last executing test programs: 10.64315136s ago: executing program 0 (id=141): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0x0, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7ffffff}, 0x94) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) 10.410582963s ago: executing program 1 (id=143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000006000000000000000095000000000000005a4c36b921fbe18745452d2f8e9c020f9bfe9198c52a91011c4a09e25276a1ff6a4dddee89e5cd3bd68d67985070dac30e87ed87c5c2f37b01f203bfe296c11a060f07de6037f22a2203f575bd2cf2276bb21ed2141fd27eca8c3c5fa537e4cc3bd8c5df41a5cdda49baa5511f24f1883b573f66c70e8554628dfa5e8ac02d425f417a986d122b52450c88bc75e54cac6fb8a55bb987c91b2db8dba74cd5fd7f458033a97f3c4dcdb895"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) 10.007436089s ago: executing program 1 (id=146): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x80809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000120000000018f40000e03bb747d65491619cb62cbc45f1efc741083837e7c637e3331f754228c70c9b1e96bebeb3e1bc7b1118234511ae51bdd814bad37c0d6a6d0355f012b10fc66b2100"/95, @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) shutdown(0xffffffffffffffff, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) chdir(&(0x7f0000000480)='./cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c00)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x5}, 0x2, 0x78, 0x2, 0x4, 0xf, 'syz0\x00', "506021dc2899bfe89dd0627383d0bd6970a3f715f0fbca659ee7e98f12e2c0e0", "6afcaf17364cdb21c171783d0ebfbe92205aed6927e6b50aff784bfc4863d809", [{0xe, 0x0, {0x0, 0x7ff}}, {0xdd3, 0x1, {0x1, 0xcb}}, {0x2, 0x1, {0x3, 0x80}}, {0x8, 0x3, {0x2, 0x7}}, {0xc6e, 0xe1, {0x3, 0x7}}, {0x2, 0x2, {0x3, 0x5}}, {0x101, 0x7, {0x2, 0x1}}, {0x8, 0x4, {0x2, 0xffff}}, {0x400, 0x3, {0x0, 0x2}}, {0xfffd, 0x7, {0x3}}, {0x9, 0xe6f0, {0x1, 0x8c2}}, {0x3, 0x42e0, {0x0, 0x2}}, {0x1, 0xe, {0x1, 0x101}}, {0x9, 0x8, {0x2, 0x2}}, {0x3, 0x8001, {0x2, 0xffffffc0}}, {0x0, 0x50, {0x3, 0xd1b2}}, {0x2, 0xb95, {0x2}}, {0x9, 0xb3, {0x2}}, {0x9, 0xeed, {0x2}}, {0xffff, 0x22d, {0x1, 0x7}}, {0x1, 0x8, {0x0, 0x5}}, {0x3, 0x9, {0x1, 0x3}}, {0x0, 0x8, {0x1, 0x401}}, {0x4, 0x1, {0x0, 0x3}}, {0x9, 0x2572, {0x3, 0x6}}, {0x1, 0x6abf, {0x3, 0x7}}, {0x2, 0x8000, {0x2, 0xdb}}, {0x2, 0x2, {0x0, 0x3}}, {0x2, 0x3, {0x0, 0x3ff}}, {0x1ff, 0x5, {0x0, 0x8b}}, {0x7, 0x0, {0x0, 0x1000}}, {0x9, 0x19, {0x3, 0x5}}, {0x7ba, 0x4, {0x0, 0x6}}, {0x9, 0x5a1, {0x3, 0x4}}, {0x5, 0x7, {0x0, 0x9523}}, {0xb, 0x6, {0x3, 0x40}}, {0x401, 0x357, {0x1, 0x40}}, {0xf001, 0xe29, {0x1, 0x6}}, {0x401, 0x1, {0x4c695d35ae282644, 0x9}}, {0x8001, 0x80, {0x0, 0x80000000}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0xdb, 0x40, 0x2, 0x80, 0x6, 'syz0\x00', "86442f457210c40aa937a43588a9d8e395fc1dd207592b6768ad73e889b5d266", "9ac453ade6c1a9b3bc62a9aae7fe91524d09d7359ee3abfd9a65d0b387f6a3a8", [{0x3, 0x4, {0x1, 0x4}}, {0xebb, 0x8a01, {0x7, 0xff}}, {0x4, 0x81, {0x3, 0x2}}, {0x8000, 0x4, {0x1, 0xfffffff9}}, {0x4, 0x7fff, {0x2, 0x63}}, {0x8f, 0x5, {0x0, 0x1}}, {0x2, 0x22, {0x0, 0x8}}, {0x2, 0x1, {0x3, 0x783b0f97}}, {0x7ff, 0x0, {0x1, 0x9}}, {0x1, 0x8, {0x2, 0x4}}, {0x100, 0xb2, {0x1, 0x80}}, {0x7, 0xb, {0x0, 0x915}}, {0x2, 0x8, {0x1, 0x2}}, {0x8, 0x7ff, {0x0, 0xc8}}, {0x7, 0x2, {0x3, 0xe8e6}}, {0x2, 0x4, {0x3, 0x9}}, {0x5, 0x3, {0x2, 0x5}}, {0x0, 0x67, {0x46dcf840943055f9, 0x5}}, {0x9c86, 0x2, {0x3, 0x1}}, {0x143, 0xb, {0x2, 0x2}}, {0xfff, 0x1, {0x3, 0x9}}, {0xb805, 0x81, {0x3, 0x6}}, {0x9799, 0x100, {0x0, 0xcf}}, {0x1ff, 0xd4, {0x2, 0x7ff}}, {0x8, 0x6, {0x3, 0x86}}, {0x3, 0xfffa, {0x658764186958d756, 0x9}}, {0x7ff, 0x7, {0x1}}, {0x5, 0x3, {0x0, 0xe33}}, {0x0, 0x138d, {0x0, 0x1000}}, {0x4, 0x5, {0x3}}, {0x8, 0x0, {0x0, 0x62}}, {0x4, 0x725, {0x0, 0x1ff}}, {0x0, 0x4, {0x3, 0x800000}}, {0x1, 0xa, {0x3, 0x5}}, {0x401, 0x1, {0x3, 0x2}}, {0x7fff, 0x10, {0x1, 0x7}}, {0x0, 0x7ff, {0x1}}, {0x6b, 0x5a6, {0x2, 0x8}}, {0x5, 0x400, {0x0, 0x1}}, {0x5, 0xffff, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x2, 0x2, 0x7fff, 0xa, 0x4, 'syz0\x00', "9e0204a80827c4e9fa52cb1bb6148f642f2c0f36c1b911928dcb108b5bce2965", "5ca7dd67dc3c0fb6bd4420132c5dcd6263d1ffc4e4cc839a44528ef32ab1befc", [{0xbfa0, 0xaafd, {0x1, 0x5}}, {0x3, 0x6, {0x1, 0x60000}}, {0x5, 0x1, {0x2, 0xad4}}, {0x3ff, 0x7, {0x2}}, {0x7, 0x3, {0x0, 0x2}}, {0x7f8, 0x1, {0x0, 0xe8a}}, {0x8, 0x1, {0x0, 0xfffffff8}}, {0x4, 0x100, {0x0, 0x8}}, {0x7, 0x7, {0x3, 0x7}}, {0x1, 0x6, {0x2, 0x28d4}}, {0x6, 0x8000, {0x0, 0x375d61d7}}, {0x7b, 0x2, {0x2, 0x8000}}, {0x9b09, 0x40, {0x3, 0x9}}, {0x8, 0x10, {0x2, 0x6}}, {0x1, 0xd, {0x0, 0x4}}, {0x6, 0x7f, {0x1, 0x3}}, {0x3, 0x9, {0x2, 0x7}}, {0x8, 0x400, {0x1, 0x2}}, {0x4, 0x9, {0x1, 0x9}}, {0x8000, 0x800, {0x2, 0xbf}}, {0x7fff, 0x4, {0x3, 0x8}}, {0x0, 0xe781, {0xd2f374269d13332f, 0x9}}, {0xf, 0x1, {0x3}}, {0xfe70, 0xc510, {0x0, 0x80}}, {0x140, 0x4, {0x0, 0x7f}}, {0x6, 0x10, {0x2, 0x43a}}, {0xc2ad, 0x6, {0x0, 0xffffbbe2}}, {0x2, 0x5, {0x2, 0x1}}, {0x8, 0xd, {0x0, 0x9}}, {0x800, 0x59, {0x2, 0x9}}, {0x401, 0x6, {0x1, 0x9}}, {0x6f, 0xe, {0x2, 0x3}}, {0x8001, 0x3, {0x0, 0x1000}}, {0xd, 0x1, {0x2, 0x400}}, {0x4e, 0x0, {0x1, 0x3}}, {0x4, 0x40, {0x2, 0x2}}, {0x3, 0x8, {0x0, 0x2}}, {0x6, 0x4, {0x2, 0xffff}}, {0x2, 0x4, {0x1}}, {0x8, 0x8000, {0x0, 0x800}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4000051}, 0x4000000) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 9.731650553s ago: executing program 1 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000000001000000180000000200861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYRES8=r7, @ANYRES16, @ANYBLOB="01002cb17000ffdbdf256900000008"], 0x24}, 0x1, 0x0, 0x0, 0x44844}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x28, 0x0, &(0x7f0000001a00)="000000000000000022385ba988a88dc288a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r11, &(0x7f0000000600)="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", 0x7e9, 0x6, 0x0) mq_timedreceive(r11, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf23}, 0x94) 9.18784731s ago: executing program 1 (id=152): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001b0065f1741472b7388c6f0000000000000000000000400000000000000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c0015"], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000090000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r4, 0x0, 0x800}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() r5 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x8, 0x0) 8.52561434s ago: executing program 0 (id=156): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a991", 0x10}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.272813283s ago: executing program 1 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30) 8.162250355s ago: executing program 0 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bond\x00', 0x200}) 7.911426198s ago: executing program 0 (id=164): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0x0, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7ffffff}, 0x94) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) 5.315726505s ago: executing program 0 (id=167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001b0065f1741472b7388c6f0000000000000000000000400000000000000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c0015"], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000090000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r4, 0x0, 0x800}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpid() r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x8, 0x0) 4.658252244s ago: executing program 3 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 4.458524098s ago: executing program 2 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.371688588s ago: executing program 2 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.505015091s ago: executing program 2 (id=174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) setresgid(0xee00, 0xee01, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}}], 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1000}, {r5, 0x18}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000100)={0xd, 0xb6}) sendto$inet(r0, &(0x7f0000000380)="f974e0b6918af26b22d1996711ccba00fda0f9ac04f8b24103ee346e2027ca29f92962b9a677c10fe6b772e6e6524b3d483b4171acf59737481095f17a6a45ef0173e4b31fb84f762b1420374e23129b8d6dc506eae2589768cc0c96484881bb2d8248741fa54949704913db2c829bf6a92fd0aea53ab2246c8563577351ab647533e020466b1f59efe2e02572a12ce8cf70426a433efa87362d354f8558efbdd3ee86323f100a3a6d031e6259", 0xad, 0x45, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x2d, 0x1, 0x1, 0x400, 0x88}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x4c8d0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$inet_udp(0x2, 0x2, 0x0) 3.437312792s ago: executing program 1 (id=175): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x8, 0x0, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7ffffff}, 0x94) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) 3.367246473s ago: executing program 3 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000c4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3.362665183s ago: executing program 0 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637288"], 0xe) 2.342090457s ago: executing program 2 (id=178): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 1.145738334s ago: executing program 2 (id=179): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x80809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000120000000018f40000e03bb747d65491619cb62cbc45f1efc741083837e7c637e3331f754228c70c9b1e96bebeb3e1bc7b1118234511ae51bdd814bad37c0d6a6d0355f012b10fc66b2100"/95, @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) shutdown(0xffffffffffffffff, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) chdir(&(0x7f0000000480)='./cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 690.875691ms ago: executing program 2 (id=180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce2266"], 0x20a) 598.686782ms ago: executing program 3 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 363.664625ms ago: executing program 3 (id=182): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x80809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000120000000018f40000e03bb747d65491619cb62cbc45f1efc741083837e7c637e3331f754228c70c9b1e96bebeb3e1bc7b1118234511ae51bdd814bad37c0d6a6d0355f012b10fc66b2100"/95, @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) shutdown(0xffffffffffffffff, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) chdir(&(0x7f0000000480)='./cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) 168.766248ms ago: executing program 3 (id=183): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x40480c4) 0s ago: executing program 3 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 64.070345][ T5753] cgroup: Unknown subsys name 'net' [ 64.232283][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.589916][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.426720][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.438376][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.446148][ T5766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.454142][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.463708][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.472877][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.480897][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.488667][ T5766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.496471][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.535625][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.544764][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.552466][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.552603][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.561023][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.575977][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.584479][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.596963][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.604549][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.651889][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.660266][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.685908][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.694128][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.702320][ T5771] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.715680][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.066144][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 68.106261][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 68.141972][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.218717][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.227113][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.234370][ T5762] bridge_slave_0: entered allmulticast mode [ 68.242442][ T5762] bridge_slave_0: entered promiscuous mode [ 68.287720][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.294849][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.302408][ T5762] bridge_slave_1: entered allmulticast mode [ 68.309997][ T5762] bridge_slave_1: entered promiscuous mode [ 68.329056][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.336277][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.343399][ T5765] bridge_slave_0: entered allmulticast mode [ 68.350906][ T5765] bridge_slave_0: entered promiscuous mode [ 68.399905][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.407959][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.415079][ T5765] bridge_slave_1: entered allmulticast mode [ 68.421993][ T5765] bridge_slave_1: entered promiscuous mode [ 68.431199][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.443125][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.499664][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.507289][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.514398][ T5769] bridge_slave_0: entered allmulticast mode [ 68.521973][ T5769] bridge_slave_0: entered promiscuous mode [ 68.565543][ T5762] team0: Port device team_slave_0 added [ 68.571850][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.579223][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.587364][ T5769] bridge_slave_1: entered allmulticast mode [ 68.594005][ T5769] bridge_slave_1: entered promiscuous mode [ 68.603789][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.618593][ T5762] team0: Port device team_slave_1 added [ 68.626915][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.694479][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.709131][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.723714][ T5765] team0: Port device team_slave_0 added [ 68.745219][ T5765] team0: Port device team_slave_1 added [ 68.752053][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.759281][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.785501][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.815736][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 68.842636][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.849924][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.876306][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.896273][ T5769] team0: Port device team_slave_0 added [ 68.922267][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.929342][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.955690][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.969276][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.976842][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.002853][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.015159][ T5769] team0: Port device team_slave_1 added [ 69.085601][ T5762] hsr_slave_0: entered promiscuous mode [ 69.092164][ T5762] hsr_slave_1: entered promiscuous mode [ 69.113110][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.120281][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.146457][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.158331][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.165283][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.192230][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.249163][ T5765] hsr_slave_0: entered promiscuous mode [ 69.256182][ T5765] hsr_slave_1: entered promiscuous mode [ 69.264495][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.273138][ T5765] Cannot create hsr debugfs directory [ 69.293988][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.301531][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.309052][ T5774] bridge_slave_0: entered allmulticast mode [ 69.316238][ T5774] bridge_slave_0: entered promiscuous mode [ 69.339228][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.346653][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.353825][ T5774] bridge_slave_1: entered allmulticast mode [ 69.360770][ T5774] bridge_slave_1: entered promiscuous mode [ 69.387967][ T5769] hsr_slave_0: entered promiscuous mode [ 69.394119][ T5769] hsr_slave_1: entered promiscuous mode [ 69.400867][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.408459][ T5769] Cannot create hsr debugfs directory [ 69.497412][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.533537][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.576539][ T50] Bluetooth: hci0: command tx timeout [ 69.612291][ T5774] team0: Port device team_slave_0 added [ 69.646229][ T5774] team0: Port device team_slave_1 added [ 69.655566][ T50] Bluetooth: hci1: command tx timeout [ 69.655779][ T5771] Bluetooth: hci2: command tx timeout [ 69.730281][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.737725][ T5771] Bluetooth: hci3: command tx timeout [ 69.744162][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.771455][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.783845][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.791023][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.817766][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.903930][ T5774] hsr_slave_0: entered promiscuous mode [ 69.911234][ T5774] hsr_slave_1: entered promiscuous mode [ 69.917623][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.925176][ T5774] Cannot create hsr debugfs directory [ 69.941753][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.955856][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.971246][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.981078][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.109250][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.118412][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.128719][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.143876][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.209758][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.220074][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.244584][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.257570][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.325081][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.345274][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.358490][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.367831][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.522114][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.543359][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.578634][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.588466][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.612115][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.619364][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.651253][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.658410][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.671567][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.690546][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.700633][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.711103][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.718527][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.745245][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.752499][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.779213][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.786375][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.803890][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.831431][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.838607][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.869303][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.876474][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.890909][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.898031][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.038114][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.293411][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.420872][ T5765] veth0_vlan: entered promiscuous mode [ 71.432897][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.465122][ T5765] veth1_vlan: entered promiscuous mode [ 71.507888][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.561836][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.581407][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.588171][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.620827][ T5774] veth0_vlan: entered promiscuous mode [ 71.653950][ T5769] veth0_vlan: entered promiscuous mode [ 71.662260][ T5771] Bluetooth: hci0: command tx timeout [ 71.686631][ T5774] veth1_vlan: entered promiscuous mode [ 71.695128][ T5765] veth0_macvtap: entered promiscuous mode [ 71.707464][ T5765] veth1_macvtap: entered promiscuous mode [ 71.725244][ T5762] veth0_vlan: entered promiscuous mode [ 71.735719][ T5771] Bluetooth: hci1: command tx timeout [ 71.735734][ T50] Bluetooth: hci2: command tx timeout [ 71.747213][ T5762] veth1_vlan: entered promiscuous mode [ 71.769768][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.791797][ T5769] veth1_vlan: entered promiscuous mode [ 71.802930][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.815257][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.817128][ T50] Bluetooth: hci3: command tx timeout [ 71.827402][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.839468][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.849197][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.903254][ T5762] veth0_macvtap: entered promiscuous mode [ 71.924402][ T5762] veth1_macvtap: entered promiscuous mode [ 71.949391][ T5774] veth0_macvtap: entered promiscuous mode [ 72.009017][ T5774] veth1_macvtap: entered promiscuous mode [ 72.020247][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.031544][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.044835][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.073701][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.088865][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.097187][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.100332][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.119490][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.128653][ T5769] veth0_macvtap: entered promiscuous mode [ 72.153749][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.164422][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.174659][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.185510][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.197055][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.205019][ T5769] veth1_macvtap: entered promiscuous mode [ 72.227017][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.236581][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.245943][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.254659][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.269466][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.280835][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.291171][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.302217][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.313593][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.361004][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.369848][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.381523][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.390718][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.425420][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.433263][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.444243][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.455059][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.466185][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.476987][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.487615][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.502569][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.513490][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.557522][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.573778][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.584977][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.596343][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.606361][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.617667][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.629735][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.671338][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.680953][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.691152][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.700960][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.780690][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.808103][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.860167][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.885547][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.957203][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.995981][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.036095][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.043952][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.054278][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.082454][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.124405][ T27] audit: type=1326 audit(1751468133.185:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.163727][ T27] audit: type=1326 audit(1751468133.185:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.192301][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.206072][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.226990][ T27] audit: type=1326 audit(1751468133.185:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.315291][ T27] audit: type=1326 audit(1751468133.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.384478][ T27] audit: type=1326 audit(1751468133.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.446666][ T27] audit: type=1326 audit(1751468133.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.521202][ T27] audit: type=1326 audit(1751468133.215:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.577111][ T5863] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 73.605974][ T27] audit: type=1326 audit(1751468133.225:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.633632][ T27] audit: type=1326 audit(1751468133.225:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.704167][ T27] audit: type=1326 audit(1751468133.225:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.3.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 73.737474][ T50] Bluetooth: hci0: command tx timeout [ 73.777221][ T5868] syz.0.8[5868]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.788172][ T5870] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9'. [ 73.821967][ T50] Bluetooth: hci1: command tx timeout [ 73.821982][ T5771] Bluetooth: hci2: command tx timeout [ 73.866410][ T5868] loop0: detected capacity change from 0 to 512 [ 73.895922][ T50] Bluetooth: hci3: command tx timeout [ 73.942193][ T5871] loop2: detected capacity change from 0 to 1024 [ 73.970741][ T5868] ======================================================= [ 73.970741][ T5868] WARNING: The mand mount option has been deprecated and [ 73.970741][ T5868] and is ignored by this kernel. Remove the mand [ 73.970741][ T5868] option from the mount to silence this warning. [ 73.970741][ T5868] ======================================================= [ 74.016816][ T5871] EXT4-fs: Ignoring removed orlov option [ 74.023416][ T5871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.045762][ T5868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.078936][ T5868] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.108022][ T5868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 74.137694][ T5868] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 74.178994][ T5868] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 74.210850][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.280651][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.325690][ T5868] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 74.496841][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.281474][ T5762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.646743][ T5908] veth3: entered promiscuous mode [ 75.734869][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 75.815974][ T50] Bluetooth: hci0: command tx timeout [ 75.895692][ T50] Bluetooth: hci2: command tx timeout [ 75.898767][ T5771] Bluetooth: hci1: command tx timeout [ 75.978270][ T5771] Bluetooth: hci3: command tx timeout [ 76.229466][ T5920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.330996][ T5931] wg2: entered promiscuous mode [ 76.360274][ T5931] wg2: entered allmulticast mode [ 76.563099][ T5920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.577756][ T5937] mmap: syz.0.33 (5937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.614803][ T5941] loop1: detected capacity change from 0 to 2048 [ 76.671296][ T5941] loop1: p1 < > p4 [ 76.687727][ T5941] loop1: p4 size 8388608 extends beyond EOD, truncated [ 76.725827][ T5920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.754736][ T5920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.809635][ T5755] udevd[5755]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 77.828503][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 78.058095][ T5920] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.111979][ T5920] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.158178][ T5920] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.190431][ T5920] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.204382][ T5958] loop3: detected capacity change from 0 to 512 [ 78.283285][ T5958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.316068][ T5958] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.395120][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.664948][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 78.697874][ T5975] bond1 (unregistering): Released all slaves [ 78.726785][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.46'. [ 78.866676][ T5981] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.897334][ T5981] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.229923][ T5998] loop3: detected capacity change from 0 to 128 [ 79.313671][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 79.313685][ T27] audit: type=1800 audit(1751468139.375:58): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="file2" dev="loop3" ino=1048592 res=0 errno=0 [ 79.325870][ T5998] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.371576][ T5998] FAT-fs (loop3): Filesystem has been set read-only [ 79.386735][ T5998] syz.3.53: attempt to access beyond end of device [ 79.386735][ T5998] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.409295][ T5998] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.417847][ T5998] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.431259][ T6000] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.439814][ T6000] syz.3.53: attempt to access beyond end of device [ 79.439814][ T6000] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.460165][ T5994] syz.3.53: attempt to access beyond end of device [ 79.460165][ T5994] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.478487][ T6000] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.486640][ T6000] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 79.494900][ T5994] syz.3.53: attempt to access beyond end of device [ 79.494900][ T5994] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.511337][ T6000] syz.3.53: attempt to access beyond end of device [ 79.511337][ T6000] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.526185][ T5998] syz.3.53: attempt to access beyond end of device [ 79.526185][ T5998] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.540977][ T6000] syz.3.53: attempt to access beyond end of device [ 79.540977][ T6000] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.558582][ T5994] syz.3.53: attempt to access beyond end of device [ 79.558582][ T5994] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.572818][ T6000] syz.3.53: attempt to access beyond end of device [ 79.572818][ T6000] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.590181][ T5998] syz.3.53: attempt to access beyond end of device [ 79.590181][ T5998] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 81.351696][ T6029] siw: device registration error -23 [ 82.556746][ T9] cfg80211: failed to load regulatory.db [ 82.655927][ T6040] netlink: 'syz.2.69': attribute type 10 has an invalid length. [ 82.891179][ T6044] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 83.041534][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 83.195411][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 83.810089][ T27] audit: type=1326 audit(1751468143.875:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085ef8e929 code=0x7ffc0000 [ 83.840173][ T27] audit: type=1326 audit(1751468143.875:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085ef8e929 code=0x7ffc0000 [ 83.875214][ T27] audit: type=1326 audit(1751468143.895:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f085ef8e929 code=0x7ffc0000 [ 83.921648][ T27] audit: type=1326 audit(1751468143.925:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085ef8e929 code=0x7ffc0000 [ 85.136771][ T6072] loop3: detected capacity change from 0 to 256 [ 85.197237][ T27] audit: type=1326 audit(1751468145.255:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 85.272883][ T27] audit: type=1326 audit(1751468145.285:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 85.370556][ T27] audit: type=1326 audit(1751468145.285:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 85.424661][ T6072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.441022][ T27] audit: type=1326 audit(1751468145.285:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 85.495455][ T27] audit: type=1326 audit(1751468145.285:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 85.594011][ T27] audit: type=1326 audit(1751468145.285:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 85.670223][ T27] audit: type=1326 audit(1751468145.285:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 85.725319][ C1] sched: RT throttling activated [ 85.928908][ T27] audit: type=1326 audit(1751468145.285:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 86.720126][ T27] audit: type=1326 audit(1751468145.295:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 86.788769][ T27] audit: type=1326 audit(1751468145.295:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 87.006537][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.088838][ T6084] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.204852][ T6086] siw: device registration error -23 [ 87.624311][ T6099] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 87.777778][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 88.260947][ T6099] syz.1.86 (6099) used greatest stack depth: 16968 bytes left [ 88.436371][ T6104] loop1: detected capacity change from 0 to 512 [ 88.443631][ T6104] EXT4-fs: Ignoring removed nobh option [ 88.485293][ T6104] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.549794][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.565579][ T6104] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.734320][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.190280][ T6113] loop3: detected capacity change from 0 to 8192 [ 89.295051][ T6113] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 89.312224][ T6113] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 89.320105][ T6113] loop3: p2 p4 [ 89.324896][ T6113] loop3: partition table partially beyond EOD, truncated [ 89.337976][ T6113] loop3: p2 start 452985600 is beyond EOD, truncated [ 89.349173][ T6113] loop3: p4 start 8388607 is beyond EOD, truncated [ 89.503239][ T6112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.509741][ T6112] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.522702][ T6112] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.532073][ T6112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.539822][ T6112] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.547815][ T6112] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.555219][ T6112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.561555][ T6112] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.569540][ T6112] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.576976][ T6112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.583493][ T6112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.595423][ T6112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.990842][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 90.896893][ T5771] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.052028][ T6154] netlink: 184 bytes leftover after parsing attributes in process `syz.0.105'. [ 91.575520][ T5771] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.583357][ T5771] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.656244][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.289561][ T6163] Zero length message leads to an empty skb [ 92.935633][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.243561][ T27] kauditd_printk_skb: 72 callbacks suppressed [ 93.243564][ T6185] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 93.243573][ T27] audit: type=1326 audit(1751468153.305:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 93.290930][ T27] audit: type=1326 audit(1751468153.345:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 93.434758][ T6193] veth3: entered promiscuous mode [ 93.474066][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 93.655660][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.661723][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.669515][ T6201] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 93.688873][ T27] audit: type=1326 audit(1751468153.755:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 93.714145][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.722206][ T27] audit: type=1326 audit(1751468153.755:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 93.755394][ T27] audit: type=1326 audit(1751468153.755:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fccdb9c11e5 code=0x7ffc0000 [ 93.759640][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.848003][ T27] audit: type=1326 audit(1751468153.905:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fccdb98e929 code=0x7ffc0000 [ 95.025494][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.494351][ T6222] netlink: 3 bytes leftover after parsing attributes in process `syz.2.129'. [ 95.572959][ T6222] batadv1: entered promiscuous mode [ 95.604484][ T6222] batadv1: entered allmulticast mode [ 95.735796][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.741879][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.815637][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.036950][ T6232] netlink: 184 bytes leftover after parsing attributes in process `syz.1.132'. [ 96.266445][ T6235] siw: device registration error -23 [ 96.303474][ T6237] loop1: detected capacity change from 0 to 1024 [ 96.362249][ T6237] EXT4-fs: Ignoring removed orlov option [ 96.416935][ T6242] netlink: 68 bytes leftover after parsing attributes in process `syz.0.135'. [ 96.445607][ T6237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.618214][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.994297][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.026687][ T6259] loop2: detected capacity change from 0 to 256 [ 97.082067][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 97.115555][ T27] audit: type=1326 audit(1751468157.175:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 97.202412][ T2128] IPVS: starting estimator thread 0... [ 97.207518][ T27] audit: type=1326 audit(1751468157.175:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 97.286202][ T27] audit: type=1326 audit(1751468157.175:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 97.305800][ T6264] IPVS: using max 18 ests per chain, 43200 per kthread [ 97.365462][ T27] audit: type=1326 audit(1751468157.175:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.2.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 97.450069][ T6271] loop1: detected capacity change from 0 to 256 [ 97.600016][ T6265] veth3: entered promiscuous mode [ 97.659326][ T6272] siw: device registration error -23 [ 97.777240][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 97.833166][ T6275] netlink: 3 bytes leftover after parsing attributes in process `syz.1.147'. [ 97.874237][ T6275] batadv1: entered promiscuous mode [ 97.910458][ T6275] batadv1: entered allmulticast mode [ 98.288137][ T6286] netlink: 184 bytes leftover after parsing attributes in process `syz.1.152'. [ 98.426688][ T6288] loop1: detected capacity change from 0 to 1024 [ 98.467490][ T6288] EXT4-fs: Ignoring removed orlov option [ 98.493568][ T6288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.548228][ T6292] loop2: detected capacity change from 0 to 256 [ 98.581631][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.582441][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 98.582452][ T27] audit: type=1326 audit(1751468158.645:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.632502][ T27] audit: type=1326 audit(1751468158.695:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.654975][ T27] audit: type=1326 audit(1751468158.695:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.677214][ T27] audit: type=1326 audit(1751468158.725:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.699569][ T27] audit: type=1326 audit(1751468158.725:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.789421][ T27] audit: type=1326 audit(1751468158.725:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.825120][ T27] audit: type=1326 audit(1751468158.725:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.855602][ T27] audit: type=1326 audit(1751468158.725:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.895689][ T27] audit: type=1326 audit(1751468158.735:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 98.954464][ T27] audit: type=1326 audit(1751468158.735:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 99.137206][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.219484][ T6309] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 102.121602][ T6331] netlink: 184 bytes leftover after parsing attributes in process `syz.0.167'. [ 102.598058][ T6336] loop3: detected capacity change from 0 to 256 [ 103.964700][ T6354] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 105.000250][ T5910] IPVS: starting estimator thread 0... [ 105.135599][ T6367] IPVS: using max 20 ests per chain, 48000 per kthread [ 106.335276][ T6374] loop2: detected capacity change from 0 to 256 [ 106.493967][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 106.493984][ T27] audit: type=1326 audit(1751468166.495:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.661122][ T27] audit: type=1326 audit(1751468166.495:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.717106][ T27] audit: type=1326 audit(1751468166.495:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.739940][ T27] audit: type=1326 audit(1751468166.505:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.763129][ T27] audit: type=1326 audit(1751468166.505:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.792886][ T27] audit: type=1326 audit(1751468166.505:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.852318][ T27] audit: type=1326 audit(1751468166.505:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.882321][ T27] audit: type=1326 audit(1751468166.505:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 106.991756][ T27] audit: type=1326 audit(1751468166.505:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 107.045442][ T27] audit: type=1326 audit(1751468166.505:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe49e38e929 code=0x7ffc0000 [ 107.080240][ T6383] loop3: detected capacity change from 0 to 256 [ 107.426595][ T6390] [ 107.428968][ T6390] ====================================================== [ 107.435985][ T6390] WARNING: possible circular locking dependency detected [ 107.442998][ T6390] 6.6.95-syzkaller #0 Not tainted [ 107.447997][ T6390] ------------------------------------------------------ [ 107.454986][ T6390] syz.3.184/6390 is trying to acquire lock: [ 107.460848][ T6390] ffff8880b8f295a8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 107.469452][ T6390] [ 107.469452][ T6390] but task is already holding lock: [ 107.476804][ T6390] ffff8880b8f297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 107.485660][ T6390] [ 107.485660][ T6390] which lock already depends on the new lock. [ 107.485660][ T6390] [ 107.496043][ T6390] [ 107.496043][ T6390] the existing dependency chain (in reverse order) is: [ 107.505061][ T6390] [ 107.505061][ T6390] -> #1 (&base->lock){-.-.}-{2:2}: [ 107.512347][ T6390] _raw_spin_lock_irqsave+0xa8/0xf0 [ 107.518052][ T6390] lock_timer_base+0x123/0x270 [ 107.523316][ T6390] __mod_timer+0xf9/0xdb0 [ 107.528143][ T6390] queue_delayed_work_on+0x12a/0x1e0 [ 107.533921][ T6390] kvfree_call_rcu+0x541/0x780 [ 107.539186][ T6390] rtnl_register_internal+0x486/0x590 [ 107.545058][ T6390] rtnl_register+0x32/0x70 [ 107.549976][ T6390] ip_rt_init+0x2ec/0x390 [ 107.554799][ T6390] ip_init+0xe/0x20 [ 107.559101][ T6390] inet_init+0x2c1/0x3e0 [ 107.563839][ T6390] do_one_initcall+0x1fd/0x750 [ 107.569102][ T6390] do_initcall_level+0x137/0x1f0 [ 107.574541][ T6390] do_initcalls+0x69/0xd0 [ 107.579365][ T6390] kernel_init_freeable+0x3d2/0x570 [ 107.585061][ T6390] kernel_init+0x1d/0x1c0 [ 107.589887][ T6390] ret_from_fork+0x48/0x80 [ 107.594800][ T6390] ret_from_fork_asm+0x11/0x20 [ 107.600059][ T6390] [ 107.600059][ T6390] -> #0 (krc.lock){..-.}-{2:2}: [ 107.607071][ T6390] __lock_acquire+0x2ddb/0x7c80 [ 107.612418][ T6390] lock_acquire+0x197/0x410 [ 107.617419][ T6390] _raw_spin_lock+0x2e/0x40 [ 107.622436][ T6390] kvfree_call_rcu+0x15a/0x780 [ 107.627711][ T6390] trie_delete_elem+0x535/0x6a0 [ 107.633076][ T6390] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 107.639049][ T6390] bpf_trace_run3+0x1e7/0x400 [ 107.644235][ T6390] __bpf_trace_timer_start+0x14a/0x1b0 [ 107.650236][ T6390] enqueue_timer+0x398/0x530 [ 107.655345][ T6390] __mod_timer+0x977/0xdb0 [ 107.660267][ T6390] sk_reset_timer+0x23/0xc0 [ 107.665276][ T6390] tipc_sk_finish_conn+0x154/0x7e0 [ 107.670972][ T6390] tipc_socketpair+0x254/0x470 [ 107.676239][ T6390] __sys_socketpair+0x2b0/0x550 [ 107.681593][ T6390] __x64_sys_socketpair+0x9b/0xb0 [ 107.687123][ T6390] do_syscall_64+0x55/0xb0 [ 107.692040][ T6390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.698699][ T6390] [ 107.698699][ T6390] other info that might help us debug this: [ 107.698699][ T6390] [ 107.708909][ T6390] Possible unsafe locking scenario: [ 107.708909][ T6390] [ 107.716332][ T6390] CPU0 CPU1 [ 107.721673][ T6390] ---- ---- [ 107.727012][ T6390] lock(&base->lock); [ 107.731058][ T6390] lock(krc.lock); [ 107.737364][ T6390] lock(&base->lock); [ 107.743930][ T6390] lock(krc.lock); [ 107.747730][ T6390] [ 107.747730][ T6390] *** DEADLOCK *** [ 107.747730][ T6390] [ 107.755853][ T6390] 2 locks held by syz.3.184/6390: [ 107.760853][ T6390] #0: ffff8880b8f297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 107.770143][ T6390] #1: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 107.779423][ T6390] [ 107.779423][ T6390] stack backtrace: [ 107.785559][ T6390] CPU: 1 PID: 6390 Comm: syz.3.184 Not tainted 6.6.95-syzkaller #0 [ 107.793423][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.803462][ T6390] Call Trace: [ 107.806722][ T6390] [ 107.809644][ T6390] dump_stack_lvl+0x16c/0x230 [ 107.814333][ T6390] ? load_image+0x3b0/0x3b0 [ 107.818818][ T6390] ? show_regs_print_info+0x20/0x20 [ 107.823999][ T6390] ? print_circular_bug+0x12b/0x1a0 [ 107.829177][ T6390] check_noncircular+0x2bd/0x3c0 [ 107.834092][ T6390] ? print_deadlock_bug+0x5d0/0x5d0 [ 107.839299][ T6390] ? lockdep_lock+0x17a/0x220 [ 107.843982][ T6390] ? _find_first_zero_bit+0xd3/0x100 [ 107.849329][ T6390] __lock_acquire+0x2ddb/0x7c80 [ 107.854160][ T6390] ? stack_trace_snprint+0xf0/0xf0 [ 107.859268][ T6390] ? __stack_depot_save+0x560/0x630 [ 107.864442][ T6390] ? verify_lock_unused+0x140/0x140 [ 107.869616][ T6390] ? kasan_save_stack+0x4d/0x60 [ 107.874445][ T6390] ? kasan_save_stack+0x3e/0x60 [ 107.879274][ T6390] ? __kasan_record_aux_stack+0xaf/0xc0 [ 107.884799][ T6390] ? kvfree_call_rcu+0xee/0x780 [ 107.889630][ T6390] ? trie_delete_elem+0x535/0x6a0 [ 107.894638][ T6390] ? bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 107.900254][ T6390] ? bpf_trace_run3+0x1e7/0x400 [ 107.905101][ T6390] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 107.910732][ T6390] ? enqueue_timer+0x398/0x530 [ 107.915475][ T6390] ? __mod_timer+0x977/0xdb0 [ 107.920040][ T6390] ? sk_reset_timer+0x23/0xc0 [ 107.924695][ T6390] ? tipc_sk_finish_conn+0x154/0x7e0 [ 107.930041][ T6390] ? tipc_socketpair+0x254/0x470 [ 107.934953][ T6390] ? __sys_socketpair+0x2b0/0x550 [ 107.939974][ T6390] ? __x64_sys_socketpair+0x9b/0xb0 [ 107.945151][ T6390] ? do_syscall_64+0x55/0xb0 [ 107.949728][ T6390] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.955778][ T6390] lock_acquire+0x197/0x410 [ 107.960259][ T6390] ? kvfree_call_rcu+0x15a/0x780 [ 107.965178][ T6390] ? read_lock_is_recursive+0x20/0x20 [ 107.970547][ T6390] ? __phys_addr+0xba/0x170 [ 107.975030][ T6390] _raw_spin_lock+0x2e/0x40 [ 107.979515][ T6390] ? kvfree_call_rcu+0x15a/0x780 [ 107.984432][ T6390] kvfree_call_rcu+0x15a/0x780 [ 107.989178][ T6390] ? call_rcu+0x920/0x920 [ 107.993495][ T6390] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 107.999453][ T6390] ? _raw_spin_unlock+0x40/0x40 [ 108.004285][ T6390] trie_delete_elem+0x535/0x6a0 [ 108.009159][ T6390] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 108.014621][ T6390] bpf_trace_run3+0x1e7/0x400 [ 108.019276][ T6390] ? bpf_trace_run3+0xf4/0x400 [ 108.024019][ T6390] ? bpf_trace_run2+0x3c0/0x3c0 [ 108.028843][ T6390] ? __bpf_trace_timer_start+0x133/0x1b0 [ 108.034454][ T6390] __bpf_trace_timer_start+0x14a/0x1b0 [ 108.039896][ T6390] ? __bpf_trace_timer_class+0x100/0x100 [ 108.045597][ T6390] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 108.051471][ T6390] ? _raw_spin_unlock+0x40/0x40 [ 108.056303][ T6390] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 108.061656][ T6390] enqueue_timer+0x398/0x530 [ 108.066225][ T6390] __mod_timer+0x977/0xdb0 [ 108.070623][ T6390] sk_reset_timer+0x23/0xc0 [ 108.075120][ T6390] tipc_sk_finish_conn+0x154/0x7e0 [ 108.080211][ T6390] tipc_socketpair+0x254/0x470 [ 108.085046][ T6390] __sys_socketpair+0x2b0/0x550 [ 108.089911][ T6390] __x64_sys_socketpair+0x9b/0xb0 [ 108.094915][ T6390] do_syscall_64+0x55/0xb0 [ 108.099308][ T6390] ? clear_bhb_loop+0x40/0x90 [ 108.103968][ T6390] ? clear_bhb_loop+0x40/0x90 [ 108.108707][ T6390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.114621][ T6390] RIP: 0033:0x7fccdb98e929 [ 108.119030][ T6390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.138623][ T6390] RSP: 002b:00007fccdc751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 108.147127][ T6390] RAX: ffffffffffffffda RBX: 00007fccdbbb5fa0 RCX: 00007fccdb98e929 [ 108.155100][ T6390] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 108.163055][ T6390] RBP: 00007fccdba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 108.171020][ T6390] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.178974][ T6390] R13: 0000000000000000 R14: 00007fccdbbb5fa0 R15: 00007ffcb6fb6cc8 [ 108.186931][ T6390]