][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.441629][T28154] vfs_open_consume+0xcc/0x460 [ 1534.441657][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.441701][T28154] path_openat+0x1547/0x23f0 [ 1534.441755][T28154] ? __pfx_path_openat+0x10/0x10 [ 1534.441812][T28154] do_file_open+0x20e/0x430 [ 1534.441875][T28154] ? __pfx_do_file_open+0x10/0x10 [ 1534.441976][T28154] ? _raw_spin_unlock+0x28/0x50 [ 1534.442018][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.442056][T28154] ? alloc_fd+0x471/0x7a0 [ 1534.442115][T28154] do_sys_openat2+0x163/0x1d0 [ 1534.442145][T28154] ? __pfx_do_sys_openat2+0x10/0x10 [ 1534.442190][T28154] __x64_sys_openat+0x12d/0x210 [ 1534.442221][T28154] ? __pfx___x64_sys_openat+0x10/0x10 [ 1534.442259][T28154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1534.442302][T28154] do_syscall_64+0x123/0x790 [ 1534.442343][T28154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.442374][T28154] RIP: 0033:0x7fc1c199f559 [ 1534.442398][T28154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.442427][T28154] RSP: 002b:00007fc1c278f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1534.442455][T28154] RAX: ffffffffffffffda RBX: 00007fc1c1c25fa0 RCX: 00007fc1c199f559 [ 1534.442479][T28154] RDX: 0000000000000002 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1534.442498][T28154] RBP: 00007fc1c1a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1534.442517][T28154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.442536][T28154] R13: 00007fc1c1c26038 R14: 00007fc1c1c25fa0 R15: 00007ffcf0a232f8 [ 1534.442575][T28154] [ 1535.936115][ T4946] Bluetooth: Frame is too long (len 25, expected len 23) [ 1536.252088][T28173] FAULT_INJECTION: forcing a failure. [ 1536.252088][T28173] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.252130][T28173] CPU: 1 UID: 0 PID: 28173 Comm: syz.9.7087 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1536.252177][T28173] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1536.252190][T28173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1536.252210][T28173] Call Trace: [ 1536.252220][T28173] [ 1536.252232][T28173] dump_stack_lvl+0x100/0x190 [ 1536.252288][T28173] should_fail_ex.cold+0x5/0xa [ 1536.252333][T28173] should_failslab+0xc2/0x120 [ 1536.252377][T28173] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1536.252416][T28173] ? prepare_creds+0x2c/0x950 [ 1536.252457][T28173] prepare_creds+0x2c/0x950 [ 1536.252498][T28173] restrict_one_thread_callback+0x17a/0xb70 [ 1536.252550][T28173] ? _raw_spin_unlock_irq+0x23/0x50 [ 1536.252586][T28173] task_work_run+0x150/0x240 [ 1536.252618][T28173] ? __pfx_task_work_run+0x10/0x10 [ 1536.252649][T28173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1536.252685][T28173] ? blk_mq_flush_plug_list+0x145/0x600 [ 1536.252741][T28173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1536.252786][T28173] get_signal+0x1bd/0x21d0 [ 1536.252835][T28173] ? __pfx_get_signal+0x10/0x10 [ 1536.252866][T28173] ? lock_acquire+0x1d1/0x380 [ 1536.252905][T28173] ? percpu_ref_put_many.constprop.0+0x23/0x2a0 [ 1536.252943][T28173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1536.252980][T28173] ? find_held_lock+0x2b/0x80 [ 1536.253016][T28173] arch_do_signal_or_restart+0x91/0x7e0 [ 1536.253068][T28173] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1536.253133][T28173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1536.253176][T28173] exit_to_user_mode_loop+0x139/0x700 [ 1536.253223][T28173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1536.253259][T28173] ? rcu_is_watching+0x13/0xc0 [ 1536.253292][T28173] do_syscall_64+0x661/0x790 [ 1536.253335][T28173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.253366][T28173] RIP: 0033:0x7f3d47b9f559 [ 1536.253391][T28173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.253419][T28173] RSP: 002b:00007f3d48a91028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1536.253448][T28173] RAX: 0000000000000001 RBX: 00007f3d47e25fa0 RCX: 00007f3d47b9f559 [ 1536.253468][T28173] RDX: 00002000000001c0 RSI: 1fffffffffffff10 RDI: 00007f3d48a70000 [ 1536.253488][T28173] RBP: 00007f3d47c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1536.253520][T28173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.253545][T28173] R13: 00007f3d47e26038 R14: 00007f3d47e25fa0 R15: 00007ffcb8ca0688 [ 1536.253585][T28173] [ 1537.671322][T28186] fuse: fd is not a fuse device [ 1538.328342][T28197] loop3: detected capacity change from 0 to 16 [ 1538.362108][T28197] erofs (device loop3): invalid sb_extslots 4176 (more than a fs block) [ 1540.999208][T28232] fuse: fd is not a fuse device [ 1541.367057][T28234] gretap0: entered promiscuous mode [ 1543.886045][T28234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.936470][T28234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.061631][T28234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.458536][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.458597][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.485315][T28234] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1545.489253][T28234] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1546.550797][T28265] loop3: detected capacity change from 0 to 512 [ 1547.560878][T28282] fuse: fd is not a fuse device [ 1547.755393][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1547.772585][ T4946] Bluetooth: hci1: command 0x0406 tx timeout [ 1547.905847][ T24] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1547.927922][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.927985][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.928029][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1547.928096][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.052579][ T24] usb 4-1: config 0 descriptor?? [ 1548.147937][T28288] batadv_slave_0: entered promiscuous mode [ 1548.151393][T28277] batadv_slave_0: left promiscuous mode [ 1548.541256][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 1548.541361][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1548.582265][ T24] usb 4-1: USB disconnect, device number 14 [ 1549.043850][T28300] overlayfs: failed to clone upperpath [ 1550.498486][T28322] fuse: fd is not a fuse device [ 1551.150862][T28328] fuse: fd is not a fuse device [ 1551.156979][T28325] overlayfs: failed to clone upperpath [ 1551.753520][T28337] fuse: fd is not a fuse device [ 1552.623082][ T940] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1552.779227][ T940] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1552.780383][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.780423][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.780453][ T940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1552.780505][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.859030][ T940] usb 4-1: config 0 descriptor?? [ 1552.976640][T28352] FAULT_INJECTION: forcing a failure. [ 1552.976640][T28352] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.976694][T28352] CPU: 1 UID: 0 PID: 28352 Comm: syz.9.7141 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1552.976756][T28352] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1552.976774][T28352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1552.976799][T28352] Call Trace: [ 1552.976813][T28352] [ 1552.976829][T28352] dump_stack_lvl+0x100/0x190 [ 1552.976897][T28352] should_fail_ex.cold+0x5/0xa [ 1552.976957][T28352] should_failslab+0xc2/0x120 [ 1552.977017][T28352] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1552.977065][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.977117][T28352] ? __kernfs_new_node+0xd2/0xa10 [ 1552.977183][T28352] __kernfs_new_node+0xd2/0xa10 [ 1552.977243][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.977295][T28352] ? __pfx___kernfs_new_node+0x10/0x10 [ 1552.977356][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.977406][T28352] ? lock_acquire+0x1d1/0x380 [ 1552.977458][T28352] ? kernfs_root+0x23/0x2a0 [ 1552.977513][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.977562][T28352] ? find_held_lock+0x2b/0x80 [ 1552.977600][T28352] ? kernfs_root+0xee/0x2a0 [ 1552.977647][T28352] ? kernfs_root+0xee/0x2a0 [ 1552.977695][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.977757][T28352] kernfs_create_dir_ns+0xa4/0x2b0 [ 1552.977824][T28352] internal_create_group+0x36f/0xfb0 [ 1552.977885][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.977940][T28352] ? __pfx_internal_create_group+0x10/0x10 [ 1552.977990][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.978039][T28352] ? bus_add_device+0x2e2/0x6c0 [ 1552.978094][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.978145][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.978198][T28352] ? __pfx_bus_add_device+0x10/0x10 [ 1552.978248][T28352] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1552.978293][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.978354][T28352] dpm_sysfs_add+0x80/0x280 [ 1552.978400][T28352] device_add+0x9f4/0x1970 [ 1552.978445][T28352] ? __pfx_device_add+0x10/0x10 [ 1552.978510][T28352] nfc_register_device+0x41/0x3e0 [ 1552.978570][T28352] nci_register_device+0x7f1/0xb80 [ 1552.978618][T28352] ? __pfx_nci_register_device+0x10/0x10 [ 1552.978667][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.978716][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.978765][T28352] ? lockdep_init_map_type+0x5c/0x250 [ 1552.978821][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.978877][T28352] virtual_ncidev_open+0x141/0x220 [ 1552.978923][T28352] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1552.978965][T28352] misc_open+0x26d/0x450 [ 1552.979006][T28352] ? __pfx_misc_open+0x10/0x10 [ 1552.979046][T28352] chrdev_open+0x234/0x6a0 [ 1552.979106][T28352] ? __pfx_apparmor_file_open+0x10/0x10 [ 1552.979158][T28352] ? __pfx_chrdev_open+0x10/0x10 [ 1552.979222][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.979270][T28352] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1552.979332][T28352] do_dentry_open+0x674/0x1470 [ 1552.979387][T28352] ? __pfx_chrdev_open+0x10/0x10 [ 1552.979450][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.979511][T28352] vfs_open_consume+0xcc/0x460 [ 1552.979549][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.979606][T28352] path_openat+0x1547/0x23f0 [ 1552.979679][T28352] ? __pfx_path_openat+0x10/0x10 [ 1552.979759][T28352] do_file_open+0x20e/0x430 [ 1552.979828][T28352] ? __pfx_do_file_open+0x10/0x10 [ 1552.979928][T28352] ? _raw_spin_unlock+0x28/0x50 [ 1552.979970][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.980019][T28352] ? alloc_fd+0x471/0x7a0 [ 1552.980100][T28352] do_sys_openat2+0x163/0x1d0 [ 1552.980142][T28352] ? __pfx_do_sys_openat2+0x10/0x10 [ 1552.980205][T28352] __x64_sys_openat+0x12d/0x210 [ 1552.980248][T28352] ? __pfx___x64_sys_openat+0x10/0x10 [ 1552.980299][T28352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1552.980358][T28352] do_syscall_64+0x123/0x790 [ 1552.980415][T28352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.980456][T28352] RIP: 0033:0x7f3d47b9f559 [ 1552.980495][T28352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.980535][T28352] RSP: 002b:00007f3d48a91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1552.980574][T28352] RAX: ffffffffffffffda RBX: 00007f3d47e25fa0 RCX: 00007f3d47b9f559 [ 1552.980601][T28352] RDX: 0000000000000002 RSI: 0000200000001280 RDI: ffffffffffffff9c [ 1552.980628][T28352] RBP: 00007f3d47c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1552.980654][T28352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.980678][T28352] R13: 00007f3d47e26038 R14: 00007f3d47e25fa0 R15: 00007ffcb8ca0688 [ 1552.980734][T28352] [ 1553.815825][ T940] usbhid 4-1:0.0: can't add hid device: -71 [ 1553.818921][ T940] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1553.910797][ T940] usb 4-1: USB disconnect, device number 15 [ 1555.101267][T28385] loop3: detected capacity change from 0 to 512 [ 1555.415015][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415048][T28385] FAT-fs (loop3): Filesystem has been set read-only [ 1555.415380][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415411][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415439][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415468][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415498][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415526][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415554][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.415582][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.518969][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519009][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519039][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519067][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519095][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519124][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519152][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519181][T28385] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 1555.519408][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1555.519430][ T30] audit: type=1800 audit(1793282662.665:950): pid=28385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7151" name="file2" dev="loop3" ino=124 res=0 errno=-5 [ 1559.830641][T28435] fuse: fd is not a fuse device [ 1563.910396][T17464] Bluetooth: hci5: link tx timeout [ 1563.910419][T17464] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1563.952130][T28480] netlink: 'syz.0.7177': attribute type 8 has an invalid length. [ 1563.952157][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7177'. [ 1564.002234][ T4946] Bluetooth: Frame is too long (len 25, expected len 23) [ 1564.005746][ T4946] Bluetooth: hci5: link tx timeout [ 1564.005765][ T4946] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1564.427307][T28488] fuse: fd is not a fuse device [ 1565.039641][ T4946] Bluetooth: hci5: link tx timeout [ 1565.039669][ T4946] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1565.041642][T28496] netlink: 'syz.3.7182': attribute type 4 has an invalid length. [ 1565.957049][ T4946] Bluetooth: hci5: command 0x0406 tx timeout [ 1566.358846][T28515] 9p: Bad value for 'wfdno' [ 1567.299011][T28524] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7193'. [ 1567.528815][T28535] fuse: fd is not a fuse device [ 1570.893962][T28577] overlayfs: failed to clone upperpath [ 1571.876369][T28592] loop9: detected capacity change from 0 to 512 [ 1571.944883][T28592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1571.945004][T28592] System zones: 1-12 [ 1571.949520][T28592] EXT4-fs error (device loop9): ext4_quota_enable:7311: comm syz.9.7210: inode #100663296: comm syz.9.7210: iget: illegal inode # [ 1571.949559][T28592] loop9: lost filesystem error report for type 5 error -117 [ 1571.951926][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1571.951958][ C1] EXT4-fs (loop9): initial error at time 1793282679: ext4_quota_enable:7311 [ 1571.951997][ C1] EXT4-fs (loop9): last error at time 1793282679: ext4_quota_enable:7311 [ 1571.981270][T28592] EXT4-fs error (device loop9): ext4_quota_enable:7313: comm syz.9.7210: Bad quota inode: 100663296, type: 2 [ 1571.981314][T28592] loop9: lost filesystem error report for type 5 error -117 [ 1572.039365][T28592] EXT4-fs warning (device loop9): ext4_enable_quotas:7351: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix. [ 1572.039714][T28592] EXT4-fs (loop9): mount failed [ 1572.404502][T28597] fuse: fd is not a fuse device [ 1572.968616][T28608] fuse: fd is not a fuse device [ 1574.041264][T28624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7221'. [ 1577.856281][T28671] fuse: fd is not a fuse device [ 1578.014271][T28668] loop9: detected capacity change from 0 to 2048 [ 1578.139874][T28668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.969484][T27480] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.500993][T28695] loop9: detected capacity change from 0 to 512 [ 1579.590426][T28695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1579.590585][T28695] System zones: 1-12 [ 1579.590872][T28695] EXT4-fs error (device loop9): ext4_quota_enable:7311: comm syz.9.7241: inode #100663296: comm syz.9.7241: iget: illegal inode # [ 1579.590923][T28695] loop9: lost filesystem error report for type 5 error -117 [ 1579.591904][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1579.591937][ C0] EXT4-fs (loop9): initial error at time 1793282686: ext4_quota_enable:7311 [ 1579.591975][ C0] EXT4-fs (loop9): last error at time 1793282686: ext4_quota_enable:7311 [ 1579.622998][T28695] EXT4-fs error (device loop9): ext4_quota_enable:7313: comm syz.9.7241: Bad quota inode: 100663296, type: 2 [ 1579.623048][T28695] loop9: lost filesystem error report for type 5 error -117 [ 1579.630934][T28695] EXT4-fs warning (device loop9): ext4_enable_quotas:7351: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix. [ 1579.669000][T28695] EXT4-fs (loop9): mount failed [ 1580.600660][T28711] fuse: fd is not a fuse device [ 1581.930169][T28730] fuse: fd is not a fuse device [ 1584.200575][T28761] fuse: fd is not a fuse device [ 1585.227944][T28765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.228537][T28765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.652143][T28785] fuse: fd is not a fuse device [ 1586.157864][T28765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.239221][T28765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.594590][T20670] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.617389][T20669] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.617462][T20669] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.617524][T20669] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.880874][ T4946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1587.900218][ T4946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1587.909023][ T4946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1587.937929][ T4946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1587.942258][ T4946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1590.012104][T17464] Bluetooth: hci2: command tx timeout [ 1591.663303][T28845] fuse: fd is not a fuse device [ 1592.001289][T28803] rxe_eth0 speed is unknown, defaulting to 1000 [ 1592.092525][T17464] Bluetooth: hci2: command tx timeout [ 1592.770551][ T164] bond0: (slave netdevsim1): Releasing backup interface [ 1593.334464][T28867] fuse: Bad value for 'fd' [ 1594.174137][T17464] Bluetooth: hci2: command tx timeout [ 1595.432270][ T164] pim6reg: left allmulticast mode [ 1596.100585][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.129734][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.154046][ T164] bond0 (unregistering): Released all slaves [ 1596.252309][T17464] Bluetooth: hci2: command tx timeout [ 1596.581026][T28884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.581759][T28884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.889425][T28884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1596.928547][T28884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.260406][ T164] tipc: Left network mode [ 1597.287593][ T7460] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.294836][T20669] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.313289][T20669] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.313365][T20669] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.024013][T28899] fuse: Bad value for 'fd' [ 1598.785140][T28803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.785272][T28803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.785473][T28803] bridge_slave_0: entered allmulticast mode [ 1598.796431][T28803] bridge_slave_0: entered promiscuous mode [ 1598.835552][T28803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.835676][T28803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.835860][T28803] bridge_slave_1: entered allmulticast mode [ 1598.873626][T28803] bridge_slave_1: entered promiscuous mode [ 1599.302278][T28925] fuse: fd is not a fuse device [ 1599.617231][T28803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.784694][T28803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.236884][T28803] team0: Port device team_slave_0 added [ 1600.259930][T28803] team0: Port device team_slave_1 added [ 1600.616401][T28938] sctp: [Deprecated]: syz.7.7311 (pid 28938) Use of int in max_burst socket option. [ 1600.616401][T28938] Use struct sctp_assoc_value instead [ 1600.879760][ T164] hsr_slave_0: left promiscuous mode [ 1600.944026][ T164] hsr_slave_1: left promiscuous mode [ 1600.945058][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.962726][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.980921][ T164] batman_adv: batadv0: Removing interface: dummy0 [ 1601.078855][T28947] fuse: fd is not a fuse device [ 1601.582004][T28954] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7318'. [ 1601.940690][ T164] team0 (unregistering): Port device team_slave_1 removed [ 1601.973815][ T164] team0 (unregistering): Port device team_slave_0 removed [ 1602.545605][T28803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.545634][T28803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.545685][T28803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.603707][T28803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.603734][T28803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.603784][T28803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.606869][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1602.857079][T28803] hsr_slave_0: entered promiscuous mode [ 1602.864679][T28803] hsr_slave_1: entered promiscuous mode [ 1602.867487][T28803] debugfs: 'hsr0' already exists in 'hsr' [ 1602.867517][T28803] Cannot create hsr debugfs directory [ 1604.459919][T28991] fuse: fd is not a fuse device [ 1605.086255][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1605.092379][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1605.110863][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1605.122925][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1605.124386][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1605.609858][T28803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1605.670307][T28803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1605.681995][T28803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1605.717207][T28803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1605.729131][T28803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1605.774664][T28803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1605.786489][T28803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1605.964824][T28803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1606.471802][ T5867] Process accounting resumed [ 1606.816550][T28803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.894733][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.894817][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.939981][T28803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.037363][T22042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.037500][T22042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.125899][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.126032][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.223100][T17464] Bluetooth: hci4: command tx timeout [ 1607.695678][T29043] fuse: fd is not a fuse device [ 1608.822230][T29064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1608.822266][T29064] block device autoloading is deprecated and will be removed. [ 1608.879295][T29002] rxe_eth0 speed is unknown, defaulting to 1000 [ 1609.285759][ T9] Process accounting resumed [ 1609.302334][T17464] Bluetooth: hci4: command tx timeout [ 1610.531632][T28803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.075380][ T30] audit: type=1326 audit(1793282718.225:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29106 comm="syz.7.7356" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940fd9f559 code=0x7ffc0000 [ 1611.075705][ T30] audit: type=1326 audit(1793282718.225:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29106 comm="syz.7.7356" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940fd9f559 code=0x7ffc0000 [ 1611.079629][ T30] audit: type=1326 audit(1793282718.225:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29106 comm="syz.7.7356" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940fd9f559 code=0x7ffc0000 [ 1611.079711][ T30] audit: type=1326 audit(1793282718.225:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29106 comm="syz.7.7356" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940fd9f559 code=0x7ffc0000 [ 1611.079789][ T30] audit: type=1326 audit(1793282718.225:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29106 comm="syz.7.7356" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940fd9f559 code=0x7ffc0000 [ 1611.364232][T29002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.364358][T29002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.364561][T29002] bridge_slave_0: entered allmulticast mode [ 1611.374493][T17464] Bluetooth: hci4: command tx timeout [ 1611.383586][T29002] bridge_slave_0: entered promiscuous mode [ 1611.410900][T29002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.411030][T29002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.411226][T29002] bridge_slave_1: entered allmulticast mode [ 1611.428505][T29002] bridge_slave_1: entered promiscuous mode [ 1611.719869][T29002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.744564][T29002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.776626][T17464] Bluetooth: hci5: command 0x0406 tx timeout [ 1611.941827][T29002] team0: Port device team_slave_0 added [ 1611.975200][T29002] team0: Port device team_slave_1 added [ 1612.199835][T29002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.199864][T29002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.199915][T29002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.258406][T28803] veth0_vlan: entered promiscuous mode [ 1612.291527][T29002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.291555][T29002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.291605][T29002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.497731][T28803] veth1_vlan: entered promiscuous mode [ 1612.800215][T29002] hsr_slave_0: entered promiscuous mode [ 1612.810166][T29002] hsr_slave_1: entered promiscuous mode [ 1612.820249][T29002] debugfs: 'hsr0' already exists in 'hsr' [ 1612.820280][T29002] Cannot create hsr debugfs directory [ 1613.125846][T29126] lo: entered allmulticast mode [ 1613.418820][T29131] tipc: Enabling of bearer rejected, failed to enable media [ 1613.454343][ T4946] Bluetooth: hci4: command tx timeout [ 1613.680950][T28803] veth0_macvtap: entered promiscuous mode [ 1614.025105][T28803] veth1_macvtap: entered promiscuous mode [ 1614.258325][T28803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.411188][T28803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.515416][ T5905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.516440][ T5905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.516508][ T5905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.947759][T29181] fuse: Bad value for 'fd' [ 1616.444066][T28983] syz.5.7326 (28983) used greatest stack depth: 19704 bytes left [ 1616.554405][T28997] syz.3.7330 (28997) used greatest stack depth: 18672 bytes left [ 1617.143513][T20669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.168476][T29166] tipc: Enabling of bearer rejected, failed to enable media [ 1617.957719][ T5907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.957755][ T5907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.423009][ T8142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.423042][ T8142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.261381][T29002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1619.298221][T29002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1619.300960][T29002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1619.356202][T29002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1619.357322][T29002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1619.417834][T29002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1619.430549][T29002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1619.495473][T29002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1620.232209][T29002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1620.375364][T29002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.434944][T20669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.435085][T20669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.497657][T20669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.497761][T20669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.486312][T29270] syzkaller0: entered promiscuous mode [ 1622.486349][T29270] syzkaller0: entered allmulticast mode [ 1622.504604][T29272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.613099][T29270] tipc: Started in network mode [ 1622.613146][T29270] tipc: Node identity 62b952ca9139, cluster identity 4711 [ 1622.613318][T29270] tipc: Enabled bearer , priority 0 [ 1622.622175][T29268] tipc: Resetting bearer [ 1622.731410][T29268] tipc: Disabling bearer [ 1623.971605][T29002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.206841][T29322] capability: warning: `syz.3.7397' uses 32-bit capabilities (legacy support in use) [ 1626.275606][T29341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7402'. [ 1626.275647][T29341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7402'. [ 1626.275739][T29341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7402'. [ 1626.349938][T29002] veth0_vlan: entered promiscuous mode [ 1626.398074][T29002] veth1_vlan: entered promiscuous mode [ 1626.516238][T29344] loop2: detected capacity change from 0 to 512 [ 1626.617292][T29002] veth0_macvtap: entered promiscuous mode [ 1626.653406][T29002] veth1_macvtap: entered promiscuous mode [ 1626.698121][T29002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.781534][T29002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.958019][T23996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.963002][ T6086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.969062][T22042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.969127][T22042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.137167][T22042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.137204][T22042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.324967][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.325108][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.008932][ T164] IPVS: starting estimator thread 0... [ 1630.103360][T29401] IPVS: using max 30 ests per chain, 72000 per kthread [ 1631.625813][T29422] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1635.757103][ T4946] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 1645.671567][T29562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7462'. [ 1646.116673][T29572] netlink: 'syz.9.7463': attribute type 2 has an invalid length. [ 1648.491942][ C1] net_ratelimit: 255 callbacks suppressed [ 1649.918877][T29617] loop4: detected capacity change from 0 to 256 [ 1649.935524][T29617] exfat: Bad value for 'dmask' [ 1649.984774][T29617] loop4: detected capacity change from 0 to 128 [ 1650.081104][T29617] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1650.112555][T29617] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.360850][T29617] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-lib" [ 1650.657641][T29615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.183745][T29637] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7478'. [ 1651.710712][T29648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1651.817094][T29617] fscrypt (loop4): Error -4 starting to use blk-crypto [ 1651.881334][T29631] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1652.101316][T29655] fuse: fd is not a fuse device [ 1652.929630][T29002] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1653.531950][ C1] net_ratelimit: 423 callbacks suppressed [ 1654.525748][T29678] vivid-007: ================= START STATUS ================= [ 1654.525793][T29678] vivid-007: Generate PTS: true [ 1654.525823][T29678] vivid-007: Generate SCR: true [ 1654.525851][T29678] tpg source WxH: 320x240 (Y'CbCr) [ 1654.525869][T29678] tpg field: 1 [ 1654.525881][T29678] tpg crop: (0,0)/320x240 [ 1654.525899][T29678] tpg compose: (0,0)/320x240 [ 1654.525918][T29678] tpg colorspace: 8 [ 1654.525929][T29678] tpg transfer function: 0/0 [ 1654.525943][T29678] tpg Y'CbCr encoding: 0/0 [ 1654.525957][T29678] tpg quantization: 0/0 [ 1654.525971][T29678] tpg RGB range: 0/2 [ 1654.525986][T29678] vivid-007: ================== END STATUS ================== [ 1655.107515][T29684] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1655.497555][T29693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.542724][T29693] loop4: detected capacity change from 0 to 128 [ 1655.565795][ T8142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.029495][T29706] fuse: fd is not a fuse device [ 1656.853023][T29708] overlayfs: failed to clone upperpath [ 1656.940501][T29711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7500'. [ 1657.314839][ T8142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.731948][ C1] net_ratelimit: 187 callbacks suppressed [ 1659.005674][ T8142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.269203][T29739] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1659.314680][ T8142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.646487][ T8142] bridge_slave_1: left allmulticast mode [ 1661.646521][ T8142] bridge_slave_1: left promiscuous mode [ 1661.646730][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.708560][ T8142] bridge_slave_0: left allmulticast mode [ 1661.708593][ T8142] bridge_slave_0: left promiscuous mode [ 1661.708851][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.853498][ T7460] net_ratelimit: 376 callbacks suppressed [ 1664.463871][T29795] fuse: fd is not a fuse device [ 1666.076982][ T8142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1666.097928][ T8142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1666.141639][ T8142] bond0 (unregistering): Released all slaves [ 1668.682999][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.683054][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.763706][T29832] netlink: 'syz.5.7537': attribute type 2 has an invalid length. [ 1668.971953][ C1] net_ratelimit: 184 callbacks suppressed [ 1669.718416][T29848] fuse: Bad value for 'fd' [ 1671.968316][ T5907] IPVS: starting estimator thread 0... [ 1672.066849][T29878] IPVS: using max 30 ests per chain, 72000 per kthread [ 1673.874840][ T8142] hsr_slave_0: left promiscuous mode [ 1673.900173][ T8142] hsr_slave_1: left promiscuous mode [ 1673.912792][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.912826][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.945604][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.945632][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.009236][ T8142] veth1_macvtap: left promiscuous mode [ 1674.009282][ T8142] veth0_macvtap: left promiscuous mode [ 1674.009380][ T8142] veth1_vlan: left promiscuous mode [ 1674.009450][ T8142] veth0_vlan: left promiscuous mode [ 1674.010068][ T8142] net_ratelimit: 437 callbacks suppressed [ 1675.136907][ T8142] team0 (unregistering): Port device team_slave_1 removed [ 1675.397255][ T8142] team0 (unregistering): Port device team_slave_0 removed [ 1677.227450][T29896] rxe_eth0 speed is unknown, defaulting to 1000 [ 1679.052112][ C1] net_ratelimit: 289 callbacks suppressed [ 1680.464752][T29952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.465334][T29952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.670691][T29963] TCP: TCP_TX_DELAY enabled [ 1681.045491][T29952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1681.115223][T29972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7575'. [ 1681.151243][T29952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.735034][ T5905] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.943090][ T7460] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.943162][ T7460] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.943227][ T7460] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.198041][T29986] syzkaller0: entered promiscuous mode [ 1683.198071][T29986] syzkaller0: entered allmulticast mode [ 1683.214267][T29990] tipc: Enabled bearer , priority 0 [ 1683.231566][T29985] tipc: Resetting bearer [ 1683.337751][T29985] tipc: Disabling bearer [ 1683.361238][T30006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7583'. [ 1683.745577][T30006] batadv3: entered allmulticast mode [ 1683.750299][T30006] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1684.091987][ C0] net_ratelimit: 332 callbacks suppressed [ 1684.118131][T30018] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 1685.616080][T30033] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1685.660616][T30033] ================================================================== [ 1685.660633][T30033] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xa5/0x420 [ 1685.660694][T30033] Read of size 4 at addr 0000000000000174 by task syz.2.7592/30033 [ 1685.660725][T30033] [ 1685.660748][T30033] CPU: 0 UID: 0 PID: 30033 Comm: syz.2.7592 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 1685.660810][T30033] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1685.660827][T30033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1685.660853][T30033] Call Trace: [ 1685.660868][T30033] [ 1685.660884][T30033] dump_stack_lvl+0x100/0x190 [ 1685.660948][T30033] kasan_report+0xdf/0x1c0 [ 1685.661009][T30033] ? dm_kcopyd_client_destroy+0xa5/0x420 [ 1685.661069][T30033] kasan_check_range+0x10f/0x1e0 [ 1685.661136][T30033] dm_kcopyd_client_destroy+0xa5/0x420 [ 1685.661188][T30033] ? kfree+0x22b/0x6d0 [ 1685.661229][T30033] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 1685.661285][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1685.661336][T30033] ? vfree+0x12f/0x850 [ 1685.661389][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1685.661438][T30033] ? mempool_exit+0x120/0x1c0 [ 1685.661491][T30033] ? cache_ctr+0x1d73/0x3a80 [ 1685.661551][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1685.661600][T30033] ? __vmalloc_node_noprof+0xad/0xf0 [ 1685.661660][T30033] __destroy+0x191/0x3c0 [ 1685.661703][T30033] cache_ctr+0x2f7c/0x3a80 [ 1685.661759][T30033] ? __pfx_cache_ctr+0x10/0x10 [ 1685.661803][T30033] ? kfree+0x22b/0x6d0 [ 1685.661830][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1685.661878][T30033] ? skip_spaces+0xee/0x130 [ 1685.661941][T30033] ? dm_split_args+0x441/0x570 [ 1685.661997][T30033] dm_table_add_target+0x58b/0xee0 [ 1685.662047][T30033] ? __pfx_dm_table_add_target+0x10/0x10 [ 1685.662087][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1685.662124][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1685.662161][T30033] ? dm_tab ** replaying previous printk message ** [ 1685.662161][T30033] ? dm_table_create+0x2d3/0x3d0 [ 1685.662206][T30033] table_load+0x3b9/0x7b0 [ 1685.662243][T30033] ? __pfx_table_load+0x10/0x10 [ 1685.662274][T30033] ? __might_fault+0xc5/0x140 [ 1685.662319][T30033] ? __might_fault+0xc5/0x140 [ 1685.662373][T30033] ctl_ioctl+0x4d2/0xcc0 [ 1685.662401][T30033] ? __pfx_table_load+0x10/0x10 [ 1685.662435][T30033] ? __pfx_ctl_ioctl+0x10/0x10 [ 1685.662485][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1685.662522][T30033] ? __fget_files+0x21f/0x3d0 [ 1685.662574][T30033] dm_ctl_ioctl+0x22/0x30 [ 1685.662601][T30033] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1685.662630][T30033] __x64_sys_ioctl+0x18e/0x210 [ 1685.662671][T30033] do_syscall_64+0x123/0x790 [ 1685.662712][T30033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.662744][T30033] RIP: 0033:0x7f026699f559 [ 1685.662767][T30033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.662797][T30033] RSP: 002b:00007f02677c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1685.662826][T30033] RAX: ffffffffffffffda RBX: 00007f0266c25fa0 RCX: 00007f026699f559 [ 1685.662847][T30033] RDX: 00002000000001c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1685.662867][T30033] RBP: 00007f0266a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1685.662886][T30033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.662905][T30033] R13: 00007f0266c26038 R14: 00007f0266c25fa0 R15: 00007ffc0347a8b8 [ 1685.662937][T30033] [ 1685.662948][T30033] ================================================================== [ 1685.687442][T30034] sctp: sctp_do_sm[post-fn]: asoc:ffff888050ae4000, status:DISPOSITION_CONSUME [ 1685.687487][T30034] sctp: sctp_cmd_new_state: asoc:ffff888050ae4000[STATE_COOKIE_WAIT] [ 1685.700959][ C0] virtqueue callback for ffff88802805fc00 (ffffffff86fc95b0) [ 1685.707278][T30034] sctp: sctp_outq_tail: outq:ffff888050ae47e0, chunk:ffff888039880b40[INIT] [ 1685.707326][T30034] sctp: sctp_packet_config: packet:ffff88803716c308 vtag:0x0 [ 1685.707342][ C0] No more buffers in queue [ 1685.707406][ C0] Receiving skb proto 0x0800 len 220 type 0 [ 1685.707443][ C0] No more buffers in queue [ 1685.707735][ C0] eth0: xmit ffff88807a91b140 42:01:0a:80:00:01 [ 1685.707782][ C0] Added buffer head 25 to ffff88802805fa00 [ 1685.707834][ C0] virtqueue callback for ffff88802805fa00 (ffffffff86fd2540) [ 1685.707878][ C0] Sent skb ffff88807a91b140 [ 1685.707950][ C0] No more buffers in queue [ 1685.714569][T30034] sctp: sctp_v6_get_dst: dst=fc00:0000:0000:0000:0000:0000:0000:0000 [ 1685.719140][T30034] sctp: no route [ 1685.719362][T29896] kernfs tx-0: removing [ 1685.719449][T29896] kobject: 'tx-0' (ffff88809c902420): calling ktype release [ 1685.719495][T29896] kobject: 'tx-0': free name [ 1685.719544][T29896] kernfs queues: removing [ 1685.719609][T29896] kobject: 'queues' (ffff8880aa8d1750): kobject_cleanup, parent 0000000000000000 [ 1685.719646][T29896] kobject: 'queues' (ffff8880aa8d1750): calling ktype release [ 1685.719674][T29896] kobject: 'queues' (ffff8880aa8d1750): kset_release [ 1685.719725][T29896] kobject: 'queues': free name [ 1685.724710][T30034] sctp: sctp_v6_get_saddr: asoc:ffff888050ae4000 dst:0000000000000000 [ 1685.724747][T30034] sctp: sctp_v6_get_dst: dst=fc00:0000:0000:0000:0000:0000:0000:0000 [ 1685.724777][T30034] sctp: src=0000:0000:0000:0000:0000:0000:0000:0000 - [ 1685.729058][ C0] virtqueue callback for ffff88802805fc00 (ffffffff86fc95b0) [ 1685.729128][ C0] No more buffers in queue [ 1685.729203][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1685.729241][ C0] No more buffers in queue [ 1685.729262][T30034] sctp: no route [ 1685.736564][T30034] sctp: sctp_assoc_set_pmtu: asoc:ffff888050ae4000, pmtu:1500, frag_point:1432 [ 1685.736609][T30034] sctp: sctp_packet_init: packet:ffffc900043bf358 transport:ffff88803716c000 [ 1685.736642][T30034] sctp: sctp_packet_config: packet:ffffc900043bf358 vtag:0x0 [ 1685.739406][T30034] sctp: sctp_v6_get_dst: dst=fc00:0000:0000:0000:0000:0000:0000:0000 [ 1685.747593][T30034] sctp: no route [ 1685.751297][T30034] sctp: sctp_v6_get_saddr: asoc:ffff888050ae4000 dst:0000000000000000 [ 1685.751336][T30034] sctp: sctp_v6_get_dst: dst=fc00:0000:0000:0000:0000:0000:0000:0000 [ 1685.751367][T30034] sctp: src=0000:0000:0000:0000:0000:0000:0000:0000 - [ 1685.753641][ T8142] bond1: (slave geneve2): Send learning packet: mac 8a:c4:bd:78:c0:f8 vlan 0 [ 1685.767790][T30034] sctp: no route [ 1685.767815][T30034] sctp: sctp_assoc_set_pmtu: asoc:ffff888050ae4000, pmtu:1500, frag_point:1432 [ 1685.773339][ C0] eth0: xmit ffff888036a6b640 42:01:0a:80:00:01 [ 1685.773377][ C0] Added buffer head 25 to ffff88802805fa00 [ 1685.773409][ C0] virtqueue callback for ffff88802805fa00 (ffffffff86fd2540) [ 1685.773497][ C0] Sent skb ffff888036a6b640 [ 1685.773541][ C0] No more buffers in queue [ 1685.773560][ C0] No more buffers in queue [ 1685.784008][T30034] sctp: sctp_packet_append_chunk: packet:ffffc900043bf358 chunk:ffff888039880b40 [ 1685.784041][T30034] sctp: sctp_packet_transmit: packet:ffffc900043bf358 [ 1685.789973][T30034] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888050ae4000[STATE_COOKIE_WAIT] [ 1685.790337][T29896] kernfs runtime_status: removing [ 1685.790430][T29896] kernfs control: removing [ 1685.790505][T29896] kernfs runtime_suspended_time: removing [ 1685.790582][T29896] kernfs runtime_active_time: removing [ 1685.790657][T29896] kernfs autosuspend_delay_ms: removing [ 1685.793973][T30034] sctp: sctp_wait_for_connect: asoc:ffff888050ae4000, timeo:9223372036854775807 [ 1685.797561][T29896] kernfs power: removing [ 1685.797655][T29896] kernfs subsystem: removing [ 1685.797745][T29896] kernfs lo: removing [ 1685.797823][T29896] kernfs uevent: removing [ 1685.805798][T29896] kernfs rx_packets: removing [ 1685.805883][T29896] kernfs tx_packets: removing [ 1685.805960][T29896] kernfs rx_bytes: removing [ 1685.809118][T29896] kernfs tx_bytes: removing [ 1685.809207][T29896] kernfs rx_errors: removing [ 1685.809284][T29896] kernfs tx_errors: removing [ 1685.809359][T29896] kernfs rx_dropped: removing [ 1685.809434][T29896] kernfs tx_dropped: removing [ 1685.809510][T29896] kernfs multicast: removing [ 1685.809585][T29896] kernfs collisions: removing [ 1685.809658][T29896] kernfs rx_length_errors: removing [ 1685.809743][T29896] kernfs rx_over_errors: removing [ 1685.809819][T29896] kernfs rx_crc_errors: removing [ 1685.809895][T29896] kernfs rx_frame_errors: removing [ 1685.809987][T29896] kernfs rx_fifo_errors: removing [ 1685.810100][T29896] kernfs rx_missed_errors: removing [ 1685.810180][T29896] kernfs tx_aborted_errors: removing [ 1685.813728][T30042] sctp: sctp_do_sm[pre-fn]: ep:ffff8880533dfc00, EVENT_T_PRIMITIVE, PRIMITIVE_REQUESTHEARTBEAT, asoc:ffff888050ae4000[STATE_COOKIE_WAIT], sctp_sf_do_prm_requestheartbeat [ 1685.813845][T30042] sctp: sctp_do_sm[post-fn]: asoc:ffff888050ae4000, status:DISPOSITION_CONSUME [ 1685.813881][T30042] sctp: sctp_outq_tail: outq:ffff888050ae47e0, chunk:ffff888039880640[HEARTBEAT] [ 1685.813924][T30042] sctp: sctp_packet_config: packet:ffff88803716c308 vtag:0x0 [ 1685.813957][T30042] sctp: sctp_v6_get_dst: dst=fc00:0000:0000:0000:0000:0000:0000:0000 [ 1685.814117][T30042] sctp: no route [ 1685.814136][T30042] sctp: sctp_v6_get_saddr: asoc:ffff888050ae4000 dst:0000000000000000 [ 1685.814170][T30042] sctp: sctp_v6_get_dst: dst=fc00:0000:0000:0000:0000:0000:0000:0000 [ 1685.814199][T30042] sctp: src=0000:0000:0000:0000:0000:0000:0000:0000 - [ 1685.814289][T30042] sctp: no route [ 1685.814308][T30042] sctp: sctp_assoc_set_pmtu: asoc:ffff888050ae4000, pmtu:1500, frag_point:1432 [ 1685.814347][T30042] sctp: sctp_packet_transmit_chunk: packet:ffff88803716c308 size:52 chunk:ffff888039880640 size:60 [ 1685.814390][T30042] sctp: sctp_packet_append_chunk: packet:ffff88803716c308 chunk:ffff888039880640 [ 1685.814429][T30042] sctp: sctp_packet_transmit: packet:ffff88803716c308 [ 1685.814597][T30042] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888050ae4000[STATE_COOKIE_WAIT] [ 1685.826914][T29896] kernfs tx_carrier_errors: removing [ 1685.826999][T29896] kernfs tx_fifo_errors: removing [ 1685.827075][T29896] kernfs tx_heartbeat_errors: removing [ 1685.827151][T29896] kernfs tx_window_errors: removing [ 1685.827227][T29896] kernfs rx_compressed: removing [ 1685.827303][T29896] kernfs tx_compressed: removing [ 1685.827377][T29896] kernfs rx_nohandler: removing [ 1685.827472][T29896] kernfs statistics: removing [ 1685.827567][T29896] kernfs netdev_group: removing [ 1685.827646][T29896] kernfs type: removing [ 1685.827727][T29896] kernfs dev_id: removing [ 1685.827802][T29896] kernfs dev_port: removing [ 1685.827876][T29896] kernfs iflink: removing [ 1685.832923][T29896] kernfs ifindex: removing [ 1685.833001][T29896] kernfs name_assign_type: removing [ 1685.846922][T29896] kernfs addr_assign_type: removing [ 1685.847011][T29896] kernfs addr_len: removing [ 1685.847089][T29896] kernfs link_mode: removing [ 1685.847166][T29896] kernfs address: removing [ 1685.847240][T29896] kernfs broadcast: removing [ 1685.847315][T29896] kernfs speed: removing [ 1685.847389][T29896] kernfs duplex: removing [ 1685.847463][T29896] kernfs dormant: removing [ 1685.847538][T29896] kernfs testing: removing [ 1685.847613][T29896] kernfs operstate: removing [ 1685.847688][T29896] kernfs carrier_changes: removing [ 1685.847769][T29896] kernfs ifalias: removing [ 1685.847844][T29896] kernfs carrier: removing [ 1685.847918][T29896] kernfs mtu: removing [ 1685.854083][T30033] Disabling lock debugging due to kernel taint [ 1685.855515][T30045] kcov: kcov_start: t = ffff888031e11f40, size = 524288, area = ffffc9001d2fd000 [ 1685.858717][T30033] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002e: 0000 [#1] SMP KASAN NOPTI [ 1686.768420][T30033] KASAN: null-ptr-deref in range [0x0000000000000170-0x0000000000000177] [ 1686.776850][T30033] CPU: 1 UID: 0 PID: 30033 Comm: syz.2.7592 Tainted: G B L Y syzkaller #0 PREEMPT(full) [ 1686.787892][T30033] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 1686.794899][T30033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1686.804950][T30033] RIP: 0010:dm_kcopyd_client_destroy+0xac/0x420 [ 1686.811237][T30033] Code: e8 89 f4 5c f9 be d4 03 00 00 48 c7 c7 20 f9 27 8d e8 88 74 27 f9 be 04 00 00 00 48 89 ef e8 fb ec d5 f9 48 89 e8 48 c1 e8 03 <42> 0f b6 14 20 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 1686.830877][T30033] RSP: 0018:ffffc900043af7e0 EFLAGS: 00010217 [ 1686.836973][T30033] RAX: 000000000000002e RBX: fffffffffffffff4 RCX: ffffc9000e9e3000 [ 1686.844962][T30033] RDX: 0000000000000000 RSI: ffffffff81c99aed RDI: 0000000000000007 [ 1686.852960][T30033] RBP: 0000000000000174 R08: 0000000000000000 R09: 0000000000000000 [ 1686.860948][T30033] R10: ffffffff95bdcb27 R11: 0000000000000000 R12: dffffc0000000000 [ 1686.868936][T30033] R13: ffff88802c8a6000 R14: fffffffffffffff4 R15: ffff888027ffea80 [ 1686.876940][T30033] FS: 00007f02677c16c0(0000) GS:ffff88812258b000(0000) knlGS:0000000000000000 [ 1686.885900][T30033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1686.892488][T30033] CR2: 00007f9410bfcff8 CR3: 0000000098564000 CR4: 0000000000350ef0 [ 1686.900465][T30033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1686.908436][T30033] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1686.916405][T30033] Call Trace: [ 1686.919678][T30033] [ 1686.922630][T30033] ? kfree+0x22b/0x6d0 [ 1686.926823][T30033] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 1686.932935][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1686.938590][T30033] ? vfree+0x12f/0x850 [ 1686.942717][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1686.948376][T30033] ? mempool_exit+0x120/0x1c0 [ 1686.953077][T30033] ? cache_ctr+0x1d73/0x3a80 [ 1686.957697][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1686.963348][T30033] ? __vmalloc_node_noprof+0xad/0xf0 [ 1686.968663][T30033] __destroy+0x191/0x3c0 [ 1686.972930][T30033] cache_ctr+0x2f7c/0x3a80 [ 1686.977381][T30033] ? __pfx_cache_ctr+0x10/0x10 [ 1686.982162][T30033] ? kfree+0x22b/0x6d0 [ 1686.986252][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1686.991898][T30033] ? skip_spaces+0xee/0x130 [ 1686.996430][T30033] ? dm_split_args+0x441/0x570 [ 1687.001205][T30033] dm_table_add_target+0x58b/0xee0 [ 1687.006332][T30033] ? __pfx_dm_table_add_target+0x10/0x10 [ 1687.011982][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1687.017713][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1687.023364][T30033] ? dm_table_create+0x2d3/0x3d0 [ 1687.028315][T30033] table_load+0x3b9/0x7b0 [ 1687.032652][T30033] ? __pfx_table_load+0x10/0x10 [ 1687.037506][T30033] ? __might_fault+0xc5/0x140 [ 1687.042197][T30033] ? __might_fault+0xc5/0x140 [ 1687.046910][T30033] ctl_ioctl+0x4d2/0xcc0 [ 1687.051152][T30033] ? __pfx_table_load+0x10/0x10 [ 1687.056012][T30033] ? __pfx_ctl_ioctl+0x10/0x10 [ 1687.060820][T30033] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1687.066476][T30033] ? __fget_files+0x21f/0x3d0 [ 1687.071200][T30033] dm_ctl_ioctl+0x22/0x30 [ 1687.075538][T30033] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1687.080573][T30033] __x64_sys_ioctl+0x18e/0x210 [ 1687.085350][T30033] do_syscall_64+0x123/0x790 [ 1687.089954][T30033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.095875][T30033] RIP: 0033:0x7f026699f559 [ 1687.100296][T30033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.119917][T30033] RSP: 002b:00007f02677c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1687.128349][T30033] RAX: ffffffffffffffda RBX: 00007f0266c25fa0 RCX: 00007f026699f559 [ 1687.136361][T30033] RDX: 00002000000001c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1687.144358][T30033] RBP: 00007f0266a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1687.152370][T30033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.160371][T30033] R13: 00007f0266c26038 R14: 00007f0266c25fa0 R15: 00007ffc0347a8b8 [ 1687.168365][T30033] [ 1687.171379][T30033] Modules linked in: [ 1687.175762][ C1] wireguard: wg0: Handshake for peer 109 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 1687.188201][ C1] wireguard: wg0: Handshake for peer 140 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1687.200399][T30033] ---[ end trace 0000000000000000 ]--- [ 1687.209415][T29896] kernfs flags: removing [ 1687.209459][T29896] kernfs tx_queue_len: removing [ 1687.209499][T29896] kernfs gro_flush_timeout: removing [ 1687.209541][T29896] kernfs napi_defer_hard_irqs: removing [ 1687.209582][T29896] kernfs proto_down: removing [ 1687.209623][T29896] kernfs carrier_up_count: removing [ 1687.209664][T29896] kernfs carrier_down_count: removing [ 1687.209704][T29896] kernfs threaded: removing [ 1687.209745][T29896] PM: Removing info for No Bus:lo [ 1687.209779][T29896] kobject: 'lo' (ffff88807f8987e0): kobject_uevent_env [ 1687.209824][T29896] kobject: 'lo' (ffff88807f8987e0): fill_kobj_path: path = '/devices/virtual/net/lo' [ 1687.209928][T29896] kernfs lo: removing [ 1687.277176][T30034] sctp: sctp_close: sk:ffff88804fad1280, timeout:0 [ 1687.277208][T30034] sctp: sctp_do_sm[pre-fn]: ep:ffff8880533dfc00, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff888050ae4000[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 1687.311714][T30034] sctp: sctp_do_sm[post-fn]: asoc:ffff888050ae4000, status:DISPOSITION_DELETE_TCB [ 1687.311767][T30034] sctp: sctp_cmd_new_state: asoc:ffff888050ae4000[STATE_CLOSED] [ 1687.313298][T30034] sctp: sctp_packet_free: packet:ffff88803716c308 [ 1687.313405][T30034] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 1687.313443][T30034] sctp: sctp_destroy_sock: sk:ffff88804fad1280 [ 1687.313641][T30034] kcov: kcov_task_exit: t = ffff8880895a5dc0, kcov->t = ffff8880895a5dc0 [ 1687.313915][T30042] kcov: kcov_task_exit: t = ffff888033871f40, kcov->t = ffff888033871f40 [ 1687.314511][T30027] kcov: kcov_task_exit: t = ffff888033039f40, kcov->t = ffff888033039f40 [ 1687.332533][T30045] kcov: kcov_task_exit: t = ffff888031e11f40, kcov->t = ffff888031e11f40 [ 1687.371873][ C0] bridge1: hello timer expired [ 1687.444050][T29896] kobject: 'lo' (ffff88807f8987e0): kobject_cleanup, parent 0000000000000000 [ 1687.444087][T29896] kobject: 'lo' (ffff88807f8987e0): calling ktype release [ 1687.444127][T29896] kobject: 'lo': free name [ 1687.444288][T29896] sctp: sctp_close: sk:ffff88804fad2e40, timeout:0 [ 1687.444317][T29896] sctp: sctp_destroy_sock: sk:ffff88804fad2e40 [ 1687.473353][T29896] kobject: 'nfs_client' (ffff8880353e9100): kobject_uevent_env [ 1687.473415][T29896] kobject: 'nfs_client' (ffff8880353e9100): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 1687.473585][T29896] kernfs identifier: removing [ 1687.473636][T29896] kernfs nfs_client: removing [ 1687.473675][T29896] kobject: 'nfs_client' (ffff8880353e9100): kobject_cleanup, parent 0000000000000000 [ 1687.473713][T29896] kobject: 'nfs_client' (ffff8880353e9100): calling ktype release [ 1687.473741][T29896] kobject: 'nfs_client': free name [ 1687.473764][T29896] kernfs net: removing [ 1687.482354][T29896] kobject: 'net' (ffff8880353e9140): kobject_cleanup, parent 0000000000000000 [ 1687.482395][T29896] kobject: 'net' (ffff8880353e9140): calling ktype release [ 1687.482432][T29896] kobject: 'net': free name [ 1687.531884][ C1] wireguard: wg1: Handshake for peer 141 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 1687.531993][ C1] wireguard: wg2: Handshake for peer 114 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 15) [ 1687.532065][ C1] wireguard: wg1: Handshake for peer 112 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 15) [ 1687.568242][T29896] kcov: kcov_task_exit: t = ffff88807d49be80, kcov->t = ffff88807d49be80 [ 1687.600193][T30033] RIP: 0010:dm_kcopyd_client_destroy+0xac/0x420 [ 1687.600259][T30033] Code: e8 89 f4 5c f9 be d4 03 00 00 48 c7 c7 20 f9 27 8d e8 88 74 27 f9 be 04 00 00 00 48 89 ef e8 fb ec d5 f9 48 89 e8 48 c1 e8 03 <42> 0f b6 14 20 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 1687.600299][T30033] RSP: 0018:ffffc900043af7e0 EFLAGS: 00010217 [ 1687.600332][T30033] RAX: 000000000000002e RBX: fffffffffffffff4 RCX: ffffc9000e9e3000 [ 1687.600359][T30033] RDX: 0000000000000000 RSI: ffffffff81c99aed RDI: 0000000000000007 [ 1687.600384][T30033] RBP: 0000000000000174 R08: 0000000000000000 R09: 0000000000000000 [ 1687.600410][T30033] R10: ffffffff95bdcb27 R11: 0000000000000000 R12: dffffc0000000000 [ 1687.600436][T30033] R13: ffff88802c8a6000 R14: fffffffffffffff4 R15: ffff888027ffea80 [ 1687.600468][T30033] FS: 00007f02677c16c0(0000) GS:ffff88812258b000(0000) knlGS:0000000000000000 [ 1687.600503][T30033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1687.600532][T30033] CR2: 000056058347c950 CR3: 0000000098564000 CR4: 0000000000350ef0 [ 1687.600559][T30033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1687.600584][T30033] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1687.600614][T30033] Kernel panic - not syncing: Fatal exception [ 1687.717878][T30033] Kernel Offset: disabled [ 1687.722227][T30033] Rebooting in 86400 seconds..