last executing test programs: 7m11.260662903s ago: executing program 0 (id=156): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r6, 0x1) 7m6.473997861s ago: executing program 0 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000000), 0x0}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x6) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa2) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0xa1) lseek(r5, 0x1, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x70, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x80000) read$hiddev(r7, &(0x7f0000002080)=""/4096, 0x1000) unshare(0x22000000) 7m5.204595601s ago: executing program 3 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) r0 = fanotify_init(0xf00, 0x2) fanotify_mark(r0, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) 7m4.087938919s ago: executing program 0 (id=168): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000280)=0x8) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 7m0.148008882s ago: executing program 0 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) socket$kcm(0x10, 0x5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m0.147468013s ago: executing program 3 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) r0 = fanotify_init(0xf00, 0x2) fanotify_mark(r0, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) 6m58.193654834s ago: executing program 0 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) r0 = fanotify_init(0xf00, 0x2) fanotify_mark(r0, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) 6m55.32313828s ago: executing program 0 (id=178): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x6}, &(0x7f0000000280)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 6m54.858778028s ago: executing program 3 (id=180): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000480)={@in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x4}, {&(0x7f00000002c0)=""/125, 0x7d}, &(0x7f0000000340), 0x10}, 0xa0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a", 0xd2}], 0x1}, 0x0) 6m52.904881909s ago: executing program 3 (id=182): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r2 = openat$iommufd(0xffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r2, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x2c32dd, 0x7d, &(0x7f0000000500)="30181b18cdf82b2fe1f19a426f4ef031548ad89e8a6c7a919adc77d91c2269856056f5135bfd781b1104bbda3daac0be057f1a55191e42c73d406bcac9c4ef14175ee13b5a58cc1f69ee1d2058fb5b20aad0bd6879b4367a28d1a8522c08b087f02a676a7c7224ced6ea1ab8436410cfe04a4af08b6b1995885c4cb4f4"}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="0840000000000000280012800b0001006272696467650000180002800c002e0003000000030000000500070008000000c1b80e9945683563cbb828941db538a23b153fecb7239db28aea5aa3aab9b3d0d0c9a3af0a70a817445b56cfd5b3586912a5"], 0x48}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x64, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000380), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000321, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m46.413638794s ago: executing program 3 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) r0 = fanotify_init(0xf00, 0x2) fanotify_mark(r0, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) 6m43.236253305s ago: executing program 3 (id=193): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x16, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r0, 0x141601) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x640241, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m38.430205643s ago: executing program 32 (id=178): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x6}, &(0x7f0000000280)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 6m26.893405829s ago: executing program 33 (id=193): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x16, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r0, 0x141601) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x640241, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.290024437s ago: executing program 1 (id=845): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r6, 0x1) 10.803187324s ago: executing program 1 (id=848): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000280)=0x8) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 9.046304011s ago: executing program 4 (id=850): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r7, 0x1) 9.045828541s ago: executing program 1 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000780)=0xc) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) capset(0x0, &(0x7f0000000040)={0x200004, 0x200004, 0x4, 0x0, 0x9, 0x5}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x6, 0x3, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) close(r5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000de, &(0x7f00000007c0)={[], [{@context={'context', 0x3d, 'system_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '-&:'}}, {@uid_gt}, {@subj_role}, {@uid_eq}, {@measure}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x462, &(0x7f0000000300)="$eJzs3MuPU9UfAPDvvfMAfsBvRsQHD3UUjRMfMwygsnCBRhMWmJjoQpeTmUKQwhhmTIQQBWNwZYyJe+PSf8GVboxxZeJW94aEGDaAq5rb3su0pS1Daac4/XySC+fce9pzvj33tOfe004AQ2sq+yeJ2BYRf0TERC3bWGCq9t+NaxcWbl67sJBEpfLO30m13PVrFxaKosXjtuaZ6TQi/TyJPS3qXT53/tR8uVw6m+dnV05/OLt87vyLJ0/PnyidKJ05cPjwoYNzr7x84KWexJm16fruT5b27jr6/tdvHfuyIf6mOHpkqtPBZyqVHlc3WNvr0snoABvCXRmJiKy7xqrjfyJGYrXzJuLNzwbaOKCvKpVKZWv7wxcrwAaWRGPekIdhUXzQZ9e/xdY8CTjSv+nHwF19rXYBlMV9I99qR0YjzcuMNV3f9tJURLx38Z9vsy36cx8CAKDBj9n854VW8780Hq4r9/98bWgyIh6IiB0R8WBE7IyIhyKqZR+JiEfb1LOpzf7mRZLb5z/pla6DW4Ns/vdqvrbVOP8rZn8xOZLntlfjH0uOnyyX9uevyXSMbcrycx3q+OmN379qd6x+/pdtWf3FXDBvx5XRphdvcX5l/l5irnf1UsTu0VbxJ7dWApKI2BURu7us4+Rz3+9td2wqYv5c6Whd/JvX/sQ9WGeqfBfxbK3/L0ZT/IWk8/rk7OYol/bPFmfF7X797fLb7eq/c//3V9b//2t5/t+KfzKpX69dvvs6Lv/5Rdtrmm7P//Hk3Wp6PN/38fzKytm5iPHkWK3R9fsPrD62yBfls/in97Ue/zti9ZXYExHZSfxYRDweEU/kbX8yIp6KiH0d4v/l9ac/6D7+/sriX7yr/l9NjEfzntaJkVM//9BQ6eRt8d/s3P+HqqnpfM9a3v/W0q7uzmYAAAD470kjYlsk6cytdJrOzNS+L78zIi0vLa88f3zpozOLtd8ITMZYWtzpmqi7HzqXX9bX8pciovbVguL4wfy+8TcjW6r5mYWl8uKgg4cht7XN+M/8NTLo1gF95/daMLyMfxhexj8ML+MfhleL8b9lEO0A1l+rz/9PB9AOYP01jX/LfjBEXP/D8Go7/jfyX/4Bqnz+w1Ba3hJ3/pF8x0TxTF0+fMMmYuy+aMa9JypJy86NdNANW5fEkfujGeufGOz7EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQK/8GwAA//+4z9yS") 8.789694885s ago: executing program 4 (id=853): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r7, 0x1) 8.251331683s ago: executing program 2 (id=854): read$dsp(0xffffffffffffffff, &(0x7f0000002200)=""/207, 0xcf) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r1, &(0x7f0000000700)=""/200, 0xc8, 0xfffffff2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xd, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x7893bf0db0b4717a, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0xce2b, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 7.702814692s ago: executing program 4 (id=856): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r6, 0x1) 7.493806445s ago: executing program 4 (id=858): socket$inet_sctp(0x2, 0x1, 0x84) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x40) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 7.449535696s ago: executing program 5 (id=859): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000280)=0x8) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 5.678363613s ago: executing program 4 (id=860): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000280)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 5.651804513s ago: executing program 2 (id=861): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000001040)=0x8aa760e3, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000380)=r5}, 0x20) shutdown(r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x53}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@random={0xdd, 0x6, 'abcdef'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000380)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="239e2ce8e00a", {0x9, 0x8}, @value=@ver_80211n={0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0xfffd, 0x4e, @val={0x10, 0x1, 0x8d}, [{0xdd, 0x6, "b782758ad4d5"}]}, 0x2d) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8], [0x0, 0x1]}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000540)={0x0, 0x8000000, 0x9, 0x3, 0x65eb0537bcf6b59, [], [0x2, 0x2df, 0x1, 0x5], [0x1000, 0x3ff, 0xe, 0x2], [0x7, 0x5, 0x5, 0x7]}) 4.305509254s ago: executing program 1 (id=862): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000280)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 3.96008293s ago: executing program 2 (id=863): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4880) 3.854424371s ago: executing program 2 (id=864): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2008080, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d637038363984d6ec236861727365743d63703836332c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c636f6465706167653d3836322c6e6f6e756d7461696c3d302c6e66732c756e695f786c6174653d312c696f636861727365743d63703934392c757466383d312c726f6469722c757466383d302c00"], 0x81, 0x2c8, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x842, 0x10c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x28, 0x1, 0x0) close_range(r0, r3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x111, 0x2, 0x0, 0x4) 3.577565265s ago: executing program 5 (id=865): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20101) r2 = getpgrp(0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x172, 0x0, 0xffff4a7d, 0x8, 0xfffffffffffffff8, r2}) r3 = socket(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) bind$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x43, &(0x7f0000000280)={&(0x7f0000001040)=@getlink={0x28, 0x12, 0x2fa9ccd93d5c0097, 0x70bd3d, 0x0, {0x7}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80, 0x0}}], 0x2, 0x400c010) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 2.681699889s ago: executing program 5 (id=866): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r7, 0x1) 2.668930819s ago: executing program 1 (id=867): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20101) r2 = getpgrp(0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x172, 0x0, 0xffff4a7d, 0x8, 0xfffffffffffffff8, r2}) r3 = socket(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=@getlink={0x20, 0x12, 0x2fa9ccd93d5c0097, 0x70bd3d, 0x0, {0x7}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80, 0x0}}], 0x2, 0x400c010) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 2.522841921s ago: executing program 5 (id=868): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'macvtap0\x00', {}, 0x3}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x80) getdents64(r5, &(0x7f00000000c0)=""/71, 0x47) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x4, 0x0, &(0x7f0000000000)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000480)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000020c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x34, r9, 0xe05, 0x70bd2b, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008000}, 0x200000c4) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x20}}], 0x1, 0x4c040) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 2.522083352s ago: executing program 2 (id=876): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r7, 0x1) 1.31698264s ago: executing program 5 (id=869): socket$inet_sctp(0x2, 0x1, 0x84) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x40) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.31598371s ago: executing program 4 (id=878): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000280)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 1.261653191s ago: executing program 1 (id=870): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000001800b00000464fbe9c09b98e08e1f8960eade09d8c72d77125342f1e6696447bd4d0cd98234e3ef992581cd784a9cc6dd28d08b26a6f8f2a10d21d6edf6b1148c6f76c2dd9e368bc1a07e61fc3206257a77c7048ccbba431d1e86233d0e5d91a952e08cec789a2e4f60b9b456428df5ceed7d605b8606a702fd266699e8c221092665a04fe69784f3f4ae3052896d94d4c26d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x1, 0x4880) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r7, 0x1) 197.74µs ago: executing program 2 (id=871): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r3, 0x26}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getdents(r4, &(0x7f0000000240)=""/48, 0x30) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,errors=remount-ro,iocharset=cp932,fmask=00000000000000000000001,namecase=1,iocharset=iso8859-14,namecase=1,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r5], 0x1, 0x1534, &(0x7f0000002840)="$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") utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r6, 0x0, &(0x7f00000000c0)) rt_sigpending(0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) 0s ago: executing program 5 (id=872): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x4880) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 56.535169][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.545162][ T5438] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. syzkaller login: [ 80.436000][ T5765] cgroup: Unknown subsys name 'net' [ 80.580075][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.243139][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.819554][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.828085][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.841824][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.852115][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.859836][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.867440][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.971869][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.990603][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.002933][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.020134][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.029172][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.037489][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.045224][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.075204][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.082651][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.105181][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.121788][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.136237][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.143793][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.151120][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.158657][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.159421][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.175221][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.182957][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.415473][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.566575][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.574562][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.581993][ T5777] bridge_slave_0: entered allmulticast mode [ 84.589079][ T5777] bridge_slave_0: entered promiscuous mode [ 84.635535][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.643316][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.650566][ T5777] bridge_slave_1: entered allmulticast mode [ 84.659073][ T5777] bridge_slave_1: entered promiscuous mode [ 84.726819][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.756235][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.765761][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 84.844514][ T5777] team0: Port device team_slave_0 added [ 84.880748][ T5777] team0: Port device team_slave_1 added [ 84.917872][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 84.956398][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 84.968701][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.976049][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.002133][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.040434][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.047755][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.055489][ T5780] bridge_slave_0: entered allmulticast mode [ 85.063348][ T5780] bridge_slave_0: entered promiscuous mode [ 85.071751][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.078743][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.105351][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.153723][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.160948][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.168391][ T5780] bridge_slave_1: entered allmulticast mode [ 85.176149][ T5780] bridge_slave_1: entered promiscuous mode [ 85.256688][ T5777] hsr_slave_0: entered promiscuous mode [ 85.263891][ T5777] hsr_slave_1: entered promiscuous mode [ 85.309485][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.350814][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.360326][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.367972][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.375425][ T5785] bridge_slave_0: entered allmulticast mode [ 85.383240][ T5785] bridge_slave_0: entered promiscuous mode [ 85.425270][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.432758][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.439923][ T5785] bridge_slave_1: entered allmulticast mode [ 85.447181][ T5785] bridge_slave_1: entered promiscuous mode [ 85.475911][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.483549][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.490911][ T5782] bridge_slave_0: entered allmulticast mode [ 85.498160][ T5782] bridge_slave_0: entered promiscuous mode [ 85.550258][ T5780] team0: Port device team_slave_0 added [ 85.556797][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.565162][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.572653][ T5782] bridge_slave_1: entered allmulticast mode [ 85.579847][ T5782] bridge_slave_1: entered promiscuous mode [ 85.610156][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.623053][ T5780] team0: Port device team_slave_1 added [ 85.654098][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.679373][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.692161][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.766115][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.777733][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.804171][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.819468][ T5785] team0: Port device team_slave_0 added [ 85.837571][ T5782] team0: Port device team_slave_0 added [ 85.846780][ T5782] team0: Port device team_slave_1 added [ 85.855081][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.862388][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.888601][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.902290][ T5088] Bluetooth: hci0: command tx timeout [ 85.908366][ T5785] team0: Port device team_slave_1 added [ 85.963963][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.970973][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.997231][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.035433][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.042632][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.068888][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.080715][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.087914][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.114097][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.141800][ T5088] Bluetooth: hci1: command tx timeout [ 86.159146][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.166357][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.192753][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.222297][ T51] Bluetooth: hci3: command tx timeout [ 86.228365][ T5088] Bluetooth: hci2: command tx timeout [ 86.263526][ T5780] hsr_slave_0: entered promiscuous mode [ 86.272074][ T5780] hsr_slave_1: entered promiscuous mode [ 86.278630][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.286874][ T5780] Cannot create hsr debugfs directory [ 86.322426][ T5782] hsr_slave_0: entered promiscuous mode [ 86.328863][ T5782] hsr_slave_1: entered promiscuous mode [ 86.335273][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.343444][ T5782] Cannot create hsr debugfs directory [ 86.424237][ T5785] hsr_slave_0: entered promiscuous mode [ 86.430657][ T5785] hsr_slave_1: entered promiscuous mode [ 86.437208][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.444888][ T5785] Cannot create hsr debugfs directory [ 86.553871][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.567659][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.608133][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.618356][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.888892][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.929361][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.957319][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.978925][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.101394][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.125558][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.147791][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.170168][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.183545][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.313547][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.332802][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.359450][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.393956][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.401987][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.438112][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.449924][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.473465][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.480651][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.538576][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.637914][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.706672][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.713847][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.740841][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.748057][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.776166][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.813236][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.896632][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.903889][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.931056][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.938293][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.984531][ T5088] Bluetooth: hci0: command tx timeout [ 88.005198][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.099215][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.117567][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.155741][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.163029][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.187047][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.194271][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.223872][ T5088] Bluetooth: hci1: command tx timeout [ 88.302529][ T5088] Bluetooth: hci2: command tx timeout [ 88.307996][ T5088] Bluetooth: hci3: command tx timeout [ 88.350110][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.409412][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.514335][ T5777] veth0_vlan: entered promiscuous mode [ 88.540815][ T5777] veth1_vlan: entered promiscuous mode [ 88.611131][ T5777] veth0_macvtap: entered promiscuous mode [ 88.633295][ T5777] veth1_macvtap: entered promiscuous mode [ 88.666633][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.685799][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.746025][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.806123][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.815276][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.826227][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.841540][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.869016][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.919165][ T5780] veth0_vlan: entered promiscuous mode [ 88.947723][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.979166][ T5780] veth1_vlan: entered promiscuous mode [ 89.057924][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.083787][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.130182][ T5782] veth0_vlan: entered promiscuous mode [ 89.141271][ T5780] veth0_macvtap: entered promiscuous mode [ 89.158054][ T5780] veth1_macvtap: entered promiscuous mode [ 89.198490][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.207915][ T5782] veth1_vlan: entered promiscuous mode [ 89.212215][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.229072][ T5785] veth0_vlan: entered promiscuous mode [ 89.294168][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.309750][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.331058][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.342715][ T5785] veth1_vlan: entered promiscuous mode [ 89.389357][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.405040][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.417919][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.437672][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.455377][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.465477][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.486948][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520631][ T5782] veth0_macvtap: entered promiscuous mode [ 89.568848][ T5782] veth1_macvtap: entered promiscuous mode [ 89.656401][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.701361][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.718680][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.730370][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.743056][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.765517][ T5785] veth0_macvtap: entered promiscuous mode [ 89.778335][ T5785] veth1_macvtap: entered promiscuous mode [ 89.827318][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.847326][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.859239][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.875413][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.889846][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.973134][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.992294][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.001170][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.043109][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.054713][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.067777][ T5088] Bluetooth: hci0: command tx timeout [ 90.073579][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.084171][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.095238][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.108586][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.120732][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.269697][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.301688][ T5088] Bluetooth: hci1: command tx timeout [ 90.361257][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.382491][ T51] Bluetooth: hci2: command tx timeout [ 90.388603][ T5088] Bluetooth: hci3: command tx timeout [ 90.611375][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.640336][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.660536][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.671340][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.686808][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.697676][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.727606][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.742019][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.825431][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.849951][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.858912][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.873184][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.886327][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.908992][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.095003][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.115777][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202848][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.211805][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.225623][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.503029][ T5088] Bluetooth: Unknown LE signaling command 0x1d [ 91.509682][ T5088] Bluetooth: Wrong link type (-22) [ 91.735949][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.791572][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.806274][ T5857] Zero length message leads to an empty skb [ 91.808282][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.831399][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.850177][ T5857] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.996347][ T23] cfg80211: failed to load regulatory.db [ 92.151969][ T5088] Bluetooth: hci0: command tx timeout [ 92.381730][ T5088] Bluetooth: hci1: command tx timeout [ 92.461668][ T5088] Bluetooth: hci3: command tx timeout [ 92.467189][ T51] Bluetooth: hci2: command tx timeout [ 93.925607][ T5871] syz.3.9[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.156324][ T5873] loop1: detected capacity change from 0 to 512 [ 94.186157][ T5871] loop3: detected capacity change from 0 to 2048 [ 94.263138][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.281631][ T5873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.319235][ T5873] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.783532][ T5883] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 95.131625][ T5871] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 95.147064][ T5871] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 95.160780][ T5871] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.160780][ T5871] [ 95.170538][ T5871] EXT4-fs (loop3): Total free blocks count 0 [ 95.192382][ T5885] input: syz0 as /devices/virtual/input/input5 [ 95.201000][ T5871] EXT4-fs (loop3): Free/Dirty block details [ 95.207084][ T5871] EXT4-fs (loop3): free_blocks=2415919504 [ 95.213007][ T5871] EXT4-fs (loop3): dirty_blocks=48 [ 95.218161][ T5871] EXT4-fs (loop3): Block reservation details [ 95.224214][ T5871] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 96.889734][ T5889] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 97.366837][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.439309][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.267166][ T5900] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.434576][ T5900] input: syz0 as /devices/virtual/input/input6 [ 104.299950][ T5934] loop3: detected capacity change from 0 to 512 [ 104.426306][ T5934] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.449947][ T5934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.722061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.811406][ T5946] tty tty4: ldisc open failed (-12), clearing slot 3 [ 106.901243][ T5934] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.920517][ T5934] EXT4-fs (loop3): 1 truncate cleaned up [ 106.929814][ T5934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.853678][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.150018][ T5971] loop1: detected capacity change from 0 to 32768 [ 110.233991][ T5971] mmap: syz.1.28 (5971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.895120][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.906926][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.063999][ T5997] 9pnet_fd: p9_fd_create_tcp (5997): problem connecting socket to 127.0.0.1 [ 115.207258][ T5997] tipc: Started in network mode [ 115.212374][ T5997] tipc: Node identity 4, cluster identity 4711 [ 115.218805][ T5997] tipc: Node number set to 4 [ 117.010156][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 117.426280][ T5088] Bluetooth: Unknown LE signaling command 0x1d [ 117.434381][ T5088] Bluetooth: Wrong link type (-22) [ 120.772043][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 123.784565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.304851][ T6056] loop2: detected capacity change from 0 to 512 [ 124.316474][ T6056] ======================================================= [ 124.316474][ T6056] WARNING: The mand mount option has been deprecated and [ 124.316474][ T6056] and is ignored by this kernel. Remove the mand [ 124.316474][ T6056] option from the mount to silence this warning. [ 124.316474][ T6056] ======================================================= [ 124.351964][ T6056] ext4: Unknown parameter 'context' [ 125.197517][ T5771] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.625705][ T6076] veth0: entered promiscuous mode [ 128.632675][ T6076] veth0: left promiscuous mode [ 129.525567][ T6081] loop1: detected capacity change from 0 to 512 [ 129.561401][ T6081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.969383][ T6081] EXT4-fs (loop1): 1 truncate cleaned up [ 129.977308][ T6081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.499340][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 132.508283][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.575317][ T51] Bluetooth: Unknown LE signaling command 0x1d [ 132.582099][ T51] Bluetooth: Wrong link type (-22) [ 132.588014][ T51] Bluetooth: hci3: link tx timeout [ 132.594551][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.553151][ T6123] NILFS (nullb0): couldn't find nilfs on the device [ 133.883870][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.999679][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.661869][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 134.827288][ T6132] loop1: detected capacity change from 0 to 512 [ 134.838336][ T6132] ext4: Unknown parameter 'context' [ 135.722042][ T5771] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.583480][ T6146] loop0: detected capacity change from 0 to 512 [ 136.599446][ T6146] ext4: Unknown parameter 'context' [ 138.246504][ C1] sched: RT throttling activated [ 138.436400][ T6151] loop0: detected capacity change from 0 to 512 [ 140.212141][ T6154] 9pnet_fd: p9_fd_create_tcp (6154): problem connecting socket to 127.0.0.1 [ 140.242508][ T6151] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.252961][ T6154] tipc: Started in network mode [ 140.258830][ T6154] tipc: Node identity 4, cluster identity 4711 [ 140.265099][ T6154] tipc: Node number set to 4 [ 140.299727][ T6151] EXT4-fs (loop0): 1 truncate cleaned up [ 140.339400][ T6151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.649340][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 141.143652][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.233188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 146.215722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 152.199176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 158.525384][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 159.659452][ T6289] syz.3.116 uses obsolete (PF_INET,SOCK_PACKET) [ 161.429767][ T6306] fuse: Unknown parameter '' [ 161.441258][ T6306] process 'syz.3.120' launched './file0' with NULL argv: empty string added [ 162.076996][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 162.085857][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 162.942244][ T6319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.108655][ T6328] overlayfs: failed to clone upperpath [ 166.367574][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 166.478235][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 167.390381][ T6344] syz.3.132 (6344) used greatest stack depth: 17384 bytes left [ 168.072413][ T6356] overlayfs: failed to clone lowerpath [ 168.621957][ T6347] Set syz0 is full, maxelem 0 reached [ 175.912039][ T6388] overlayfs: failed to clone upperpath [ 176.886093][ T6394] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 177.422668][ T6396] overlayfs: failed to clone upperpath [ 185.286890][ T6440] overlayfs: failed to clone upperpath [ 187.256974][ T6447] overlayfs: failed to clone upperpath [ 189.826224][ T6472] bridge_slave_1: left allmulticast mode [ 189.832130][ T6472] bridge_slave_1: left promiscuous mode [ 189.839274][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.628888][ T6476] overlayfs: failed to clone lowerpath [ 191.295337][ T6472] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 192.056006][ T6488] overlayfs: failed to clone upperpath [ 192.972368][ T6490] overlayfs: failed to clone upperpath [ 193.963003][ T6498] overlayfs: failed to clone upperpath [ 194.236412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 198.202612][ T6512] overlayfs: failed to clone upperpath [ 200.360715][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.368743][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.265862][ T6532] overlayfs: failed to clone upperpath [ 202.717740][ T5818] IPVS: starting estimator thread 0... [ 202.815183][ T6539] IPVS: using max 28 ests per chain, 67200 per kthread [ 208.820914][ T6561] xt_connbytes: Forcing CT accounting to be enabled [ 208.827918][ T6561] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.688328][ T6567] overlayfs: failed to clone upperpath [ 210.737484][ T6572] overlayfs: failed to clone upperpath [ 212.773675][ T6582] Set syz0 is full, maxelem 0 reached [ 212.915583][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 212.925199][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 212.931288][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 213.777002][ T6586] capability: warning: `syz.2.195' uses deprecated v2 capabilities in a way that may be insecure [ 214.973824][ T6594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.642051][ T6598] overlayfs: failed to clone upperpath [ 217.806811][ T6603] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 217.810765][ T6602] IPVS: stopping master sync thread 6603 ... [ 218.748677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 220.142942][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 221.273920][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.283948][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.295070][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.310872][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.359339][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.366756][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.794114][ T6625] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 223.672958][ T6614] chnl_net:caif_netlink_parms(): no params data found [ 223.753437][ T5088] Bluetooth: hci4: command tx timeout [ 224.133653][ T6614] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.196483][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.267745][ T6614] bridge_slave_0: entered allmulticast mode [ 224.285805][ T6614] bridge_slave_0: entered promiscuous mode [ 224.308314][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.315771][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.333472][ T6614] bridge_slave_1: entered allmulticast mode [ 224.351027][ T6614] bridge_slave_1: entered promiscuous mode [ 224.552321][ T6640] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 224.627245][ T6641] overlayfs: failed to clone upperpath [ 225.419686][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.560723][ T5088] Bluetooth: hci4: command tx timeout [ 226.806189][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.220222][ T6614] team0: Port device team_slave_0 added [ 228.247807][ T6614] team0: Port device team_slave_1 added [ 228.435030][ T6656] netlink: 'syz.3.193': attribute type 25 has an invalid length. [ 228.499930][ T2951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.565297][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.572317][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.671719][ T6614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.771869][ T5088] Bluetooth: hci4: command tx timeout [ 228.803154][ T2951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.846838][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.858660][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.937055][ T6614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.139946][ T2951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.594081][ T6672] overlayfs: failed to clone upperpath [ 231.745894][ T5088] Bluetooth: hci4: command tx timeout [ 231.867257][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.878710][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.887577][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.942483][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.964666][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.976939][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.096070][ T6614] hsr_slave_0: entered promiscuous mode [ 233.171743][ T6614] hsr_slave_1: entered promiscuous mode [ 233.356161][ T6614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.404404][ T6614] Cannot create hsr debugfs directory [ 233.668508][ T2951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.235531][ T51] Bluetooth: hci0: command tx timeout [ 235.100505][ T6614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.216173][ T6614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.254633][ T6614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.461778][ T6614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.556797][ T51] Bluetooth: hci0: command tx timeout [ 237.451087][ T6697] bridge1: entered promiscuous mode [ 237.459687][ T6697] bridge1: entered allmulticast mode [ 237.647984][ T6678] chnl_net:caif_netlink_parms(): no params data found [ 238.255731][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.263736][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.276227][ T6678] bridge_slave_0: entered allmulticast mode [ 238.283971][ T6678] bridge_slave_0: entered promiscuous mode [ 238.293486][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.301132][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.308519][ T6678] bridge_slave_1: entered allmulticast mode [ 238.316510][ T6678] bridge_slave_1: entered promiscuous mode [ 239.708483][ T51] Bluetooth: hci0: command tx timeout [ 239.854322][ T6614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.879346][ T6678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.973724][ T6678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.210301][ T6678] team0: Port device team_slave_0 added [ 240.267335][ T6678] team0: Port device team_slave_1 added [ 240.325556][ T6614] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.408065][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.440693][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.494486][ T6678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.561848][ T2951] hsr_slave_0: left promiscuous mode [ 240.569427][ T2951] hsr_slave_1: left promiscuous mode [ 240.583100][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.594318][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.622460][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.635984][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.645995][ T2951] bridge_slave_1: left allmulticast mode [ 240.658248][ T2951] bridge_slave_1: left promiscuous mode [ 240.666008][ T2951] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.684266][ T2951] bridge_slave_0: left allmulticast mode [ 240.689996][ T2951] bridge_slave_0: left promiscuous mode [ 240.724205][ T2951] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.789188][ T2951] veth1_macvtap: left promiscuous mode [ 240.803431][ T2951] veth0_macvtap: left promiscuous mode [ 240.809158][ T2951] veth1_vlan: left promiscuous mode [ 240.824681][ T2951] veth0_vlan: left promiscuous mode [ 241.501473][ T2951] team0 (unregistering): Port device team_slave_1 removed [ 241.542339][ T2951] team0 (unregistering): Port device team_slave_0 removed [ 241.589120][ T2951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.637270][ T2951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.940399][ T51] Bluetooth: hci0: command tx timeout [ 241.977691][ T2951] bond0 (unregistering): Released all slaves [ 242.078211][ T6678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.085301][ T6678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.111600][ T6678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.137208][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.144407][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.241761][ T6678] hsr_slave_0: entered promiscuous mode [ 242.250114][ T6678] hsr_slave_1: entered promiscuous mode [ 242.261624][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.268848][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.620205][ T6678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.647881][ T6678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.679596][ T6678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.702387][ T6678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.844846][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.939745][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.014218][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.040619][ T6614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.114974][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.239169][ T6678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.320489][ T6678] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.396285][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.403542][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.461405][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.468687][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.554427][ T1097] tipc: Left network mode [ 243.801898][ T6614] veth0_vlan: entered promiscuous mode [ 243.840607][ T6614] veth1_vlan: entered promiscuous mode [ 243.963016][ T6614] veth0_macvtap: entered promiscuous mode [ 244.060481][ T6614] veth1_macvtap: entered promiscuous mode [ 244.130419][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.160447][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.170333][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.181498][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.191797][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.205972][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.223855][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.254328][ T6678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.307785][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.322307][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.337986][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.357603][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.377441][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.395364][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.407489][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.506617][ T6614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.523840][ T6614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.534730][ T6614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.549588][ T6614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.794081][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.818493][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.955343][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.978078][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.066218][ T6678] veth0_vlan: entered promiscuous mode [ 245.129676][ T1097] hsr_slave_0: left promiscuous mode [ 245.137363][ T1097] hsr_slave_1: left promiscuous mode [ 245.143951][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.179092][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.213368][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.220860][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.260444][ T1097] bridge_slave_1: left allmulticast mode [ 245.275380][ T1097] bridge_slave_1: left promiscuous mode [ 245.281925][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.306810][ T1097] bridge_slave_0: left allmulticast mode [ 245.330210][ T1097] bridge_slave_0: left promiscuous mode [ 245.340245][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.573647][ T1097] veth1_macvtap: left promiscuous mode [ 246.591380][ T1097] veth0_macvtap: left promiscuous mode [ 246.605365][ T1097] veth1_vlan: left promiscuous mode [ 246.622686][ T1097] veth0_vlan: left promiscuous mode [ 246.739196][ T6817] Set syz0 is full, maxelem 0 reached [ 247.145954][ T6826] overlayfs: failed to clone upperpath [ 248.467696][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 248.512210][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 248.559198][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.609400][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.965621][ T1097] bond0 (unregistering): Released all slaves [ 249.134663][ T6678] veth1_vlan: entered promiscuous mode [ 249.294294][ T6678] veth0_macvtap: entered promiscuous mode [ 249.319048][ T6678] veth1_macvtap: entered promiscuous mode [ 249.604755][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.623270][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.634071][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.644773][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.114131][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.129700][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.149756][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.165875][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.190203][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.203424][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.214405][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.233342][ T6678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.378213][ T6678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.403807][ T6678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.498989][ T6678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.523605][ T6678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.545228][ T6678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.560418][ T6678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.631607][ T6860] loop4: detected capacity change from 0 to 1024 [ 250.654807][ T6858] overlayfs: failed to clone upperpath [ 250.992600][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.016149][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.744816][ T1097] IPVS: stop unused estimator thread 0... [ 251.780938][ T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.934327][ T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.759580][ T12] hfsplus: b-tree write err: -5, ino 25 [ 253.828273][ T12] hfsplus: b-tree write err: -5, ino 4 [ 253.860135][ T12] hfsplus: b-tree write err: -5, ino 2 [ 253.877515][ T12] hfsplus: b-tree write err: -5, ino 26 [ 254.684745][ T6873] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 254.756132][ T23] IPVS: starting estimator thread 0... [ 255.028977][ T6897] IPVS: using max 18 ests per chain, 43200 per kthread [ 256.482036][ T9] IPVS: starting estimator thread 0... [ 256.649878][ T6912] IPVS: using max 17 ests per chain, 40800 per kthread [ 259.835466][ T51] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 262.657651][ T6952] overlayfs: failed to clone upperpath [ 263.552415][ T6975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 265.860990][ T6997] loop4: detected capacity change from 0 to 32768 [ 266.149937][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.156573][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.630560][ T6997] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.666094][ T6991] capability: warning: `syz.5.262' uses 32-bit capabilities (legacy support in use) [ 266.815699][ T7012] overlayfs: failed to clone upperpath [ 267.079242][ T6997] XFS (loop4): Ending clean mount [ 267.098140][ T6997] XFS (loop4): Quotacheck needed: Please wait. [ 267.124539][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 267.178035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 267.364618][ T6997] XFS (loop4): Quotacheck: Done. [ 267.571172][ T27] usb 6-1: device descriptor read/64, error -71 [ 268.293972][ T28] audit: type=1804 audit(1782319090.633:2): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.263" name="/newroot/10/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=1 errno=0 [ 269.269348][ T6614] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.752411][ T7057] loop4: detected capacity change from 0 to 4096 [ 273.768012][ T7057] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 273.934037][ T7057] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 274.022777][ T7057] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 274.045093][ T7057] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 274.065366][ T7057] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 274.089209][ T7057] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 274.164777][ T7057] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 274.890731][ T7057] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 274.948050][ T7057] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 274.962097][ T7057] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 275.022473][ T7057] ntfs: volume version 3.1. [ 276.980916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 283.447870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 299.460728][ T7231] loop4: detected capacity change from 0 to 512 [ 300.326876][ T7231] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.040219][ T7231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 301.048339][ T7231] System zones: 1-12 [ 301.060874][ T7231] EXT4-fs (loop4): 1 truncate cleaned up [ 301.067796][ T7231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.220950][ T7247] netlink: 'syz.5.312': attribute type 2 has an invalid length. [ 301.454638][ T5819] IPVS: starting estimator thread 0... [ 301.916077][ T7248] IPVS: using max 19 ests per chain, 45600 per kthread [ 304.523635][ T6614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.762389][ T5088] Bluetooth: hci4: command 0x0406 tx timeout [ 309.131177][ T7289] loop4: detected capacity change from 0 to 32768 [ 309.212683][ T7289] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 309.335479][ T7289] XFS (loop4): Ending clean mount [ 309.347169][ T7289] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.703999][ T7359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.325'. [ 321.261083][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.032160][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 324.032177][ T28] audit: type=1326 audit(1782319142.203:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.009808][ T28] audit: type=1326 audit(1782319142.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.253920][ T28] audit: type=1326 audit(1782319142.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.329357][ T28] audit: type=1326 audit(1782319142.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.354752][ T28] audit: type=1326 audit(1782319142.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.378541][ T28] audit: type=1326 audit(1782319142.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.414789][ T28] audit: type=1326 audit(1782319142.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.518759][ T28] audit: type=1326 audit(1782319142.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 327.614842][ T7436] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 327.622115][ T7436] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 327.699134][ T7438] hsr0: entered promiscuous mode [ 327.725003][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 327.812008][ T7440] GUP no longer grows the stack in syz.5.350 (7440): 200000006000-200000009000 (200000004000) [ 327.823498][ T7440] CPU: 0 PID: 7440 Comm: syz.5.350 Not tainted syzkaller #0 [ 327.830851][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.840971][ T7440] Call Trace: [ 327.844294][ T7440] [ 327.847264][ T7440] dump_stack_lvl+0x18c/0x250 [ 327.852004][ T7440] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 327.857694][ T7440] ? show_regs_print_info+0x20/0x20 [ 327.862938][ T7440] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 327.868638][ T7440] fixup_user_fault+0x691/0x750 [ 327.873545][ T7440] fault_in_user_writeable+0x71/0xd0 [ 327.878879][ T7440] futex_lock_pi+0x276/0xa00 [ 327.883521][ T7440] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 327.888975][ T7440] ? __schedule+0x15b6/0x4660 [ 327.893714][ T7440] do_futex+0x23d/0x3e0 [ 327.897923][ T7440] ? __ia32_sys_get_robust_list+0x110/0x110 [ 327.903874][ T7440] __se_sys_futex+0x3a9/0x440 [ 327.908600][ T7440] ? __x64_sys_futex+0xf0/0xf0 [ 327.913418][ T7440] ? __x64_sys_futex+0x21/0xf0 [ 327.918225][ T7440] do_syscall_64+0x55/0xb0 [ 327.922690][ T7440] ? clear_bhb_loop+0x40/0x90 [ 327.927411][ T7440] ? clear_bhb_loop+0x40/0x90 [ 327.932140][ T7440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.938116][ T7440] RIP: 0033:0x7f0a13f9ce59 [ 327.942598][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.962353][ T7440] RSP: 002b:00007f0a121d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 327.970905][ T7440] RAX: ffffffffffffffda RBX: 00007f0a14216180 RCX: 00007f0a13f9ce59 [ 327.978918][ T7440] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 327.986925][ T7440] RBP: 00007f0a14032e6f R08: 0000000000000000 R09: 0000000000000082 [ 327.994938][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.002949][ T7440] R13: 00007f0a14216218 R14: 00007f0a14216180 R15: 00007fff9cd57f08 [ 328.010982][ T7440] [ 328.191331][ T28] audit: type=1326 audit(1782319142.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 328.454085][ T28] audit: type=1326 audit(1782319142.240:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.4.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 329.574858][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 332.828446][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.835174][ T51] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 332.835303][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.887145][ T7479] netlink: 'syz.1.356': attribute type 2 has an invalid length. [ 333.027953][ T7483] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 333.220819][ T27] IPVS: starting estimator thread 0... [ 334.434493][ T7482] IPVS: using max 28 ests per chain, 67200 per kthread [ 334.802919][ T7495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.013868][ T7499] overlayfs: failed to clone upperpath [ 336.173294][ T7518] loop4: detected capacity change from 0 to 256 [ 336.203466][ T7518] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 336.558320][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 336.657189][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 336.679061][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 336.691272][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 340.237682][ T7555] loop4: detected capacity change from 0 to 8 [ 342.094687][ T7566] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 342.169232][ T7555] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 342.177042][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.370'. [ 342.187490][ T7555] batman_adv: batadv0: Adding interface: vlan1 [ 342.193921][ T7555] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.219855][ T7555] batman_adv: batadv0: Interface activated: vlan1 [ 342.277131][ T7569] (syz.1.373,7569,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 342.868438][ T7581] xt_policy: too many policy elements [ 343.267629][ T7586] loop4: detected capacity change from 0 to 32768 [ 343.525455][ T7586] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 343.681886][ T7586] XFS (loop4): Ending clean mount [ 343.696460][ T7586] XFS (loop4): Quotacheck needed: Please wait. [ 343.801795][ T7586] XFS (loop4): Quotacheck: Done. [ 344.208431][ T7603] netlink: 'syz.4.378': attribute type 2 has an invalid length. [ 344.657749][ T6614] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.024903][ T7610] overlayfs: failed to clone upperpath [ 345.642913][ T7615] CUSE: unknown device info "" [ 345.647987][ T7615] CUSE: unknown device info "Ö" [ 345.652892][ T7615] CUSE: unknown device info "" [ 345.657930][ T7615] CUSE: unknown device info "" [ 345.663009][ T7615] CUSE: unknown device info "" [ 345.668267][ T7615] CUSE: unknown device info "" [ 345.673222][ T7615] CUSE: unknown device info "ðÿÿÿ" [ 345.678409][ T7615] CUSE: unknown device info "" [ 345.683419][ T7615] CUSE: unknown device info "" [ 345.688331][ T7615] CUSE: unknown device info "" [ 345.693408][ T7615] CUSE: unknown device info "" [ 345.698688][ T7615] CUSE: unknown device info "r" [ 345.703761][ T7615] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 345.709583][ T7615] CUSE: unknown device info "ÿÿÿÿ" [ 345.715070][ T7615] CUSE: unknown device info "" [ 345.720153][ T7615] CUSE: unknown device info "€" [ 345.725372][ T7615] CUSE: DEVNAME unspecified [ 352.384507][ T7662] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.393727][ T7662] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.402523][ T7662] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.411335][ T7662] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.565969][ T7662] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.575670][ T7662] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.584671][ T7662] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.593589][ T7662] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.788724][ T51] Bluetooth: hci4: unexpected event for opcode 0x203d [ 356.619949][ T5088] Bluetooth: hci4: command 0x0406 tx timeout [ 356.964633][ T7706] loop4: detected capacity change from 0 to 4096 [ 358.069083][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 358.084692][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 358.938570][ T51] Bluetooth: hci4: hardware error 0x00 [ 359.141115][ T7711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.250276][ T7713] overlayfs: failed to clone upperpath [ 359.653900][ T7702] syz.4.398: attempt to access beyond end of device [ 359.653900][ T7702] loop4: rw=0, sector=6054, nr_sectors = 2 limit=4096 [ 359.667608][ T7702] NILFS (loop4): I/O error reading data block for GC (ino=15, vblocknr=3) [ 359.676287][ T7702] NILFS (loop4): error -5 preparing GC: cannot read source blocks [ 360.435272][ T5088] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 361.169500][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 364.028994][ T7761] overlayfs: failed to clone upperpath [ 365.545491][ T7778] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7778] [ 367.173141][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 367.173156][ T28] audit: type=1326 audit(1782319182.538:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 367.203288][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.384520][ T28] audit: type=1326 audit(1782319182.565:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 367.508061][ T28] audit: type=1326 audit(1782319182.584:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 367.532004][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.622225][ T7793] overlayfs: failed to clone upperpath [ 367.655632][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 367.722443][ T28] audit: type=1326 audit(1782319182.611:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 367.746355][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.784743][ T28] audit: type=1326 audit(1782319182.611:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 367.931846][ T28] audit: type=1326 audit(1782319182.611:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 368.077753][ T28] audit: type=1326 audit(1782319182.611:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 368.196930][ T28] audit: type=1326 audit(1782319182.611:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 368.326897][ T28] audit: type=1326 audit(1782319182.611:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 368.611763][ T28] audit: type=1326 audit(1782319182.611:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.2.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7486b9ce59 code=0x7ffc0000 [ 371.471538][ T7824] loop4: detected capacity change from 0 to 32768 [ 371.542607][ T7824] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 371.898717][ T7824] XFS (loop4): Ending clean mount [ 371.921333][ T7824] XFS (loop4): Quotacheck needed: Please wait. [ 372.062147][ T7824] XFS (loop4): Quotacheck: Done. [ 372.609706][ T7841] netlink: 'syz.4.414': attribute type 2 has an invalid length. [ 373.563615][ T6614] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 381.024815][ T7912] fuse: Unknown parameter '0x0000000000000006' [ 384.192534][ T7932] netlink: 'syz.5.427': attribute type 2 has an invalid length. [ 387.309732][ T7953] loop4: detected capacity change from 0 to 1024 [ 387.534261][ T7953] hfsplus: failed to load extents file [ 388.419441][ T7959] pim6reg: entered allmulticast mode [ 389.491199][ T7958] pim6reg: left allmulticast mode [ 389.561266][ T7959] sctp: [Deprecated]: syz.2.434 (pid 7959) Use of int in max_burst socket option. [ 389.561266][ T7959] Use struct sctp_assoc_value instead [ 394.443049][ T8008] overlayfs: failed to clone upperpath [ 394.592909][ T8010] overlayfs: failed to clone upperpath [ 395.163026][ T8016] netlink: 'syz.2.443': attribute type 10 has an invalid length. [ 395.180879][ T8016] team0: Port device dummy0 added [ 396.312660][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 397.907763][ T8040] overlayfs: failed to clone upperpath [ 398.687150][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.693537][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.940165][ T8046] loop4: detected capacity change from 0 to 2048 [ 399.173561][ T8046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.532629][ T8082] overlayfs: failed to clone upperpath [ 407.315364][ T8103] loop4: detected capacity change from 0 to 512 [ 407.519199][ T8103] EXT4-fs (loop4): orphan cleanup on readonly fs [ 407.830237][ T8103] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.458: invalid indirect mapped block 28777 (level 2) [ 407.973085][ T8120] overlayfs: failed to clone upperpath [ 408.809283][ T8103] EXT4-fs (loop4): 1 truncate cleaned up [ 408.921857][ T8125] overlayfs: failed to clone upperpath [ 409.579690][ T8103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.591758][ T6614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.064391][ T8147] netlink: 'syz.1.467': attribute type 13 has an invalid length. [ 419.581357][ T8180] overlayfs: failed to clone upperpath [ 422.665992][ T8209] overlayfs: failed to clone upperpath [ 433.383893][ T8282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.496748][ T8300] overlayfs: failed to clone upperpath [ 439.371002][ T5767] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 441.552356][ T8346] loop4: detected capacity change from 0 to 512 [ 441.560250][ T8346] ext4: Unknown parameter 'context' [ 441.947691][ T8293] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.805827][ T8355] syz_tun: entered allmulticast mode [ 443.928429][ T8361] overlayfs: failed to clone upperpath [ 445.612179][ T8381] overlayfs: failed to clone upperpath [ 452.698931][ T8418] overlayfs: failed to clone upperpath [ 457.622655][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 457.622674][ T28] audit: type=1326 audit(1782319265.102:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 457.790450][ T28] audit: type=1326 audit(1782319265.102:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8428 comm="syz.4.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0379ce59 code=0x7ffc0000 [ 458.873570][ T8437] overlayfs: failed to clone upperpath [ 460.267206][ T8452] loop4: detected capacity change from 0 to 512 [ 460.274285][ T8452] ext4: Unknown parameter 'context' [ 460.430956][ T8450] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.750962][ T8459] loop4: detected capacity change from 0 to 256 [ 463.458750][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 464.369779][ T8483] loop4: detected capacity change from 0 to 512 [ 464.376870][ T8483] ext4: Unknown parameter 'context' [ 464.489906][ T8450] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.883151][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.891853][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.898773][ T8496] loop4: detected capacity change from 0 to 512 [ 467.914274][ T8496] ext4: Unknown parameter 'context' [ 468.930755][ T8450] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 475.250313][ T8543] overlayfs: failed to clone upperpath [ 475.381395][ T8544] netlink: 96 bytes leftover after parsing attributes in process `syz.2.546'. [ 480.966745][ T8585] netlink: 48 bytes leftover after parsing attributes in process `syz.2.562'. [ 481.074187][ T8585] trusted_key: encrypted_key: insufficient parameters specified [ 481.110355][ T8585] xt_recent: Unsupported userspace flags (000000b1) [ 481.778616][ T8593] overlayfs: failed to clone upperpath [ 491.257817][ T8635] overlayfs: failed to clone upperpath [ 496.046630][ T8664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 496.886771][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 496.944731][ T8657] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 496.972415][ T8657] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 496.995131][ T8657] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.202734][ T8657] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.622478][ T8684] overlayfs: failed to clone upperpath [ 500.029078][ T8692] loop4: detected capacity change from 0 to 512 [ 500.074708][ T8692] ext4: Unknown parameter 'context' [ 500.202896][ T8693] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 508.602989][ T8737] overlayfs: failed to clone upperpath [ 509.011823][ T8741] overlayfs: failed to clone upperpath [ 510.615285][ T8747] No source specified [ 511.719053][ T8747] geneve1: entered promiscuous mode [ 513.668394][ T8772] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.609'. [ 515.445771][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 517.935811][ T8801] overlayfs: failed to clone upperpath [ 518.405856][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 520.101062][ T5817] usb 5-1: device not accepting address 3, error -71 [ 520.671245][ T8831] overlayfs: failed to clone upperpath [ 522.622585][ T8841] overlayfs: failed to clone upperpath [ 527.070784][ T8869] overlayfs: failed to clone upperpath [ 528.317735][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 530.555194][ T8900] overlayfs: failed to clone upperpath [ 531.835454][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.841991][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.224040][ T8904] overlayfs: failed to clone upperpath [ 532.656726][ T8917] loop4: detected capacity change from 0 to 16 [ 533.539009][ T8917] erofs: (device loop4): mounted with root inode @ nid 36. [ 536.291741][ T8913] overlayfs: failed to clone upperpath [ 537.487028][ T8948] overlayfs: failed to clone upperpath [ 540.881261][ T8964] overlayfs: failed to clone upperpath [ 543.697282][ T8994] loop4: detected capacity change from 0 to 512 [ 543.707004][ T8987] overlayfs: failed to clone upperpath [ 543.707390][ T8994] ext4: Unknown parameter 'context' [ 543.925819][ T8996] overlayfs: failed to clone upperpath [ 545.532949][ T9009] overlayfs: failed to clone upperpath [ 548.992926][ T9045] overlayfs: failed to clone upperpath [ 551.211036][ T9062] overlayfs: failed to clone upperpath [ 553.054200][ T9082] overlayfs: failed to clone upperpath [ 554.863393][ T9090] netlink: 48 bytes leftover after parsing attributes in process `syz.2.702'. [ 555.667212][ T9105] overlayfs: failed to clone upperpath [ 555.674752][ T9102] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.701'. [ 556.013464][ T9108] loop4: detected capacity change from 0 to 512 [ 556.021145][ T9108] ext4: Unknown parameter 'context' [ 556.346789][ T8945] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 558.183823][ T9127] overlayfs: failed to clone upperpath [ 559.820472][ T9138] overlayfs: failed to clone upperpath [ 560.879446][ T9145] overlayfs: failed to clone upperpath [ 562.362190][ T9162] overlayfs: failed to clone upperpath [ 563.692478][ T9174] overlayfs: failed to clone upperpath [ 564.824588][ T9190] overlayfs: failed to clone upperpath [ 568.363353][ T9213] overlayfs: failed to clone upperpath [ 570.803634][ T9234] overlayfs: failed to clone upperpath [ 575.152495][ T9273] overlayfs: failed to clone upperpath [ 577.204699][ T9308] overlayfs: failed to clone upperpath [ 583.627176][ T9375] loop4: detected capacity change from 0 to 512 [ 583.658351][ T9375] ext4: Unknown parameter 'context' [ 586.708301][ T9398] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 587.101749][ T9406] overlayfs: failed to clone upperpath [ 588.640180][ T9388] overlayfs: failed to clone upperpath [ 590.491251][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.809'. [ 592.077377][ T9447] EXT4-fs: Conflicting test_dummy_encryption options [ 592.093369][ T9447] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 592.099896][ T9447] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 592.108387][ T9447] hsr0: entered promiscuous mode [ 592.117601][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 592.608059][ T9454] overlayfs: failed to clone upperpath [ 593.278153][ T9462] netlink: 'syz.2.818': attribute type 10 has an invalid length. [ 593.286067][ T9462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.818'. [ 593.295777][ T9462] batman_adv: batadv0: Adding interface: vlan1 [ 593.301968][ T9462] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.327289][ T9462] batman_adv: batadv0: Interface activated: vlan1 [ 594.388002][ T9481] loop4: detected capacity change from 0 to 512 [ 594.395378][ T9481] ext4: Unknown parameter 'context' [ 594.704413][ T9483] overlayfs: failed to clone upperpath [ 595.962117][ T9276] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.334569][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.341140][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.977064][ T9517] overlayfs: failed to clone upperpath [ 599.271133][ C1] hrtimer: interrupt took 44269 ns [ 604.986918][ T9551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.902891][ T9555] overlayfs: failed to clone upperpath [ 610.503006][ T9594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.119670][ T9595] overlayfs: failed to clone upperpath [ 616.171456][ T1097] ------------[ cut here ]------------ [ 616.177477][ T1097] WARNING: CPU: 0 PID: 1097 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 616.188893][ T1097] Modules linked in: [ 616.192907][ T1097] CPU: 0 PID: 1097 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 616.200504][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.210640][ T1097] Workqueue: iou_exit io_ring_exit_work [ 616.216323][ T1097] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 616.222095][ T1097] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 31 f9 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 d1 98 0b f7 e9 b1 fd ff ff e8 c7 98 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 616.241857][ T1097] RSP: 0018:ffffc9000467fa40 EFLAGS: 00010293 [ 616.248186][ T1097] RAX: ffffffff8a7b4c89 RBX: ffff8881417ae000 RCX: ffff888023c58000 [ 616.256263][ T1097] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 616.264317][ T1097] RBP: ffffc9000467fbb0 R08: ffffc9000467f9c7 R09: 1ffff920008cff38 [ 616.272413][ T1097] R10: dffffc0000000000 R11: fffff520008cff39 R12: dffffc0000000000 [ 616.280515][ T1097] R13: 0000000100006c69 R14: 0000000100006c6f R15: ffff8881417ae510 [ 616.288659][ T1097] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 616.298392][ T1097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.305193][ T1097] CR2: 00002000000c6030 CR3: 00000000789b1000 CR4: 00000000003506f0 [ 616.313550][ T1097] Call Trace: [ 616.316892][ T1097] [ 616.319873][ T1097] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 616.325825][ T1097] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.331114][ T1097] ? process_scheduled_works+0x975/0x1600 [ 616.336976][ T1097] ? process_scheduled_works+0x975/0x1600 [ 616.342799][ T1097] process_scheduled_works+0xa60/0x1600 [ 616.348456][ T1097] ? worker_attach_to_pool+0x370/0x370 [ 616.354060][ T1097] ? assign_work+0x3cc/0x5d0 [ 616.358731][ T1097] worker_thread+0xa5e/0xfe0 [ 616.363421][ T1097] kthread+0x2fa/0x390 [ 616.367570][ T1097] ? pr_cont_work+0x550/0x550 [ 616.372314][ T1097] ? kthread_blkcg+0xd0/0xd0 [ 616.377022][ T1097] ret_from_fork+0x48/0x80 [ 616.381498][ T1097] ? kthread_blkcg+0xd0/0xd0 [ 616.386196][ T1097] ret_from_fork_asm+0x11/0x20 [ 616.391038][ T1097] [ 616.394121][ T1097] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 616.401430][ T1097] CPU: 0 PID: 1097 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 616.409059][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.419151][ T1097] Workqueue: iou_exit io_ring_exit_work [ 616.424743][ T1097] Call Trace: [ 616.428052][ T1097] [ 616.431022][ T1097] dump_stack_lvl+0x18c/0x250 [ 616.435765][ T1097] ? show_regs_print_info+0x20/0x20 [ 616.441011][ T1097] ? load_image+0x420/0x420 [ 616.445571][ T1097] panic+0x2ca/0x720 [ 616.449528][ T1097] ? bpf_jit_dump+0xd0/0xd0 [ 616.454089][ T1097] ? ret_from_fork_asm+0x11/0x20 [ 616.459101][ T1097] __warn+0x2e0/0x470 [ 616.463134][ T1097] ? io_ring_exit_work+0x3b9/0x830 [ 616.468286][ T1097] ? io_ring_exit_work+0x3b9/0x830 [ 616.473435][ T1097] report_bug+0x2be/0x4f0 [ 616.477812][ T1097] ? io_ring_exit_work+0x3b9/0x830 [ 616.482997][ T1097] ? io_ring_exit_work+0x3b9/0x830 [ 616.488143][ T1097] ? io_ring_exit_work+0x3bb/0x830 [ 616.493286][ T1097] handle_bug+0xcf/0x120 [ 616.497569][ T1097] exc_invalid_op+0x1a/0x50 [ 616.502138][ T1097] asm_exc_invalid_op+0x1a/0x20 [ 616.507039][ T1097] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 616.512798][ T1097] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 31 f9 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 d1 98 0b f7 e9 b1 fd ff ff e8 c7 98 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 616.532453][ T1097] RSP: 0018:ffffc9000467fa40 EFLAGS: 00010293 [ 616.538561][ T1097] RAX: ffffffff8a7b4c89 RBX: ffff8881417ae000 RCX: ffff888023c58000 [ 616.546569][ T1097] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 616.554589][ T1097] RBP: ffffc9000467fbb0 R08: ffffc9000467f9c7 R09: 1ffff920008cff38 [ 616.562604][ T1097] R10: dffffc0000000000 R11: fffff520008cff39 R12: dffffc0000000000 [ 616.570640][ T1097] R13: 0000000100006c69 R14: 0000000100006c6f R15: ffff8881417ae510 [ 616.578665][ T1097] ? io_ring_exit_work+0x3b9/0x830 [ 616.583838][ T1097] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 616.589692][ T1097] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.594946][ T1097] ? process_scheduled_works+0x975/0x1600 [ 616.600710][ T1097] ? process_scheduled_works+0x975/0x1600 [ 616.606480][ T1097] process_scheduled_works+0xa60/0x1600 [ 616.612099][ T1097] ? worker_attach_to_pool+0x370/0x370 [ 616.617617][ T1097] ? assign_work+0x3cc/0x5d0 [ 616.622261][ T1097] worker_thread+0xa5e/0xfe0 [ 616.626929][ T1097] kthread+0x2fa/0x390 [ 616.631035][ T1097] ? pr_cont_work+0x550/0x550 [ 616.635756][ T1097] ? kthread_blkcg+0xd0/0xd0 [ 616.640389][ T1097] ret_from_fork+0x48/0x80 [ 616.644845][ T1097] ? kthread_blkcg+0xd0/0xd0 [ 616.649475][ T1097] ret_from_fork_asm+0x11/0x20 [ 616.654301][ T1097] [ 616.657923][ T1097] Kernel Offset: disabled [ 616.662324][ T1097] Rebooting in 86400 seconds..