last executing test programs: 33m44.055416224s ago: executing program 32 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='veno\x00', 0x5) bpf$MAP_CREATE(0x0, 0x0, 0xfffffc6a) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) r7 = syz_open_dev$I2C(&(0x7f0000000800), 0xa, 0xc2241) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000140)={&(0x7f0000000840)=[{0x9, 0x0, 0x0, 0x0}, {0x4, 0x2601, 0x1, &(0x7f0000000480)="ef"}], 0x2}) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340)) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, r9, 0x8000, 0xfffffffffffffff5, &(0x7f0000000100)="81", 0x9, 0x8, 0xb57, 0x401, 0xc338, 0x1, 0x7, 'syz0\x00'}) 28m48.708877279s ago: executing program 33 (id=809): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 26m17.647980464s ago: executing program 34 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1f8, &(0x7f0000000b40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x18) fadvise64(r1, 0x113001, 0x117102, 0x3) 22m4.721611316s ago: executing program 35 (id=1973): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r2 = syz_io_uring_setup(0x49e, &(0x7f0000000480)={0x0, 0x7078, 0x0, 0xfffffffe, 0x284}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 20m58.631000773s ago: executing program 36 (id=2098): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 19m54.717500894s ago: executing program 37 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, 0x0, &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 19m28.531150989s ago: executing program 8 (id=2311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb9c}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 19m27.930545091s ago: executing program 8 (id=2315): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0xd8ec, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000023c0)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0) 19m27.637428385s ago: executing program 8 (id=2317): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020480) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0xffffffffffff0001}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19m26.361270248s ago: executing program 8 (id=2318): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 19m25.378933581s ago: executing program 8 (id=2323): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 19m22.056741685s ago: executing program 8 (id=2328): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6d41, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x2, 0xfffffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x440000, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) 19m20.732438775s ago: executing program 38 (id=2328): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = syz_io_uring_setup(0x6d41, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x2, 0xfffffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x440000, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) 19m7.332781979s ago: executing program 9 (id=2359): r0 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000140)={0xd00, 0x30314752, 0x280, 0xb4, 0x1, @discrete={0x8}}) 19m7.189794975s ago: executing program 9 (id=2360): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="820000000028000018003480"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da2350700", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19m5.489087574s ago: executing program 9 (id=2363): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8, 0x100000002, 0x8, 0x20000000fff}) 19m4.211319011s ago: executing program 9 (id=2366): mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlockall() 19m3.114679783s ago: executing program 9 (id=2369): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/190, 0xbe, 0x42, 0x0, 0x0) 19m2.300669506s ago: executing program 9 (id=2372): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="820000000028000018003480"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da2350700", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18m47.226399581s ago: executing program 39 (id=2372): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="820000000028000018003480"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da2350700", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15m46.937308307s ago: executing program 3 (id=2752): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40}, {0x6, 0x1}]}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0x14, 0x3, "a79c32ffb9fbee54"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="20bb7bcad0230550ca1bb4b60de42fec"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="51319326693b4d97e689acc140c84b0676342e3aa54ee8be94adcae4f7d64b93"}]}]}, 0x64}}, 0x4000840) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x80000001, 0xfffffffffffffffe, 0x1, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00085400ed4189ae6884fa07000000629f6c7adefac29e671079d14538df928c5fa16b3675903a39f2de261b458a7040ca82a0bc3ec714c60d40d70d1612d24b06c92e56ebfe3e9be24b84cef7414bc4d37e3ad2d2871d34"], 0x5c) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req3={0x81, 0x2, 0xffff, 0x5, 0x195, 0x101, 0xd}, 0x1c) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x4) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0x31) accept4(r9, 0x0, 0x0, 0x800) 15m38.49670208s ago: executing program 3 (id=2762): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 15m35.192168538s ago: executing program 3 (id=2768): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xffff, "bd68a4bb41c2be29fd83010cfd70e8097f243cfa9b28d80d463f696ea45336c8"}) r1 = syz_usbip_server_init(0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x7fffffffffffffff, 0x0, '\x00', 0x1, 0x0}) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x61}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) r6 = dup3(r4, r3, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) io_setup(0x6, &(0x7f0000000300)) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2d8, 0x40, 0xb14b, 0x0, 0x6, 0x900000000000000, 0x200}, &(0x7f0000000180)={0x9, 0x10, 0x2, 0xd, 0xaec, 0xffffffffffffff80, 0x0, 0xfb4}, &(0x7f00000001c0)={0x7, 0x2, 0x8, 0x400, 0x8, 0x6, 0x16, 0x7}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x9]}, 0x8}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000000)={&(0x7f0000000080)=[0x0], 0x1, 0x5}) 15m27.721816952s ago: executing program 3 (id=2780): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 15m25.402406475s ago: executing program 3 (id=2784): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x8800) 15m21.05951232s ago: executing program 3 (id=2788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000006c0)={@loopback}, &(0x7f0000000700)=0x14) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0x8, 0xffdffffe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 15m5.358295201s ago: executing program 40 (id=2788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000006c0)={@loopback}, &(0x7f0000000700)=0x14) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0x8, 0xffdffffe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 13m36.863986457s ago: executing program 4 (id=2970): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xffff, "bd68a4bb41c2be29fd83010cfd70e8097f243cfa9b28d80d463f696ea45336c8"}) r1 = syz_usbip_server_init(0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x7fffffffffffffff, 0x0, '\x00', 0x1, 0x0}) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x61}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) dup3(0xffffffffffffffff, r3, 0x80000) io_setup(0x6, &(0x7f0000000300)=0x0) io_getevents(r5, 0x2, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) pselect6(0x40, &(0x7f0000000140)={0x2, 0x2d8, 0x40, 0xb14b, 0x0, 0x6, 0x900000000000000, 0x200}, &(0x7f0000000180)={0x9, 0x10, 0x2, 0xd, 0xaec, 0xffffffffffffff80, 0x0, 0xfb4}, &(0x7f00000001c0)={0x7, 0x2, 0x8, 0x400, 0x8, 0x6, 0x16, 0x7}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x9]}, 0x8}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000000)={&(0x7f0000000080)=[0x0], 0x1, 0x5}) 13m34.262050435s ago: executing program 4 (id=2974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0, 0x300}) 13m33.592864805s ago: executing program 4 (id=2976): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e000800000006001d"], 0x2c}}, 0x0) 13m32.161408233s ago: executing program 4 (id=2978): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f00000004c0)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000009100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 13m31.56485169s ago: executing program 4 (id=2981): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 13m26.86080527s ago: executing program 4 (id=2995): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x10000, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x1, 0x0, 0x0) 13m26.49102606s ago: executing program 41 (id=2995): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x10000, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x1, 0x0, 0x0) 7m25.77343323s ago: executing program 5 (id=4125): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x80, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 7m25.385901009s ago: executing program 5 (id=4130): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r0, 0x58, &(0x7f00000014c0)}, 0x10) 7m24.251092026s ago: executing program 5 (id=4133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)='N!', 0x2}, {&(0x7f0000000f00)="12", 0x1}], 0x2, 0x0, 0x0, 0x4008820}}], 0x1, 0x40004) 7m23.581019052s ago: executing program 5 (id=4137): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m22.541789402s ago: executing program 5 (id=4142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty}}}}, 0x0) 7m21.983705733s ago: executing program 5 (id=4143): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0xb1, 0x9, 0x0, 0x7ffff020}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) 7m20.667788318s ago: executing program 42 (id=4143): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0xb1, 0x9, 0x0, 0x7ffff020}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) 12.044367294s ago: executing program 6 (id=6163): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 9.051308673s ago: executing program 1 (id=6171): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 8.991417512s ago: executing program 7 (id=6172): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x3, "d1a2d6"}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x363}, 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r6, 0x3ff}, &(0x7f0000000140)=0x8) close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7.614689356s ago: executing program 1 (id=6175): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000080)={[{@acl}, {@nodiscard}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') r1 = fanotify_init(0x40, 0x40000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 7.102523327s ago: executing program 2 (id=6178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000080) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805c}, 0x24000060) 6.930460466s ago: executing program 6 (id=6179): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r1, 0x8, 0x9, 0x2}, &(0x7f0000000180)=0x10) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r2, &(0x7f00000002c0)=@phonet, &(0x7f00000000c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00800008000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 6.857052692s ago: executing program 2 (id=6181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="6ec595b4a5d76ac4e3b19bfb4e26735f1e5d1fd693fc0e13", 0x18) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 6.721802832s ago: executing program 0 (id=6182): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f00000012c0)="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", 0x2000, &(0x7f0000005ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_int(r0, &(0x7f0000000340)=0x4, 0x12) 6.640610977s ago: executing program 2 (id=6183): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r4, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) 6.576745512s ago: executing program 1 (id=6184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x4}]}}}]}, 0x44}}, 0x0) 6.478268975s ago: executing program 0 (id=6185): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x8000, {0x0, 0x0, 0x0, r2, 0x0, 0x2800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x4000}}}}}}]}, 0x48}, 0x1, 0xd}, 0x0) 5.776724878s ago: executing program 6 (id=6186): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x120, 0x880, 0x0, 0x0) 5.646880753s ago: executing program 7 (id=6187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfbfffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) 5.645853168s ago: executing program 2 (id=6188): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r2, 0x1) connect$inet6(r0, 0x0, 0x0) 5.5061252s ago: executing program 1 (id=6189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) vmsplice(r0, &(0x7f0000001680)=[{&(0x7f00000014c0)}, {0x0}, {&(0x7f0000000300)="026df715ae160d8ec3c906a6f0a904508894b94cf44cd9a282b1e6a1c197b53a4aa077b6239eff1f40f2ee0de0495b5ad0d3cce0326b102b", 0x38}], 0x3, 0xe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000016c0)=""/133) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sysfs$2(0x2, 0x8, &(0x7f00000004c0)=""/4096) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe030012da040008001b00000000001c001a80180002801400018008001a000000bf000f00010000000000"], 0x44}}, 0x0) 4.918987233s ago: executing program 2 (id=6190): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 4.650570893s ago: executing program 7 (id=6191): socket$pptp(0x18, 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x1000, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x4, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x3, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x21], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.546533656s ago: executing program 6 (id=6192): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 4.032824642s ago: executing program 0 (id=6193): r0 = socket$inet6(0xa, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x20042004) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4004844) 3.985539722s ago: executing program 6 (id=6194): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000580)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r8, 0x2007ffd) sendfile(r6, r7, 0x0, 0x1000a3) 3.945661278s ago: executing program 7 (id=6195): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.213864723s ago: executing program 6 (id=6196): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 2.101112117s ago: executing program 1 (id=6197): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r1, 0x8, 0x9, 0x2}, &(0x7f0000000180)=0x10) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r2, &(0x7f00000002c0)=@phonet, &(0x7f00000000c0)=0x80, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.094324379s ago: executing program 0 (id=6198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 1.909345238s ago: executing program 7 (id=6199): mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff006) 1.073181164s ago: executing program 0 (id=6200): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) setpriority(0x1, 0x0, 0x100) 936.550116ms ago: executing program 1 (id=6201): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 903.860253ms ago: executing program 7 (id=6202): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) statx(r1, &(0x7f0000008600)='./file0\x00', 0x2000, 0x8, 0x0) 93.653035ms ago: executing program 0 (id=6203): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 0s ago: executing program 2 (id=6204): syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) kernel console output (not intermixed with test programs): strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.309884][ T6243] usbtmc 6-1:16.0: bulk endpoints not found [ 1714.900103][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1714.910031][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1715.646959][T21690] mkiss: ax0: crc mode is auto. [ 1716.030874][T21701] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1716.121853][T15747] usb 6-1: USB disconnect, device number 39 [ 1716.232122][T21704] overlayfs: failed to clone upperpath [ 1716.426993][T21706] loop6: detected capacity change from 0 to 7 [ 1716.446775][T21706] Dev loop6: unable to read RDB block 7 [ 1716.610678][T21706] loop6: AHDI p3 [ 1717.028809][T21706] loop6: partition table partially beyond EOD, truncated [ 1717.511087][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3975'. [ 1717.520988][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3975'. [ 1718.095734][T21733] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1718.902218][T21731] loop0: detected capacity change from 0 to 131072 [ 1718.947956][T21731] F2FS-fs (loop0): invalid crc value [ 1719.034916][T21731] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1719.049071][T21731] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1719.071408][T21731] F2FS-fs (loop0): recover xattr in inode (7), error(0) [ 1719.078980][T21731] F2FS-fs (loop0): set inode (7) has corrupted xattr [ 1719.101896][T21731] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 1719.454585][T15747] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1719.520242][T21743] netlink: 'syz.7.3984': attribute type 10 has an invalid length. [ 1719.564865][T21743] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3984'. [ 1719.665084][T15747] usb 6-1: Using ep0 maxpacket: 8 [ 1719.691425][T15747] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1719.714637][T15747] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1719.754398][T15747] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1719.794660][T15747] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1719.819125][T15747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.881987][T15747] usbtmc 6-1:16.0: bulk endpoints not found [ 1720.258043][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3988'. [ 1720.267935][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3988'. [ 1722.162633][T21767] fuse: Bad value for 'fd' [ 1722.944373][ T6243] usb 6-1: USB disconnect, device number 40 [ 1724.779618][T21782] loop5: detected capacity change from 0 to 32768 [ 1726.354882][T21807] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1726.381393][T21807] CIFS mount error: No usable UNC path provided in device string! [ 1726.381393][T21807] [ 1726.402970][T21807] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1727.149081][T21811] fuse: Bad value for 'fd' [ 1727.596019][T21829] Device name cannot be null; rc = [-22] [ 1729.033472][T21854] loop0: detected capacity change from 0 to 128 [ 1729.098338][T21858] Device name cannot be null; rc = [-22] [ 1731.274634][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1732.190859][T21872] mkiss: ax0: crc mode is auto. [ 1732.215026][T21878] netlink: 'syz.0.4032': attribute type 10 has an invalid length. [ 1732.503470][T21878] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1733.083640][T21897] Device name cannot be null; rc = [-22] [ 1735.882285][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.892243][T21911] loop5: detected capacity change from 0 to 4096 [ 1735.898997][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.938451][T21911] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1736.015844][T21911] UDF-fs: Scanning with blocksize 512 failed [ 1736.069421][T21911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1736.116972][T21913] netlink: 'syz.7.4050': attribute type 10 has an invalid length. [ 1736.127145][T21911] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 1736.155657][T21913] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4050'. [ 1737.462700][T21932] binder: Bad value for 'stats' [ 1737.481594][T21931] Device name cannot be null; rc = [-22] [ 1738.503751][T21944] netlink: 'syz.1.4064': attribute type 10 has an invalid length. [ 1738.533884][T21944] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4064'. [ 1739.097486][T21957] Device name cannot be null; rc = [-22] [ 1740.386952][T21974] netlink: 'syz.0.4076': attribute type 10 has an invalid length. [ 1740.399336][T21974] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1743.327042][T22003] mkiss: ax0: crc mode is auto. [ 1745.926869][T22017] netlink: 'syz.7.4092': attribute type 10 has an invalid length. [ 1745.973067][T22017] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4092'. [ 1746.681808][T22034] mkiss: ax0: crc mode is auto. [ 1746.974910][T22036] loop0: detected capacity change from 0 to 512 [ 1747.175716][T22036] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.4096: inode #196608: comm syz.0.4096: iget: illegal inode # [ 1747.195030][T22036] EXT4-fs (loop0): Remounting filesystem read-only [ 1747.202534][T22036] EXT4-fs (loop0): no journal found [ 1747.959014][T22036] EXT4-fs (loop0): can't get journal size [ 1748.041150][T22036] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1748.117475][T22036] EXT4-fs (loop0): failed to initialize system zone (-22) [ 1748.841908][T22036] EXT4-fs (loop0): mount failed [ 1749.187291][T22061] netlink: 'syz.7.4109': attribute type 10 has an invalid length. [ 1749.211822][T22066] loop0: detected capacity change from 0 to 128 [ 1749.218682][T22061] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4109'. [ 1751.500455][T22098] netlink: 'syz.7.4126': attribute type 10 has an invalid length. [ 1751.528165][T22098] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4126'. [ 1752.037617][T22110] 9p: Bad value for 'rfdno' [ 1753.732236][T22135] netlink: 'syz.1.4138': attribute type 10 has an invalid length. [ 1753.765998][T22135] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4138'. [ 1753.768140][T22133] loop5: detected capacity change from 0 to 2048 [ 1753.948809][T22133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1754.445164][T22133] loop5: detected capacity change from 2048 to 0 [ 1754.603231][T18538] Buffer I/O error on dev loop5, logical block 128, lost sync page write [ 1755.111271][T20021] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.146796][T20021] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.196254][T22151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4144'. [ 1756.205511][T22151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4144'. [ 1756.409011][T20021] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.532880][T22161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1756.645549][T20021] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.693232][T22167] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.4150'. [ 1756.808786][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1756.819913][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1756.832618][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1756.843087][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1756.862240][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1758.670754][T20021] team0: left allmulticast mode [ 1758.678597][T20021] team_slave_0: left allmulticast mode [ 1758.717942][T20021] team_slave_1: left allmulticast mode [ 1758.725059][T20021] bridge0: port 3(team0) entered disabled state [ 1758.925844][T16757] Bluetooth: hci4: command tx timeout [ 1759.107477][T20021] bridge_slave_1: left allmulticast mode [ 1759.113260][T20021] bridge_slave_1: left promiscuous mode [ 1759.142088][T20021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.686947][T20021] bridge_slave_0: left allmulticast mode [ 1759.692779][T20021] bridge_slave_0: left promiscuous mode [ 1759.735370][T20021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.356241][ T6243] IPVS: starting estimator thread 0... [ 1760.504496][T22195] IPVS: using max 26 ests per chain, 62400 per kthread [ 1760.862519][T22206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1760.994987][T16757] Bluetooth: hci4: command tx timeout [ 1761.013873][T20021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.231091][T20021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.241901][T20021] bond0 (unregistering): Released all slaves [ 1761.279346][T22190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4156'. [ 1761.288451][T22190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4156'. [ 1762.328957][T20021] tipc: Left network mode [ 1762.887430][T22170] chnl_net:caif_netlink_parms(): no params data found [ 1763.089739][T16757] Bluetooth: hci4: command tx timeout [ 1765.026326][T22263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1765.035655][T22263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1765.154622][T16757] Bluetooth: hci4: command tx timeout [ 1765.508376][T20021] hsr_slave_0: left promiscuous mode [ 1765.523723][T20021] hsr_slave_1: left promiscuous mode [ 1765.539070][T20021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1765.547022][T22267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1765.556171][T20021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1765.613237][T20021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1765.621885][T20021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1765.689367][T20021] veth1_macvtap: left promiscuous mode [ 1765.701895][T20021] veth0_macvtap: left promiscuous mode [ 1765.716374][T20021] veth1_vlan: left promiscuous mode [ 1765.728703][T20021] veth0_vlan: left promiscuous mode [ 1768.829619][T16757] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1768.935545][T20021] team_slave_1 (unregistering): left promiscuous mode [ 1768.943782][T20021] team0 (unregistering): Port device team_slave_1 removed [ 1769.215118][T20021] team_slave_0 (unregistering): left promiscuous mode [ 1769.234975][T20021] team0 (unregistering): Port device team_slave_0 removed [ 1770.855175][T22170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.958628][T22170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.973824][T22170] bridge_slave_0: entered allmulticast mode [ 1770.990049][T22170] bridge_slave_0: entered promiscuous mode [ 1771.008363][T22170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.045524][T22170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.083086][T22170] bridge_slave_1: entered allmulticast mode [ 1771.113367][T22170] bridge_slave_1: entered promiscuous mode [ 1771.636324][T22170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.690979][T22170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.016856][T22170] team0: Port device team_slave_0 added [ 1772.089977][T22170] team0: Port device team_slave_1 added [ 1772.252983][T22170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.294574][T22170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.382743][T22170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1772.491812][T22170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.519615][T22170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.630203][T22170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1772.902433][T22170] hsr_slave_0: entered promiscuous mode [ 1772.940598][T22170] hsr_slave_1: entered promiscuous mode [ 1772.957627][T22170] debugfs: 'hsr0' already exists in 'hsr' [ 1773.135129][T22170] Cannot create hsr debugfs directory [ 1773.925953][T22325] loop0: detected capacity change from 0 to 32768 [ 1775.542709][T22170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1775.621924][T22170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1775.658849][T22170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1775.701987][T22170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1776.109215][T22170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.187924][T22170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.230741][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.238154][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.295920][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.303209][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.033129][T22170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.183416][T22170] veth0_vlan: entered promiscuous mode [ 1777.228462][T22170] veth1_vlan: entered promiscuous mode [ 1777.343015][T22170] veth0_macvtap: entered promiscuous mode [ 1777.377284][T22170] veth1_macvtap: entered promiscuous mode [ 1777.523133][T22170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.681412][T22170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.731761][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.761412][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.821839][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.048783][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.253279][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.276502][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.402766][ T6341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.413247][T22417] loop0: detected capacity change from 0 to 32768 [ 1778.446849][ T6341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.299008][T22442] loop2: detected capacity change from 0 to 256 [ 1779.748408][T22447] netlink: 'syz.2.4145': attribute type 3 has an invalid length. [ 1779.756388][T22447] netlink: 'syz.2.4145': attribute type 1 has an invalid length. [ 1780.699311][T22468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1780.884323][T22470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1780.893528][T22470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1781.367085][T22476] fuse: Unknown parameter 'group_id00000000000000000000' [ 1782.047965][T22491] overlayfs: failed to clone upperpath [ 1782.894115][T22478] loop0: detected capacity change from 0 to 32768 [ 1782.912159][T22478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4231 (22478) [ 1782.926550][T22500] netlink: 'syz.6.4238': attribute type 3 has an invalid length. [ 1782.934316][T22500] netlink: 'syz.6.4238': attribute type 1 has an invalid length. [ 1782.944570][T22500] 9p: Bad value for 'rfdno' [ 1782.998219][T22478] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1783.022623][T22478] BTRFS info (device loop0): using crc32c checksum algorithm [ 1783.035790][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4240'. [ 1783.043330][T22478] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1783.383714][T22521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4241'. [ 1783.393029][T22521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4241'. [ 1784.043183][T22478] BTRFS info (device loop0): rebuilding free space tree [ 1784.095918][T22478] BTRFS info (device loop0): disabling free space tree [ 1784.102984][T22478] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1784.125484][T22525] fuse: Unknown parameter 'group_id00000000000000000000' [ 1784.143678][T22478] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1784.200487][T22478] BTRFS info (device loop0): setting nodatasum [ 1784.213870][T22478] BTRFS info (device loop0): setting nodatacow [ 1784.224655][T22478] BTRFS info (device loop0): enabling ssd optimizations [ 1784.231691][T22478] BTRFS info (device loop0): using spread ssd allocation scheme [ 1784.300738][T22478] BTRFS info (device loop0): turning on sync discard [ 1784.316882][T22478] BTRFS info (device loop0): enabling disk space caching [ 1784.351404][T22478] BTRFS info (device loop0): force clearing of disk cache [ 1784.574558][ T5978] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1784.610426][T18025] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1784.734579][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 1784.770542][ T5978] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1784.794943][ T5978] usb 3-1: config 179 has no interface number 0 [ 1784.822262][ T5978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1784.876761][ T5978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1784.914691][ T5978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1785.150326][ T5978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1785.614336][ T5978] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1786.880742][ T5978] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1786.923164][ T5978] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1786.928128][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4252'. [ 1786.944378][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.204675][ T5978] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 1787.299554][T22559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4254'. [ 1787.308739][T22559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4254'. [ 1788.040774][ T5176] input input21: unable to receive magic message: -71 [ 1788.138215][ T5978] usb 3-1: USB disconnect, device number 31 [ 1788.144241][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1788.184544][T22566] fuse: Unknown parameter 'group_id00000000000000000000' [ 1789.454201][T22593] netlink: 'syz.7.4268': attribute type 10 has an invalid length. [ 1789.472886][T22593] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4268'. [ 1789.724363][T22594] netlink: 'syz.6.4253': attribute type 3 has an invalid length. [ 1789.733595][T22594] netlink: 'syz.6.4253': attribute type 1 has an invalid length. [ 1789.743804][T22594] 9p: Bad value for 'rfdno' [ 1789.937023][T22603] fuse: Bad value for 'user_id' [ 1789.952869][T22603] fuse: Bad value for 'user_id' [ 1790.230454][T22610] netlink: 6664 bytes leftover after parsing attributes in process `syz.2.4276'. [ 1790.499393][T22620] netlink: 'syz.7.4279': attribute type 10 has an invalid length. [ 1790.510751][T22620] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4279'. [ 1790.891775][T22632] Device name cannot be null; rc = [-22] [ 1790.970782][T22634] fuse: Bad value for 'user_id' [ 1790.994705][T22634] fuse: Bad value for 'user_id' [ 1792.578949][T22651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1792.588907][T22651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1792.671377][T22653] netlink: 'syz.7.4288': attribute type 3 has an invalid length. [ 1792.679221][T22653] netlink: 'syz.7.4288': attribute type 1 has an invalid length. [ 1792.689184][T22653] 9p: Bad value for 'rfdno' [ 1793.370807][T22662] netlink: 6664 bytes leftover after parsing attributes in process `syz.7.4290'. [ 1793.597806][T22670] netlink: 'syz.7.4292': attribute type 10 has an invalid length. [ 1793.625950][T22670] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4292'. [ 1793.902683][T22679] Device name cannot be null; rc = [-22] [ 1793.961885][T22684] fuse: Bad value for 'user_id' [ 1793.985693][T22684] fuse: Bad value for 'user_id' [ 1794.595975][T22698] loop0: detected capacity change from 0 to 256 [ 1794.995919][T22705] netlink: 'syz.0.4300': attribute type 3 has an invalid length. [ 1795.003800][T22705] netlink: 'syz.0.4300': attribute type 1 has an invalid length. [ 1796.329917][T22712] netlink: 6664 bytes leftover after parsing attributes in process `syz.0.4302'. [ 1796.623509][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4299'. [ 1796.649815][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4299'. [ 1797.192529][T22721] netlink: 'syz.1.4305': attribute type 10 has an invalid length. [ 1797.209852][T22721] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1797.335486][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.341958][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.421591][T22727] Device name cannot be null; rc = [-22] [ 1797.500609][T22730] fuse: Bad value for 'fd' [ 1798.830843][T22750] netlink: 'syz.1.4312': attribute type 3 has an invalid length. [ 1798.838835][T22750] netlink: 'syz.1.4312': attribute type 1 has an invalid length. [ 1798.848502][T22750] 9p: Bad value for 'rfdno' [ 1800.445679][T22766] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1801.012799][T22772] Device name cannot be null; rc = [-22] [ 1801.134819][T22776] fuse: Bad value for 'fd' [ 1802.625656][T22800] netlink: 'syz.7.4326': attribute type 3 has an invalid length. [ 1802.633549][T22800] netlink: 'syz.7.4326': attribute type 1 has an invalid length. [ 1802.643308][T22800] 9p: Bad value for 'rfdno' [ 1803.003165][T22813] afs: Unknown parameter '#7dyn' [ 1803.948981][T22809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4329'. [ 1804.129459][T22822] Device name cannot be null; rc = [-22] [ 1804.416011][T22829] fuse: Bad value for 'fd' [ 1804.488994][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1804.498980][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4327'. [ 1805.858914][T22845] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1807.564942][T22852] netlink: 'syz.7.4341': attribute type 3 has an invalid length. [ 1807.572813][T22852] netlink: 'syz.7.4341': attribute type 1 has an invalid length. [ 1807.588054][T22852] 9p: Bad value for 'rfdno' [ 1807.800466][T22857] Device name cannot be null; rc = [-22] [ 1808.031626][T22867] netlink: 6664 bytes leftover after parsing attributes in process `syz.0.4347'. [ 1811.327180][T22885] Device name cannot be null; rc = [-22] [ 1815.055853][T22909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4363'. [ 1815.101231][T22909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4363'. [ 1815.546361][T22914] netlink: 6664 bytes leftover after parsing attributes in process `syz.0.4361'. [ 1815.808699][T22918] netlink: 'syz.0.4367': attribute type 10 has an invalid length. [ 1815.825629][T22918] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4367'. [ 1815.880997][T22920] Device name cannot be null; rc = [-22] [ 1816.018682][T22925] loop0: detected capacity change from 0 to 64 [ 1817.088914][T22925] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1817.105358][T22926] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4371'. [ 1817.167241][T22925] hfs: filesystem is marked locked, mounting read-only. [ 1817.188206][T22926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.196168][T22926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.611607][T22944] netlink: 'syz.0.4379': attribute type 10 has an invalid length. [ 1817.619733][T22944] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4379'. [ 1817.836952][T22951] Device name cannot be null; rc = [-22] [ 1820.276918][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1820.542535][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1820.554108][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1828.775429][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4415'. [ 1828.818232][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4415'. [ 1829.735689][T23076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4428'. [ 1829.901153][ T30] audit: type=1326 audit(1829.351:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23077 comm="syz.7.4429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79de18f749 code=0x0 [ 1831.101851][T23091] netlink: 'syz.7.4434': attribute type 4 has an invalid length. [ 1831.248783][T23103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4437'. [ 1832.414095][T23107] netlink: 'syz.6.4439': attribute type 10 has an invalid length. [ 1832.422021][T23107] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4439'. [ 1832.430968][T23107] team0: entered promiscuous mode [ 1832.436279][T23107] team_slave_0: entered promiscuous mode [ 1832.442137][T23107] team_slave_1: entered promiscuous mode [ 1832.448235][T23107] bridge0: port 3(team0) entered blocking state [ 1832.454634][T23107] bridge0: port 3(team0) entered disabled state [ 1832.461054][T23107] team0: entered allmulticast mode [ 1832.466218][T23107] team_slave_0: entered allmulticast mode [ 1832.473384][T23107] team_slave_1: entered allmulticast mode [ 1832.543934][T23113] loop0: detected capacity change from 0 to 64 [ 1834.281217][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4446'. [ 1834.291054][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4446'. [ 1835.358306][T23151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1836.793958][T23181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4458'. [ 1836.809079][T23181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4458'. [ 1837.473978][T23184] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4466'. [ 1837.575584][T23190] fuse: Unknown parameter 'use00000000000000000000' [ 1837.908917][T23206] overlayfs: failed to clone upperpath [ 1838.766639][T23218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4478'. [ 1838.861856][T23222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1838.875991][T23222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1839.516809][T23228] mkiss: ax0: crc mode is auto. [ 1839.549230][T23234] fuse: Unknown parameter 'use00000000000000000000' [ 1841.282149][T23264] fuse: Unknown parameter 'use00000000000000000000' [ 1841.970013][T23287] netlink: 'syz.0.4508': attribute type 7 has an invalid length. [ 1842.467527][T23292] fuse: Unknown parameter 'user_i00000000000000000000' [ 1842.731057][T23302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4517'. [ 1843.443392][ T30] audit: type=1800 audit(1842.891:240): pid=23319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4519" name="nullb0" dev="tmpfs" ino=1790 res=0 errno=0 [ 1843.585273][T23326] fuse: Unknown parameter 'user_i00000000000000000000' [ 1843.807934][T23332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4528'. [ 1844.193772][T23343] netlink: 'syz.0.4532': attribute type 7 has an invalid length. [ 1845.863266][T23357] fuse: Unknown parameter 'user_i00000000000000000000' [ 1846.023041][T23361] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4543'. [ 1846.352165][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4546'. [ 1847.099966][T23376] overlayfs: failed to clone upperpath [ 1847.366283][ T30] audit: type=1326 audit(1846.821:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23386 comm="syz.6.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1847.406883][T23389] fuse: Unknown parameter 'user_id00000000000000000000' [ 1847.460619][ T30] audit: type=1326 audit(1846.851:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23386 comm="syz.6.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1847.564193][ T30] audit: type=1326 audit(1846.851:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23386 comm="syz.6.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1847.654561][ T30] audit: type=1326 audit(1846.851:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23386 comm="syz.6.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1847.713668][ T30] audit: type=1326 audit(1846.851:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23386 comm="syz.6.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1847.767029][ T30] audit: type=1326 audit(1846.851:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23386 comm="syz.6.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1847.823488][ T30] audit: type=1326 audit(1846.851:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23386 comm="syz.6.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1848.166155][T23398] netlink: 'syz.7.4558': attribute type 10 has an invalid length. [ 1848.183218][T23398] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4558'. [ 1850.172669][T23393] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4556'. [ 1850.456034][T23415] loop0: detected capacity change from 0 to 1024 [ 1850.476029][T23415] EXT4-fs: Ignoring removed bh option [ 1850.566501][T23419] fuse: Unknown parameter 'user_id00000000000000000000' [ 1850.600038][T23415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1850.686493][T23415] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.4564: Allocating blocks 385-513 which overlap fs metadata [ 1850.758843][T23412] EXT4-fs (loop0): pa ffff8880462591d0: logic 16, phys. 129, len 24 [ 1850.767526][T23412] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 1850.863329][T18025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.495919][T23440] netlink: 'syz.2.4567': attribute type 10 has an invalid length. [ 1851.510627][T23440] macvlan1: entered allmulticast mode [ 1851.529410][T23440] veth1_vlan: entered allmulticast mode [ 1851.541649][T23437] netlink: 'syz.6.4573': attribute type 7 has an invalid length. [ 1851.562331][T23440] team0: Port device macvlan1 added [ 1852.186578][T23451] fuse: Unknown parameter 'user_id00000000000000000000' [ 1853.496334][T23469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4584'. [ 1853.689611][T23470] bond_slave_1: entered promiscuous mode [ 1853.738828][T23470] bond_slave_1: left promiscuous mode [ 1853.813252][T23477] netlink: 'syz.2.4587': attribute type 10 has an invalid length. [ 1853.830741][T23477] veth1_vlan: left allmulticast mode [ 1854.304273][T23485] fuse: Bad value for 'fd' [ 1854.477236][T23494] netlink: 'syz.7.4595': attribute type 7 has an invalid length. [ 1855.031577][T23502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1855.275013][ C1] sd 0:0:1:0: [sda] tag#9065 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1855.285574][ C1] sd 0:0:1:0: [sda] tag#9065 CDB: Read(6) 08 00 9f d1 fe de [ 1855.477278][T23518] fuse: Bad value for 'fd' [ 1856.016840][T23531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4609'. [ 1857.178594][T23552] netlink: 'syz.0.4614': attribute type 7 has an invalid length. [ 1857.382459][T23556] overlayfs: failed to clone upperpath [ 1857.428737][T23558] fuse: Bad value for 'fd' [ 1857.604868][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4623'. [ 1857.624129][T23566] overlayfs: failed to clone upperpath [ 1857.964611][T23569] lo: entered allmulticast mode [ 1857.981255][T23569] tunl0: entered allmulticast mode [ 1857.996650][T23569] gre0: entered allmulticast mode [ 1858.010901][T23569] gretap0: entered allmulticast mode [ 1858.025718][T23569] erspan0: entered allmulticast mode [ 1858.038917][T23569] ip_vti0: entered allmulticast mode [ 1858.066513][T23569] ip6_vti0: entered allmulticast mode [ 1858.083226][T23569] sit0: entered allmulticast mode [ 1858.097901][T23569] ip6tnl0: entered allmulticast mode [ 1858.111663][T23569] ip6gre0: entered allmulticast mode [ 1858.126212][T23569] syz_tun: entered allmulticast mode [ 1858.143261][T23569] ip6gretap0: entered allmulticast mode [ 1858.159141][T23569] bridge0: entered allmulticast mode [ 1858.173884][T23569] vcan0: entered allmulticast mode [ 1858.189464][T23569] bond0: entered allmulticast mode [ 1858.195037][T23569] bond_slave_0: entered allmulticast mode [ 1858.201023][T23569] bond_slave_1: entered allmulticast mode [ 1858.222524][T23569] team0: entered allmulticast mode [ 1858.227983][T23569] team_slave_0: entered allmulticast mode [ 1858.233955][T23569] team_slave_1: entered allmulticast mode [ 1858.255685][T23569] dummy0: entered allmulticast mode [ 1858.262539][T23569] nlmon0: entered allmulticast mode [ 1858.268515][T23569] caif0: entered allmulticast mode [ 1858.273887][T23569] batadv0: entered allmulticast mode [ 1858.281070][T23569] vxcan0: entered allmulticast mode [ 1858.287149][T23569] vxcan1: entered allmulticast mode [ 1858.293225][T23569] veth0: entered allmulticast mode [ 1858.301289][T23569] veth1: entered allmulticast mode [ 1858.310240][T23569] wg0: entered allmulticast mode [ 1858.315996][T23569] wg1: entered allmulticast mode [ 1858.323960][T23569] wg2: entered allmulticast mode [ 1858.329816][T23569] veth0_to_bridge: entered allmulticast mode [ 1858.339798][T23569] veth1_to_bridge: entered allmulticast mode [ 1858.348868][T23569] veth0_to_bond: entered allmulticast mode [ 1858.360014][T23569] veth1_to_bond: entered allmulticast mode [ 1858.367863][T23569] veth0_to_team: entered allmulticast mode [ 1858.376404][T23569] veth1_to_team: entered allmulticast mode [ 1858.385093][T23569] veth0_to_batadv: entered allmulticast mode [ 1858.391901][T23569] batadv_slave_0: entered allmulticast mode [ 1858.398711][T23569] veth1_to_batadv: entered allmulticast mode [ 1858.405652][T23569] batadv_slave_1: entered allmulticast mode [ 1858.412296][T23569] xfrm0: entered allmulticast mode [ 1858.418156][T23569] veth0_to_hsr: entered allmulticast mode [ 1858.424684][T23569] hsr_slave_0: entered allmulticast mode [ 1858.431090][T23569] veth1_to_hsr: entered allmulticast mode [ 1858.438075][T23569] hsr_slave_1: entered allmulticast mode [ 1858.444694][T23569] hsr0: entered allmulticast mode [ 1858.451569][T23569] veth1_virt_wifi: entered allmulticast mode [ 1858.458692][T23569] veth0_virt_wifi: entered allmulticast mode [ 1858.465355][T23569] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1858.472765][T23569] veth1_vlan: entered allmulticast mode [ 1858.478988][T23569] veth0_vlan: entered allmulticast mode [ 1858.486521][T23569] vlan0: entered allmulticast mode [ 1858.492176][T23569] vlan1: entered allmulticast mode [ 1858.497796][T23569] macvlan0: entered allmulticast mode [ 1858.503746][T23569] ipvlan0: entered allmulticast mode [ 1858.509195][T23569] ipvlan1: entered allmulticast mode [ 1858.514931][T23569] veth1_macvtap: entered allmulticast mode [ 1858.521592][T23569] veth0_macvtap: entered allmulticast mode [ 1858.527970][T23569] macvtap0: entered allmulticast mode [ 1858.533847][T23569] macsec0: entered allmulticast mode [ 1858.539605][T23569] geneve0: entered allmulticast mode [ 1858.545463][T23569] geneve1: entered allmulticast mode [ 1858.551161][T23569] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1858.559120][T23569] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1858.567100][T23569] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1858.575068][T23569] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1858.583885][T23569] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 1858.591920][T23569] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 1858.775232][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.781574][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.732062][T23595] fuse: Unknown parameter '0x0000000000000004' [ 1864.102086][T23625] overlayfs: failed to clone upperpath [ 1865.378994][T23629] Invalid ELF header magic: != ELF [ 1866.197852][T23649] loop0: detected capacity change from 0 to 256 [ 1866.305868][T23649] FAT-fs (loop0): Directory bread(block 64) failed [ 1866.320122][T23649] FAT-fs (loop0): Directory bread(block 65) failed [ 1866.335377][T23649] FAT-fs (loop0): Directory bread(block 66) failed [ 1866.346329][T23649] FAT-fs (loop0): Directory bread(block 67) failed [ 1866.347283][T23654] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4656'. [ 1866.353745][T23649] FAT-fs (loop0): Directory bread(block 68) failed [ 1866.396366][T23649] FAT-fs (loop0): Directory bread(block 69) failed [ 1866.403055][T23649] FAT-fs (loop0): Directory bread(block 70) failed [ 1866.424026][T23649] FAT-fs (loop0): Directory bread(block 71) failed [ 1866.433236][T23649] FAT-fs (loop0): Directory bread(block 72) failed [ 1866.442512][T23649] FAT-fs (loop0): Directory bread(block 73) failed [ 1866.502468][T23659] overlayfs: failed to clone upperpath [ 1868.506836][T23695] loop0: detected capacity change from 0 to 4096 [ 1868.832477][T23703] overlayfs: failed to clone upperpath [ 1869.798714][T23714] fuse: Bad value for 'fd' [ 1869.815237][T23715] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4681'. [ 1869.989202][T23722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4686'. [ 1871.208686][T23741] overlayfs: failed to clone upperpath [ 1872.253456][T23760] overlayfs: failed to clone upperpath [ 1873.010767][T23757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1874.791640][T23779] fuse: Bad value for 'fd' [ 1874.915369][T23786] fuse: Unknown parameter '0x0000000000000004' [ 1875.017653][T23788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1875.913662][T23800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1877.317327][T23812] could not allocate digest TFM handle blake2b-384-generic [ 1877.600419][T23815] overlayfs: failed to clone upperpath [ 1878.616349][T23832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4725'. [ 1879.837649][T23845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4727'. [ 1879.902273][T23845] bridge0: port 3(team0) entered disabled state [ 1879.908829][T23845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.916156][T23845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.925412][ T30] audit: type=1800 audit(1879.341:248): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4728" name="file2" dev="tmpfs" ino=2059 res=0 errno=0 [ 1880.656080][T23862] overlayfs: failed to clone upperpath [ 1881.715811][T16757] Bluetooth: hci4: command 0x0405 tx timeout [ 1881.795678][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4739'. [ 1882.641052][T23883] fuse: Unknown parameter 'fd0x0000000000000004' [ 1885.189499][T23912] overlayfs: failed to clone upperpath [ 1886.164918][T23922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4754'. [ 1888.120379][T23943] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1888.913318][T23950] overlayfs: failed to clone upperpath [ 1889.909513][T23964] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4770'. [ 1890.905983][T23983] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1891.594849][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804413c000: rx timeout, send abort [ 1891.615149][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804413c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1891.633794][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804413e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1891.701985][T23990] overlayfs: failed to clone upperpath [ 1892.153008][T23992] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4782'. [ 1892.189316][T23992] bridge0: port 3(team0) entered disabled state [ 1892.195817][T23992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.203170][T23992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.145283][T24012] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4787'. [ 1894.505264][T24020] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1896.288026][T24039] overlayfs: failed to clone upperpath [ 1897.929061][T24081] overlayfs: failed to clone upperpath [ 1899.418845][T24104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1900.292690][T24121] overlayfs: failed to clone upperpath [ 1903.653832][T24158] overlayfs: failed to clone upperpath [ 1906.738885][ T30] audit: type=1326 audit(1906.191:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24191 comm="syz.7.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 1906.819461][ T30] audit: type=1326 audit(1906.191:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24191 comm="syz.7.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 1907.064544][ T30] audit: type=1326 audit(1906.191:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24191 comm="syz.7.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 1907.096391][T24190] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1907.318567][ T30] audit: type=1326 audit(1906.191:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24191 comm="syz.7.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 1907.389623][ T30] audit: type=1326 audit(1906.191:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24191 comm="syz.7.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 1907.747090][ T30] audit: type=1326 audit(1906.211:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24191 comm="syz.7.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 1908.788724][T24200] netlink: 6664 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1913.471543][T24251] overlayfs: failed to clone upperpath [ 1914.865759][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4885'. [ 1914.988251][T24284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1916.497135][T24316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4900'. [ 1916.918077][T24325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4904'. [ 1917.143421][T24334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4908'. [ 1918.100850][T24347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1918.120941][T24347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.130236][T24347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.164965][T24347] bridge0: left allmulticast mode [ 1918.587450][T24355] netlink: 'syz.7.4914': attribute type 3 has an invalid length. [ 1918.595868][T24355] netlink: 'syz.7.4914': attribute type 1 has an invalid length. [ 1918.610491][T24355] 9p: Bad value for 'rfdno' [ 1919.335331][T24363] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1920.207875][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.215988][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.398126][T24398] overlayfs: failed to clone upperpath [ 1921.940123][T24403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1922.895540][ T30] audit: type=1326 audit(1922.321:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1922.971481][ T30] audit: type=1326 audit(1922.321:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1923.044577][ T30] audit: type=1326 audit(1922.321:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ce378df90 code=0x7ffc0000 [ 1923.312139][ T30] audit: type=1326 audit(1922.321:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1923.426273][ T30] audit: type=1326 audit(1922.321:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1923.453586][ T30] audit: type=1326 audit(1922.321:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1923.524739][T24435] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4948'. [ 1923.592512][ T30] audit: type=1326 audit(1922.321:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1923.624832][ T30] audit: type=1326 audit(1922.321:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1923.684842][ T30] audit: type=1326 audit(1922.321:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1923.754810][ T30] audit: type=1326 audit(1922.321:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24422 comm="syz.1.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce378f749 code=0x7ffc0000 [ 1925.230472][T24453] netem: change failed [ 1925.752281][T24464] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4960'. [ 1929.278747][T24504] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4976'. [ 1930.682452][T24518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1930.965061][T24527] IPv6: addrconf: prefix option has invalid lifetime [ 1932.602748][T24556] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4995'. [ 1937.275760][T24619] lo: entered allmulticast mode [ 1937.290472][T24619] tunl0: entered allmulticast mode [ 1937.305204][T24619] gre0: entered allmulticast mode [ 1937.318318][T24619] gretap0: entered allmulticast mode [ 1937.642888][T24619] erspan0: entered allmulticast mode [ 1937.661493][T24619] ip_vti0: entered allmulticast mode [ 1937.670963][T24619] ip6_vti0: entered allmulticast mode [ 1937.679599][T24619] sit0: entered allmulticast mode [ 1937.688091][T24619] ip6tnl0: entered allmulticast mode [ 1937.696983][T24619] ip6gre0: entered allmulticast mode [ 1937.705645][T24619] syz_tun: entered allmulticast mode [ 1937.714481][T24619] ip6gretap0: entered allmulticast mode [ 1937.723263][T24619] bridge0: entered allmulticast mode [ 1937.729660][T24619] vcan0: entered allmulticast mode [ 1937.738519][T24619] bond0: entered allmulticast mode [ 1937.743913][T24619] bond_slave_0: entered allmulticast mode [ 1937.749961][T24619] bond_slave_1: entered allmulticast mode [ 1937.768166][T24619] dummy0: entered allmulticast mode [ 1937.780894][T24619] nlmon0: entered allmulticast mode [ 1937.789853][T24619] caif0: entered allmulticast mode [ 1937.796259][T24619] batadv0: entered allmulticast mode [ 1937.807205][T24619] vxcan0: entered allmulticast mode [ 1937.819356][T24619] vxcan1: entered allmulticast mode [ 1937.828271][T24619] veth0: entered allmulticast mode [ 1937.837141][T24619] veth1: entered allmulticast mode [ 1937.846523][T24619] wg0: entered allmulticast mode [ 1937.852365][T24619] wg1: entered allmulticast mode [ 1937.857980][T24619] wg2: entered allmulticast mode [ 1937.863604][T24619] veth0_to_bridge: entered allmulticast mode [ 1937.871365][T24619] veth1_to_bridge: entered allmulticast mode [ 1937.879935][T24619] veth0_to_bond: entered allmulticast mode [ 1937.887189][T24619] veth1_to_bond: entered allmulticast mode [ 1937.894535][T24619] veth0_to_team: entered allmulticast mode [ 1937.902149][T24619] veth1_to_team: entered allmulticast mode [ 1937.909875][T24619] veth0_to_batadv: entered allmulticast mode [ 1937.916669][T24619] batadv_slave_0: entered allmulticast mode [ 1937.923319][T24619] veth1_to_batadv: entered allmulticast mode [ 1937.930091][T24619] batadv_slave_1: entered allmulticast mode [ 1937.936892][T24619] xfrm0: entered allmulticast mode [ 1937.944612][T24619] veth0_to_hsr: entered allmulticast mode [ 1937.951071][T24619] hsr_slave_0: entered allmulticast mode [ 1937.957884][T24619] veth1_to_hsr: entered allmulticast mode [ 1937.964297][T24619] hsr_slave_1: entered allmulticast mode [ 1937.970817][T24619] hsr0: entered allmulticast mode [ 1937.976825][T24619] veth1_virt_wifi: entered allmulticast mode [ 1937.983596][T24619] veth0_virt_wifi: entered allmulticast mode [ 1937.990396][T24619] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1937.997953][T24619] veth1_vlan: entered allmulticast mode [ 1938.004193][T24619] veth0_vlan: entered allmulticast mode [ 1938.011474][T24619] vlan0: entered allmulticast mode [ 1938.075327][T24619] vlan1: entered allmulticast mode [ 1938.081286][T24619] macvlan0: entered allmulticast mode [ 1938.087408][T24619] macvlan1: entered allmulticast mode [ 1938.093521][T24619] ipvlan0: entered allmulticast mode [ 1938.099095][T24619] ipvlan1: entered allmulticast mode [ 1938.104760][T24619] veth1_macvtap: entered allmulticast mode [ 1938.111385][T24619] veth0_macvtap: entered allmulticast mode [ 1938.118327][T24619] macvtap0: entered allmulticast mode [ 1938.126386][T24619] macsec0: entered allmulticast mode [ 1938.132458][T24619] geneve0: entered allmulticast mode [ 1938.138659][T24619] geneve1: entered allmulticast mode [ 1938.144862][T24619] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1938.155254][T24619] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1938.163427][T24619] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1938.172302][T24619] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 1938.180516][T24619] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 1938.188605][T24619] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 1938.196576][T24619] bridge1: entered allmulticast mode [ 1940.253429][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1940.263817][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.263853][ T51] Tainted: [L]=SOFTLOCKUP [ 1940.263862][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1940.263878][ T51] Workqueue: hci1 hci_rx_work [ 1940.263909][ T51] Call Trace: [ 1940.263918][ T51] [ 1940.263929][ T51] dump_stack_lvl+0xe8/0x150 [ 1940.263963][ T51] sysfs_create_dir_ns+0x259/0x280 [ 1940.264007][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1940.264037][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 1940.264073][ T51] kobject_add_internal+0x6ab/0xcc0 [ 1940.264110][ T51] kobject_add+0x155/0x220 [ 1940.264142][ T51] ? __pfx_kobject_add+0x10/0x10 [ 1940.264169][ T51] ? _raw_spin_unlock+0x28/0x50 [ 1940.264211][ T51] ? get_device_parent+0x366/0x3a0 [ 1940.264244][ T51] device_add+0x408/0xb80 [ 1940.264278][ T51] hci_conn_add_sysfs+0xd5/0x210 [ 1940.264322][ T51] le_conn_complete_evt+0xf1d/0x1420 [ 1940.264383][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1940.264422][ T51] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1940.264447][ T51] ? __asan_memcpy+0x40/0x70 [ 1940.264476][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1940.264500][ T51] ? skb_pull_data+0xfb/0x200 [ 1940.264535][ T51] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 1940.264571][ T51] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1940.264606][ T51] hci_event_packet+0x78f/0x1260 [ 1940.264635][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1940.264668][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 1940.264699][ T51] ? kcov_remote_start+0x49b/0x7a0 [ 1940.264736][ T51] ? hci_send_to_monitor+0xe2/0x590 [ 1940.264772][ T51] hci_rx_work+0x3ee/0x1060 [ 1940.264810][ T51] ? process_one_work+0x868/0x15a0 [ 1940.264834][ T51] process_one_work+0x93a/0x15a0 [ 1940.264884][ T51] ? __pfx_process_one_work+0x10/0x10 [ 1940.264907][ T51] ? do_raw_spin_lock+0x121/0x290 [ 1940.264951][ T51] ? assign_work+0x3c7/0x5b0 [ 1940.264981][ T51] worker_thread+0x9b0/0xee0 [ 1940.265037][ T51] kthread+0x389/0x480 [ 1940.265069][ T51] ? __pfx_worker_thread+0x10/0x10 [ 1940.265093][ T51] ? __pfx_kthread+0x10/0x10 [ 1940.265125][ T51] ret_from_fork+0x510/0xa50 [ 1940.265152][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 1940.265175][ T51] ? __switch_to+0xc9e/0x1480 [ 1940.265213][ T51] ? __pfx_kthread+0x10/0x10 [ 1940.265245][ T51] ret_from_fork_asm+0x1a/0x30 [ 1940.265306][ T51] [ 1940.554712][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1940.569107][ T51] Bluetooth: hci1: failed to register connection device [ 1941.254620][T24664] lo: entered allmulticast mode [ 1941.286132][T24664] tunl0: entered allmulticast mode [ 1941.323537][T24664] gre0: entered allmulticast mode [ 1941.356571][T24664] gretap0: entered allmulticast mode [ 1941.710367][T24664] erspan0: entered allmulticast mode [ 1941.743072][T24664] ip_vti0: entered allmulticast mode [ 1941.790677][T24664] ip6_vti0: entered allmulticast mode [ 1941.797105][T24664] sit0: entered allmulticast mode [ 1941.802868][T24664] ip6tnl0: entered allmulticast mode [ 1941.808919][T24664] ip6gre0: entered allmulticast mode [ 1941.814979][T24664] ip6gretap0: entered allmulticast mode [ 1941.821198][T24664] bridge0: entered allmulticast mode [ 1941.827230][T24664] vcan0: entered allmulticast mode [ 1941.833097][T24664] bond0: entered allmulticast mode [ 1942.034508][T24664] bond_slave_0: entered allmulticast mode [ 1942.041704][T24664] bond_slave_1: entered allmulticast mode [ 1942.049751][T24664] dummy0: entered allmulticast mode [ 1942.055683][T24664] nlmon0: entered allmulticast mode [ 1942.061584][T24664] caif0: entered allmulticast mode [ 1942.066932][T24664] batadv0: entered allmulticast mode [ 1942.073298][T24664] vxcan0: entered allmulticast mode [ 1942.079363][T24664] vxcan1: entered allmulticast mode [ 1942.085265][T24664] veth0: entered allmulticast mode [ 1942.091035][T24664] veth1: entered allmulticast mode [ 1942.096886][T24664] wg0: entered allmulticast mode [ 1942.102525][T24664] wg1: entered allmulticast mode [ 1942.108163][T24664] wg2: entered allmulticast mode [ 1942.113742][T24664] veth0_to_bridge: entered allmulticast mode [ 1942.121551][T24664] veth1_to_bridge: entered allmulticast mode [ 1942.129454][T24664] veth0_to_bond: entered allmulticast mode [ 1942.189679][T24664] veth1_to_bond: entered allmulticast mode [ 1942.197070][T24664] veth0_to_team: entered allmulticast mode [ 1942.204797][T24664] veth1_to_team: entered allmulticast mode [ 1942.212488][T24664] veth0_to_batadv: entered allmulticast mode [ 1942.219353][T24664] batadv_slave_0: entered allmulticast mode [ 1942.226154][T24664] veth1_to_batadv: entered allmulticast mode [ 1942.232919][T24664] batadv_slave_1: entered allmulticast mode [ 1942.239660][T24664] xfrm0: entered allmulticast mode [ 1942.246545][T24664] veth0_to_hsr: entered allmulticast mode [ 1942.253035][T24664] hsr_slave_0: entered allmulticast mode [ 1942.259523][T24664] veth1_to_hsr: entered allmulticast mode [ 1942.266032][T24664] hsr_slave_1: entered allmulticast mode [ 1942.272514][T24664] hsr0: entered allmulticast mode [ 1942.278314][T24664] veth1_virt_wifi: entered allmulticast mode [ 1942.285073][T24664] veth0_virt_wifi: entered allmulticast mode [ 1942.291814][T24664] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1942.299463][T24664] veth1_vlan: entered allmulticast mode [ 1942.305828][T24664] veth0_vlan: entered allmulticast mode [ 1942.312494][T24664] vlan0: entered allmulticast mode [ 1942.318433][T24664] vlan1: entered allmulticast mode [ 1942.324315][T24664] macvlan0: entered allmulticast mode [ 1942.330443][T24664] macvlan1: entered allmulticast mode [ 1942.336625][T24664] ipvlan0: entered allmulticast mode [ 1942.342155][T24664] ipvlan1: entered allmulticast mode [ 1942.348531][T24664] veth1_macvtap: entered allmulticast mode [ 1942.355600][T24664] veth0_macvtap: entered allmulticast mode [ 1942.362149][T24664] macvtap0: entered allmulticast mode [ 1942.368382][T24664] macsec0: entered allmulticast mode [ 1942.374236][T24664] geneve0: entered allmulticast mode [ 1942.380360][T24664] geneve1: entered allmulticast mode [ 1942.386458][T24664] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1942.394560][T24664] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1942.402679][T24664] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1942.410892][T24664] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1942.419061][T24664] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 1942.426870][T24664] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 1942.434693][T24664] bridge1: entered allmulticast mode [ 1942.440606][T24664] bridge2: entered allmulticast mode [ 1942.446579][T24664] bridge3: entered allmulticast mode [ 1942.453489][T24664] bridge4: entered allmulticast mode [ 1948.704750][T24724] overlayfs: failed to clone upperpath [ 1949.592944][T24727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5055'. [ 1952.544668][T24760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5071'. [ 1952.694011][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1952.708430][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1952.719621][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1952.733207][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1952.748840][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1953.391449][T24761] chnl_net:caif_netlink_parms(): no params data found [ 1953.850268][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1953.850290][ T30] audit: type=1800 audit(1952.991:357): pid=24786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5065" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1954.166792][T24797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5081'. [ 1955.466741][ T51] Bluetooth: hci5: command tx timeout [ 1955.963450][T24761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.974674][T24761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.984901][T24761] bridge_slave_0: entered allmulticast mode [ 1955.992867][T24761] bridge_slave_0: entered promiscuous mode [ 1956.068788][ T30] audit: type=1326 audit(1955.521:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.6.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1956.147266][ T30] audit: type=1326 audit(1955.551:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.6.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1957.034498][ T30] audit: type=1326 audit(1955.551:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.6.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1957.093945][ T6001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.138718][T24761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.140410][ T30] audit: type=1326 audit(1955.551:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.6.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1957.149415][T24761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.268633][T24761] bridge_slave_1: entered allmulticast mode [ 1957.287289][ T30] audit: type=1326 audit(1955.551:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24807 comm="syz.6.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f958f749 code=0x7ffc0000 [ 1957.292482][T24761] bridge_slave_1: entered promiscuous mode [ 1957.386617][ T30] audit: type=1326 audit(1956.521:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24809 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 1957.426756][ T6001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.454813][ T30] audit: type=1326 audit(1956.521:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24809 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 1957.495400][T24818] overlayfs: failed to clone upperpath [ 1957.554557][ T51] Bluetooth: hci5: command tx timeout [ 1957.751703][ T6001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.929135][ T6001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.008018][T24761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1958.055854][T24761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1958.220085][T24761] team0: Port device team_slave_0 added [ 1958.256260][T24761] team0: Port device team_slave_1 added [ 1958.538322][T24761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1958.545714][T24761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.566350][T24841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5098'. [ 1958.578940][T24761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1958.679292][T24761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1958.688429][T24761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.720146][T24761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1958.755347][ T6001] team0: left allmulticast mode [ 1958.760270][ T6001] team_slave_0: left allmulticast mode [ 1958.773745][ T6001] team_slave_1: left allmulticast mode [ 1958.779955][ T6001] bridge0: port 3(team0) entered disabled state [ 1958.791738][ T6001] bridge_slave_1: left allmulticast mode [ 1958.797516][ T6001] bridge_slave_1: left promiscuous mode [ 1958.808979][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.835359][ T6001] bridge_slave_0: left allmulticast mode [ 1958.844647][ T6001] bridge_slave_0: left promiscuous mode [ 1958.850471][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.647668][ T51] Bluetooth: hci5: command tx timeout [ 1960.686641][T24875] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5111'. [ 1960.833699][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1960.847639][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1960.859075][ T6001] bond0 (unregistering): Released all slaves [ 1960.886340][T24856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5102'. [ 1960.895434][T24856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5102'. [ 1961.110167][ T6001] tipc: Left network mode [ 1961.116693][T24885] fuse: Bad value for 'fd' [ 1961.175281][T24761] hsr_slave_0: entered promiscuous mode [ 1961.183558][T24761] hsr_slave_1: entered promiscuous mode [ 1961.193833][T24761] debugfs: 'hsr0' already exists in 'hsr' [ 1961.200609][T24761] Cannot create hsr debugfs directory [ 1961.714821][ T51] Bluetooth: hci5: command tx timeout [ 1962.128225][T24900] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5121'. [ 1963.011177][T24910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5123'. [ 1963.592794][ T6001] hsr_slave_0: left promiscuous mode [ 1963.758663][ T6001] hsr_slave_1: left promiscuous mode [ 1963.890186][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1963.960727][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1963.989253][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1964.009030][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1964.094033][ T6001] veth1_macvtap: left promiscuous mode [ 1964.108157][ T6001] veth0_macvtap: left promiscuous mode [ 1964.124815][ T6001] veth1_vlan: left promiscuous mode [ 1964.130390][ T6001] veth0_vlan: left promiscuous mode [ 1964.171940][T24931] fuse: Bad value for 'fd' [ 1965.160315][T24942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5130'. [ 1965.226756][T24944] netlink: 6672 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1965.237390][T24944] netlink: 6672 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1966.042412][ T6001] team_slave_1 (unregistering): left promiscuous mode [ 1966.050337][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 1966.107465][ T6001] team_slave_0 (unregistering): left promiscuous mode [ 1966.122687][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 1966.610613][T24956] overlayfs: failed to clone upperpath [ 1966.825804][T24920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5125'. [ 1966.837169][T24920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5125'. [ 1969.094343][ T6001] IPVS: stop unused estimator thread 0... [ 1969.145186][T25010] fuse: Unknown parameter '0x0000000000000003' [ 1969.932985][T25034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5156'. [ 1970.687308][T24761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1970.779795][T24761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1970.816935][T24761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1970.849380][T24761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1971.994544][T25072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1972.003695][T25072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1972.141112][T24761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1972.263095][T24761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1972.549065][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.556343][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1972.742679][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.749966][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1974.374821][T24761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1974.531336][T24761] veth0_vlan: entered promiscuous mode [ 1974.662985][T24761] veth1_vlan: entered promiscuous mode [ 1975.152648][T25138] netlink: 'syz.7.5179': attribute type 1 has an invalid length. [ 1975.263191][T25126] overlayfs: failed to clone upperpath [ 1975.283692][T24761] veth0_macvtap: entered promiscuous mode [ 1975.310437][T24761] veth1_macvtap: entered promiscuous mode [ 1975.341558][T24761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1975.359577][T24761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1975.598541][T25138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1975.606249][ T1328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.805474][T25142] veth5: entered promiscuous mode [ 1975.841617][T25142] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1975.882704][T25145] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1976.073880][ T6341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.104684][ T6341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.143560][ T6341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.349806][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.380116][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1977.070237][T25176] overlayfs: failed to clone upperpath [ 1977.127360][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1977.182702][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1977.762992][T25203] loop1: detected capacity change from 0 to 256 [ 1978.116114][T25216] netlink: 'syz.0.5200': attribute type 29 has an invalid length. [ 1978.184206][T25222] netlink: 'syz.1.5070': attribute type 3 has an invalid length. [ 1978.193103][T25222] netlink: 'syz.1.5070': attribute type 1 has an invalid length. [ 1978.858335][T25225] overlayfs: failed to clone upperpath [ 1981.015663][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5213'. [ 1981.643809][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.650574][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.012082][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5216'. [ 1982.375661][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5216'. [ 1985.878061][T25327] overlayfs: failed to resolve './file1': -2 [ 1985.889110][T25329] overlayfs: failed to clone upperpath [ 1986.860360][T25300] loop1: detected capacity change from 0 to 32768 [ 1987.045003][T25300] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1987.416889][T25300] XFS (loop1): Ending clean mount [ 1987.441896][T25300] XFS (loop1): Quotacheck needed: Please wait. [ 1987.497153][T25368] overlayfs: failed to clone upperpath [ 1987.509238][T25369] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5253'. [ 1987.620346][T25300] XFS (loop1): Quotacheck: Done. [ 1987.711740][T24761] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1988.301095][T25398] overlayfs: failed to clone upperpath [ 1988.641829][T25406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5267'. [ 1989.496730][T25435] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5281'. [ 1989.607360][T25440] overlayfs: failed to clone upperpath [ 1991.976443][T25476] netlink: 'syz.0.5294': attribute type 21 has an invalid length. [ 1991.985826][T25476] netlink: 'syz.0.5294': attribute type 1 has an invalid length. [ 1991.993691][T25476] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5294'. [ 1993.981812][T25507] netlink: 'syz.7.5305': attribute type 3 has an invalid length. [ 1993.989898][T25507] netlink: 'syz.7.5305': attribute type 1 has an invalid length. [ 1994.423719][T25509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5307'. [ 1994.436296][T25509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5307'. [ 1996.833485][T25547] loop1: detected capacity change from 0 to 2048 [ 1996.842389][T25547] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 256: 0x87 != 0x00 [ 1996.856242][T25547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1998.852508][T25573] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 2001.168893][T25610] loop1: detected capacity change from 0 to 2048 [ 2001.285253][T25610] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 256: 0x87 != 0x00 [ 2001.298891][T25610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2001.437030][T25612] xt_TCPMSS: Only works on TCP SYN packets [ 2003.153416][T25617] loop1: detected capacity change from 0 to 32768 [ 2003.266851][T25617] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 2003.325603][T25617] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2003.747929][T25617] XFS (loop1): Ending clean mount [ 2003.816328][T25617] XFS (loop1): Quotacheck needed: Please wait. [ 2003.957301][T25617] XFS (loop1): Quotacheck: Done. [ 2004.237678][T24761] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2006.726085][T25689] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5377'. [ 2006.868277][T25693] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5379'. [ 2008.016549][T25709] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5386'. [ 2008.035611][T25709] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.043453][T25709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.276990][T25717] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 2008.286423][T25720] fuse: Bad value for 'fd' [ 2010.854877][T25751] could not allocate digest TFM handle md5-generic [ 2013.208221][T25805] netlink: 'syz.7.5418': attribute type 3 has an invalid length. [ 2013.216189][T25805] netlink: 'syz.7.5418': attribute type 1 has an invalid length. [ 2015.559304][T25829] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5434'. [ 2017.697331][T25847] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5440'. [ 2018.228650][T25854] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2018.241208][T25854] SET target dimension over the limit! [ 2018.820905][ T30] audit: type=1326 audit(2018.279:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2018.882924][ T30] audit: type=1326 audit(2018.279:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2018.975420][ T30] audit: type=1326 audit(2018.299:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2019.064510][ T30] audit: type=1326 audit(2018.299:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2019.114483][ T30] audit: type=1326 audit(2018.309:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2019.184503][ T30] audit: type=1326 audit(2018.309:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2019.265585][ T30] audit: type=1326 audit(2018.309:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2019.347204][ T30] audit: type=1326 audit(2018.309:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.7.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79de18f749 code=0x7ffc0000 [ 2022.911122][T25914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5466'. [ 2026.388524][ T51] Bluetooth: hci2: unexpected event 0x20 length: 19 > 7 [ 2026.861086][T25966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5490'. [ 2026.909232][T25969] 9p: Bad value for 'rfdno' [ 2029.512689][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5503'. [ 2033.644907][T26045] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2033.908769][T26051] netlink: 'syz.6.5521': attribute type 4 has an invalid length. [ 2034.279631][T26061] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2035.172997][T26075] Cannot find add_set index 0 as target [ 2036.650784][T26082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5531'. [ 2040.550699][T26130] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2040.563427][T26130] bridge0: port 3(team0) entered disabled state [ 2040.573371][T26130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.581339][T26130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.087321][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.105959][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.590648][T26157] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5561'. [ 2044.134380][T26165] netlink: 'syz.1.5563': attribute type 21 has an invalid length. [ 2044.143494][T26165] netlink: 'syz.1.5563': attribute type 1 has an invalid length. [ 2044.151394][T26165] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5563'. [ 2046.449402][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5571'. [ 2046.968275][T26199] netlink: 'syz.6.5575': attribute type 21 has an invalid length. [ 2046.977318][T26199] netlink: 'syz.6.5575': attribute type 1 has an invalid length. [ 2046.985156][T26199] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5575'. [ 2050.640644][T26252] netlink: 'syz.6.5590': attribute type 21 has an invalid length. [ 2050.649547][T26252] netlink: 'syz.6.5590': attribute type 1 has an invalid length. [ 2050.657504][T26252] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5590'. [ 2051.773348][ T30] audit: type=1326 audit(2051.225:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.065594][ T30] audit: type=1326 audit(2051.255:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.188754][ T30] audit: type=1326 audit(2051.335:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.214799][ T30] audit: type=1326 audit(2051.365:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.264479][ T30] audit: type=1326 audit(2051.365:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.319273][ T30] audit: type=1326 audit(2051.385:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.368906][ T30] audit: type=1326 audit(2051.415:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.411783][ T30] audit: type=1326 audit(2051.425:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.474498][ T30] audit: type=1326 audit(2051.435:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2052.535146][ T30] audit: type=1326 audit(2051.435:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.0.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2055.105689][T26310] overlayfs: failed to clone lowerpath [ 2057.200899][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5637'. [ 2057.220847][T26356] gtp0: entered promiscuous mode [ 2057.225995][T26356] gtp0: entered allmulticast mode [ 2057.308556][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2057.308575][ T30] audit: type=1326 audit(2056.765:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26358 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5c78f749 code=0x7ffc0000 [ 2057.406286][ T30] audit: type=1326 audit(2056.795:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26358 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5c78f749 code=0x7ffc0000 [ 2057.462557][ T30] audit: type=1326 audit(2056.815:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26358 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fca5c78f749 code=0x7ffc0000 [ 2057.816905][ T30] audit: type=1326 audit(2056.825:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26358 comm="syz.1.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5c78f749 code=0x7ffc0000 [ 2059.983663][ T30] audit: type=1326 audit(2059.435:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26410 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2062.682525][ T30] audit: type=1326 audit(2062.135:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2062.748997][ T30] audit: type=1326 audit(2062.165:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2063.050398][T26458] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5674'. [ 2063.059946][T26458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5674'. [ 2063.072665][T26458] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5674'. [ 2063.082665][T26458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5674'. [ 2064.903974][T26470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5682'. [ 2065.010609][T26476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5683'. [ 2065.884520][T26492] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5688'. [ 2065.894436][T26492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5688'. [ 2066.345549][T26493] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5688'. [ 2066.355819][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5688'. [ 2067.798317][T26518] lo: entered allmulticast mode [ 2067.810534][T26518] tunl0: entered allmulticast mode [ 2067.822684][T26518] gre0: entered allmulticast mode [ 2067.833481][T26518] gretap0: entered allmulticast mode [ 2067.844396][T26518] erspan0: entered allmulticast mode [ 2067.855711][T26518] ip_vti0: entered allmulticast mode [ 2067.867787][T26518] ip6_vti0: entered allmulticast mode [ 2067.878814][T26518] sit0: entered allmulticast mode [ 2067.904373][T26518] ip6tnl0: entered allmulticast mode [ 2067.917025][T26518] ip6gre0: entered allmulticast mode [ 2067.928854][T26518] syz_tun: entered allmulticast mode [ 2067.941501][T26518] ip6gretap0: entered allmulticast mode [ 2067.953340][T26518] bridge0: entered allmulticast mode [ 2067.960939][T26518] vcan0: entered allmulticast mode [ 2067.973655][T26518] bond0: entered allmulticast mode [ 2067.979051][T26518] bond_slave_0: entered allmulticast mode [ 2067.985088][T26518] bond_slave_1: entered allmulticast mode [ 2068.002378][T26518] team0: entered allmulticast mode [ 2068.007713][T26518] team_slave_0: entered allmulticast mode [ 2068.013585][T26518] team_slave_1: entered allmulticast mode [ 2068.030248][T26518] dummy0: entered allmulticast mode [ 2068.045529][T26518] nlmon0: entered allmulticast mode [ 2068.058062][T26518] caif0: entered allmulticast mode [ 2068.065833][T26518] batadv0: entered allmulticast mode [ 2068.081848][T26518] vxcan0: entered allmulticast mode [ 2068.094249][T26518] vxcan1: entered allmulticast mode [ 2068.106879][T26518] veth0: entered allmulticast mode [ 2068.118584][T26518] veth1: entered allmulticast mode [ 2068.130132][T26518] wg0: entered allmulticast mode [ 2068.142463][T26518] wg1: entered allmulticast mode [ 2068.154233][T26518] wg2: entered allmulticast mode [ 2068.166875][T26518] veth0_to_bridge: entered allmulticast mode [ 2068.196616][T26518] veth1_to_bridge: entered allmulticast mode [ 2068.223433][T26518] veth0_to_bond: entered allmulticast mode [ 2068.245677][T26518] veth1_to_bond: entered allmulticast mode [ 2068.267292][T26518] veth0_to_team: entered allmulticast mode [ 2068.290286][T26518] veth1_to_team: entered allmulticast mode [ 2068.322633][T26518] veth0_to_batadv: entered allmulticast mode [ 2068.329546][T26518] batadv_slave_0: entered allmulticast mode [ 2068.336538][T26518] veth1_to_batadv: entered allmulticast mode [ 2068.343403][T26518] batadv_slave_1: entered allmulticast mode [ 2068.350077][T26518] xfrm0: entered allmulticast mode [ 2068.356077][T26518] veth0_to_hsr: entered allmulticast mode [ 2068.363542][T26518] hsr_slave_0: entered allmulticast mode [ 2068.370088][T26518] veth1_to_hsr: entered allmulticast mode [ 2068.376712][T26518] hsr_slave_1: entered allmulticast mode [ 2068.383180][T26518] hsr0: entered allmulticast mode [ 2068.389052][T26518] veth1_virt_wifi: entered allmulticast mode [ 2068.396597][T26518] veth0_virt_wifi: entered allmulticast mode [ 2068.404552][T26518] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2068.412045][T26518] veth1_vlan: entered allmulticast mode [ 2068.419340][T26518] veth0_vlan: entered allmulticast mode [ 2068.426082][T26518] vlan0: entered allmulticast mode [ 2068.431931][T26518] vlan1: entered allmulticast mode [ 2068.438264][T26518] macvlan0: entered allmulticast mode [ 2068.444505][T26518] macvlan1: entered allmulticast mode [ 2068.450768][T26518] ipvlan0: entered allmulticast mode [ 2068.456357][T26518] ipvlan1: entered allmulticast mode [ 2068.461815][T26518] veth1_macvtap: entered allmulticast mode [ 2068.468611][T26518] veth0_macvtap: entered allmulticast mode [ 2068.475336][T26518] macvtap0: entered allmulticast mode [ 2068.481542][T26518] macsec0: entered allmulticast mode [ 2068.487593][T26518] geneve0: entered allmulticast mode [ 2068.493684][T26518] geneve1: entered allmulticast mode [ 2068.499834][T26518] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2068.509442][T26518] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 2068.517742][T26518] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 2068.525917][T26518] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 2068.534104][T26518] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 2068.542237][T26518] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 2068.550316][T26518] gre1: entered allmulticast mode [ 2068.557246][T26518] gre2: entered allmulticast mode [ 2068.562435][T26518] bridge1: entered allmulticast mode [ 2069.637629][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5705'. [ 2070.699704][T26599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5713'. [ 2070.709094][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5713'. [ 2070.718147][T26599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5713'. [ 2070.735130][T26599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5713'. [ 2070.744513][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5713'. [ 2070.753675][T26599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5713'. [ 2071.940050][T26618] netlink: 'syz.1.5724': attribute type 4 has an invalid length. [ 2073.892311][T26645] netlink: 'syz.1.5732': attribute type 21 has an invalid length. [ 2073.900429][T26645] netlink: 'syz.1.5732': attribute type 1 has an invalid length. [ 2073.908258][T26645] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5732'. [ 2074.033974][T26642] ip6t_rpfilter: unknown options [ 2074.820465][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5731'. [ 2074.829778][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5731'. [ 2074.838767][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5731'. [ 2074.853297][T26649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5731'. [ 2074.862553][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5731'. [ 2074.871547][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5731'. [ 2075.211355][T26658] netlink: 'syz.6.5737': attribute type 4 has an invalid length. [ 2075.559514][T26669] bridge0: entered allmulticast mode [ 2075.772130][T26669] erspan0.1: entered allmulticast mode [ 2075.967234][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 2077.566085][T26693] SET target dimension over the limit! [ 2078.005881][T26697] netlink: 'syz.6.5751': attribute type 4 has an invalid length. [ 2080.346346][T26730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5761'. [ 2080.355675][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5761'. [ 2080.369016][T26730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5761'. [ 2080.378170][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5761'. [ 2080.842710][T26733] tipc: Enabling of bearer rejected, failed to enable media [ 2081.028307][T26736] netlink: 'syz.7.5766': attribute type 10 has an invalid length. [ 2081.036280][T26736] netlink: 55 bytes leftover after parsing attributes in process `syz.7.5766'. [ 2082.817355][ T30] audit: type=1326 audit(2082.269:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2082.907123][ T30] audit: type=1326 audit(2082.279:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53a98f749 code=0x7ffc0000 [ 2084.107668][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5777'. [ 2084.117192][T26769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5777'. [ 2084.130459][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5777'. [ 2084.139691][T26769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5777'. [ 2085.010687][T26778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5783'. [ 2085.301402][T26785] overlayfs: failed to resolve './file1': -2 [ 2086.488197][T26797] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5791'. [ 2086.586234][T26799] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2088.060375][T26811] ipvlan2: entered promiscuous mode [ 2088.094712][T26811] bridge0: port 3(ipvlan2) entered blocking state [ 2088.252199][T26811] bridge0: port 3(ipvlan2) entered disabled state [ 2088.274698][T26811] ipvlan2: entered allmulticast mode [ 2088.498139][T26811] ipvlan2: left allmulticast mode [ 2088.930794][T26823] netlink: 'syz.2.5800': attribute type 3 has an invalid length. [ 2088.938949][T26823] netlink: 'syz.2.5800': attribute type 1 has an invalid length. [ 2093.051758][T26870] netlink: 'syz.2.5818': attribute type 3 has an invalid length. [ 2093.059582][T26870] netlink: 'syz.2.5818': attribute type 1 has an invalid length. [ 2097.708732][T26914] netlink: 'syz.6.5829': attribute type 3 has an invalid length. [ 2097.726057][T26914] netlink: 'syz.6.5829': attribute type 1 has an invalid length. [ 2098.172057][ T30] audit: type=1326 audit(2097.629:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2098.247153][ T30] audit: type=1326 audit(2097.659:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2098.358736][ T30] audit: type=1326 audit(2097.659:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2098.434749][ T30] audit: type=1326 audit(2097.659:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2098.514149][ T30] audit: type=1326 audit(2097.659:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2098.585174][ T30] audit: type=1326 audit(2097.659:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2098.735976][ T30] audit: type=1326 audit(2097.659:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2098.765051][ T30] audit: type=1326 audit(2097.659:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26919 comm="syz.2.5831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9110d8f749 code=0x7ffc0000 [ 2099.717464][T26938] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5838'. [ 2102.143133][T26963] netlink: 'syz.0.5847': attribute type 3 has an invalid length. [ 2102.151414][T26963] netlink: 'syz.0.5847': attribute type 1 has an invalid length. [ 2102.788801][T26957] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2103.853623][T26980] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5853'. [ 2104.129834][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2104.167807][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2104.191571][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2104.218911][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2104.252581][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2104.578232][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.584657][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2105.787214][T26982] chnl_net:caif_netlink_parms(): no params data found [ 2106.864513][ T51] Bluetooth: hci1: command tx timeout [ 2109.043230][ T51] Bluetooth: hci1: command tx timeout [ 2109.247214][T26982] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.279586][T26982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.301985][T26982] bridge_slave_0: entered allmulticast mode [ 2109.349715][T26982] bridge_slave_0: entered promiscuous mode [ 2109.599066][T27025] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5862'. [ 2109.669491][T26982] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.715055][T26982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2109.744638][T26982] bridge_slave_1: entered allmulticast mode [ 2109.773760][T26982] bridge_slave_1: entered promiscuous mode [ 2110.727827][T17167] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.074483][ T51] Bluetooth: hci1: command tx timeout [ 2112.507110][T17167] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.154456][ T51] Bluetooth: hci1: command tx timeout [ 2113.228275][T26982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2113.299329][T26982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.521875][T17167] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.912087][T17167] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2115.743517][T27086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5882'. [ 2115.757327][T27086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5882'. [ 2116.247838][T26982] team0: Port device team_slave_0 added [ 2116.304060][T26982] team0: Port device team_slave_1 added [ 2116.564586][T26982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2116.571675][T26982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2116.637281][T26982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2117.824671][T26982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2118.344470][T26982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2118.380132][T26982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2118.408149][T27113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5891'. [ 2118.417407][T27113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5891'. [ 2118.748088][T27119] netlink: 'syz.6.5893': attribute type 21 has an invalid length. [ 2119.262457][T27119] netlink: 'syz.6.5893': attribute type 1 has an invalid length. [ 2119.270918][T27119] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5893'. [ 2119.291791][T26982] hsr_slave_0: entered promiscuous mode [ 2119.302631][T26982] hsr_slave_1: entered promiscuous mode [ 2119.310091][T26982] debugfs: 'hsr0' already exists in 'hsr' [ 2119.422821][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5895'. [ 2119.436258][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5895'. [ 2119.486328][T26982] Cannot create hsr debugfs directory [ 2119.629675][T17167] team0: left allmulticast mode [ 2119.719362][T17167] team_slave_0: left allmulticast mode [ 2119.825951][T17167] team_slave_1: left allmulticast mode [ 2120.053863][T17167] bridge0: port 3(team0) entered disabled state [ 2120.097496][T17167] bridge_slave_1: left allmulticast mode [ 2120.254518][T17167] bridge_slave_1: left promiscuous mode [ 2120.260374][T17167] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.880303][T17167] bridge_slave_0: left allmulticast mode [ 2120.887655][T27139] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2120.897324][T17167] bridge_slave_0: left promiscuous mode [ 2121.233174][T17167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.993137][T17167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2124.009266][T17167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2124.019923][T17167] bond0 (unregistering): Released all slaves [ 2124.169338][T17167] bond1 (unregistering): (slave veth5): Releasing active interface [ 2124.179421][T17167] bond1 (unregistering): Released all slaves [ 2124.198560][T27153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5905'. [ 2124.209441][T27153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5905'. [ 2124.441002][T17167] tipc: Left network mode [ 2124.485850][T27176] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2125.430050][T17167] hsr_slave_0: left promiscuous mode [ 2125.517875][T17167] hsr_slave_1: left promiscuous mode [ 2125.534284][T17167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2125.548666][T17167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2125.569896][T17167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2125.587501][T17167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2125.679564][T17167] veth1_macvtap: left promiscuous mode [ 2125.699505][T17167] veth0_macvtap: left promiscuous mode [ 2125.711677][T17167] veth1_vlan: left promiscuous mode [ 2125.727099][T17167] veth0_vlan: left promiscuous mode [ 2125.958928][T27217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5928'. [ 2126.842518][T17167] team_slave_1 (unregistering): left promiscuous mode [ 2126.850532][T17167] team0 (unregistering): Port device team_slave_1 removed [ 2126.908720][T17167] team_slave_0 (unregistering): left promiscuous mode [ 2126.916824][T17167] team0 (unregistering): Port device team_slave_0 removed [ 2127.523006][T27237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5934'. [ 2129.101160][T27269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5945'. [ 2129.130489][T27267] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2129.461753][T26982] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2129.603689][T26982] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2129.678877][T26982] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2129.719910][T26982] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2129.931812][T26982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2130.013683][T26982] 8021q: adding VLAN 0 to HW filter on device team0 [ 2130.068238][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.075624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2130.116992][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.124224][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2130.624044][T27315] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5956'. [ 2132.429254][T26982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2133.040231][T26982] veth0_vlan: entered promiscuous mode [ 2133.072235][T26982] veth1_vlan: entered promiscuous mode [ 2133.087387][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5966'. [ 2133.193573][T26982] veth0_macvtap: entered promiscuous mode [ 2133.247069][T26982] veth1_macvtap: entered promiscuous mode [ 2133.362687][T26982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2133.415451][T26982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2133.465950][ T6001] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2133.490925][ T6001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2133.521665][ T6001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2133.538328][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5968'. [ 2133.588955][ T6001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2133.666309][T27364] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2134.796311][T12692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.804261][T12692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.866928][T17167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.886537][T17167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2135.696596][T27398] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2136.169658][T16757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2136.197348][T16757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2136.207127][T16757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2136.231899][T16757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2136.242194][T16757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2138.252275][T27406] chnl_net:caif_netlink_parms(): no params data found [ 2138.286124][ T51] Bluetooth: hci2: command tx timeout [ 2138.481286][T27435] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2138.724983][T27406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.734912][T27406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.742239][T27406] bridge_slave_0: entered allmulticast mode [ 2138.810177][T27406] bridge_slave_0: entered promiscuous mode [ 2138.822487][T27406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.841650][T27406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.860749][T27406] bridge_slave_1: entered allmulticast mode [ 2138.879286][T27406] bridge_slave_1: entered promiscuous mode [ 2139.098460][T27406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2139.178990][T27406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2139.358419][T27406] team0: Port device team_slave_0 added [ 2139.371548][T27406] team0: Port device team_slave_1 added [ 2139.499955][T27406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2139.514667][T27406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2139.554151][T27454] loop7: detected capacity change from 0 to 128 [ 2139.593331][T27406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2139.648064][T27406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2139.680851][T27406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2139.759119][T27406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.142865][T27406] hsr_slave_0: entered promiscuous mode [ 2140.150750][T27406] hsr_slave_1: entered promiscuous mode [ 2140.158740][T27406] debugfs: 'hsr0' already exists in 'hsr' [ 2140.171537][T27406] Cannot create hsr debugfs directory [ 2140.251038][T27469] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2140.355307][T16757] Bluetooth: hci2: command tx timeout [ 2140.898497][T27406] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.476921][T27406] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.612968][T27406] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.796734][T27406] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.238211][T27406] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2142.251572][T27406] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2142.271743][T27406] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2142.357016][T27406] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2142.435017][T16757] Bluetooth: hci2: command tx timeout [ 2142.761718][T27406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2142.869720][T27406] 8021q: adding VLAN 0 to HW filter on device team0 [ 2143.615032][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2143.622255][T12670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2143.740804][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 2143.748135][T12670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2144.932077][ T51] Bluetooth: hci2: command tx timeout [ 2145.282406][T27406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2146.080914][T27406] veth0_vlan: entered promiscuous mode [ 2146.107667][T27406] veth1_vlan: entered promiscuous mode [ 2146.208625][T27406] veth0_macvtap: entered promiscuous mode [ 2146.237821][T27406] veth1_macvtap: entered promiscuous mode [ 2146.303197][T27406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2146.332289][T27406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2147.073739][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.098642][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.122452][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.271468][T18632] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2147.495561][T27549] loop7: detected capacity change from 0 to 128 [ 2147.534468][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2147.549954][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2147.682403][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2147.702152][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2149.775167][T27563] netlink: 'syz.6.5980': attribute type 21 has an invalid length. [ 2149.783077][T27563] netlink: 'syz.6.5980': attribute type 1 has an invalid length. [ 2149.790891][T27563] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5980'. [ 2150.228377][T27574] Cannot find add_set index 0 as target [ 2150.673053][T27578] loop7: detected capacity change from 0 to 64 [ 2151.372193][T27587] loop6: detected capacity change from 0 to 1024 [ 2151.435485][T27587] EXT4-fs: Ignoring removed mblk_io_submit option [ 2151.565901][T27587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2151.851568][T27592] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 2152.079404][T27586] loop7: detected capacity change from 0 to 131072 [ 2152.118482][T27586] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 2152.128571][T27586] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2152.131593][ T12] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 2152.151189][T27586] F2FS-fs (loop7): invalid crc value [ 2152.219272][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 2152.285346][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 2152.285346][ T12] [ 2152.301109][T27586] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2152.314953][T27586] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 2152.322037][T27586] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 2152.346249][T27406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2155.209760][T27613] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2156.002361][T27619] netlink: 'syz.6.6046': attribute type 21 has an invalid length. [ 2156.010523][T27619] netlink: 'syz.6.6046': attribute type 1 has an invalid length. [ 2156.018397][T27619] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6046'. [ 2158.006948][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6056'. [ 2158.034616][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6056'. [ 2158.510225][T27651] netlink: 'syz.0.6060': attribute type 21 has an invalid length. [ 2158.523646][T27651] netlink: 'syz.0.6060': attribute type 1 has an invalid length. [ 2158.531798][T27651] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6060'. [ 2159.580269][T27666] loop6: detected capacity change from 0 to 256 [ 2159.906155][T27669] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2160.734019][T27678] Cannot find add_set index 0 as target [ 2162.063665][T27696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'. [ 2162.073064][T27696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'. [ 2162.136058][T27696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6070'. [ 2162.162887][T27698] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6071'. [ 2162.777664][T27700] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 2162.877398][T27700] bridge_slave_0: left allmulticast mode [ 2162.893087][T27700] bridge_slave_0: left promiscuous mode [ 2162.902386][T27700] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.925299][T27706] netlink: 'syz.6.6073': attribute type 21 has an invalid length. [ 2162.943915][T27705] netlink: 'syz.7.6072': attribute type 10 has an invalid length. [ 2162.981041][T27700] bridge_slave_1: left allmulticast mode [ 2162.992240][T27700] bridge_slave_1: left promiscuous mode [ 2162.998358][T27700] bridge0: port 2(bridge_slave_1) entered disabled state [ 2164.157436][T27700] bond0: (slave bond_slave_0): Releasing backup interface [ 2164.228284][T27700] bond0: (slave bond_slave_1): Releasing backup interface [ 2164.371302][T27700] team0: Port device team_slave_0 removed [ 2164.726676][T27700] team0: Port device team_slave_1 removed [ 2164.734143][T27700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2164.757414][T27700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2164.776985][T27700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2164.791232][T27700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2164.837771][T27700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2164.905496][T27706] netlink: 'syz.6.6073': attribute type 1 has an invalid length. [ 2164.913328][T27706] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6073'. [ 2164.964828][T27705] mac80211_hwsim hwsim42 wlan1: left allmulticast mode [ 2165.005088][T27705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2165.036674][T27705] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2165.364129][T27725] loop7: detected capacity change from 0 to 512 [ 2165.436748][T27725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2165.619292][T26982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2165.962997][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.969406][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.159479][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6085'. [ 2166.170533][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6085'. [ 2166.335005][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6085'. [ 2166.507674][T27743] loop2: detected capacity change from 0 to 7 [ 2166.530100][T27743] Dev loop2: unable to read RDB block 7 [ 2166.536306][T27743] loop2: unable to read partition table [ 2166.544390][T27743] loop2: partition table beyond EOD, truncated [ 2166.550896][T27743] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2167.928889][T27751] SET target dimension over the limit! [ 2171.108936][T27789] netlink: 'syz.1.6101': attribute type 8 has an invalid length. [ 2171.544620][T27796] lo: entered allmulticast mode [ 2171.553121][T27796] tunl0: entered allmulticast mode [ 2171.562447][T27796] gre0: entered allmulticast mode [ 2171.570058][T27796] gretap0: entered allmulticast mode [ 2171.578320][T27796] erspan0: entered allmulticast mode [ 2171.586346][T27796] ip_vti0: entered allmulticast mode [ 2171.809875][T27796] ip6_vti0: entered allmulticast mode [ 2171.818949][T27796] sit0: entered allmulticast mode [ 2171.829654][T27796] ip6tnl0: entered allmulticast mode [ 2171.838915][T27796] ip6gre0: entered allmulticast mode [ 2171.848131][T27796] syz_tun: entered allmulticast mode [ 2171.858187][T27796] ip6gretap0: entered allmulticast mode [ 2171.867587][T27796] bridge0: entered allmulticast mode [ 2171.876815][T27796] vcan0: entered allmulticast mode [ 2171.888135][T27796] bond0: entered allmulticast mode [ 2171.893488][T27796] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 2171.908029][T27796] team0: entered allmulticast mode [ 2171.920453][T27796] dummy0: entered allmulticast mode [ 2171.931770][T27796] nlmon0: entered allmulticast mode [ 2171.941100][T27796] caif0: entered allmulticast mode [ 2171.947811][T27796] batadv0: entered allmulticast mode [ 2171.958499][T27796] vxcan0: entered allmulticast mode [ 2171.968162][T27796] vxcan1: entered allmulticast mode [ 2171.989585][T27796] veth0: entered allmulticast mode [ 2171.995596][T27796] veth1: entered allmulticast mode [ 2172.001467][T27796] wg0: entered allmulticast mode [ 2172.007333][T27796] wg1: entered allmulticast mode [ 2172.013042][T27796] wg2: entered allmulticast mode [ 2172.018784][T27796] veth0_to_bridge: entered allmulticast mode [ 2172.025830][T27796] bridge_slave_0: entered allmulticast mode [ 2172.043961][T27796] veth1_to_bridge: entered allmulticast mode [ 2172.050745][T27796] bridge_slave_1: entered allmulticast mode [ 2172.057409][T27796] veth0_to_bond: entered allmulticast mode [ 2172.064205][T27796] bond_slave_0: entered allmulticast mode [ 2172.070229][T27796] veth1_to_bond: entered allmulticast mode [ 2172.077027][T27796] bond_slave_1: entered allmulticast mode [ 2172.082937][T27796] veth0_to_team: entered allmulticast mode [ 2172.089662][T27796] team_slave_0: entered allmulticast mode [ 2172.095707][T27796] veth1_to_team: entered allmulticast mode [ 2172.102464][T27796] team_slave_1: entered allmulticast mode [ 2172.108410][T27796] veth0_to_batadv: entered allmulticast mode [ 2172.115458][T27796] batadv_slave_0: entered allmulticast mode [ 2172.122094][T27796] veth1_to_batadv: entered allmulticast mode [ 2172.128791][T27796] batadv_slave_1: entered allmulticast mode [ 2172.137264][T27796] xfrm0: entered allmulticast mode [ 2172.143134][T27796] veth0_to_hsr: entered allmulticast mode [ 2172.149613][T27796] hsr_slave_0: entered allmulticast mode [ 2172.156086][T27796] veth1_to_hsr: entered allmulticast mode [ 2172.162576][T27796] hsr_slave_1: entered allmulticast mode [ 2172.169016][T27796] hsr0: entered allmulticast mode [ 2172.174765][T27796] veth1_virt_wifi: entered allmulticast mode [ 2172.181541][T27796] veth0_virt_wifi: entered allmulticast mode [ 2172.188143][T27796] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2172.195671][T27796] veth1_vlan: entered allmulticast mode [ 2172.201729][T27796] veth0_vlan: entered allmulticast mode [ 2172.208090][T27796] vlan0: entered allmulticast mode [ 2172.213668][T27796] vlan1: entered allmulticast mode [ 2172.219406][T27796] macvlan0: entered allmulticast mode [ 2172.225319][T27796] macvlan1: entered allmulticast mode [ 2172.231129][T27796] ipvlan0: entered allmulticast mode [ 2172.238501][T27796] ipvlan1: entered allmulticast mode [ 2172.243952][T27796] veth1_macvtap: entered allmulticast mode [ 2172.250604][T27796] veth0_macvtap: entered allmulticast mode [ 2172.257266][T27796] macvtap0: entered allmulticast mode [ 2172.263407][T27796] macsec0: entered allmulticast mode [ 2172.269371][T27796] geneve0: entered allmulticast mode [ 2172.275451][T27796] geneve1: entered allmulticast mode [ 2172.281473][T27796] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 2172.289703][T27796] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 2172.297887][T27796] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 2172.306142][T27796] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 2172.314319][T27796] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 2172.974415][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2173.094032][T27821] overlayfs: failed to clone upperpath [ 2173.206993][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 2173.416163][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2173.558382][ T9] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2173.715258][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.723331][ T9] usb 7-1: Product: syz [ 2173.728056][ T9] usb 7-1: Manufacturer: syz [ 2173.733485][ T9] usb 7-1: SerialNumber: syz [ 2173.753578][ T9] usb 7-1: config 0 descriptor?? [ 2174.569926][ T107] usb 7-1: USB disconnect, device number 15 [ 2174.924091][T27842] netlink: 'syz.1.6117': attribute type 8 has an invalid length. [ 2177.497700][T27880] netlink: 'syz.2.6131': attribute type 8 has an invalid length. [ 2179.383451][T27915] loop6: detected capacity change from 0 to 128 [ 2179.856750][T27922] netlink: 'syz.1.6144': attribute type 3 has an invalid length. [ 2180.825487][T27930] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6146'. [ 2181.691042][T27935] netlink: 'syz.2.6148': attribute type 21 has an invalid length. [ 2181.703617][T27935] netlink: 'syz.2.6148': attribute type 1 has an invalid length. [ 2181.711535][T27935] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6148'. [ 2183.201413][T27946] loop7: detected capacity change from 0 to 32768 [ 2183.221741][T27958] loop6: detected capacity change from 0 to 256 [ 2183.266941][T27946] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2183.720722][T27970] netlink: 'syz.6.6157': attribute type 3 has an invalid length. [ 2184.297995][T27946] XFS (loop7): Ending clean mount [ 2184.528314][T27977] loop6: detected capacity change from 0 to 128 [ 2184.617142][T27979] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6160'. [ 2185.189915][T26982] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2185.571013][T27984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6162'. [ 2186.682678][T27562] bridge0: port 3(team0) entered disabled state [ 2186.785512][T27562] bridge_slave_1: left promiscuous mode [ 2186.793882][T27562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.871929][T27562] bridge_slave_0: left promiscuous mode [ 2186.892269][T27562] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.562720][T28051] netlink: 'syz.1.6184': attribute type 8 has an invalid length. [ 2190.700706][T27562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2191.035104][T27562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2191.127652][T27562] bond0 (unregistering): Released all slaves [ 2191.681192][T28064] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6187'. [ 2191.869159][T27562] IPVS: stopping backup sync thread 19900 ... [ 2196.369502][T27562] hsr_slave_0: left promiscuous mode [ 2196.394006][T27562] hsr_slave_1: left promiscuous mode [ 2196.419196][T27562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2196.456077][T27562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2196.485732][T27562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2196.509103][T27562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2196.615351][T27562] veth1_macvtap: left promiscuous mode [ 2196.627020][T27562] veth0_macvtap: left promiscuous mode [ 2196.639527][T27562] veth1_vlan: left promiscuous mode [ 2196.657582][T27562] veth0_vlan: left promiscuous mode [ 2197.204493][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6196'. [ 2304.244419][ C0] ------------[ cut here ]------------ [ 2304.251935][ C0] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall+0x2e4/0x470, CPU#0: swapper/0/0 [ 2304.262822][ C0] Modules linked in: [ 2304.268302][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2304.278851][ C0] Tainted: [L]=SOFTLOCKUP [ 2304.283202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2304.293327][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 2304.299696][ C0] Code: ff ff 48 c7 c7 80 c5 b0 99 be 04 00 00 00 e8 c3 2d 80 00 4c 89 f7 b8 01 00 00 00 87 05 55 71 09 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 40 41 14 8e 74 47 48 c7 c0 80 6d a2 8f 48 c1 e8 [ 2304.319337][ C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00010046 [ 2304.325435][ C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81a7541d [ 2304.333427][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144140 [ 2304.341500][ C0] RBP: ffffc90000007f30 R08: 0000000000000003 R09: 0000000000000004 [ 2304.349495][ C0] R10: dffffc0000000000 R11: fffffbfff33618b0 R12: 0000000000002904 [ 2304.357489][ C0] R13: dffffc0000000000 R14: ffffffff8e144140 R15: dffffc0000000000 [ 2304.365516][ C0] FS: 0000000000000000(0000) GS:ffff888125c0c000(0000) knlGS:0000000000000000 [ 2304.374464][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2304.381064][ C0] CR2: 0000001b2d214ff8 CR3: 0000000079f00000 CR4: 00000000003526f0 [ 2304.389061][ C0] Call Trace: [ 2304.392393][ C0] [ 2304.395265][ C0] rcu_core+0x402/0x1060 [ 2304.399539][ C0] ? sched_clock+0x3f/0x60 [ 2304.403986][ C0] ? sched_clock_cpu+0x74/0x430 [ 2304.408869][ C0] ? ktime_get+0x1d2/0x200 [ 2304.413341][ C0] ? lapic_next_event+0x11/0x20 [ 2304.418214][ C0] ? clockevents_program_event+0x247/0x350 [ 2304.424045][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2304.429380][ C0] ? __pfx_rcu_core+0x10/0x10 [ 2304.434079][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2304.439304][ C0] ? sched_clock_cpu+0x74/0x430 [ 2304.444199][ C0] handle_softirqs+0x22b/0x7c0 [ 2304.448997][ C0] ? __irq_exit_rcu+0x60/0x150 [ 2304.453816][ C0] __irq_exit_rcu+0x60/0x150 [ 2304.458426][ C0] irq_exit_rcu+0x9/0x30 [ 2304.462692][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2304.468354][ C0] [ 2304.471322][ C0] [ 2304.474315][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2304.480319][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2304.486069][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 8e 2b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2304.505700][ C0] RSP: 0018:ffffffff8de07dc0 EFLAGS: 000002c2 [ 2304.511799][ C0] RAX: 00000000035b3629 RBX: ffffffff819717be RCX: 0000000080000001 [ 2304.519803][ C0] RDX: 0000000000000001 RSI: ffffffff8d99cce1 RDI: ffffffff8be082e0 [ 2304.527798][ C0] RBP: ffffffff8de07eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 2304.535792][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff8fa23d70 [ 2304.543803][ C0] R13: 1ffffffff1bd29b8 R14: 0000000000000000 R15: 0000000000000000 [ 2304.551804][ C0] ? do_idle+0x1be/0x4d0 [ 2304.556099][ C0] default_idle+0x13/0x20 [ 2304.560479][ C0] default_idle_call+0x73/0xb0 [ 2304.565296][ C0] do_idle+0x1be/0x4d0 [ 2304.569382][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2304.575045][ C0] ? __pfx_do_idle+0x10/0x10 [ 2304.579686][ C0] cpu_startup_entry+0x44/0x60 [ 2304.584478][ C0] rest_init+0x2de/0x300 [ 2304.588744][ C0] start_kernel+0x381/0x3d0 [ 2304.593291][ C0] x86_64_start_reservations+0x24/0x30 [ 2304.598783][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2304.603928][ C0] common_startup_64+0x13e/0x147 [ 2304.608917][ C0] [ 2304.611977][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2304.619301][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2304.629825][ C0] Tainted: [L]=SOFTLOCKUP [ 2304.634163][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2304.644235][ C0] Call Trace: [ 2304.647551][ C0] [ 2304.650422][ C0] vpanic+0x1e0/0x670 [ 2304.654443][ C0] panic+0xb9/0xc0 [ 2304.658212][ C0] ? __pfx_panic+0x10/0x10 [ 2304.662687][ C0] ? common_startup_64+0x13e/0x147 [ 2304.667861][ C0] __warn+0x317/0x4b0 [ 2304.671869][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2304.677622][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2304.683374][ C0] __report_bug+0x288/0x500 [ 2304.687912][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 2304.692875][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2304.698640][ C0] ? __pfx___report_bug+0x10/0x10 [ 2304.703697][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 2304.708659][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2304.713887][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2304.719644][ C0] report_bug+0x16a/0x220 [ 2304.724000][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2304.729749][ C0] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 2304.735517][ C0] handle_bug+0x98/0x200 [ 2304.739792][ C0] exc_invalid_op+0x1a/0x50 [ 2304.744320][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2304.749190][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 2304.755554][ C0] Code: ff ff 48 c7 c7 80 c5 b0 99 be 04 00 00 00 e8 c3 2d 80 00 4c 89 f7 b8 01 00 00 00 87 05 55 71 09 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 40 41 14 8e 74 47 48 c7 c0 80 6d a2 8f 48 c1 e8 [ 2304.775183][ C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00010046 [ 2304.781279][ C0] RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81a7541d [ 2304.789277][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144140 [ 2304.797280][ C0] RBP: ffffc90000007f30 R08: 0000000000000003 R09: 0000000000000004 [ 2304.805275][ C0] R10: dffffc0000000000 R11: fffffbfff33618b0 R12: 0000000000002904 [ 2304.813281][ C0] R13: dffffc0000000000 R14: ffffffff8e144140 R15: dffffc0000000000 [ 2304.821287][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 2304.827044][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 2304.832820][ C0] rcu_core+0x402/0x1060 [ 2304.837096][ C0] ? sched_clock+0x3f/0x60 [ 2304.841554][ C0] ? sched_clock_cpu+0x74/0x430 [ 2304.846427][ C0] ? ktime_get+0x1d2/0x200 [ 2304.850875][ C0] ? lapic_next_event+0x11/0x20 [ 2304.855746][ C0] ? clockevents_program_event+0x247/0x350 [ 2304.861618][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2304.866972][ C0] ? __pfx_rcu_core+0x10/0x10 [ 2304.871732][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2304.876968][ C0] ? sched_clock_cpu+0x74/0x430 [ 2304.881871][ C0] handle_softirqs+0x22b/0x7c0 [ 2304.886672][ C0] ? __irq_exit_rcu+0x60/0x150 [ 2304.891484][ C0] __irq_exit_rcu+0x60/0x150 [ 2304.896104][ C0] irq_exit_rcu+0x9/0x30 [ 2304.900383][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2304.906071][ C0] [ 2304.909044][ C0] [ 2304.912005][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2304.918039][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2304.923782][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 8e 2b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2304.943405][ C0] RSP: 0018:ffffffff8de07dc0 EFLAGS: 000002c2 [ 2304.949507][ C0] RAX: 00000000035b3629 RBX: ffffffff819717be RCX: 0000000080000001 [ 2304.957521][ C0] RDX: 0000000000000001 RSI: ffffffff8d99cce1 RDI: ffffffff8be082e0 [ 2304.965532][ C0] RBP: ffffffff8de07eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 2304.973528][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff8fa23d70 [ 2304.981519][ C0] R13: 1ffffffff1bd29b8 R14: 0000000000000000 R15: 0000000000000000 [ 2304.989526][ C0] ? do_idle+0x1be/0x4d0 [ 2304.993804][ C0] default_idle+0x13/0x20 [ 2304.998158][ C0] default_idle_call+0x73/0xb0 [ 2305.002949][ C0] do_idle+0x1be/0x4d0 [ 2305.007067][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2305.012728][ C0] ? __pfx_do_idle+0x10/0x10 [ 2305.017368][ C0] cpu_startup_entry+0x44/0x60 [ 2305.022163][ C0] rest_init+0x2de/0x300 [ 2305.026452][ C0] start_kernel+0x381/0x3d0 [ 2305.030994][ C0] x86_64_start_reservations+0x24/0x30 [ 2305.036484][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2305.041624][ C0] common_startup_64+0x13e/0x147 [ 2305.046611][ C0] [ 2306.198343][ C0] Shutting down cpus with NMI [ 2306.203716][ C0] Kernel Offset: disabled [ 2306.208051][ C0] Rebooting in 86400 seconds..