last executing test programs: 23.997250561s ago: executing program 3 (id=3032): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0xfef3, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200649078"], 0x0) 23.903946131s ago: executing program 3 (id=3035): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 23.780765362s ago: executing program 3 (id=3039): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 22.69506858s ago: executing program 0 (id=3049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xf0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 22.641976797s ago: executing program 0 (id=3051): bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000000b80)=[{{&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x80, 0x0}}], 0x1, 0x4000804) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6_sctp(0xa, 0x801, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) recvmmsg(r0, &(0x7f0000001140), 0x1, 0x22, &(0x7f0000002400)={0x77359400}) 22.617487439s ago: executing program 0 (id=3053): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="ce1151788c25d4aba7a15a84fcbfc089", 0x10) 22.537319895s ago: executing program 0 (id=3054): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 22.51984843s ago: executing program 0 (id=3057): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x689}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) 22.101179365s ago: executing program 0 (id=3060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xf0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 21.917237129s ago: executing program 32 (id=3060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xf0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 19.99722723s ago: executing program 3 (id=3041): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000300)=ANY=[], 0x1, 0x66b, &(0x7f0000001f80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 19.873420147s ago: executing program 3 (id=3084): read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4173, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000000)={0x8, 0x401, 0x9}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 18.479075813s ago: executing program 3 (id=3100): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.438415773s ago: executing program 33 (id=3100): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.545797714s ago: executing program 5 (id=3386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x80, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x6c, 0x1, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffc, 0x9, 0xffffffffffffffff, 0x48be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x200, 0x9, 0xffffffffffffffff, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4091}, 0x2400c808) 3.490882819s ago: executing program 5 (id=3389): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x82, 0x100) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f00000001c0)="46050300", 0x4, 0x9, 0x0, 0x0, r0}]) 3.460317029s ago: executing program 6 (id=3390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r4}, 0x10) 3.279086051s ago: executing program 5 (id=3395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) 3.222728788s ago: executing program 5 (id=3396): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) 3.153344381s ago: executing program 5 (id=3397): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7ff203fb0b3527b5b73942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003", 0x15) 3.105246773s ago: executing program 5 (id=3398): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10014400, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x6bb3, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x5, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000004c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x66a6}}, 0x30) 2.54026542s ago: executing program 6 (id=3399): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0xaebb, 0x1d010, 0x20000a, 0x20002f7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.477436751s ago: executing program 6 (id=3400): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x689}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 2.222519472s ago: executing program 2 (id=3406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) 2.137485016s ago: executing program 2 (id=3407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x1060, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_read_part_table(0x5da, &(0x7f0000000a00)="$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") 2.071800726s ago: executing program 2 (id=3410): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$cgroup_pid(r4, &(0x7f00000003c0), 0xffffffa0) 1.575602719s ago: executing program 6 (id=3411): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x53, 0x6, 0x3, 0x5, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x81, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xc, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0xc, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0x1, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000003, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x3, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb3, 0xb, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x20000004, 0x24], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0x8c8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.514854061s ago: executing program 4 (id=3412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) 987.572198ms ago: executing program 1 (id=3415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xbc2, &(0x7f0000000a00)={@random="85c4e67ce45c", @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "eaadf7", 0xb88, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x32, 0x4, 0x0, 0x9, 0x0, [@private0, @empty]}, @fragment={0xc, 0x0, 0x2, 0x1, 0x0, 0x2, 0x68}, @dstopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @dstopts={0x2c, 0x163, '\x00', [@generic={0x0, 0x3a, "a915dfcf691690615239358f9e30ffb0936e128c1ba46e36abe97b9ef19006bae0dd1a1e3730ec0c1de5b4c2b9644590778c21b156e93ab18f64"}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x80, 0xabf, "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"}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x4, 0x9, 0x9}}}}}}, 0x0) 893.770373ms ago: executing program 1 (id=3416): bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x4000804) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6_sctp(0xa, 0x801, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) recvmmsg(r0, &(0x7f0000001140), 0x1, 0x22, &(0x7f0000002400)={0x77359400}) 868.919825ms ago: executing program 2 (id=3417): madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x65) r0 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 814.003062ms ago: executing program 1 (id=3418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) 776.158729ms ago: executing program 1 (id=3419): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7ff203fb0b3527b5b73942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000e", 0x19) 774.694756ms ago: executing program 1 (id=3420): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be", 0xca}], 0x1}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='t'], 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 709.156621ms ago: executing program 2 (id=3421): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x689}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 631.745348ms ago: executing program 1 (id=3422): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0xc0) 596.862397ms ago: executing program 2 (id=3423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 539.507959ms ago: executing program 4 (id=3424): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, &(0x7f00000001c0)="2c56ba1ad0cec5da01281a639dccca2c8ac846e40eda14d6269cae86efcc", 0x0, 0x7, 0x0, 0x9}, 0x50) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 538.25435ms ago: executing program 6 (id=3425): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4) 264.739126ms ago: executing program 4 (id=3426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0xbc2, &(0x7f0000000a00)={@random="85c4e67ce45c", @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "eaadf7", 0xb88, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x32, 0x4, 0x0, 0x9, 0x0, [@private0, @empty]}, @fragment={0xc, 0x0, 0x2, 0x1, 0x0, 0x2, 0x68}, @dstopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @dstopts={0x2c, 0x163, '\x00', [@generic={0x0, 0x3a, "a915dfcf691690615239358f9e30ffb0936e128c1ba46e36abe97b9ef19006bae0dd1a1e3730ec0c1de5b4c2b9644590778c21b156e93ab18f64"}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x80, 0xabf, "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"}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x4, 0x9, 0x9}}}}}}, 0x0) 263.437054ms ago: executing program 6 (id=3427): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$cgroup_pid(r5, &(0x7f00000003c0), 0xffffffa0) 248.891431ms ago: executing program 4 (id=3428): bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x4000804) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6_sctp(0xa, 0x801, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) recvmmsg(r0, &(0x7f0000001140), 0x1, 0x22, &(0x7f0000002400)={0x77359400}) 17.808443ms ago: executing program 4 (id=3429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000002080)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x2a, 0x20, 0x64, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp={0x44, 0x4, 0xde, 0x0, 0x5}]}}, @info_request={0xf, 0x0, 0x0, 0xdb, 0x7fff}}}}}, 0x0) 0s ago: executing program 4 (id=3430): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x42838, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) write$FUSE_STATX(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x22, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0x4008af25, &(0x7f0000000000)) kernel console output (not intermixed with test programs): lename '/devices/virtual/bluetooth/hci2/hci2:201' [ 383.926790][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT [ 383.926813][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 383.926820][ T53] Workqueue: hci2 hci_rx_work [ 383.926843][ T53] Call trace: [ 383.926847][ T53] show_stack+0x2c/0x3c (C) [ 383.926862][ T53] __dump_stack+0x30/0x40 [ 383.926870][ T53] dump_stack_lvl+0xd8/0x12c [ 383.926878][ T53] dump_stack+0x1c/0x28 [ 383.926885][ T53] sysfs_create_dir_ns+0x22c/0x24c [ 383.926894][ T53] kobject_add_internal+0x5a8/0xb48 [ 383.926905][ T53] kobject_add+0x134/0x200 [ 383.926914][ T53] device_add+0x394/0xa88 [ 383.926923][ T53] hci_conn_add_sysfs+0xc0/0x1f8 [ 383.926930][ T53] le_conn_complete_evt+0xc00/0x1064 [ 383.926936][ T53] hci_le_conn_complete_evt+0x114/0x410 [ 383.926946][ T53] hci_le_meta_evt+0x2dc/0x500 [ 383.926953][ T53] hci_event_packet+0x6bc/0xf50 [ 383.926960][ T53] hci_rx_work+0x300/0xd80 [ 383.926968][ T53] process_one_work+0x7c0/0x1558 [ 383.926977][ T53] worker_thread+0x958/0xed8 [ 383.926986][ T53] kthread+0x5fc/0x75c [ 383.926992][ T53] ret_from_fork+0x10/0x20 [ 383.930526][ T53] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 383.930549][ T53] Bluetooth: hci2: failed to register connection device [ 384.057826][T11184] batman_adv: batadv0: Adding interface: dummy0 [ 384.059567][T11184] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.063986][T11184] batman_adv: batadv0: Interface activated: dummy0 [ 384.384405][T11192] ptrace attach of "./syz-executor exec"[6573] was attempted by ""[11192] [ 384.565287][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 384.565324][T11197] netlink: 'syz.4.1107': attribute type 30 has an invalid length. [ 384.569234][ T5038] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.569282][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 384.569309][T11197] netlink: 'syz.4.1107': attribute type 30 has an invalid length. [ 384.577342][ T157] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.577384][ T157] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.577403][ T157] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.742295][ T53] Bluetooth: hci2: Malformed LE Event: 0x1d [ 384.857036][T11208] netlink: 'syz.3.1111': attribute type 26 has an invalid length. [ 385.049575][T11215] kAFS: unparsable volume name [ 386.386456][T11254] ptrace attach of "./syz-executor exec"[6573] was attempted by ""[11254] [ 386.534305][T11252] Cannot find del_set index 0 as target [ 386.651781][T11259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.667753][T11261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1126'. [ 386.667789][T11261] tipc: Invalid UDP bearer configuration [ 386.668698][T11261] tipc: Enabling of bearer rejected, failed to enable media [ 386.983610][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 388.331890][T11300] ptrace attach of "./syz-executor exec"[6573] was attempted by ""[11300] [ 389.700776][T11340] netlink: 'syz.2.1153': attribute type 2 has an invalid length. [ 389.974286][T11348] ptrace attach of "./syz-executor exec"[6583] was attempted by ""[11348] [ 390.197147][T11338] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1154'. [ 390.955393][T11377] C: renamed from team_slave_0 (while UP) [ 390.957962][T11377] netlink: 'syz.2.1165': attribute type 8 has an invalid length. [ 390.960185][T11377] net_ratelimit: 31 callbacks suppressed [ 390.961404][T11377] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 391.202071][T11402] overlayfs: failed to clone upperpath [ 391.385527][T11406] ptrace attach of "./syz-executor exec"[6572] was attempted by ""[11406] [ 391.509848][T11412] bond1: Removing last arp target with arp_interval on [ 391.549446][T11418] x_tables: ip_tables: ah match: only valid for protocol 51 [ 392.116723][T11439] netlink: 'syz.2.1187': attribute type 21 has an invalid length. [ 392.116784][T11439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1187'. [ 392.326899][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 392.942128][T11513] ptrace attach of "./syz-executor exec"[6583] was attempted by ""[11513] [ 393.335674][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 393.775052][T11558] ªªªªªª: renamed from vlan0 (while UP) [ 393.782247][T11560] netlink: 'syz.0.1217': attribute type 2 has an invalid length. [ 393.782281][T11560] netlink: 'syz.0.1217': attribute type 1 has an invalid length. [ 393.802260][T11560] batman_adv: batadv0: Adding interface: dummy0 [ 393.802301][T11560] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.802478][T11560] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 394.147115][ T53] Bluetooth: hci4: Malformed LE Event: 0x1b [ 394.511907][T11595] ptrace attach of "./syz-executor exec"[6572] was attempted by ""[11595] [ 394.601209][T11597] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1222'. [ 395.406975][T11622] x_tables: ip_tables: osf match: only valid for protocol 6 [ 395.527821][T11621] tipc: Started in network mode [ 395.528973][T11621] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 395.534150][T11621] tipc: Enabled bearer , priority 0 [ 395.537809][T11623] overlayfs: failed to clone upperpath [ 395.541834][T11623] overlayfs: missing 'workdir' [ 396.129866][ T53] Bluetooth: hci3: Malformed LE Event: 0x1d [ 396.679127][T11664] ptrace attach of "./syz-executor exec"[6583] was attempted by ""[11664] [ 396.732225][ T6702] tipc: Node number set to 9611946 [ 397.218728][T11690] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 397.236158][T11688] overlayfs: failed to clone upperpath [ 398.511269][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1260'. [ 398.553640][T11718] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 398.846493][T11742] ptrace attach of "./syz-executor exec"[6572] was attempted by ""[11742] [ 399.312106][T11756] netlink: 'syz.3.1274': attribute type 2 has an invalid length. [ 399.455468][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.506139][T11772] Injecting memory failure for pfn 0x13bcf7 at process virtual address 0x20000000 [ 399.528934][T11772] Memory failure: 0x13bcf7: Sending SIGBUS to syz.3.1282:11772 due to hardware memory corruption [ 399.532190][T11772] Memory failure: 0x13bcf7: recovery action for dirty LRU page: Recovered [ 399.533671][T11772] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20001000 [ 399.535263][T11772] Memory failure: 0x20aaef: recovery action for reserved kernel page: Ignored [ 400.619253][T11801] ptrace attach of "./syz-executor exec"[6583] was attempted by ""[11801] [ 400.637780][T11802] netlink: 'syz.4.1291': attribute type 13 has an invalid length. [ 400.637807][T11802] netlink: 'syz.4.1291': attribute type 17 has an invalid length. [ 400.712275][T11802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.708808][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 401.713483][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1295'. [ 401.783363][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 401.783403][ T31] audit: type=1326 audit(401.745:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11817 comm="syz.4.1297" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b78fa8 code=0x0 [ 402.207397][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 402.210220][T11816] batman_adv: batadv0: Interface deactivated: dummy0 [ 402.213867][T11816] batman_adv: batadv0: Removing interface: dummy0 [ 402.549199][T11839] Cannot find del_set index 0 as target [ 402.724651][T11846] batman_adv: batadv0: Adding interface: dummy0 [ 402.724683][T11846] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.724699][T11846] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 402.810844][T11857] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 402.844622][T11860] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 402.962595][T11860] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 402.963771][T11860] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 403.006711][T11873] ptrace attach of "./syz-executor exec"[6573] was attempted by ""[11873] [ 403.028715][T11874] bond1: (slave gretap1): making interface the new active one [ 403.031557][T11874] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 403.617284][T11895] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 403.775759][T11903] netlink: 'syz.1.1325': attribute type 1 has an invalid length. [ 403.793109][T11903] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 403.793509][T11903] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 404.017335][T11909] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 404.017335][T11909] The task syz.2.1324 (11909) triggered the difference, watch for misbehavior. [ 404.195602][T11906] bond2: (slave gretap1): making interface the new active one [ 404.197373][T11906] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 404.223650][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 404.496397][T11926] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 404.873963][T11935] ptrace attach of "./syz-executor exec"[6582] was attempted by "./syz-executor exec"[11935] [ 405.029492][T11943] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 405.051978][T11943] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 405.052472][T11943] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 405.097455][T11943] bond2: (slave gretap1): making interface the new active one [ 405.099745][T11943] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 405.847781][T11964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1347'. [ 405.848606][T11964] batman_adv: batadv0: Interface deactivated: dummy0 [ 405.849898][T11964] batman_adv: batadv0: Removing interface: dummy0 [ 406.319174][T11982] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 406.441786][T11982] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.446579][T11982] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 406.854211][T11991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.701148][T12018] ptrace attach of "./syz-executor exec"[6582] was attempted by "./syz-executor exec"[12018] [ 408.398812][T12037] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 408.448445][T12037] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 408.451056][T12037] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 408.518934][T12046] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 408.541048][T12048] bond2: (slave gretap1): making interface the new active one [ 408.545012][T12048] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 409.712231][T12098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1391'. [ 409.836984][T12102] team0 (unregistering): Port device team_slave_0 removed [ 409.848779][T12102] team0 (unregistering): Port device team_slave_1 removed [ 410.389639][T12118] 9p: Bad value for 'wfdno' [ 411.181367][T12142] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 411.208959][T12142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.647817][T12157] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 411.648222][T12156] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 411.651379][T12157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 411.653087][T12156] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 411.690396][T12161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.149131][T12167] syz_tun: entered allmulticast mode [ 412.294516][T12166] syz_tun: left allmulticast mode [ 412.313665][T12175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1418'. [ 412.666980][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.767791][T12200] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 412.818362][T12200] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 412.821040][T12200] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 412.886870][T12203] bond2: (slave gretap1): making interface the new active one [ 412.890189][T12203] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 413.114653][T12207] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 413.174403][T12207] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 413.175050][T12207] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 414.815309][T12252] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1439'. [ 415.230380][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 415.239062][T12264] bond_slave_0: entered promiscuous mode [ 415.239099][T12264] bond_slave_1: entered promiscuous mode [ 415.241355][T12264] macvtap1: entered promiscuous mode [ 415.242283][T12264] bond0: entered promiscuous mode [ 415.243382][T12264] macvtap1: entered allmulticast mode [ 415.247839][T12264] bond0: entered allmulticast mode [ 415.248836][T12264] bond_slave_0: entered allmulticast mode [ 415.250021][T12264] bond_slave_1: entered allmulticast mode [ 415.255555][T12264] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 415.921633][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 415.921688][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 416.147388][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.147512][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.151646][T12315] batman_adv: batadv0: Interface deactivated: dummy0 [ 417.686120][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.688254][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.308365][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1469'. [ 418.548497][ T563] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.550748][ T563] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.552646][ T563] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.554384][ T563] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.884324][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 424.415431][T12480] syz.0.1515: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 424.416395][T12480] CPU: 0 UID: 0 PID: 12480 Comm: syz.0.1515 Not tainted syzkaller #0 PREEMPT [ 424.416405][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 424.416411][T12480] Call trace: [ 424.416413][T12480] show_stack+0x2c/0x3c (C) [ 424.416429][T12480] __dump_stack+0x30/0x40 [ 424.416440][T12480] dump_stack_lvl+0xd8/0x12c [ 424.416446][T12480] dump_stack+0x1c/0x28 [ 424.416453][T12480] warn_alloc+0x1f8/0x314 [ 424.416460][T12480] __vmalloc_node_range_noprof+0x128/0x132c [ 424.416469][T12480] vmalloc_user_noprof+0xf0/0x14c [ 424.416477][T12480] xskq_create+0xbc/0x168 [ 424.416484][T12480] xsk_init_queue+0xb0/0x118 [ 424.416490][T12480] xsk_setsockopt+0x448/0x684 [ 424.416495][T12480] do_sock_setsockopt+0x1ec/0x328 [ 424.416503][T12480] __arm64_sys_setsockopt+0x170/0x1e0 [ 424.416509][T12480] invoke_syscall+0x98/0x254 [ 424.416517][T12480] el0_svc_common+0xe8/0x23c [ 424.416524][T12480] do_el0_svc+0x48/0x58 [ 424.416531][T12480] el0_svc+0x5c/0x26c [ 424.416539][T12480] el0t_64_sync_handler+0x84/0x12c [ 424.416547][T12480] el0t_64_sync+0x198/0x19c [ 424.416555][T12480] Mem-Info: [ 424.416559][T12480] active_anon:2355 inactive_anon:62246 isolated_anon:0 [ 424.416559][T12480] active_file:4404 inactive_file:22821 isolated_file:0 [ 424.416559][T12480] unevictable:11864 dirty:165 writeback:0 [ 424.416559][T12480] slab_reclaimable:11713 slab_unreclaimable:107610 [ 424.416559][T12480] mapped:41193 shmem:59131 pagetables:1765 [ 424.416559][T12480] sec_pagetables:0 bounce:0 [ 424.416559][T12480] kernel_misc_reclaimable:0 [ 424.416559][T12480] free:1316411 free_pcp:9837 free_cma:7360 [ 424.416575][T12480] Node 0 active_anon:9420kB inactive_anon:248984kB active_file:17616kB inactive_file:91284kB unevictable:47456kB isolated(anon):0kB isolated(file):0kB mapped:164772kB dirty:660kB writeback:0kB shmem:236524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:11476kB pagetables:7060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 424.416590][T12480] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 424.416609][T12480] lowmem_reserve[]: 0 0 3491 3491 3491 [ 424.416626][T12480] Node 0 Normal free:2188780kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9420kB inactive_anon:248984kB active_file:17616kB inactive_file:91284kB unevictable:47456kB writepending:660kB zspages:0kB present:5242880kB managed:3575080kB mlocked:0kB bounce:0kB free_pcp:39348kB local_pcp:29484kB free_cma:0kB [ 424.416644][T12480] lowmem_reserve[]: 0 0 0 0 0 [ 424.416660][T12480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 424.416724][T12480] Node 0 Normal: 3781*4kB (UME) 2765*8kB (UM) 1849*16kB (UME) 289*32kB (UME) 1148*64kB (UME) 1313*128kB (UME) 1023*256kB (UM) 831*512kB (UME) 646*1024kB (UM) 11*2048kB (UM) 122*4096kB (UM) = 2188716kB [ 424.416790][T12480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 424.416796][T12480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 424.416801][T12480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 424.416807][T12480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 424.416811][T12480] 97422 total pagecache pages [ 424.416815][T12480] 3 pages in swap cache [ 424.416818][T12480] Free swap = 124996kB [ 424.416821][T12480] Total swap = 124996kB [ 424.416825][T12480] 2097152 pages RAM [ 424.416828][T12480] 0 pages HighMem/MovableOnly [ 424.416830][T12480] 433334 pages reserved [ 424.416833][T12480] 8192 pages cma reserved [ 424.416836][T12480] 3 pages hwpoisoned [ 424.749569][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 424.767451][T12495] overlayfs: failed to clone upperpath [ 425.421662][T12508] bond3: (slave netdevsim0): Enslaving as an active interface with an up link [ 425.463278][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 427.870453][T12569] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 427.870488][T12569] CIFS: Unable to determine destination address [ 430.068383][T12607] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 430.077777][T12607] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 430.078461][T12607] bond3: (slave batadv1): making interface the new active one [ 430.078737][T12607] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 430.546709][T12625] bridge_slave_1: entered promiscuous mode [ 430.994010][T12643] 9p: Bad value for 'wfdno' [ 431.556189][T12663] netlink: 'syz.1.1577': attribute type 4 has an invalid length. [ 431.556224][T12663] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.1577'. [ 434.723769][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 435.311312][ T2468] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.313308][ T2468] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.113394][T12796] lo speed is unknown, defaulting to 1000 [ 438.113460][T12796] lo speed is unknown, defaulting to 1000 [ 438.117697][T12796] lo speed is unknown, defaulting to 1000 [ 438.123115][T12796] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 438.130433][T12796] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 438.181900][T12796] lo speed is unknown, defaulting to 1000 [ 438.184390][T12796] lo speed is unknown, defaulting to 1000 [ 438.186629][T12796] lo speed is unknown, defaulting to 1000 [ 438.189794][T12796] lo speed is unknown, defaulting to 1000 [ 438.192234][T12796] lo speed is unknown, defaulting to 1000 [ 438.847908][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 438.980696][T12816] syz.3.1624: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 438.981690][T12816] CPU: 0 UID: 0 PID: 12816 Comm: syz.3.1624 Not tainted syzkaller #0 PREEMPT [ 438.981708][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 438.981715][T12816] Call trace: [ 438.981719][T12816] show_stack+0x2c/0x3c (C) [ 438.981737][T12816] __dump_stack+0x30/0x40 [ 438.981747][T12816] dump_stack_lvl+0xd8/0x12c [ 438.981755][T12816] dump_stack+0x1c/0x28 [ 438.981762][T12816] warn_alloc+0x1f8/0x314 [ 438.981769][T12816] __vmalloc_node_range_noprof+0x128/0x132c [ 438.981777][T12816] vmalloc_user_noprof+0xf0/0x14c [ 438.981786][T12816] xskq_create+0xbc/0x168 [ 438.981793][T12816] xsk_init_queue+0xb0/0x118 [ 438.981798][T12816] xsk_setsockopt+0x448/0x684 [ 438.981804][T12816] do_sock_setsockopt+0x1ec/0x328 [ 438.981811][T12816] __arm64_sys_setsockopt+0x170/0x1e0 [ 438.981818][T12816] invoke_syscall+0x98/0x254 [ 438.981825][T12816] el0_svc_common+0xe8/0x23c [ 438.981832][T12816] do_el0_svc+0x48/0x58 [ 438.981838][T12816] el0_svc+0x5c/0x26c [ 438.981846][T12816] el0t_64_sync_handler+0x84/0x12c [ 438.981854][T12816] el0t_64_sync+0x198/0x19c [ 438.981929][T12816] Mem-Info: [ 438.981935][T12816] active_anon:2377 inactive_anon:60882 isolated_anon:0 [ 438.981935][T12816] active_file:4425 inactive_file:22806 isolated_file:0 [ 438.981935][T12816] unevictable:11864 dirty:100 writeback:0 [ 438.981935][T12816] slab_reclaimable:11534 slab_unreclaimable:108484 [ 438.981935][T12816] mapped:41184 shmem:59128 pagetables:1844 [ 438.981935][T12816] sec_pagetables:0 bounce:0 [ 438.981935][T12816] kernel_misc_reclaimable:0 [ 438.981935][T12816] free:1317842 free_pcp:9304 free_cma:7360 [ 438.981956][T12816] Node 0 active_anon:9508kB inactive_anon:243528kB active_file:17700kB inactive_file:91224kB unevictable:47456kB isolated(anon):0kB isolated(file):0kB mapped:164736kB dirty:400kB writeback:0kB shmem:236512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11620kB pagetables:7376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 438.981971][T12816] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 438.981990][T12816] lowmem_reserve[]: 0 0 3491 3491 3491 [ 438.982008][T12816] Node 0 Normal free:2194504kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9508kB inactive_anon:243528kB active_file:17700kB inactive_file:91224kB unevictable:47456kB writepending:400kB zspages:0kB present:5242880kB managed:3575080kB mlocked:0kB bounce:0kB free_pcp:37216kB local_pcp:6380kB free_cma:0kB [ 438.982026][T12816] lowmem_reserve[]: 0 0 0 0 0 [ 438.982046][T12816] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 438.982098][T12816] Node 0 Normal: 3029*4kB (UME) 2846*8kB (UE) 1943*16kB (UME) 271*32kB (UE) 1204*64kB (UME) 1273*128kB (UME) 1031*256kB (UM) 826*512kB (UME) 651*1024kB (UM) 11*2048kB (UM) 123*4096kB (UM) = 2194452kB [ 438.982164][T12816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.982169][T12816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 438.982175][T12816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 438.982180][T12816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 438.982184][T12816] 97447 total pagecache pages [ 438.982188][T12816] 0 pages in swap cache [ 438.982191][T12816] Free swap = 124996kB [ 438.982193][T12816] Total swap = 124996kB [ 438.982196][T12816] 2097152 pages RAM [ 438.982199][T12816] 0 pages HighMem/MovableOnly [ 438.982202][T12816] 433334 pages reserved [ 438.982205][T12816] 8192 pages cma reserved [ 438.982207][T12816] 3 pages hwpoisoned [ 440.197147][T12840] tipc: Can't bind to reserved service type 0 [ 441.150762][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1637'. [ 442.078866][T12878] lo speed is unknown, defaulting to 1000 [ 443.088528][T12914] netlink: 'syz.0.1656': attribute type 4 has an invalid length. [ 443.088564][T12914] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1656'. [ 443.279407][T12928] xt_hashlimit: size too large, truncated to 1048576 [ 443.599504][T12945] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1665'. [ 443.601217][T12945] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 443.645556][T12951] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 443.645590][T12951] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1667'. [ 444.020781][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 444.055657][T12973] x_tables: duplicate entry at hook 2 [ 444.254989][T12986] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 444.255022][T12986] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.1678'. [ 444.571907][T12998] netlink: 'syz.1.1688': attribute type 21 has an invalid length. [ 445.989787][T13082] capability: warning: `syz.4.1719' uses 32-bit capabilities (legacy support in use) [ 446.273109][T13116] syz.1.1734 (13116): attempted to duplicate a private mapping with mremap. This is not supported. [ 447.158313][T13156] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1751'. [ 447.158368][T13156] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 447.588781][T13209] bond3: (slave netdevsim0): Releasing backup interface [ 447.658707][T13216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1777'. [ 447.803697][T13251] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 447.814359][T13251] bond4: entered promiscuous mode [ 447.815803][T13251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 447.826454][T13251] bond4: (slave bridge1): making interface the new active one [ 447.827842][T13251] bridge1: entered promiscuous mode [ 447.833329][T13251] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 447.994660][T13276] bridge0: port 3(erspan0) entered blocking state [ 447.994817][T13276] bridge0: port 3(erspan0) entered disabled state [ 447.994982][T13276] erspan0: entered allmulticast mode [ 447.997469][T13276] erspan0: entered promiscuous mode [ 447.998686][T13276] bridge0: port 3(erspan0) entered blocking state [ 447.998723][T13276] bridge0: port 3(erspan0) entered forwarding state [ 448.838207][ T31] audit: type=1326 audit(445.765:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.841734][ T31] audit: type=1326 audit(445.765:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.845143][ T31] audit: type=1326 audit(445.765:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.845169][ T31] audit: type=1326 audit(445.765:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.845184][ T31] audit: type=1326 audit(445.765:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.845197][ T31] audit: type=1326 audit(445.765:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.845209][ T31] audit: type=1326 audit(445.765:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.845221][ T31] audit: type=1326 audit(445.765:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.845232][ T31] audit: type=1326 audit(445.765:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 448.848560][ T31] audit: type=1326 audit(445.775:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13343 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=65 compat=0 ip=0xffff84578fa8 code=0x7ffc0000 [ 451.008995][T13498] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 451.040118][T13498] bond4: entered promiscuous mode [ 451.041628][T13498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.388033][T13542] netlink: 'syz.2.1923': attribute type 15 has an invalid length. [ 451.438703][T13553] warn_alloc: 2 callbacks suppressed [ 451.439754][T13553] syz.4.1929: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 451.442257][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.4.1929 Not tainted syzkaller #0 PREEMPT [ 451.442282][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 451.442293][T13553] Call trace: [ 451.442298][T13553] show_stack+0x2c/0x3c (C) [ 451.442315][T13553] __dump_stack+0x30/0x40 [ 451.442323][T13553] dump_stack_lvl+0xd8/0x12c [ 451.442330][T13553] dump_stack+0x1c/0x28 [ 451.442337][T13553] warn_alloc+0x1f8/0x314 [ 451.442344][T13553] __vmalloc_node_range_noprof+0x128/0x132c [ 451.442353][T13553] vmalloc_user_noprof+0xf0/0x14c [ 451.442360][T13553] xskq_create+0xbc/0x168 [ 451.442368][T13553] xsk_init_queue+0xb0/0x118 [ 451.442373][T13553] xsk_setsockopt+0x448/0x684 [ 451.442378][T13553] do_sock_setsockopt+0x1ec/0x328 [ 451.442386][T13553] __arm64_sys_setsockopt+0x170/0x1e0 [ 451.442392][T13553] invoke_syscall+0x98/0x254 [ 451.442399][T13553] el0_svc_common+0xe8/0x23c [ 451.442406][T13553] do_el0_svc+0x48/0x58 [ 451.442413][T13553] el0_svc+0x5c/0x26c [ 451.442421][T13553] el0t_64_sync_handler+0x84/0x12c [ 451.442429][T13553] el0t_64_sync+0x198/0x19c [ 451.473424][T13553] Mem-Info: [ 451.474304][T13553] active_anon:2352 inactive_anon:51795 isolated_anon:0 [ 451.474304][T13553] active_file:4439 inactive_file:22803 isolated_file:0 [ 451.474304][T13553] unevictable:11864 dirty:266 writeback:0 [ 451.474304][T13553] slab_reclaimable:11667 slab_unreclaimable:109970 [ 451.474304][T13553] mapped:32248 shmem:50168 pagetables:1860 [ 451.474304][T13553] sec_pagetables:0 bounce:0 [ 451.474304][T13553] kernel_misc_reclaimable:0 [ 451.474304][T13553] free:1323359 free_pcp:10427 free_cma:7360 [ 451.486673][T13553] Node 0 active_anon:9408kB inactive_anon:208680kB active_file:17756kB inactive_file:91212kB unevictable:47456kB isolated(anon):0kB isolated(file):0kB mapped:130492kB dirty:1064kB writeback:0kB shmem:202172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11440kB pagetables:7340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 451.486741][T13553] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 451.486771][T13553] lowmem_reserve[]: 0 0 3491 3491 3491 [ 451.486789][T13553] Node 0 Normal free:2216572kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9408kB inactive_anon:208680kB active_file:17756kB inactive_file:91212kB unevictable:47456kB writepending:1064kB zspages:0kB present:5242880kB managed:3575080kB mlocked:0kB bounce:0kB free_pcp:40636kB local_pcp:11512kB free_cma:0kB [ 451.486808][T13553] lowmem_reserve[]: 0 0 0 0 0 [ 451.486823][T13553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 451.486870][T13553] Node 0 Normal: 3264*4kB (UME) 3056*8kB (UM) 2155*16kB (UM) 424*32kB (UME) 1259*64kB (UM) 1330*128kB (UM) 1003*256kB (UM) 831*512kB (UME) 654*1024kB (UM) 12*2048kB (UM) 123*4096kB (UM) = 2216688kB [ 451.486935][T13553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 451.486941][T13553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 451.486946][T13553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 451.486951][T13553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 451.486956][T13553] 88848 total pagecache pages [ 451.486959][T13553] 0 pages in swap cache [ 451.486962][T13553] Free swap = 124996kB [ 451.486965][T13553] Total swap = 124996kB [ 451.486968][T13553] 2097152 pages RAM [ 451.486971][T13553] 0 pages HighMem/MovableOnly [ 451.486974][T13553] 433334 pages reserved [ 451.486976][T13553] 8192 pages cma reserved [ 451.486979][T13553] 3 pages hwpoisoned [ 452.217917][T13566] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 452.217976][T13566] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.1933'. [ 452.515821][T13578] netlink: 'syz.4.1939': attribute type 11 has an invalid length. [ 452.720234][T13603] overlayfs: failed to clone upperpath [ 452.839693][T13612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1953'. [ 452.924253][T13622] netlink: 'syz.2.1957': attribute type 11 has an invalid length. [ 452.924284][T13622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1957'. [ 452.926282][T13622] netlink: 'syz.2.1957': attribute type 11 has an invalid length. [ 452.926303][T13622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1957'. [ 452.926397][T13622] netlink: 'syz.2.1957': attribute type 11 has an invalid length. [ 452.926404][T13622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1957'. [ 452.983328][T13628] netlink: 'syz.1.1960': attribute type 28 has an invalid length. [ 453.044966][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 453.597415][T13662] overlayfs: failed to clone lowerpath [ 453.620757][T13664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.621328][T13664] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.621692][T13664] batman_adv: batadv0: Interface activated: dummy0 [ 453.621704][T13664] batadv0: mtu less than device minimum [ 453.622990][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.624304][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.625546][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.626812][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.628078][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.629335][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.630592][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.631849][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.633091][T13664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 453.711695][T13676] overlayfs: failed to clone upperpath [ 453.841026][T13694] overlayfs: failed to resolve './file0': -2 [ 453.884582][T13701] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1990'. [ 454.774966][T13738] netlink: 'syz.1.2007': attribute type 4 has an invalid length. [ 454.775040][T13738] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.2007'. [ 455.704556][T13778] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 455.844679][T13786] netlink: 1640 bytes leftover after parsing attributes in process `syz.0.2028'. [ 456.065137][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 456.236906][T13826] Non-string source [ 457.462304][T13894] batman_adv: batadv0: Interface activated: dummy0 [ 457.822182][ T6682] lo speed is unknown, defaulting to 1000 [ 457.859707][T13908] __nla_validate_parse: 3 callbacks suppressed [ 457.861087][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 457.910324][T13918] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 457.919921][T13920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2078'. [ 458.081609][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 458.729949][T13976] bond5 (unregistering): Released all slaves [ 459.165513][T13996] lo speed is unknown, defaulting to 1000 [ 459.254154][T14005] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 459.264619][T14005] bond5: entered promiscuous mode [ 459.264773][T14005] 8021q: adding VLAN 0 to HW filter on device bond5 [ 459.611583][T14017] lo speed is unknown, defaulting to 1000 [ 461.150121][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 461.296633][T14089] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 461.674731][T14093] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 461.916692][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 461.924818][T14112] batman_adv: batadv0: Removing interface: dummy0 [ 462.819527][T14140] warn_alloc: 3 callbacks suppressed [ 462.819817][T14140] syz.0.2163: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 462.819874][T14140] CPU: 0 UID: 0 PID: 14140 Comm: syz.0.2163 Not tainted syzkaller #0 PREEMPT [ 462.819886][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 462.819895][T14140] Call trace: [ 462.819900][T14140] show_stack+0x2c/0x3c (C) [ 462.819918][T14140] __dump_stack+0x30/0x40 [ 462.819928][T14140] dump_stack_lvl+0xd8/0x12c [ 462.819936][T14140] dump_stack+0x1c/0x28 [ 462.819943][T14140] warn_alloc+0x1f8/0x314 [ 462.819950][T14140] __vmalloc_node_range_noprof+0x128/0x132c [ 462.819960][T14140] vmalloc_user_noprof+0xf0/0x14c [ 462.819968][T14140] xskq_create+0xbc/0x168 [ 462.819976][T14140] xsk_init_queue+0xb0/0x118 [ 462.819981][T14140] xsk_setsockopt+0x448/0x684 [ 462.819986][T14140] do_sock_setsockopt+0x1ec/0x328 [ 462.819994][T14140] __arm64_sys_setsockopt+0x170/0x1e0 [ 462.820000][T14140] invoke_syscall+0x98/0x254 [ 462.820008][T14140] el0_svc_common+0xe8/0x23c [ 462.820014][T14140] do_el0_svc+0x48/0x58 [ 462.820021][T14140] el0_svc+0x5c/0x26c [ 462.820029][T14140] el0t_64_sync_handler+0x84/0x12c [ 462.820037][T14140] el0t_64_sync+0x198/0x19c [ 462.820128][T14140] Mem-Info: [ 462.820134][T14140] active_anon:2377 inactive_anon:57935 isolated_anon:0 [ 462.820134][T14140] active_file:4456 inactive_file:22783 isolated_file:0 [ 462.820134][T14140] unevictable:11864 dirty:389 writeback:0 [ 462.820134][T14140] slab_reclaimable:11594 slab_unreclaimable:109744 [ 462.820134][T14140] mapped:38341 shmem:56243 pagetables:1867 [ 462.820134][T14140] sec_pagetables:0 bounce:0 [ 462.820134][T14140] kernel_misc_reclaimable:0 [ 462.820134][T14140] free:1315839 free_pcp:15270 free_cma:7360 [ 462.820153][T14140] Node 0 active_anon:9508kB inactive_anon:231740kB active_file:17824kB inactive_file:91132kB unevictable:47456kB isolated(anon):0kB isolated(file):0kB mapped:153364kB dirty:1556kB writeback:0kB shmem:224972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11520kB pagetables:7468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 462.820167][T14140] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 462.820185][T14140] lowmem_reserve[]: 0 0 3491 3491 3491 [ 462.820202][T14140] Node 0 Normal free:2186492kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9508kB inactive_anon:231740kB active_file:17824kB inactive_file:91132kB unevictable:47456kB writepending:1556kB zspages:0kB present:5242880kB managed:3575080kB mlocked:0kB bounce:0kB free_pcp:61080kB local_pcp:18072kB free_cma:0kB [ 462.820220][T14140] lowmem_reserve[]: 0 0 0 0 0 [ 462.820235][T14140] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 462.820288][T14140] Node 0 Normal: 1495*4kB (UME) 2233*8kB (UM) 2106*16kB (UM) 242*32kB (UE) 1080*64kB (UME) 1344*128kB (UM) 1002*256kB (UME) 831*512kB (UM) 654*1024kB (UM) 12*2048kB (UM) 123*4096kB (UM) = 2186500kB [ 462.820354][T14140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.820359][T14140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 462.820364][T14140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 462.820369][T14140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 462.820374][T14140] 94570 total pagecache pages [ 462.820377][T14140] 0 pages in swap cache [ 462.820380][T14140] Free swap = 124996kB [ 462.820383][T14140] Total swap = 124996kB [ 462.820387][T14140] 2097152 pages RAM [ 462.820389][T14140] 0 pages HighMem/MovableOnly [ 462.820392][T14140] 433334 pages reserved [ 462.820395][T14140] 8192 pages cma reserved [ 462.820398][T14140] 3 pages hwpoisoned [ 463.306848][T14170] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 466.151443][T14269] overlayfs: failed to clone upperpath [ 466.599456][T14298] batman_adv: batadv0: Interface deactivated: dummy0 [ 466.600786][T14298] batman_adv: batadv0: Removing interface: dummy0 [ 466.606945][T14298] bond0: (slave bond_slave_0): Releasing backup interface [ 466.632720][T14298] bond0: (slave bond_slave_1): Releasing backup interface [ 466.671349][T14298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.671386][T14298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.673337][T14298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.673345][T14298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.674606][T14298] net_ratelimit: 32 callbacks suppressed [ 466.674613][T14298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.679691][T14304] vlan2: entered promiscuous mode [ 466.679705][T14304] bridge0: entered promiscuous mode [ 466.844508][ T6682] kernel write not supported for file bpf-prog (pid: 6682 comm: kworker/1:7) [ 467.069253][T14370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2251'. [ 468.237853][T14409] TCP: TCP_TX_DELAY enabled [ 468.338860][T14410] gre1: entered promiscuous mode [ 468.338948][T14410] gre1: entered allmulticast mode [ 469.271489][T14469] overlayfs: failed to clone upperpath [ 469.694426][T14489] xt_TPROXY: Can be used only with -p tcp or -p udp [ 469.711839][T14493] vlan0: entered promiscuous mode [ 469.711870][T14493] bridge0: entered promiscuous mode [ 469.824609][T14516] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 469.982010][T14552] overlayfs: failed to clone upperpath [ 470.531615][T14600] netlink: 'syz.0.2353': attribute type 15 has an invalid length. [ 470.543060][T14605] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 472.676579][T14664] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20001000 [ 472.676806][T14664] Memory failure: 0x20aaef: Sending SIGBUS to syz.1.2374:14664 due to hardware memory corruption [ 472.689757][T14664] Memory failure: 0x20aaef: recovery action for already poisoned page: Failed [ 474.712934][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2412'. [ 475.145790][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 475.146999][ T31] audit: type=1326 audit(470.376:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.150375][ T31] audit: type=1326 audit(470.376:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.154317][ T31] audit: type=1326 audit(470.376:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.157928][ T31] audit: type=1326 audit(470.376:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.161356][ T31] audit: type=1326 audit(470.376:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=196 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.164781][ T31] audit: type=1326 audit(470.376:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.168221][ T31] audit: type=1326 audit(470.376:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.168238][ T31] audit: type=1326 audit(470.376:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.168251][ T31] audit: type=1326 audit(470.376:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 475.168264][ T31] audit: type=1326 audit(470.376:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14765 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb9978fa8 code=0x7ffc0000 [ 477.690219][T14890] netlink: 'syz.2.2472': attribute type 4 has an invalid length. [ 477.690277][T14890] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.2472'. [ 478.137369][T14907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.152733][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 478.231365][T14922] macvlan1: entered promiscuous mode [ 478.955728][T14979] lo speed is unknown, defaulting to 1000 [ 478.956742][T14979] lo speed is unknown, defaulting to 1000 [ 478.957077][T14979] lo speed is unknown, defaulting to 1000 [ 479.023408][ T6680] lo speed is unknown, defaulting to 1000 [ 479.025369][T14979] infiniband sqz0: set active [ 479.027312][T14979] infiniband sqz0: added lo [ 479.053454][T14979] RDS/IB: sqz0: added [ 479.054381][T14979] smc: adding ib device sqz0 with port count 1 [ 479.054414][T14979] smc: ib device sqz0 port 1 has no pnetid [ 479.055178][ T6642] lo speed is unknown, defaulting to 1000 [ 479.055809][T14979] lo speed is unknown, defaulting to 1000 [ 479.466252][T14979] lo speed is unknown, defaulting to 1000 [ 479.516031][T14979] lo speed is unknown, defaulting to 1000 [ 479.558750][T14979] lo speed is unknown, defaulting to 1000 [ 479.600935][T14979] lo speed is unknown, defaulting to 1000 [ 479.729420][T15041] veth0_vlan: entered allmulticast mode [ 479.831250][T15055] lo speed is unknown, defaulting to 1000 [ 479.833577][T15055] lo speed is unknown, defaulting to 1000 [ 479.888717][T15069] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 480.541259][T15132] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 480.571533][ T6680] lo speed is unknown, defaulting to 1000 [ 480.653634][T15151] erspan0: left allmulticast mode [ 480.653681][T15151] erspan0: left promiscuous mode [ 480.653765][T15151] bridge0: port 3(erspan0) entered disabled state [ 480.658180][T15151] batman_adv: batadv0: Interface deactivated: dummy0 [ 480.658743][T15151] batman_adv: batadv0: Removing interface: dummy0 [ 480.662030][T15151] bridge_slave_0: left allmulticast mode [ 480.662062][T15151] bridge_slave_0: left promiscuous mode [ 480.662134][T15151] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.665365][T15151] bridge_slave_1: left allmulticast mode [ 480.665600][T15151] bridge_slave_1: left promiscuous mode [ 480.665732][T15151] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.670740][T15151] bond0: (slave bond_slave_0): Releasing backup interface [ 480.720032][T15151] team0: Port device team_slave_0 removed [ 480.722502][T15151] team0: Port device team_slave_1 removed [ 480.722948][T15151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.722959][T15151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.727351][T15151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.727384][T15151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.731220][T15151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 480.736067][T15161] team0: Mode changed to "loadbalance" [ 480.757693][T15162] overlayfs: failed to clone upperpath [ 480.782739][T15168] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 480.785596][T15168] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.785985][T15168] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.795805][T15244] bond4: entered promiscuous mode [ 481.795991][T15244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.804114][T15244] bridge2: entered promiscuous mode [ 481.805655][T15244] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 481.864972][T15261] overlayfs: failed to clone upperpath [ 481.972507][T15271] bridge0: port 3(erspan0) entered blocking state [ 481.972552][T15271] bridge0: port 3(erspan0) entered disabled state [ 481.972652][T15271] erspan0: entered allmulticast mode [ 481.973165][T15271] erspan0: entered promiscuous mode [ 481.973329][T15271] bridge0: port 3(erspan0) entered blocking state [ 481.973348][T15271] bridge0: port 3(erspan0) entered forwarding state [ 481.976448][T15271] erspan0: left allmulticast mode [ 481.976459][T15271] erspan0: left promiscuous mode [ 481.977216][T15271] bridge0: port 3(erspan0) entered disabled state [ 482.123052][T15295] bridge2: entered allmulticast mode [ 482.125599][T15295] team0: Port device bridge2 added [ 482.128849][T15295] bridge0: port 3(team0) entered blocking state [ 482.130780][T15295] bridge0: port 3(team0) entered disabled state [ 482.132029][T15295] team0: entered allmulticast mode [ 482.132958][T15295] team_slave_0: entered allmulticast mode [ 482.133877][T15295] team_slave_1: entered allmulticast mode [ 482.138665][T15295] team0: entered promiscuous mode [ 482.139614][T15295] team_slave_0: entered promiscuous mode [ 482.140726][T15295] team_slave_1: entered promiscuous mode [ 482.142417][T15295] bridge2: entered promiscuous mode [ 482.184214][T15301] lo speed is unknown, defaulting to 1000 [ 482.185884][T15301] lo speed is unknown, defaulting to 1000 [ 482.393317][T15311] team0: left allmulticast mode [ 482.395710][T15311] team_slave_0: left allmulticast mode [ 482.396844][T15311] team_slave_1: left allmulticast mode [ 482.399025][T15311] team0: left promiscuous mode [ 482.399993][T15311] team_slave_0: left promiscuous mode [ 482.401250][T15311] team_slave_1: left promiscuous mode [ 482.402702][T15311] bridge2: left promiscuous mode [ 482.406320][T15311] bridge0: port 3(team0) entered disabled state [ 482.410307][T15311] bridge_slave_0: left allmulticast mode [ 482.410343][T15311] bridge_slave_0: left promiscuous mode [ 482.410428][T15311] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.419429][T15311] bridge_slave_1: left allmulticast mode [ 482.421956][T15311] bridge_slave_1: left promiscuous mode [ 482.423134][T15311] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.452040][T15311] bond0: (slave bond_slave_0): Releasing backup interface [ 482.484300][T15311] bond0: (slave bond_slave_1): Releasing backup interface [ 482.510941][T15311] team0: Port device team_slave_0 removed [ 482.514986][T15311] team0: Port device team_slave_1 removed [ 482.516664][T15311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.518186][T15311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.520337][T15311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.522085][T15311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.524819][T15311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 482.529302][T15317] team0: No ports can be present during mode change [ 482.635765][T15327] bridge0: port 3(erspan0) entered blocking state [ 482.635822][T15327] bridge0: port 3(erspan0) entered disabled state [ 482.637156][T15327] erspan0: entered allmulticast mode [ 482.637674][T15327] erspan0: entered promiscuous mode [ 482.637870][T15327] bridge0: port 3(erspan0) entered blocking state [ 482.637889][T15327] bridge0: port 3(erspan0) entered forwarding state [ 482.641067][T15327] erspan0: left allmulticast mode [ 482.641081][T15327] erspan0: left promiscuous mode [ 482.641154][T15327] bridge0: port 3(erspan0) entered disabled state [ 482.792906][T15352] bridge0: entered allmulticast mode [ 482.838571][T15357] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2675'. [ 482.957893][T15377] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 482.978775][T15377] bond6: entered promiscuous mode [ 482.980016][T15377] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.992054][T15377] bridge4: entered promiscuous mode [ 482.997574][T15377] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 483.089299][T15397] netlink: 'syz.1.2689': attribute type 4 has an invalid length. [ 483.089381][T15397] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.2689'. [ 483.314475][T15404] overlayfs: failed to clone upperpath [ 483.516796][T15422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.563390][T15433] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 483.581252][T15433] bond4: entered promiscuous mode [ 483.581404][T15433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.588410][T15433] bridge0: entered promiscuous mode [ 483.590169][T15433] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 484.539155][T15480] netlink: 'syz.0.2726': attribute type 15 has an invalid length. [ 484.977489][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 485.003752][T15531] netlink: 'syz.2.2749': attribute type 4 has an invalid length. [ 485.003790][T15531] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2749'. [ 485.471328][T15560] netlink: 'syz.4.2761': attribute type 4 has an invalid length. [ 485.471407][T15560] netlink: 1601 bytes leftover after parsing attributes in process `syz.4.2761'. [ 486.160076][T15601] bridge0: entered allmulticast mode [ 486.162562][T15601] team0: Port device bridge0 added [ 486.264953][T15609] netlink: 'syz.4.2782': attribute type 1 has an invalid length. [ 486.355206][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 486.355245][T15618] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2785'. [ 486.798928][T15638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.922953][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 486.924993][T15647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2798'. [ 487.463997][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 487.925348][T15685] syz.3.2814 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 488.220478][T15708] __nla_validate_parse: 3 callbacks suppressed [ 488.221614][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 488.290021][T15717] netlink: 996 bytes leftover after parsing attributes in process `syz.1.2828'. [ 489.039518][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 489.039571][T15751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 489.208164][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'. [ 489.209898][T15775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2854'. [ 490.380632][T15836] mmap: syz.4.2880 (15836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 492.001388][T15920] bridge_slave_0: left allmulticast mode [ 492.002506][T15920] bridge_slave_0: left promiscuous mode [ 492.003749][T15920] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.010618][T15920] bridge_slave_1: left allmulticast mode [ 492.013365][T15920] bridge_slave_1: left promiscuous mode [ 492.014762][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.027660][T15920] bond0: (slave bond_slave_0): Releasing backup interface [ 492.049245][T15920] bond_slave_0: left allmulticast mode [ 492.049319][T15920] bond_slave_0: left promiscuous mode [ 492.064889][T15920] bond0: (slave bond_slave_1): Releasing backup interface [ 492.095662][T15920] bond_slave_1: left allmulticast mode [ 492.095720][T15920] bond_slave_1: left promiscuous mode [ 492.108010][T15920] team0: Port device C removed [ 492.133404][T15920] team0: Port device team_slave_1 removed [ 492.134039][T15920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.134049][T15920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.141141][T15934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.144131][T15934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.145780][T15934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.146777][T15920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.146789][T15920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.150762][T15920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.152526][T15934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.155190][T15934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.168289][T15925] team0: Mode changed to "loadbalance" [ 492.306335][T15933] lo speed is unknown, defaulting to 1000 [ 492.307563][T15933] lo speed is unknown, defaulting to 1000 [ 492.652755][T15963] batman_adv: batadv0: Interface deactivated: dummy0 [ 492.654024][T15963] batman_adv: batadv0: Removing interface: dummy0 [ 492.658095][T15963] bridge_slave_0: left allmulticast mode [ 492.659627][T15963] bridge_slave_0: left promiscuous mode [ 492.660977][T15963] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.663996][T15963] bridge_slave_1: left allmulticast mode [ 492.665096][T15963] bridge_slave_1: left promiscuous mode [ 492.666026][T15963] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.668810][T15963] bond0: (slave bond_slave_0): Releasing backup interface [ 492.679870][T15963] bond0: (slave bond_slave_1): Releasing backup interface [ 492.724932][T15963] team0: Port device team_slave_0 removed [ 492.726316][T15963] team0: Port device team_slave_1 removed [ 492.726878][T15963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.727525][T15963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.729339][T15963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.736841][T15966] team0: Mode changed to "loadbalance" [ 492.786072][T15973] bridge5: entered allmulticast mode [ 492.788455][T15973] team0: Port device bridge5 added [ 492.798196][T15933] chnl_net:caif_netlink_parms(): no params data found [ 492.802024][T15973] bridge0: port 1(team0) entered blocking state [ 492.803093][T15973] bridge0: port 1(team0) entered disabled state [ 492.804223][T15973] team0: entered allmulticast mode [ 492.805988][T15973] team0: entered promiscuous mode [ 492.806930][T15973] bridge5: entered promiscuous mode [ 492.836261][T15933] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.836337][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.836404][T15933] bridge_slave_0: entered allmulticast mode [ 492.838766][T15933] bridge_slave_0: entered promiscuous mode [ 492.840125][T15933] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.840264][T15933] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.840403][T15933] bridge_slave_1: entered allmulticast mode [ 492.840929][T15933] bridge_slave_1: entered promiscuous mode [ 492.850679][T15933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.852067][T15933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.862306][T15933] team0: Port device team_slave_0 added [ 492.863280][T15933] team0: Port device team_slave_1 added [ 492.871758][T15933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.871778][T15933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.871792][T15933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.872414][T15933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.872420][T15933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.872434][T15933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.196597][T15933] hsr_slave_0: entered promiscuous mode [ 493.200144][T15933] hsr_slave_1: entered promiscuous mode [ 493.202366][T15933] debugfs: 'hsr0' already exists in 'hsr' [ 493.202392][T15933] Cannot create hsr debugfs directory [ 493.303837][T15933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.303889][T15933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.364700][T15933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.364745][T15933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.404142][T15933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.404198][T15933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.464838][T15933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.464881][T15933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.634343][T15933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.641940][T15933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.645634][T15933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.650989][T15933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 493.698834][T15933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.710261][T15933] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.720239][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.720275][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.755036][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.755094][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.910540][T15933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.315588][ T53] Bluetooth: hci5: command tx timeout [ 494.382113][T15933] veth0_vlan: entered promiscuous mode [ 494.384415][T15933] veth1_vlan: entered promiscuous mode [ 494.393432][T15933] veth0_macvtap: entered promiscuous mode [ 494.394808][T15933] veth1_macvtap: entered promiscuous mode [ 494.401345][T15933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.404231][T15933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.407653][T11576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.407986][T11576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.408006][T11576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.408019][T11576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.465334][ T6820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.465367][ T6820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.475880][ T6820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.475909][ T6820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.608024][T15934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.610574][T15934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.612586][T15934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.614440][T15934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.616283][T15934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.657425][T16060] lo speed is unknown, defaulting to 1000 [ 494.657774][T16060] lo speed is unknown, defaulting to 1000 [ 494.751403][T16071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2962'. [ 494.814539][T16071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2962'. [ 495.259260][ T4608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.270267][T16060] chnl_net:caif_netlink_parms(): no params data found [ 495.289920][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 495.328638][ T4608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.354589][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.356774][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.356893][T16060] bridge_slave_0: entered allmulticast mode [ 495.357360][T16060] bridge_slave_0: entered promiscuous mode [ 495.358226][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.358267][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.358319][T16060] bridge_slave_1: entered allmulticast mode [ 495.358746][T16060] bridge_slave_1: entered promiscuous mode [ 495.368664][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.370459][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.375946][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 495.398107][ T4608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.418514][T16060] team0: Port device team_slave_0 added [ 495.419321][T16060] team0: Port device team_slave_1 added [ 495.441136][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.441168][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.441554][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.442229][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.442236][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.442250][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.459182][ T4608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.471521][T16060] hsr_slave_0: entered promiscuous mode [ 495.471879][T16060] hsr_slave_1: entered promiscuous mode [ 495.472119][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 495.472130][T16060] Cannot create hsr debugfs directory [ 495.779246][ T4608] bond2 (unregistering): (slave gretap1): Releasing active interface [ 496.212161][ T4608] bond0 (unregistering): left allmulticast mode [ 496.212190][ T4608] bond0 (unregistering): left promiscuous mode [ 496.223100][ T4608] bond0 (unregistering): Released all slaves [ 496.225744][ T4608] bond1 (unregistering): Released all slaves [ 496.229974][ T4608] bond2 (unregistering): Released all slaves [ 496.234478][ T4608] bond3 (unregistering): (slave batadv1): Releasing active interface [ 496.260533][ T4608] bond3 (unregistering): Released all slaves [ 496.538130][ T53] Bluetooth: hci5: command tx timeout [ 496.592156][ T4608] IPVS: stopping master sync thread 13918 ... [ 496.797032][ T53] Bluetooth: hci3: command tx timeout [ 497.085574][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 497.085802][ T31] audit: type=1326 audit(490.898:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16220 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb578fa8 code=0x7ffc0000 [ 497.090502][ T31] audit: type=1326 audit(490.898:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16220 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb578fa8 code=0x7ffc0000 [ 497.094680][ T31] audit: type=1326 audit(490.908:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16220 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=92 compat=0 ip=0xffffbb578fa8 code=0x7ffc0000 [ 497.094782][ T31] audit: type=1326 audit(490.908:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16220 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb578fa8 code=0x7ffc0000 [ 497.164894][T16060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 497.170794][T16060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 497.178552][T16060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 497.199137][T16060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.236965][ T4608] hsr_slave_0: left promiscuous mode [ 497.238190][ T4608] hsr_slave_1: left promiscuous mode [ 497.259049][ T4608] veth1_macvtap: left promiscuous mode [ 497.260221][ T4608] veth0_macvtap: left promiscuous mode [ 497.262212][ T4608] veth1_vlan: left promiscuous mode [ 497.746326][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 498.187928][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.193514][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.195591][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.195651][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.203025][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.203073][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.212930][T16267] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 498.214973][T16267] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 498.337165][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.367839][T16060] veth0_vlan: entered promiscuous mode [ 498.372433][T16060] veth1_vlan: entered promiscuous mode [ 498.387474][T16060] veth0_macvtap: entered promiscuous mode [ 498.390270][T16060] veth1_macvtap: entered promiscuous mode [ 498.394976][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.406491][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.418653][T11584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.418706][T11584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.418731][T11584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.418748][T11584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.468752][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.468781][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.557679][T11584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.557710][T11584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.771199][ T53] Bluetooth: hci5: command tx timeout [ 499.027080][ T53] Bluetooth: hci3: command tx timeout [ 499.449945][T16319] xt_hashlimit: size too large, truncated to 1048576 [ 499.620156][T16329] overlayfs: failed to clone upperpath [ 499.688265][T16338] team0: No ports can be present during mode change [ 499.732259][T15934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 499.734784][T15934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 499.737034][T15934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 499.738710][T15934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 499.740203][T15934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 499.760487][T16341] lo speed is unknown, defaulting to 1000 [ 499.762140][T16341] lo speed is unknown, defaulting to 1000 [ 500.265092][T16351] loop2: detected capacity change from 0 to 256 [ 500.270256][T16351] FAT-fs (loop2): bogus sectors per cluster 30 [ 500.270299][T16351] FAT-fs (loop2): Can't find a valid FAT filesystem [ 500.315042][T16361] bridge0: port 3(erspan0) entered blocking state [ 500.316760][T16361] bridge0: port 3(erspan0) entered disabled state [ 500.319708][T16361] erspan0: entered allmulticast mode [ 500.322352][T16361] erspan0: entered promiscuous mode [ 500.324012][T16361] bridge0: port 3(erspan0) entered blocking state [ 500.324062][T16361] bridge0: port 3(erspan0) entered forwarding state [ 500.327472][T16341] chnl_net:caif_netlink_parms(): no params data found [ 500.435572][T16341] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.435649][T16341] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.435713][T16341] bridge_slave_0: entered allmulticast mode [ 500.436325][T16341] bridge_slave_0: entered promiscuous mode [ 500.437284][T16341] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.437329][T16341] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.437389][T16341] bridge_slave_1: entered allmulticast mode [ 500.437840][T16341] bridge_slave_1: entered promiscuous mode [ 500.448302][T16341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.449830][T16341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.457219][T16341] team0: Port device team_slave_0 added [ 500.458017][T16341] team0: Port device team_slave_1 added [ 500.465899][T16341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.465925][T16341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.465942][T16341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.466906][T16341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.466912][T16341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.466923][T16341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.765261][T16341] hsr_slave_0: entered promiscuous mode [ 500.765667][T16341] hsr_slave_1: entered promiscuous mode [ 500.765900][T16341] debugfs: 'hsr0' already exists in 'hsr' [ 500.765910][T16341] Cannot create hsr debugfs directory [ 500.799716][T16377] team0: No ports can be present during mode change [ 500.894604][T16387] overlayfs: failed to clone upperpath [ 500.899853][T16386] bridge0: port 3(erspan0) entered blocking state [ 500.901554][T16386] bridge0: port 3(erspan0) entered disabled state [ 500.902852][T16386] erspan0: entered allmulticast mode [ 500.904812][T16386] erspan0: entered promiscuous mode [ 500.906463][T16386] bridge0: port 3(erspan0) entered blocking state [ 500.906519][T16386] bridge0: port 3(erspan0) entered forwarding state [ 500.984851][T15934] Bluetooth: hci5: command tx timeout [ 500.986184][ T2468] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.987318][ T2468] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.202623][T16341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 501.206365][T16341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.210310][T16341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.213009][T16341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.226670][T16341] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.226753][T16341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.226870][T16341] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.226920][T16341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.253043][T15934] Bluetooth: hci3: command tx timeout [ 501.264424][T16341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.269514][T16341] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.519720][ T752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.542216][T16341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.594121][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.596630][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.599251][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.599441][ T752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.602741][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.604804][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.632761][ T31] audit: type=1326 audit(495.145:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb78fa8 code=0x7ffc0000 [ 501.636267][ T31] audit: type=1326 audit(495.145:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb78fa8 code=0x7ffc0000 [ 501.636288][ T31] audit: type=1326 audit(495.145:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffadb78fa8 code=0x7ffc0000 [ 501.639545][ T31] audit: type=1326 audit(495.145:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb78fa8 code=0x7ffc0000 [ 501.639576][ T31] audit: type=1326 audit(495.155:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffadb78fa8 code=0x7ffc0000 [ 501.639593][ T31] audit: type=1326 audit(495.155:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb78fa8 code=0x7ffc0000 [ 501.670752][ T752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.692029][T16341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.710702][ T752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.726070][T16410] lo speed is unknown, defaulting to 1000 [ 501.738599][T16410] lo speed is unknown, defaulting to 1000 [ 501.795347][T16341] veth0_vlan: entered promiscuous mode [ 501.805314][T16341] veth1_vlan: entered promiscuous mode [ 501.833386][T16341] veth0_macvtap: entered promiscuous mode [ 501.846883][T16341] veth1_macvtap: entered promiscuous mode [ 501.886687][T16341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.924175][ T53] Bluetooth: hci4: command tx timeout [ 502.050251][T16432] Injecting memory failure for pfn 0x141081 at process virtual address 0x20001000 [ 502.226750][T16432] Memory failure: 0x141081: Sending SIGBUS to syz.1.3069:16432 due to hardware memory corruption [ 502.226821][T16432] Memory failure: 0x141081: recovery action for dirty LRU page: Recovered [ 502.226834][T16432] Injecting memory failure for pfn 0x13d9ea at process virtual address 0x20002000 [ 502.226874][T16432] Memory failure: 0x13d9ea: Sending SIGBUS to syz.1.3069:16432 due to hardware memory corruption [ 502.226890][T16432] Memory failure: 0x13d9ea: recovery action for dirty LRU page: Recovered [ 502.226897][T16432] Injecting memory failure for pfn 0x13d9e9 at process virtual address 0x20003000 [ 502.226921][T16432] Memory failure: 0x13d9e9: Sending SIGBUS to syz.1.3069:16432 due to hardware memory corruption [ 502.226936][T16432] Memory failure: 0x13d9e9: recovery action for dirty LRU page: Recovered [ 502.419225][ T752] bond2 (unregistering): (slave gretap1): Releasing active interface [ 502.669688][ T752] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 502.696732][ T752] bridge2 (unregistering): left promiscuous mode [ 502.760761][ T752] team0: Port device bridge0 removed [ 502.832332][ T752] bond0 (unregistering): Released all slaves [ 502.842033][ T752] bond1 (unregistering): Released all slaves [ 502.867854][ T752] bond2 (unregistering): Released all slaves [ 502.870992][ T752] bond3 (unregistering): Released all slaves [ 503.011132][ T752] bond4 (unregistering): Released all slaves [ 503.093731][T16341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.132648][ T4608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.132927][ T4608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.132949][ T4608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.132966][ T4608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.156522][ T752] IPVS: stopping master sync thread 14089 ... [ 503.276316][ T4123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.277745][ T4123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.314912][T16410] chnl_net:caif_netlink_parms(): no params data found [ 503.324285][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.326362][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.343634][T16479] netlink: 'syz.1.3082': attribute type 10 has an invalid length. [ 503.443231][T16410] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.444862][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.446700][T16410] bridge_slave_0: entered allmulticast mode [ 503.448698][T16410] bridge_slave_0: entered promiscuous mode [ 503.451661][T16410] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.453872][T16410] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.455716][T16410] bridge_slave_1: entered allmulticast mode [ 503.456892][T16487] loop3: detected capacity change from 0 to 164 [ 503.458938][T16410] bridge_slave_1: entered promiscuous mode [ 503.464811][ T53] Bluetooth: hci3: command tx timeout [ 503.514560][T16341] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 503.552896][T16341] ISOFS: unable to read i-node block [ 503.555679][T16341] ISOFS: unable to read i-node block [ 503.586720][T16410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.600636][T16410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.641277][ T752] hsr_slave_0: left promiscuous mode [ 503.642326][ T752] hsr_slave_1: left promiscuous mode [ 503.660876][ T752] veth1_macvtap: left promiscuous mode [ 503.660927][ T752] veth0_macvtap: left promiscuous mode [ 503.661540][ T752] veth1_vlan: left promiscuous mode [ 503.661651][ T752] veth0_vlan: left promiscuous mode [ 503.818542][ T53] Bluetooth: hci0: command tx timeout [ 504.208037][T16512] Soft offlining pfn 0x13dc9a at process virtual address 0x20000000 [ 504.219090][T16512] Soft offlining pfn 0x13d992 at process virtual address 0x20001000 [ 504.222294][T16512] Soft offlining pfn 0x20aaef at process virtual address 0x20002000 [ 504.224646][T16512] Soft offline: 0x20aaef: page already poisoned [ 504.226343][T16512] Soft offlining pfn 0x20aaef at process virtual address 0x20003000 [ 504.227963][T16512] Soft offline: 0x20aaef: page already poisoned [ 504.302295][T16512] Injecting memory failure for pfn 0x127282 at process virtual address 0x20001000 [ 504.307787][T16512] Memory failure: 0x127282: keeping poisoned page in swap cache [ 504.309547][T16512] Memory failure: 0x127282: failed to unmap page (folio mapcount=1) [ 504.310913][T16512] Memory failure: 0x127282: Sending SIGBUS to syz.4.3087:16512 due to hardware memory corruption [ 504.312644][T16512] Memory failure: 0x127282: recovery action for unmapping failed page: Failed [ 504.497065][ T12] smc: removing ib device sqz0 [ 504.522500][ T6680] lo speed is unknown, defaulting to 1000 [ 504.522533][ T6680] sqz0: Port: 1 Link DOWN [ 504.552067][T16410] team0: Port device team_slave_0 added [ 504.601674][T16410] team0: Port device team_slave_1 added [ 504.637156][T16410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.637182][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.640341][T16410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.645547][T16410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.645774][T16410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.647683][T16410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.731842][T16410] hsr_slave_0: entered promiscuous mode [ 504.733532][T16410] hsr_slave_1: entered promiscuous mode [ 505.084292][T15934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.085603][T15934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.085951][T15934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.086573][T15934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.087389][T15934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.162575][T16410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.169942][T16410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.208848][T16410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.360794][T16410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 505.770515][T16410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.802067][T16410] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.811120][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.811169][ T4692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.811563][T16562] chnl_net:caif_netlink_parms(): no params data found [ 505.839114][ T4692] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.839153][ T4692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.898288][T16562] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.899854][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.902635][T16562] bridge_slave_0: entered allmulticast mode [ 505.905497][T16562] bridge_slave_0: entered promiscuous mode [ 505.910014][T16562] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.911702][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.914712][T16562] bridge_slave_1: entered allmulticast mode [ 505.916707][T16562] bridge_slave_1: entered promiscuous mode [ 505.935713][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.941121][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.955732][T16562] team0: Port device team_slave_0 added [ 505.961221][T16562] team0: Port device team_slave_1 added [ 505.978347][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.979865][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.984654][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.989211][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.989232][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.989974][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.036514][T16562] hsr_slave_0: entered promiscuous mode [ 506.038352][T16562] hsr_slave_1: entered promiscuous mode [ 506.038632][T16562] debugfs: 'hsr0' already exists in 'hsr' [ 506.038643][T16562] Cannot create hsr debugfs directory [ 506.040614][T15934] Bluetooth: hci0: command tx timeout [ 506.180092][T16410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.476071][T16642] overlayfs: failed to clone upperpath [ 506.487871][ T752] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.687695][ T752] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.731047][T16562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 506.740149][T16562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 506.746900][T16562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 506.754209][T16562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 506.790544][ T752] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.817569][T16410] veth0_vlan: entered promiscuous mode [ 506.819215][T16410] veth1_vlan: entered promiscuous mode [ 506.851532][ T752] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.873878][T16410] veth0_macvtap: entered promiscuous mode [ 506.875213][T16410] veth1_macvtap: entered promiscuous mode [ 506.882218][T16410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.934212][T16410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.961749][ T6820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.963382][ T6820] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.970913][T16562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.975920][T16562] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.003824][ T6820] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.008688][ T6820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.037781][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.037834][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.059491][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.059538][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.314298][T15934] Bluetooth: hci2: command tx timeout [ 507.350544][ T752] bridge_slave_1: left allmulticast mode [ 507.350576][ T752] bridge_slave_1: left promiscuous mode [ 507.351492][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.356174][ T752] bridge_slave_0: left allmulticast mode [ 507.356205][ T752] bridge_slave_0: left promiscuous mode [ 507.356304][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.397064][T16686] netlink: 'syz.4.3129': attribute type 1 has an invalid length. [ 507.544247][ T752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.571677][ T752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.640825][ T752] bond0 (unregistering): Released all slaves [ 507.661169][T16686] bond1: entered promiscuous mode [ 507.661316][T16686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.672273][ T6820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.672315][ T6820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.773038][T11579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.775223][T11579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.075549][T16733] netlink: 'syz.5.3139': attribute type 1 has an invalid length. [ 508.176013][T16742] loop5: detected capacity change from 0 to 256 [ 508.328427][T15934] Bluetooth: hci0: command tx timeout [ 508.345499][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.403729][ T752] hsr_slave_0: left promiscuous mode [ 508.405593][ T752] hsr_slave_1: left promiscuous mode [ 508.407213][ T752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.409799][ T752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.411851][ T752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.413486][ T752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.429338][ T752] veth1_macvtap: left promiscuous mode [ 508.430703][ T752] veth0_macvtap: left promiscuous mode [ 508.432692][ T752] veth1_vlan: left promiscuous mode [ 508.433963][ T752] veth0_vlan: left promiscuous mode [ 508.899701][T16772] netlink: 'syz.5.3149': attribute type 1 has an invalid length. [ 508.932390][T16776] Soft offlining pfn 0x169c61 at process virtual address 0x20000000 [ 508.941395][T16776] Soft offlining pfn 0x1b406d at process virtual address 0x20001000 [ 508.942930][T16776] Soft offlining pfn 0x20aaef at process virtual address 0x20002000 [ 508.944402][T16776] Soft offline: 0x20aaef: page already poisoned [ 508.945650][T16776] Soft offlining pfn 0x20aaef at process virtual address 0x20003000 [ 508.947147][T16776] Soft offline: 0x20aaef: page already poisoned [ 508.954990][T16779] loop2: detected capacity change from 0 to 16 [ 508.956783][T16776] Injecting memory failure for pfn 0x124abf at process virtual address 0x20001000 [ 508.958077][T16776] Memory failure: 0x124abf: keeping poisoned page in swap cache [ 508.958110][T16776] Memory failure: 0x124abf: Sending SIGBUS to syz.1.3150:16776 due to hardware memory corruption [ 508.958154][T16776] Memory failure: 0x124abf: recovery action for dirty swapcache page: Delayed [ 508.958175][T16776] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20002000 [ 508.958194][T16776] Memory failure: 0x20aaef: Sending SIGBUS to syz.1.3150:16776 due to hardware memory corruption [ 508.958202][T16776] Memory failure: 0x20aaef: recovery action for already poisoned page: Failed [ 508.993059][T16779] erofs (device loop2): mounted with root inode @ nid 36. [ 509.018088][T16779] erofs (device loop2): corrupted dir block 536870984 @ nid 36 [ 509.176673][ T752] team0 (unregistering): Port device team_slave_1 removed [ 509.191438][ T752] team0 (unregistering): Port device team_slave_0 removed [ 509.449706][T16799] netlink: 'syz.4.3157': attribute type 4 has an invalid length. [ 509.449737][T16799] netlink: 1601 bytes leftover after parsing attributes in process `syz.4.3157'. [ 509.535691][T15934] Bluetooth: hci2: command tx timeout [ 509.547431][T16562] veth0_vlan: entered promiscuous mode [ 509.552659][T16562] veth1_vlan: entered promiscuous mode [ 509.618009][T16562] veth0_macvtap: entered promiscuous mode [ 509.628907][T16562] veth1_macvtap: entered promiscuous mode [ 509.650824][T16562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.714374][T16562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.738027][T16835] Soft offlining pfn 0x167ae1 at process virtual address 0x20000000 [ 509.741321][T16835] Soft offlining pfn 0x1b1f0a at process virtual address 0x20001000 [ 509.743337][T16835] Soft offlining pfn 0x20aaef at process virtual address 0x20002000 [ 509.744999][T16835] Soft offline: 0x20aaef: page already poisoned [ 509.746430][T16835] Soft offlining pfn 0x20aaef at process virtual address 0x20003000 [ 509.748116][T16835] Soft offline: 0x20aaef: page already poisoned [ 509.769078][T16835] Injecting memory failure for pfn 0x1295f5 at process virtual address 0x20001000 [ 509.777380][ T6820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.779370][ T6820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.780944][ T6820] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.780973][ T6820] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.845133][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.847093][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.858842][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.860484][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.102913][T16835] Memory failure: 0x1295f5: keeping poisoned page in swap cache [ 510.104423][T16835] Memory failure: 0x1295f5: Sending SIGBUS to syz.4.3161:16835 due to hardware memory corruption [ 510.104535][T16835] Memory failure: 0x1295f5: recovery action for dirty swapcache page: Delayed [ 510.104575][T16835] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20002000 [ 510.104613][T16835] Memory failure: 0x20aaef: Sending SIGBUS to syz.4.3161:16835 due to hardware memory corruption [ 510.104632][T16835] Memory failure: 0x20aaef: recovery action for already poisoned page: Failed [ 510.210705][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.211752][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 510.212072][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 510.213036][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 510.214559][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 510.273213][T16865] netlink: 'syz.2.3168': attribute type 1 has an invalid length. [ 510.298567][T16865] bond1: entered promiscuous mode [ 510.301306][T16865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.407918][T16873] netlink: 'syz.4.3167': attribute type 4 has an invalid length. [ 510.410900][T16873] netlink: 1601 bytes leftover after parsing attributes in process `syz.4.3167'. [ 510.487190][ T53] Bluetooth: hci0: command tx timeout [ 511.002997][T16855] chnl_net:caif_netlink_parms(): no params data found [ 511.559419][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.561939][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.563364][T16855] bridge_slave_0: entered allmulticast mode [ 511.571653][T16901] Soft offlining pfn 0x16b227 at process virtual address 0x20000000 [ 511.573884][T16855] bridge_slave_0: entered promiscuous mode [ 511.574106][T16901] Soft offlining pfn 0x142755 at process virtual address 0x20001000 [ 511.574173][T16901] Soft offlining pfn 0x20aaef at process virtual address 0x20002000 [ 511.574179][T16901] Soft offline: 0x20aaef: page already poisoned [ 511.574191][T16901] Soft offlining pfn 0x20aaef at process virtual address 0x20003000 [ 511.574196][T16901] Soft offline: 0x20aaef: page already poisoned [ 511.577006][T16901] Injecting memory failure for pfn 0x1273c3 at process virtual address 0x20001000 [ 511.578110][T16901] Memory failure: 0x1273c3: keeping poisoned page in swap cache [ 511.578133][T16901] Memory failure: 0x1273c3: Sending SIGBUS to syz.2.3175:16901 due to hardware memory corruption [ 511.578173][T16901] Memory failure: 0x1273c3: recovery action for dirty swapcache page: Delayed [ 511.578188][T16901] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20002000 [ 511.578204][T16901] Memory failure: 0x20aaef: Sending SIGBUS to syz.2.3175:16901 due to hardware memory corruption [ 511.578212][T16901] Memory failure: 0x20aaef: recovery action for already poisoned page: Failed [ 511.597069][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.598423][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.598623][T16855] bridge_slave_1: entered allmulticast mode [ 511.602136][T16855] bridge_slave_1: entered promiscuous mode [ 511.627814][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.630596][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.647933][T16855] team0: Port device team_slave_0 added [ 511.649956][T16855] team0: Port device team_slave_1 added [ 511.658833][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.660056][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.664679][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.667144][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.668549][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.672804][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.693035][T16855] hsr_slave_0: entered promiscuous mode [ 511.695742][T16855] hsr_slave_1: entered promiscuous mode [ 511.697307][T16855] debugfs: 'hsr0' already exists in 'hsr' [ 511.699189][T16855] Cannot create hsr debugfs directory [ 511.704965][T16908] netlink: 'syz.6.3178': attribute type 1 has an invalid length. [ 511.759977][ T53] Bluetooth: hci2: command tx timeout [ 511.763293][T16855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.829743][T16918] team0: No ports can be present during mode change [ 511.921003][T16855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.996091][T16855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.013014][T16935] netlink: 'syz.2.3189': attribute type 1 has an invalid length. [ 512.050705][T16935] bond2: entered promiscuous mode [ 512.053131][T16935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.066223][T16855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.093382][T16942] fuse: Bad value for 'fd' [ 512.225491][T16855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.233087][T16855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.239194][T16855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.243735][T16855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.295521][T16968] netlink: 'syz.2.3200': attribute type 1 has an invalid length. [ 512.326992][T16968] bond3: entered promiscuous mode [ 512.327147][T16968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.358267][ T53] Bluetooth: hci4: command tx timeout [ 512.446603][T16855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.490142][T16855] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.501724][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.501792][T11576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.515077][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.515124][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.594008][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 512.595280][ T31] audit: type=1326 audit(505.397:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.601682][ T31] audit: type=1326 audit(505.407:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.605394][ T31] audit: type=1326 audit(505.407:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.609022][ T31] audit: type=1326 audit(505.407:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.612592][ T31] audit: type=1326 audit(505.416:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.622156][ T31] audit: type=1326 audit(505.425:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.622887][ T31] audit: type=1326 audit(505.425:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.624883][ T31] audit: type=1326 audit(505.425:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=182 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.628464][ T31] audit: type=1326 audit(505.435:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.628496][ T31] audit: type=1326 audit(505.435:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16981 comm="syz.5.3205" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3978fa8 code=0x7ffc0000 [ 512.794476][T16855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.813740][T16855] veth0_vlan: entered promiscuous mode [ 512.820880][T16855] veth1_vlan: entered promiscuous mode [ 512.891073][T17000] netlink: 'syz.6.3211': attribute type 1 has an invalid length. [ 512.897903][T16855] veth0_macvtap: entered promiscuous mode [ 512.910467][T16855] veth1_macvtap: entered promiscuous mode [ 512.934029][T17003] team0: No ports can be present during mode change [ 512.945577][T16855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.966129][T16855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.982205][ T563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.982502][ T563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.982523][ T563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.982539][ T563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.099295][T11576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.099329][T11576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.145751][ T563] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.176179][T11580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.176212][T11580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.178811][T17021] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 513.208982][T17021] bond2: entered promiscuous mode [ 513.209137][T17021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.256139][T17029] team0: No ports can be present during mode change [ 513.433066][T17057] fuse: Bad value for 'fd' [ 513.450605][T17061] netlink: 'syz.4.3237': attribute type 1 has an invalid length. [ 513.470873][T17061] bond3: entered promiscuous mode [ 513.472254][T17061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.959097][T17091] loop1: detected capacity change from 0 to 2048 [ 513.983914][ T53] Bluetooth: hci2: command tx timeout [ 513.998214][T15936] loop1: p1 < > p3 [ 514.002200][T15936] loop1: p3 size 134217728 extends beyond EOD, truncated [ 514.033092][T17091] loop1: p1 < > p3 [ 514.039285][T17091] loop1: p3 size 134217728 extends beyond EOD, truncated [ 514.060403][T17091] overlayfs: failed lookup in lower (newroot/7, name='file0', err=-40): overlapping layers [ 514.199395][T16345] udevd[16345]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 514.213331][T15936] udevd[15936]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 514.263460][T15936] udevd[15936]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 514.266258][T16345] udevd[16345]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 514.295014][T16345] udevd[16345]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 514.306669][T15936] udevd[15936]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 514.407258][T17117] validate_nla: 1 callbacks suppressed [ 514.408395][T17117] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 514.456767][T17121] process 'syz.1.3262' launched '/dev/fd/4' with NULL argv: empty string added [ 514.460032][T17123] Soft offlining pfn 0x128759 at process virtual address 0x20000000 [ 514.462503][T17123] Soft offlining pfn 0x127103 at process virtual address 0x20001000 [ 514.465870][T17123] Soft offlining pfn 0x20aaef at process virtual address 0x20002000 [ 514.472325][T17123] Soft offline: 0x20aaef: page already poisoned [ 514.472596][T17123] Soft offlining pfn 0x20aaef at process virtual address 0x20003000 [ 514.472800][T17123] Soft offline: 0x20aaef: page already poisoned [ 514.473469][T17123] Injecting memory failure for pfn 0x125846 at process virtual address 0x20001000 [ 514.516876][T17123] Memory failure: 0x125846: keeping poisoned page in swap cache [ 514.516918][T17123] Memory failure: 0x125846: Sending SIGBUS to syz.6.3263:17123 due to hardware memory corruption [ 514.516959][T17123] Memory failure: 0x125846: recovery action for dirty swapcache page: Delayed [ 514.516977][T17123] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20002000 [ 514.516997][T17123] Memory failure: 0x20aaef: Sending SIGBUS to syz.6.3263:17123 due to hardware memory corruption [ 514.517006][T17123] Memory failure: 0x20aaef: recovery action for already poisoned page: Failed [ 514.582241][ T53] Bluetooth: hci4: command tx timeout [ 514.686554][T17150] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 514.741571][T17156] Soft offlining pfn 0x1b233b at process virtual address 0x20000000 [ 514.744414][T17156] Soft offlining pfn 0x18b4a3 at process virtual address 0x20001000 [ 514.744519][T17156] Soft offlining pfn 0x20aaef at process virtual address 0x20002000 [ 514.744525][T17156] Soft offline: 0x20aaef: page already poisoned [ 514.744537][T17156] Soft offlining pfn 0x20aaef at process virtual address 0x20003000 [ 514.744543][T17156] Soft offline: 0x20aaef: page already poisoned [ 514.747441][T17156] Injecting memory failure for pfn 0x125c1d at process virtual address 0x20001000 [ 514.751675][T17156] Memory failure: 0x125c1d: keeping poisoned page in swap cache [ 514.768334][T17156] Memory failure: 0x125c1d: Sending SIGBUS to syz.2.3280:17156 due to hardware memory corruption [ 514.770346][T17156] Memory failure: 0x125c1d: recovery action for dirty swapcache page: Delayed [ 514.771832][T17156] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20002000 [ 514.773395][T17156] Memory failure: 0x20aaef: Sending SIGBUS to syz.2.3280:17156 due to hardware memory corruption [ 514.777384][T17156] Memory failure: 0x20aaef: recovery action for already poisoned page: Failed [ 514.985052][T17179] netlink: 'syz.6.3289': attribute type 1 has an invalid length. [ 515.043346][T17179] bond1: entered promiscuous mode [ 515.043494][T17179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.285874][T17205] bridge0: port 3(erspan0) entered disabled state [ 515.334399][T17205] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.334936][T17205] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.372536][T17214] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 515.587681][T17205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.589968][T17205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.750900][T17227] netlink: 'syz.4.3307': attribute type 4 has an invalid length. [ 515.751262][T17227] netlink: 1601 bytes leftover after parsing attributes in process `syz.4.3307'. [ 516.049628][ T6820] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.055392][ T6820] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.057276][ T6820] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.057339][ T6820] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.100412][ T4608] team0: Port device team_slave_0 removed [ 516.205029][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3315'. [ 516.209936][T17247] bond2: entered promiscuous mode [ 516.210622][T17247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.213940][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3315'. [ 516.213968][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3315'. [ 516.812693][ T53] Bluetooth: hci4: command tx timeout [ 517.237403][T17290] loop6: detected capacity change from 0 to 256 [ 517.237648][T17290] overlayfs: failed lookup in lower (newroot/44, name='file0', err=-40): overlapping layers [ 517.238315][T17290] overlayfs: failed lookup in lower (newroot/44, name='file0', err=-40): overlapping layers [ 517.533444][T17312] loop1: detected capacity change from 0 to 32768 [ 517.544909][T17325] loop2: detected capacity change from 0 to 2048 [ 517.570512][T15936] loop1: p1 p2 p3 < p5 > [ 517.570631][T15936] loop1: p1 size 242222080 extends beyond EOD, truncated [ 517.571416][T15936] loop1: p2 start 16777215 is beyond EOD, truncated [ 517.586596][T17324] loop2: p1 < > p4 [ 517.587170][T17324] loop2: p4 size 8388608 extends beyond EOD, truncated [ 517.589096][T17312] loop1: p1 p2 p3 < p5 > [ 517.589294][T17312] loop1: p1 size 242222080 extends beyond EOD, truncated [ 517.589895][T17312] loop1: p2 start 16777215 is beyond EOD, truncated [ 517.595789][T17325] loop2: p1 < > p4 [ 517.616349][T17325] loop2: p4 size 8388608 extends beyond EOD, truncated [ 517.774029][T16345] udevd[16345]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 517.776897][T16064] udevd[16064]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 517.800491][T17324] udevd[17324]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 517.809813][T17313] udevd[17313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 517.886865][T17355] loop1: detected capacity change from 0 to 512 [ 518.185804][ T6820] bond2 (unregistering): (slave gretap1): Releasing active interface [ 518.469579][ T6820] team0: Port device bridge2 removed [ 518.532349][ T6820] bond0 (unregistering): Released all slaves [ 518.534852][ T6820] bond1 (unregistering): Released all slaves [ 518.538839][ T6820] bond2 (unregistering): Released all slaves [ 518.608647][ T6820] bond3 (unregistering): Released all slaves [ 518.674187][ T6820] bond4 (unregistering): Released all slaves [ 519.024311][T17424] overlayfs: failed to resolve './file0': -2 [ 519.068168][ T53] Bluetooth: hci4: command tx timeout [ 519.228939][ T6820] hsr_slave_0: left promiscuous mode [ 519.231302][ T6820] hsr_slave_1: left promiscuous mode [ 519.239396][ T6820] veth1_macvtap: left promiscuous mode [ 519.240931][ T6820] veth0_macvtap: left promiscuous mode [ 519.242272][ T6820] veth1_vlan: left promiscuous mode [ 519.318754][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 519.716726][T17451] overlayfs: failed to resolve './file0': -2 [ 519.813240][T17458] netlink: 'syz.2.3385': attribute type 4 has an invalid length. [ 519.813274][T17458] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3385'. [ 519.837453][T17438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.849795][T17438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.184641][T17491] team0: No ports can be present during mode change [ 520.250244][T17508] netlink: 'syz.5.3397': attribute type 4 has an invalid length. [ 520.252307][T17508] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3397'. [ 521.063627][T17528] loop1: detected capacity change from 0 to 128 [ 521.071280][T17528] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 521.072963][T17528] FAT-fs (loop1): Filesystem has been set read-only [ 521.112474][T16855] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 521.285940][T17541] loop2: detected capacity change from 0 to 2048 [ 521.300357][T17543] netlink: 'syz.1.3408': attribute type 4 has an invalid length. [ 521.301771][T17543] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3408'. [ 521.327605][T17324] loop2: p2 p3 < > p4 < p5 > [ 521.338851][T17541] loop2: p2 p3 < > p4 < p5 > [ 521.374352][T16345] udevd[16345]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 521.374790][T15936] udevd[15936]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 521.379724][T17324] udevd[17324]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 521.441166][T17549] netlink: 'syz.1.3409': attribute type 4 has an invalid length. [ 521.441225][T17549] netlink: 1601 bytes leftover after parsing attributes in process `syz.1.3409'. [ 521.682970][T17313] udevd[17313]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 521.697110][T15936] udevd[15936]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 521.697976][T16345] udevd[16345]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 521.699625][T17313] udevd[17313]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 521.701460][T17324] udevd[17324]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 522.577085][T17566] team0: No ports can be present during mode change [ 522.584564][T17568] Soft offlining pfn 0x20aaef at process virtual address 0x20000000 [ 522.584594][T17568] Soft offline: 0x20aaef: page already poisoned [ 522.584809][T17568] Soft offlining pfn 0x20aaef at process virtual address 0x20001000 [ 522.584817][T17568] Soft offline: 0x20aaef: page already poisoned [ 522.584830][T17568] Soft offlining pfn 0x20aaef at process virtual address 0x20002000 [ 522.584835][T17568] Soft offline: 0x20aaef: page already poisoned [ 522.584847][T17568] Soft offlining pfn 0x20aaef at process virtual address 0x20003000 [ 522.584853][T17568] Soft offline: 0x20aaef: page already poisoned [ 522.644760][T17572] netlink: 'syz.1.3419': attribute type 4 has an invalid length. [ 522.644793][T17572] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3419'. [ 522.671742][T17573] Injecting memory failure for pfn 0x1a84dc at process virtual address 0x20001000 [ 522.689335][T17573] Memory failure: 0x1a84dc: Sending SIGBUS to syz.2.3417:17573 due to hardware memory corruption [ 522.691498][T17573] Memory failure: 0x1a84dc: recovery action for dirty LRU page: Recovered [ 522.693143][T17573] Injecting memory failure for pfn 0x1a84db at process virtual address 0x20002000 [ 522.695925][T17573] Memory failure: 0x1a84db: Sending SIGBUS to syz.2.3417:17573 due to hardware memory corruption [ 522.698198][T17573] Memory failure: 0x1a84db: recovery action for dirty LRU page: Recovered [ 522.699656][T17573] Injecting memory failure for pfn 0x1a84da at process virtual address 0x20003000 [ 522.701292][T17573] Memory failure: 0x1a84da: Sending SIGBUS to syz.2.3417:17573 due to hardware memory corruption [ 522.703657][T17573] Memory failure: 0x1a84da: recovery action for dirty LRU page: Recovered [ 522.707331][T17575] loop1: detected capacity change from 0 to 512 [ 522.961663][T17587] netlink: 'syz.2.3423': attribute type 4 has an invalid length. [ 522.961730][T17587] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.3423'. [ 523.280323][T17595] team0: No ports can be present during mode change [ 523.612807][T11585] bond2 (unregistering): (slave gretap1): Releasing active interface [ 523.680823][T16410] [ 523.681249][T16410] ===================================================== [ 523.682389][T16410] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 523.683611][T16410] syzkaller #0 Not tainted [ 523.684297][T16410] ----------------------------------------------------- [ 523.685414][T16410] syz-executor/16410 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 523.686638][T16410] ffff800097626150 (&p->sequence){+.-.}-{0:0}, at: __fprop_add_percpu_max+0x130/0x1f4 [ 523.688172][T16410] [ 523.688172][T16410] and this task is already holding: [ 523.689371][T16410] ffff00012bba2c40 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 523.690882][T16410] which would create a new lock dependency: [ 523.691820][T16410] (&xa->xa_lock#10){-.-.}-{3:3} -> (&p->sequence){+.-.}-{0:0} [ 523.692998][T16410] [ 523.692998][T16410] but this new dependency connects a HARDIRQ-irq-safe lock: [ 523.694344][T16410] (&xa->xa_lock#10){-.-.}-{3:3} [ 523.694371][T16410] [ 523.694371][T16410] ... which became HARDIRQ-irq-safe at: [ 523.696169][T16410] lock_acquire+0x140/0x2e0 [ 523.696852][T16410] _raw_spin_lock_irqsave+0x5c/0x7c [ 523.697632][T16410] __folio_end_writeback+0x10c/0x6f8 [ 523.698431][T16410] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 523.699285][T16410] folio_end_writeback+0xd8/0x248 [ 523.700039][T16410] end_buffer_async_write+0x20c/0x350 [ 523.700849][T16410] end_bio_bh_io_sync+0xb0/0x184 [ 523.701602][T16410] bio_endio+0x8d4/0x910 [ 523.702228][T16410] blk_mq_end_request_batch+0x49c/0x105c [ 523.703075][T16410] nvme_irq+0x1ec/0x240 [ 523.703712][T16410] __handle_irq_event_percpu+0x20c/0x8e4 [ 523.704593][T16410] handle_irq_event+0x9c/0x1d0 [ 523.705311][T16410] handle_fasteoi_irq+0x328/0x8d8 [ 523.706025][T16410] generic_handle_domain_irq+0xe0/0x140 [ 523.706896][T16410] gic_handle_irq+0x6c/0x18c [ 523.707559][T16410] call_on_irq_stack+0x30/0x48 [ 523.708318][T16410] do_interrupt_handler+0xd4/0x138 [ 523.709160][T16410] el1_interrupt+0x3c/0x60 [ 523.709859][T16410] el1h_64_irq_handler+0x18/0x24 [ 523.710559][T16410] el1h_64_irq+0x6c/0x70 [ 523.711233][T16410] finish_lock_switch+0xb4/0x1c0 [ 523.711916][T16410] finish_task_switch+0x104/0x5dc [ 523.712666][T16410] __schedule+0x1254/0x2a7c [ 523.713343][T16410] preempt_schedule_common+0xe0/0x194 [ 523.714203][T16410] preempt_schedule+0x60/0x80 [ 523.714897][T16410] _raw_spin_unlock_irqrestore+0x94/0x98 [ 523.715716][T16410] __wake_up_sync_key+0x13c/0x18c [ 523.716382][T16410] __unix_dgram_recvmsg+0x37c/0xb7c [ 523.717171][T16410] unix_dgram_recvmsg+0xd0/0xe8 [ 523.717950][T16410] sock_recvmsg_nosec+0x90/0xec [ 523.718706][T16410] ____sys_recvmsg+0x5e0/0x744 [ 523.719449][T16410] ___sys_recvmsg+0x188/0x45c [ 523.720156][T16410] do_recvmmsg+0x294/0x7cc [ 523.720828][T16410] __arm64_sys_recvmmsg+0x17c/0x238 [ 523.721616][T16410] invoke_syscall+0x98/0x254 [ 523.722311][T16410] el0_svc_common+0xe8/0x23c [ 523.723035][T16410] do_el0_svc+0x48/0x58 [ 523.723628][T16410] el0_svc+0x5c/0x26c [ 523.724220][T16410] el0t_64_sync_handler+0x84/0x12c [ 523.724982][T16410] el0t_64_sync+0x198/0x19c [ 523.725642][T16410] [ 523.725642][T16410] to a HARDIRQ-irq-unsafe lock: [ 523.726728][T16410] (&p->sequence){+.-.}-{0:0} [ 523.726749][T16410] [ 523.726749][T16410] ... which became HARDIRQ-irq-unsafe at: [ 523.728763][T16410] ... [ 523.728771][T16410] lock_acquire+0x140/0x2e0 [ 523.729784][T16410] fprop_new_period+0x3b8/0x718 [ 523.730523][T16410] writeout_period+0x94/0x11c [ 523.731209][T16410] call_timer_fn+0x19c/0x814 [ 523.731954][T16410] __run_timer_base+0x51c/0x76c [ 523.732685][T16410] run_timer_softirq+0x11c/0x194 [ 523.733460][T16410] handle_softirqs+0x31c/0xc88 [ 523.734145][T16410] __do_softirq+0x14/0x20 [ 523.734797][T16410] ____do_softirq+0x14/0x20 [ 523.735478][T16410] call_on_irq_stack+0x30/0x48 [ 523.736210][T16410] do_softirq_own_stack+0x20/0x2c [ 523.736982][T16410] __irq_exit_rcu+0x1b0/0x478 [ 523.737675][T16410] irq_exit_rcu+0x14/0x84 [ 523.738271][T16410] el1_interrupt+0x40/0x60 [ 523.738950][T16410] el1h_64_irq_handler+0x18/0x24 [ 523.739643][T16410] el1h_64_irq+0x6c/0x70 [ 523.740331][T16410] stack_trace_consume_entry+0x4/0x208 [ 523.741153][T16410] stack_trace_save+0x94/0xd8 [ 523.741887][T16410] ref_tracker_alloc+0x15c/0x3dc [ 523.742657][T16410] netdev_get_by_index+0x88/0xe4 [ 523.743472][T16410] fib6_nh_init+0x198/0x1960 [ 523.744193][T16410] ip6_route_info_create_nh+0x11c/0x98c [ 523.745042][T16410] ip6_route_add+0x8c/0x1e4 [ 523.745682][T16410] addrconf_add_dev+0x1ec/0x2e4 [ 523.746402][T16410] inet6_addr_add+0x190/0xb08 [ 523.747066][T16410] inet6_rtm_newaddr+0x730/0xaa8 [ 523.747810][T16410] rtnetlink_rcv_msg+0x664/0x97c [ 523.748558][T16410] netlink_rcv_skb+0x220/0x3fc [ 523.749269][T16410] rtnetlink_rcv+0x28/0x38 [ 523.749885][T16410] netlink_unicast+0x694/0x8c4 [ 523.750598][T16410] netlink_sendmsg+0x648/0x930 [ 523.751352][T16410] __sys_sendto+0x36c/0x4f4 [ 523.752060][T16410] __arm64_sys_sendto+0xd8/0xf8 [ 523.752800][T16410] invoke_syscall+0x98/0x254 [ 523.753504][T16410] el0_svc_common+0xe8/0x23c [ 523.754170][T16410] do_el0_svc+0x48/0x58 [ 523.754786][T16410] el0_svc+0x5c/0x26c [ 523.755361][T16410] el0t_64_sync_handler+0x84/0x12c [ 523.756136][T16410] el0t_64_sync+0x198/0x19c [ 523.756834][T16410] [ 523.756834][T16410] other info that might help us debug this: [ 523.756834][T16410] [ 523.758368][T16410] Possible interrupt unsafe locking scenario: [ 523.758368][T16410] [ 523.759458][T16410] CPU0 CPU1 [ 523.760324][T16410] ---- ---- [ 523.761082][T16410] lock(&p->sequence); [ 523.761700][T16410] local_irq_disable(); [ 523.762657][T16410] lock(&xa->xa_lock#10); [ 523.763685][T16410] lock(&p->sequence); [ 523.764692][T16410] [ 523.765154][T16410] lock(&xa->xa_lock#10); [ 523.765789][T16410] [ 523.765789][T16410] *** DEADLOCK *** [ 523.765789][T16410] [ 523.766983][T16410] 3 locks held by syz-executor/16410: [ 523.767676][T16410] #0: ffff0000dcbe4420 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x24c/0xa3c [ 523.768993][T16410] #1: ffff00012bba3038 (&fi->lock){+.+.}-{3:3}, at: fuse_writepage_end+0x138/0x454 [ 523.770493][T16410] #2: ffff00012bba2c40 (&xa->xa_lock#10){-.-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8 [ 523.772052][T16410] [ 523.772052][T16410] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 523.773604][T16410] -> (&xa->xa_lock#10){-.-.}-{3:3} { [ 523.774421][T16410] IN-HARDIRQ-W at: [ 523.775032][T16410] lock_acquire+0x140/0x2e0 [ 523.776050][T16410] _raw_spin_lock_irqsave+0x5c/0x7c [ 523.777041][T16410] __folio_end_writeback+0x10c/0x6f8 [ 523.778052][T16410] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 523.779261][T16410] folio_end_writeback+0xd8/0x248 [ 523.780303][T16410] end_buffer_async_write+0x20c/0x350 [ 523.781348][T16410] end_bio_bh_io_sync+0xb0/0x184 [ 523.782492][T16410] bio_endio+0x8d4/0x910 [ 523.783432][T16410] blk_mq_end_request_batch+0x49c/0x105c [ 523.784541][T16410] nvme_irq+0x1ec/0x240 [ 523.785376][T16410] __handle_irq_event_percpu+0x20c/0x8e4 [ 523.786436][T16410] handle_irq_event+0x9c/0x1d0 [ 523.787474][T16410] handle_fasteoi_irq+0x328/0x8d8 [ 523.788473][T16410] generic_handle_domain_irq+0xe0/0x140 [ 523.789487][T16410] gic_handle_irq+0x6c/0x18c [ 523.790437][T16410] call_on_irq_stack+0x30/0x48 [ 523.791430][T16410] do_interrupt_handler+0xd4/0x138 [ 523.792434][T16410] el1_interrupt+0x3c/0x60 [ 523.793346][T16410] el1h_64_irq_handler+0x18/0x24 [ 523.794293][T16410] el1h_64_irq+0x6c/0x70 [ 523.795176][T16410] finish_lock_switch+0xb4/0x1c0 [ 523.796145][T16410] finish_task_switch+0x104/0x5dc [ 523.797128][T16410] __schedule+0x1254/0x2a7c [ 523.798005][T16410] preempt_schedule_common+0xe0/0x194 [ 523.799040][T16410] preempt_schedule+0x60/0x80 [ 523.800001][T16410] _raw_spin_unlock_irqrestore+0x94/0x98 [ 523.801111][T16410] __wake_up_sync_key+0x13c/0x18c [ 523.802105][T16410] __unix_dgram_recvmsg+0x37c/0xb7c [ 523.803214][T16410] unix_dgram_recvmsg+0xd0/0xe8 [ 523.804226][T16410] sock_recvmsg_nosec+0x90/0xec [ 523.805221][T16410] ____sys_recvmsg+0x5e0/0x744 [ 523.806166][T16410] ___sys_recvmsg+0x188/0x45c [ 523.807142][T16410] do_recvmmsg+0x294/0x7cc [ 523.808157][T16410] __arm64_sys_recvmmsg+0x17c/0x238 [ 523.809163][T16410] invoke_syscall+0x98/0x254 [ 523.810113][T16410] el0_svc_common+0xe8/0x23c [ 523.811000][T16410] do_el0_svc+0x48/0x58 [ 523.811900][T16410] el0_svc+0x5c/0x26c [ 523.812792][T16410] el0t_64_sync_handler+0x84/0x12c [ 523.813818][T16410] el0t_64_sync+0x198/0x19c [ 523.814719][T16410] IN-SOFTIRQ-W at: [ 523.815294][T16410] lock_acquire+0x140/0x2e0 [ 523.816205][T16410] _raw_spin_lock_irqsave+0x5c/0x7c [ 523.817224][T16410] __folio_end_writeback+0x10c/0x6f8 [ 523.818212][T16410] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 523.819390][T16410] folio_end_writeback+0xd8/0x248 [ 523.820370][T16410] end_buffer_async_write+0x20c/0x350 [ 523.821386][T16410] end_bio_bh_io_sync+0xb0/0x184 [ 523.822366][T16410] bio_endio+0x8d4/0x910 [ 523.823238][T16410] blk_update_request+0x474/0xba8 [ 523.824216][T16410] blk_mq_end_request+0x54/0x88 [ 523.825241][T16410] lo_complete_rq+0x124/0x274 [ 523.826231][T16410] blk_done_softirq+0x11c/0x168 [ 523.827167][T16410] handle_softirqs+0x31c/0xc88 [ 523.828128][T16410] run_ksoftirqd+0x70/0xc0 [ 523.829006][T16410] smpboot_thread_fn+0x4d8/0x9cc [ 523.830035][T16410] kthread+0x5fc/0x75c [ 523.830859][T16410] ret_from_fork+0x10/0x20 [ 523.831782][T16410] INITIAL USE at: [ 523.832339][T16410] lock_acquire+0x140/0x2e0 [ 523.833276][T16410] _raw_spin_lock_irq+0x58/0x70 [ 523.834186][T16410] shmem_add_to_page_cache+0x564/0xa24 [ 523.835250][T16410] shmem_alloc_and_add_folio+0x758/0x10c4 [ 523.836317][T16410] shmem_get_folio_gfp+0x4d4/0x159c [ 523.837290][T16410] shmem_read_folio_gfp+0x8c/0xf0 [ 523.838266][T16410] drm_gem_get_pages+0x1cc/0x7c0 [ 523.839170][T16410] drm_gem_shmem_get_pages_locked+0x1d4/0x364 [ 523.840229][T16410] drm_gem_shmem_pin_locked+0x1f8/0x410 [ 523.841335][T16410] drm_gem_shmem_vmap_locked+0x3cc/0x658 [ 523.842442][T16410] drm_gem_shmem_object_vmap+0x28/0x38 [ 523.843516][T16410] drm_gem_vmap+0x104/0x1d8 [ 523.844392][T16410] drm_client_buffer_vmap+0x68/0xb0 [ 523.845439][T16410] drm_fbdev_shmem_driver_fbdev_probe+0x1f4/0x700 [ 523.846764][T16410] __drm_fb_helper_initial_config_and_unlock+0x108c/0x1728 [ 523.848023][T16410] drm_fb_helper_initial_config+0x3c/0x58 [ 523.849122][T16410] drm_fbdev_client_hotplug+0x154/0x22c [ 523.850271][T16410] drm_client_register+0x13c/0x1d4 [ 523.851301][T16410] drm_fbdev_client_setup+0x194/0x3d0 [ 523.852438][T16410] drm_client_setup+0x114/0x228 [ 523.853392][T16410] vkms_create+0x370/0x420 [ 523.854357][T16410] vkms_init+0x64/0x9c [ 523.855202][T16410] do_one_initcall+0x248/0x9b4 [ 523.856160][T16410] do_initcall_level+0x128/0x1c4 [ 523.857117][T16410] do_initcalls+0x70/0xd0 [ 523.857976][T16410] do_basic_setup+0x78/0x8c [ 523.858911][T16410] kernel_init_freeable+0x268/0x39c [ 523.859977][T16410] kernel_init+0x24/0x1dc [ 523.860845][T16410] ret_from_fork+0x10/0x20 [ 523.861783][T16410] } [ 523.862174][T16410] ... key at: [] xa_init_flags.__key+0x0/0x20 [ 523.863407][T16410] [ 523.863407][T16410] the dependencies between the lock to be acquired [ 523.863418][T16410] and HARDIRQ-irq-unsafe lock: [ 523.865488][T16410] -> (&p->sequence){+.-.}-{0:0} { [ 523.866284][T16410] HARDIRQ-ON-W at: [ 523.866870][T16410] lock_acquire+0x140/0x2e0 [ 523.867837][T16410] fprop_new_period+0x3b8/0x718 [ 523.868915][T16410] writeout_period+0x94/0x11c [ 523.869892][T16410] call_timer_fn+0x19c/0x814 [ 523.870873][T16410] __run_timer_base+0x51c/0x76c [ 523.871888][T16410] run_timer_softirq+0x11c/0x194 [ 523.872914][T16410] handle_softirqs+0x31c/0xc88 [ 523.873941][T16410] __do_softirq+0x14/0x20 [ 523.874854][T16410] ____do_softirq+0x14/0x20 [ 523.875782][T16410] call_on_irq_stack+0x30/0x48 [ 523.876805][T16410] do_softirq_own_stack+0x20/0x2c [ 523.877835][T16410] __irq_exit_rcu+0x1b0/0x478 [ 523.878773][T16410] irq_exit_rcu+0x14/0x84 [ 523.879677][T16410] el1_interrupt+0x40/0x60 [ 523.880757][T16410] el1h_64_irq_handler+0x18/0x24 [ 523.881740][T16410] el1h_64_irq+0x6c/0x70 [ 523.882617][T16410] stack_trace_consume_entry+0x4/0x208 [ 523.883730][T16410] stack_trace_save+0x94/0xd8 [ 523.884655][T16410] ref_tracker_alloc+0x15c/0x3dc [ 523.885665][T16410] netdev_get_by_index+0x88/0xe4 [ 523.886619][T16410] fib6_nh_init+0x198/0x1960 [ 523.887532][T16410] ip6_route_info_create_nh+0x11c/0x98c [ 523.888640][T16410] ip6_route_add+0x8c/0x1e4 [ 523.889532][T16410] addrconf_add_dev+0x1ec/0x2e4 [ 523.890528][T16410] inet6_addr_add+0x190/0xb08 [ 523.891519][T16410] inet6_rtm_newaddr+0x730/0xaa8 [ 523.892498][T16410] rtnetlink_rcv_msg+0x664/0x97c [ 523.893535][T16410] netlink_rcv_skb+0x220/0x3fc [ 523.894507][T16410] rtnetlink_rcv+0x28/0x38 [ 523.895469][T16410] netlink_unicast+0x694/0x8c4 [ 523.896426][T16410] netlink_sendmsg+0x648/0x930 [ 523.897358][T16410] __sys_sendto+0x36c/0x4f4 [ 523.898252][T16410] __arm64_sys_sendto+0xd8/0xf8 [ 523.899278][T16410] invoke_syscall+0x98/0x254 [ 523.900166][T16410] el0_svc_common+0xe8/0x23c [ 523.901017][T16410] do_el0_svc+0x48/0x58 [ 523.901877][T16410] el0_svc+0x5c/0x26c [ 523.902729][T16410] el0t_64_sync_handler+0x84/0x12c [ 523.903760][T16410] el0t_64_sync+0x198/0x19c [ 523.904629][T16410] IN-SOFTIRQ-W at: [ 523.905229][T16410] lock_acquire+0x140/0x2e0 [ 523.906148][T16410] fprop_new_period+0x3b8/0x718 [ 523.907073][T16410] writeout_period+0x94/0x11c [ 523.907966][T16410] call_timer_fn+0x19c/0x814 [ 523.908923][T16410] __run_timer_base+0x51c/0x76c [ 523.909884][T16410] run_timer_softirq+0x11c/0x194 [ 523.910848][T16410] handle_softirqs+0x31c/0xc88 [ 523.911790][T16410] __do_softirq+0x14/0x20 [ 523.912653][T16410] ____do_softirq+0x14/0x20 [ 523.913528][T16410] call_on_irq_stack+0x30/0x48 [ 523.914426][T16410] do_softirq_own_stack+0x20/0x2c [ 523.915350][T16410] __irq_exit_rcu+0x1b0/0x478 [ 523.916272][T16410] irq_exit_rcu+0x14/0x84 [ 523.917133][T16410] el1_interrupt+0x40/0x60 [ 523.917959][T16410] el1h_64_irq_handler+0x18/0x24 [ 523.918937][T16410] el1h_64_irq+0x6c/0x70 [ 523.919817][T16410] stack_trace_consume_entry+0x4/0x208 [ 523.920856][T16410] stack_trace_save+0x94/0xd8 [ 523.921801][T16410] ref_tracker_alloc+0x15c/0x3dc [ 523.922731][T16410] netdev_get_by_index+0x88/0xe4 [ 523.923688][T16410] fib6_nh_init+0x198/0x1960 [ 523.924533][T16410] ip6_route_info_create_nh+0x11c/0x98c [ 523.925569][T16410] ip6_route_add+0x8c/0x1e4 [ 523.926435][T16410] addrconf_add_dev+0x1ec/0x2e4 [ 523.927387][T16410] inet6_addr_add+0x190/0xb08 [ 523.928354][T16410] inet6_rtm_newaddr+0x730/0xaa8 [ 523.929403][T16410] rtnetlink_rcv_msg+0x664/0x97c [ 523.930368][T16410] netlink_rcv_skb+0x220/0x3fc [ 523.931318][T16410] rtnetlink_rcv+0x28/0x38 [ 523.932286][T16410] netlink_unicast+0x694/0x8c4 [ 523.933260][T16410] netlink_sendmsg+0x648/0x930 [ 523.934282][T16410] __sys_sendto+0x36c/0x4f4 [ 523.935250][T16410] __arm64_sys_sendto+0xd8/0xf8 [ 523.936182][T16410] invoke_syscall+0x98/0x254 [ 523.937058][T16410] el0_svc_common+0xe8/0x23c [ 523.937945][T16410] do_el0_svc+0x48/0x58 [ 523.938783][T16410] el0_svc+0x5c/0x26c [ 523.939601][T16410] el0t_64_sync_handler+0x84/0x12c [ 523.940643][T16410] el0t_64_sync+0x198/0x19c [ 523.941578][T16410] INITIAL USE at: [ 523.942100][T16410] lock_acquire+0x140/0x2e0 [ 523.942990][T16410] fprop_new_period+0x3b8/0x718 [ 523.943970][T16410] writeout_period+0x94/0x11c [ 523.944918][T16410] call_timer_fn+0x19c/0x814 [ 523.945753][T16410] __run_timer_base+0x51c/0x76c [ 523.946662][T16410] run_timer_softirq+0x11c/0x194 [ 523.947628][T16410] handle_softirqs+0x31c/0xc88 [ 523.948545][T16410] __do_softirq+0x14/0x20 [ 523.949448][T16410] ____do_softirq+0x14/0x20 [ 523.950418][T16410] call_on_irq_stack+0x30/0x48 [ 523.951394][T16410] do_softirq_own_stack+0x20/0x2c [ 523.952341][T16410] __irq_exit_rcu+0x1b0/0x478 [ 523.953287][T16410] irq_exit_rcu+0x14/0x84 [ 523.954236][T16410] el1_interrupt+0x40/0x60 [ 523.955097][T16410] el1h_64_irq_handler+0x18/0x24 [ 523.956088][T16410] el1h_64_irq+0x6c/0x70 [ 523.956930][T16410] stack_trace_consume_entry+0x4/0x208 [ 523.957846][T16410] stack_trace_save+0x94/0xd8 [ 523.958700][T16410] ref_tracker_alloc+0x15c/0x3dc [ 523.959605][T16410] netdev_get_by_index+0x88/0xe4 [ 523.960541][T16410] fib6_nh_init+0x198/0x1960 [ 523.961458][T16410] ip6_route_info_create_nh+0x11c/0x98c [ 523.962550][T16410] ip6_route_add+0x8c/0x1e4 [ 523.963411][T16410] addrconf_add_dev+0x1ec/0x2e4 [ 523.964307][T16410] inet6_addr_add+0x190/0xb08 [ 523.965220][T16410] inet6_rtm_newaddr+0x730/0xaa8 [ 523.966163][T16410] rtnetlink_rcv_msg+0x664/0x97c [ 523.967121][T16410] netlink_rcv_skb+0x220/0x3fc [ 523.968110][T16410] rtnetlink_rcv+0x28/0x38 [ 523.969021][T16410] netlink_unicast+0x694/0x8c4 [ 523.969935][T16410] netlink_sendmsg+0x648/0x930 [ 523.970845][T16410] __sys_sendto+0x36c/0x4f4 [ 523.971751][T16410] __arm64_sys_sendto+0xd8/0xf8 [ 523.972751][T16410] invoke_syscall+0x98/0x254 [ 523.973636][T16410] el0_svc_common+0xe8/0x23c [ 523.974554][T16410] do_el0_svc+0x48/0x58 [ 523.975420][T16410] el0_svc+0x5c/0x26c [ 523.976237][T16410] el0t_64_sync_handler+0x84/0x12c [ 523.977203][T16410] el0t_64_sync+0x198/0x19c [ 523.978091][T16410] INITIAL READ USE at: [ 523.978745][T16410] lock_acquire+0x140/0x2e0 [ 523.979708][T16410] fprop_fraction_percpu+0xac/0x270 [ 523.980915][T16410] __wb_calc_thresh+0xfc/0x3b0 [ 523.982066][T16410] domain_over_bg_thresh+0xb8/0x1f0 [ 523.983224][T16410] wb_over_bg_thresh+0xf8/0x17c [ 523.984270][T16410] wb_workfn+0xa30/0xdc0 [ 523.985198][T16410] process_one_work+0x7c0/0x1558 [ 523.986188][T16410] worker_thread+0x958/0xed8 [ 523.987167][T16410] kthread+0x5fc/0x75c [ 523.988042][T16410] ret_from_fork+0x10/0x20 [ 523.988982][T16410] } [ 523.989367][T16410] ... key at: [] fprop_global_init.__key.1+0x0/0x20 [ 523.990687][T16410] ... acquired at: [ 523.991254][T16410] fprop_fraction_percpu+0xf0/0x270 [ 523.992032][T16410] __fprop_add_percpu_max+0x130/0x1f4 [ 523.992843][T16410] __wb_writeout_add+0xbc/0x27c [ 523.993576][T16410] __folio_end_writeback+0x380/0x6f8 [ 523.994392][T16410] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 523.995301][T16410] folio_end_writeback+0xd8/0x248 [ 523.996079][T16410] iomap_finish_folio_write+0x1c0/0x2a4 [ 523.996962][T16410] fuse_writepage_end+0x238/0x454 [ 523.997732][T16410] fuse_request_end+0x898/0xc10 [ 523.998465][T16410] fuse_abort_conn+0xe88/0x10a0 [ 523.999178][T16410] fuse_conn_abort_write+0x10c/0x194 [ 523.999990][T16410] vfs_write+0x2b8/0xa3c [ 524.000610][T16410] ksys_write+0x120/0x210 [ 524.001302][T16410] __arm64_sys_write+0x7c/0x90 [ 524.002027][T16410] invoke_syscall+0x98/0x254 [ 524.002704][T16410] el0_svc_common+0xe8/0x23c [ 524.003437][T16410] do_el0_svc+0x48/0x58 [ 524.004365][T16410] el0_svc+0x5c/0x26c [ 524.005009][T16410] el0t_64_sync_handler+0x84/0x12c [ 524.005793][T16410] el0t_64_sync+0x198/0x19c [ 524.006503][T16410] [ 524.006840][T16410] [ 524.006840][T16410] stack backtrace: [ 524.007694][T16410] CPU: 1 UID: 0 PID: 16410 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 524.008986][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 524.010369][T16410] Call trace: [ 524.010841][T16410] show_stack+0x2c/0x3c (C) [ 524.011520][T16410] __dump_stack+0x30/0x40 [ 524.012170][T16410] dump_stack_lvl+0xd8/0x12c [ 524.012882][T16410] dump_stack+0x1c/0x28 [ 524.013523][T16410] __lock_acquire+0x3058/0x30a4 [ 524.014311][T16410] lock_acquire+0x140/0x2e0 [ 524.015081][T16410] fprop_fraction_percpu+0xf0/0x270 [ 524.015844][T16410] __fprop_add_percpu_max+0x130/0x1f4 [ 524.016558][T16410] __wb_writeout_add+0xbc/0x27c [ 524.017257][T16410] __folio_end_writeback+0x380/0x6f8 [ 524.018034][T16410] folio_end_writeback_no_dropbehind+0xd0/0x204 [ 524.018946][T16410] folio_end_writeback+0xd8/0x248 [ 524.019659][T16410] iomap_finish_folio_write+0x1c0/0x2a4 [ 524.020461][T16410] fuse_writepage_end+0x238/0x454 [ 524.021259][T16410] fuse_request_end+0x898/0xc10 [ 524.022039][T16410] fuse_abort_conn+0xe88/0x10a0 [ 524.022777][T16410] fuse_conn_abort_write+0x10c/0x194 [ 524.023568][T16410] vfs_write+0x2b8/0xa3c [ 524.024169][T16410] ksys_write+0x120/0x210 [ 524.024807][T16410] __arm64_sys_write+0x7c/0x90 [ 524.025602][T16410] invoke_syscall+0x98/0x254 [ 524.026297][T16410] el0_svc_common+0xe8/0x23c [ 524.027019][T16410] do_el0_svc+0x48/0x58 [ 524.027685][T16410] el0_svc+0x5c/0x26c [ 524.028320][T16410] el0t_64_sync_handler+0x84/0x12c [ 524.029176][T16410] el0t_64_sync+0x198/0x19c [ 524.080626][T11585] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 524.094591][T11585] bridge0 (unregistering): left promiscuous mode [ 524.155445][T11585] bond0 (unregistering): Released all slaves [ 524.156688][T11585] bond1 (unregistering): Released all slaves [ 524.158319][T11585] bond2 (unregistering): Released all slaves [ 524.159953][T11585] bond3 (unregistering): Released all slaves [ 524.198845][T11585] bond4 (unregistering): Released all slaves [ 524.200860][T17602] bridge0: port 3(erspan0) entered disabled state [ 524.200929][T17602] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.200998][T17602] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.257391][T11585] tipc: Disabling bearer [ 524.258606][T11585] tipc: Left network mode [ 524.268426][T11585] IPVS: stopping master sync thread 14605 ... [ 524.612511][T11585] hsr_slave_0: left promiscuous mode [ 524.613572][T11585] hsr_slave_1: left promiscuous mode [ 524.615896][T11585] veth1_macvtap: left promiscuous mode [ 524.615932][T11585] veth0_macvtap: left promiscuous mode [ 524.615984][T11585] veth1_vlan: left promiscuous mode [ 524.616019][T11585] veth0_vlan: left promiscuous mode