last executing test programs: 2.489449988s ago: executing program 0 (id=1): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.159088501s ago: executing program 0 (id=18): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 2.072665536s ago: executing program 0 (id=21): unshare(0x8040480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="05"], 0x10) 1.821344033s ago: executing program 0 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getresgid(&(0x7f0000004ac0), 0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, 0x0, 0x8000002) 1.725992675s ago: executing program 0 (id=30): r0 = syz_mount_image$fuse(0x0, 0x0, 0x818, 0x0, 0x1, 0x0, &(0x7f0000000380)="43567bd5c2188e596337111fa6654cef8ed6d8bf0681e0ea7a0f150f20dd710723076ada046659b9c6c1b950d5eb1bf6489cfd896cf5f1c0f70175609003528f17c7084a6e07a685f0633bcf9886b74043a6497ff4d16d") r1 = openat(r0, 0x0, 0x1c1040, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffffffffffffb3, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.317221995s ago: executing program 1 (id=43): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) 1.245137357s ago: executing program 1 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) recvmmsg(r0, &(0x7f00000022c0)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/170, 0xaa}, {&(0x7f0000000ac0)=""/89, 0x59}, {&(0x7f0000000b40)=""/221, 0xdd}, {&(0x7f0000000c40)=""/119, 0x77}], 0x8, &(0x7f00000001c0)=""/33, 0x21}, 0x87}, {{&(0x7f0000000d40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/194, 0xc2}, 0x2}, {{&(0x7f0000001080)=@caif, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)=""/10, 0xa}, {0x0}, {&(0x7f0000001240)=""/151, 0x97}], 0x3, &(0x7f0000001340)=""/38, 0x26}, 0xe2}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001380)=""/155, 0x9b}, {&(0x7f0000001440)=""/165, 0xa5}, {&(0x7f0000001500)=""/58, 0x3a}, {&(0x7f0000001580)=""/71, 0x47}, {&(0x7f0000001600)=""/180, 0xb4}, {&(0x7f00000016c0)=""/94, 0x5e}, {&(0x7f0000001740)=""/33, 0x21}], 0x7, &(0x7f0000001800)}, 0x1}, {{&(0x7f0000001840)=@ethernet, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=""/33, 0x21}, 0x3ff8000}, {{&(0x7f0000001940)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000019c0)=""/214, 0xd6}, {&(0x7f0000001ac0)=""/35, 0x23}, {&(0x7f0000001b00)=""/241, 0xf1}], 0x3, &(0x7f0000001c40)=""/193, 0xc1}, 0xffffffc1}, {{&(0x7f0000001d40)=@nfc, 0x80, &(0x7f0000002240)=[{&(0x7f0000001dc0)=""/70, 0x46}, {&(0x7f0000001e40)=""/176, 0xb0}, {&(0x7f0000001f00)=""/187, 0xbb}, {&(0x7f0000001fc0)=""/105, 0x69}, {&(0x7f0000002040)=""/139, 0x8b}, {&(0x7f0000002100)=""/84, 0x54}, {&(0x7f0000002180)=""/131, 0x83}], 0x7}, 0xfffffffd}], 0x7, 0x2, &(0x7f0000002480)={0x0, 0x989680}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$fuse(0x0, 0x0, 0x1000002, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r7, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x401, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000003000000000000080045000078000000000011907800000000e000000100004e200064907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b0303c5ba7f600200a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0"], 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") 1.230976239s ago: executing program 3 (id=49): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ab, &(0x7f0000000740)="$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") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d3142, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) accept4$inet6(0xffffffffffffffff, &(0x7f00000062c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x0, 0x80800) 745.730129ms ago: executing program 3 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xb, 0x7, 0x4, 0x0, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 741.594409ms ago: executing program 4 (id=56): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x37) 674.064774ms ago: executing program 2 (id=58): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r3, &(0x7f0000000080)=""/42, 0x2a) 669.126525ms ago: executing program 4 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c696f636861727365743d61736369692c646973636172642c696f636861727365743d63703836312c73686f72746e616d653d77696e39352c696f636861727365743d757466382c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6e6f6e756d7461696c3d312c726f6469722c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c7065726d69745f646972656374696f2c66d07f6f6e746578743d726f6f742c00"], 0x1, 0x36b, &(0x7f0000000a00)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 662.18556ms ago: executing program 2 (id=60): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xab, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 622.695347ms ago: executing program 2 (id=61): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.controllers\x00', 0x5000000, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0xb54b, 0xc486) 549.919857ms ago: executing program 3 (id=62): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000200000002"], 0x0) 549.680654ms ago: executing program 4 (id=63): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x5ef, &(0x7f0000000d80)="$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") truncate(&(0x7f00000003c0)='./file0/file1\x00', 0x8fff5) umount2(&(0x7f0000000000)='./file0/file1\x00', 0x0) 549.41456ms ago: executing program 2 (id=64): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = epoll_create1(0x80000) close(r0) timerfd_create(0x7, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2000}) 534.463651ms ago: executing program 3 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xf, 0x1, 0xc, 0x2, 0x4, 0x9, 0x7, 0xb, 0x10, 0x1, 0xf, 0x5, 0x2, 0x6, 0xd, 0xe], 0x0, [0x401, 0x54e9, 0x0, 0x1, 0x6, 0x3, 0xd6, 0x0, 0x401, 0x2, 0x6, 0x9, 0x4, 0x6fe9, 0xffff, 0x8], [0x81, 0x4, 0x4, 0x7, 0x0, 0xc3, 0x1, 0x586, 0x2, 0x6b3, 0x9, 0x3, 0x4, 0x401, 0x1, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 500.658087ms ago: executing program 2 (id=66): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, 0x0, 0x2, 0x6}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 426.023314ms ago: executing program 4 (id=67): r0 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 425.881802ms ago: executing program 2 (id=68): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 369.876139ms ago: executing program 3 (id=69): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 345.228623ms ago: executing program 1 (id=70): socket$inet(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2}, 0x94) userfaultfd(0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r0, r2, 0x0, 0x0, @val=@netkit}, 0x1c) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 340.644239ms ago: executing program 4 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d0"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xfffffffffffffe83, &(0x7f0000000180)="e0856497d56cfb9ceef0b9320aee", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 144.22249ms ago: executing program 1 (id=72): r0 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xa000201e}) 143.83087ms ago: executing program 4 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xb, 0x7, 0x4, 0x0, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 142.898611ms ago: executing program 3 (id=74): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 50.062391ms ago: executing program 1 (id=75): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket$unix(0x1, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 20.563399ms ago: executing program 0 (id=76): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0xb883, 0xb2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x13, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000440)=0xf88) syz_open_dev$tty20(0xc, 0x4, 0x1) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) 0s ago: executing program 1 (id=77): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 28.292385][ T6558] cgroup: Unknown subsys name 'net' [ 28.412127][ T6558] cgroup: Unknown subsys name 'cpuset' [ 28.414114][ T6558] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.578049][ T6558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.756352][ T6573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.768704][ T6581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.770374][ T6581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.770820][ T6581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.771072][ T6581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.771412][ T6581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.771668][ T6581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.772087][ T6581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.772400][ T6581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.772827][ T6581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.773104][ T6581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.773512][ T6581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.773748][ T6581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.774008][ T6581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.774221][ T6581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.775096][ T6581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.775285][ T6581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.776152][ T6581] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.777915][ T6581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.781107][ T6167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.794240][ T6167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.794936][ T6167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.797861][ T6581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.804521][ T6573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.807271][ T6573] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.957550][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 29.998470][ T6568] chnl_net:caif_netlink_parms(): no params data found [ 30.047418][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.047940][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.048013][ T6575] bridge_slave_0: entered allmulticast mode [ 30.048481][ T6575] bridge_slave_0: entered promiscuous mode [ 30.057743][ T6572] chnl_net:caif_netlink_parms(): no params data found [ 30.066791][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.066961][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.067026][ T6575] bridge_slave_1: entered allmulticast mode [ 30.067441][ T6575] bridge_slave_1: entered promiscuous mode [ 30.074984][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.075063][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.075133][ T6568] bridge_slave_0: entered allmulticast mode [ 30.075554][ T6568] bridge_slave_0: entered promiscuous mode [ 30.076633][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.076672][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.076720][ T6568] bridge_slave_1: entered allmulticast mode [ 30.077095][ T6568] bridge_slave_1: entered promiscuous mode [ 30.086795][ T6569] chnl_net:caif_netlink_parms(): no params data found [ 30.127383][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.131978][ T6568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.142951][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.143842][ T6568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.147174][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.148360][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.149738][ T6572] bridge_slave_0: entered allmulticast mode [ 30.151559][ T6572] bridge_slave_0: entered promiscuous mode [ 30.153417][ T6576] chnl_net:caif_netlink_parms(): no params data found [ 30.175064][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.176392][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.176763][ T6572] bridge_slave_1: entered allmulticast mode [ 30.177617][ T6572] bridge_slave_1: entered promiscuous mode [ 30.207524][ T6568] team0: Port device team_slave_0 added [ 30.208847][ T6575] team0: Port device team_slave_0 added [ 30.217258][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.218194][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.223183][ T6568] team0: Port device team_slave_1 added [ 30.223844][ T6575] team0: Port device team_slave_1 added [ 30.239695][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.239916][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.239985][ T6569] bridge_slave_0: entered allmulticast mode [ 30.240399][ T6569] bridge_slave_0: entered promiscuous mode [ 30.246072][ T6572] team0: Port device team_slave_0 added [ 30.253995][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.254342][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.254416][ T6569] bridge_slave_1: entered allmulticast mode [ 30.254840][ T6569] bridge_slave_1: entered promiscuous mode [ 30.261064][ T6572] team0: Port device team_slave_1 added [ 30.262569][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.262588][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.262601][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.263597][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.263604][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.263616][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.276630][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.276648][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.276661][ T6568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.291684][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.291707][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.291720][ T6568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.302322][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.302706][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.302767][ T6576] bridge_slave_0: entered allmulticast mode [ 30.303199][ T6576] bridge_slave_0: entered promiscuous mode [ 30.311478][ T6575] hsr_slave_0: entered promiscuous mode [ 30.312993][ T6575] hsr_slave_1: entered promiscuous mode [ 30.315536][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.315678][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.315726][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.315775][ T6576] bridge_slave_1: entered allmulticast mode [ 30.316172][ T6576] bridge_slave_1: entered promiscuous mode [ 30.317546][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.317554][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.317565][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.321905][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.329892][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.329930][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.329947][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.354191][ T6576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.356554][ T6569] team0: Port device team_slave_0 added [ 30.363789][ T6576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.367892][ T6569] team0: Port device team_slave_1 added [ 30.370146][ T6568] hsr_slave_0: entered promiscuous mode [ 30.371479][ T6568] hsr_slave_1: entered promiscuous mode [ 30.371722][ T6568] debugfs: 'hsr0' already exists in 'hsr' [ 30.371758][ T6568] Cannot create hsr debugfs directory [ 30.392112][ T6572] hsr_slave_0: entered promiscuous mode [ 30.392451][ T6572] hsr_slave_1: entered promiscuous mode [ 30.392663][ T6572] debugfs: 'hsr0' already exists in 'hsr' [ 30.392673][ T6572] Cannot create hsr debugfs directory [ 30.399606][ T6576] team0: Port device team_slave_0 added [ 30.400930][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.400957][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.400975][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.409886][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.409913][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.409933][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.411093][ T6576] team0: Port device team_slave_1 added [ 30.449725][ T6569] hsr_slave_0: entered promiscuous mode [ 30.450479][ T6569] hsr_slave_1: entered promiscuous mode [ 30.451201][ T6569] debugfs: 'hsr0' already exists in 'hsr' [ 30.451217][ T6569] Cannot create hsr debugfs directory [ 30.453920][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.454099][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.454116][ T6576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.463773][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.463796][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.463808][ T6576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.500481][ T6576] hsr_slave_0: entered promiscuous mode [ 30.501223][ T6576] hsr_slave_1: entered promiscuous mode [ 30.501406][ T6576] debugfs: 'hsr0' already exists in 'hsr' [ 30.501416][ T6576] Cannot create hsr debugfs directory [ 30.564696][ T6575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.567524][ T6575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.573897][ T6575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.580174][ T6575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.608236][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.608293][ T6575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.608486][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.608518][ T6575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.624293][ T6568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.627244][ T6568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.633304][ T6568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.636562][ T6568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.648869][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.658766][ T3030] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.661568][ T3030] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.672890][ T6576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.675224][ T6576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.679321][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.681701][ T6576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.687680][ T6576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.696804][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.696848][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.713092][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.713131][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.717249][ T6572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.719432][ T6572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.729919][ T6572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.735394][ T6575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.737892][ T6572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.761470][ T6569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.772991][ T6569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.776331][ T6569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.778825][ T6569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.805336][ T6568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.818148][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.837391][ T6568] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.859421][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.859476][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.863709][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.867215][ T6575] veth0_vlan: entered promiscuous mode [ 30.874348][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.874387][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.878822][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.894995][ T6575] veth1_vlan: entered promiscuous mode [ 30.899067][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.914962][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.915009][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.917280][ T6576] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.923304][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.923344][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.938873][ T6575] veth0_macvtap: entered promiscuous mode [ 30.940625][ T6575] veth1_macvtap: entered promiscuous mode [ 30.942963][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.942996][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.943717][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.943732][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.970561][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.987121][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.989259][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.007596][ T478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.007886][ T478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.007914][ T478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.007933][ T478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.024129][ T6569] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.044960][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.044998][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.047781][ T6568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.073031][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.073075][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.104918][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.113217][ T478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.113254][ T478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.140321][ T6569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.140360][ T6569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.157016][ T478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.157049][ T478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.159839][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.169123][ T6568] veth0_vlan: entered promiscuous mode [ 31.182908][ T6568] veth1_vlan: entered promiscuous mode [ 31.208949][ T6568] veth0_macvtap: entered promiscuous mode [ 31.213608][ T6576] veth0_vlan: entered promiscuous mode [ 31.226435][ T6576] veth1_vlan: entered promiscuous mode [ 31.228293][ T6568] veth1_macvtap: entered promiscuous mode [ 31.230558][ T6575] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.251925][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.254627][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.258672][ T6572] veth0_vlan: entered promiscuous mode [ 31.275922][ T478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.275976][ T478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.276000][ T478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.276018][ T478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.295882][ T6572] veth1_vlan: entered promiscuous mode [ 31.301713][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.314959][ T6569] veth0_vlan: entered promiscuous mode [ 31.318072][ T6569] veth1_vlan: entered promiscuous mode [ 31.326197][ T6569] veth0_macvtap: entered promiscuous mode [ 31.329982][ T6569] veth1_macvtap: entered promiscuous mode [ 31.336979][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.339566][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.358676][ T478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.358741][ T478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.358763][ T478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.358981][ T478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.363931][ T478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.363945][ T478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.407586][ T6576] veth0_macvtap: entered promiscuous mode [ 31.424272][ T566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.424304][ T566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.425003][ T6572] veth0_macvtap: entered promiscuous mode [ 31.427576][ T6576] veth1_macvtap: entered promiscuous mode [ 31.449012][ T6572] veth1_macvtap: entered promiscuous mode [ 31.467242][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.469444][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.470278][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.470286][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.476330][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.480365][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.489873][ T566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.490443][ T566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.490485][ T566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.490511][ T566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.495075][ T566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.495088][ T566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.522348][ T6694] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 31.534847][ T6003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536537][ T6003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536579][ T6003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536595][ T6003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.681858][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.681887][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.724217][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.726733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.781516][ T6578] Bluetooth: hci0: command tx timeout [ 31.782713][ T6573] Bluetooth: hci4: command tx timeout [ 31.784950][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.784979][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.797018][ T566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.797052][ T566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.813528][ T6710] netlink: 'syz.1.15': attribute type 13 has an invalid length. [ 31.838500][ T6713] Injecting memory failure for pfn 0x123263 at process virtual address 0x20000000 [ 31.841407][ T6713] Memory failure: 0x123263: Sending SIGBUS to syz.2.16:6713 due to hardware memory corruption [ 31.841482][ T6713] Memory failure: 0x123263: recovery action for dirty LRU page: Recovered [ 31.841505][ T6713] Injecting memory failure for pfn 0x20aaef at process virtual address 0x20001000 [ 31.841521][ T6713] Memory failure: 0x20aaef: recovery action for reserved kernel page: Ignored [ 31.863587][ T6578] Bluetooth: hci3: command tx timeout [ 31.870886][ T6573] Bluetooth: hci2: command tx timeout [ 31.872013][ T6578] Bluetooth: hci1: command tx timeout [ 31.899222][ T6718] loop2: detected capacity change from 0 to 128 [ 31.940191][ T6718] syz.2.17: attempt to access beyond end of device [ 31.940191][ T6718] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 31.972381][ T6724] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 32.196553][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 32.676258][ T6756] syzkaller0: entered promiscuous mode [ 32.677297][ T6756] syzkaller0: entered allmulticast mode [ 32.778010][ T6780] ======================================================= [ 32.778010][ T6780] WARNING: The mand mount option has been deprecated and [ 32.778010][ T6780] and is ignored by this kernel. Remove the mand [ 32.778010][ T6780] option from the mount to silence this warning. [ 32.778010][ T6780] ======================================================= [ 32.886361][ T6791] loop3: detected capacity change from 0 to 256 [ 32.997834][ T6797] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 32.998387][ T6797] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 33.009362][ T6797] loop1: detected capacity change from 0 to 128 [ 33.212122][ T6791] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 33.214398][ T6791] FAT-fs (loop3): Filesystem has been set read-only [ 33.379022][ T6811] syzkaller0: entered promiscuous mode [ 33.380126][ T6811] syzkaller0: entered allmulticast mode [ 33.435271][ T6820] loop4: detected capacity change from 0 to 512 [ 33.435742][ T6820] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.518157][ T6824] loop3: detected capacity change from 0 to 128 [ 33.536711][ T6826] loop4: detected capacity change from 0 to 736 [ 33.607590][ T6830] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 33.851667][ T6844] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.908812][ T6578] Bluetooth: hci4: command tx timeout [ 33.908879][ T6573] Bluetooth: hci0: command tx timeout [ 33.944549][ T6573] Bluetooth: hci2: command tx timeout [ 33.945534][ T6573] Bluetooth: hci3: command tx timeout [ 33.946599][ T6578] Bluetooth: hci1: command tx timeout [ 33.975524][ T6847] syzkaller0: entered promiscuous mode [ 33.975565][ T6847] syzkaller0: entered allmulticast mode [ 34.087091][ T6857] loop1: detected capacity change from 0 to 128 [ 34.091930][ T6855] [ 34.092299][ T6855] ====================================================== [ 34.093320][ T6855] WARNING: possible circular locking dependency detected [ 34.094308][ T6855] syzkaller #0 Not tainted [ 34.094993][ T6855] ------------------------------------------------------ [ 34.096047][ T6855] syz.0.76/6855 is trying to acquire lock: [ 34.096902][ T6855] ffff0000c1844220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xa0/0x410 [ 34.098418][ T6855] [ 34.098418][ T6855] but task is already holding lock: [ 34.099497][ T6855] ffff0000cbeedf60 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x11e0/0x177c [ 34.100981][ T6855] [ 34.100981][ T6855] which lock already depends on the new lock. [ 34.100981][ T6855] [ 34.102446][ T6855] [ 34.102446][ T6855] the existing dependency chain (in reverse order) is: [ 34.103723][ T6855] [ 34.103723][ T6855] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 34.104984][ T6855] blk_alloc_queue+0x48c/0x54c [ 34.105834][ T6855] __blk_mq_alloc_disk+0x124/0x304 [ 34.106725][ T6855] loop_add+0x324/0x880 [ 34.107396][ T6855] loop_init+0xe8/0x10c [ 34.108082][ T6855] do_one_initcall+0x248/0x9b4 [ 34.108834][ T6855] do_initcall_level+0x128/0x1c4 [ 34.109601][ T6855] do_initcalls+0x70/0xd0 [ 34.110340][ T6855] do_basic_setup+0x78/0x8c [ 34.111108][ T6855] kernel_init_freeable+0x268/0x39c [ 34.112018][ T6855] kernel_init+0x24/0x1dc [ 34.112737][ T6855] ret_from_fork+0x10/0x20 [ 34.113525][ T6855] [ 34.113525][ T6855] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 34.114600][ T6855] fs_reclaim_acquire+0x8c/0x118 [ 34.115417][ T6855] kmem_cache_alloc_noprof+0x5c/0x680 [ 34.116328][ T6855] __kernfs_iattrs+0xd4/0x2d8 [ 34.117063][ T6855] kernfs_iop_setattr+0xdc/0x374 [ 34.117964][ T6855] notify_change+0xa0c/0xcb8 [ 34.118740][ T6855] do_truncate+0x198/0x210 [ 34.119528][ T6855] path_openat+0x2a08/0x3114 [ 34.120302][ T6855] do_filp_open+0x18c/0x36c [ 34.121075][ T6855] do_sys_openat2+0x11c/0x1f0 [ 34.121850][ T6855] __arm64_sys_openat+0x120/0x158 [ 34.122643][ T6855] invoke_syscall+0x98/0x254 [ 34.123374][ T6855] el0_svc_common+0xe8/0x23c [ 34.124102][ T6855] do_el0_svc+0x48/0x58 [ 34.124811][ T6855] el0_svc+0x5c/0x26c [ 34.125447][ T6855] el0t_64_sync_handler+0x84/0x12c [ 34.126216][ T6855] el0t_64_sync+0x198/0x19c [ 34.126942][ T6855] [ 34.126942][ T6855] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 34.128128][ T6855] __lock_acquire+0x1774/0x30a4 [ 34.128875][ T6855] lock_acquire+0x140/0x2e0 [ 34.129597][ T6855] down_read+0x58/0x308 [ 34.130276][ T6855] kernfs_iop_getattr+0xa0/0x410 [ 34.131065][ T6855] vfs_getattr_nosec+0x254/0x38c [ 34.131814][ T6855] vfs_getattr+0x60/0x84 [ 34.132481][ T6855] loop_assign_backing_file+0x1d8/0x390 [ 34.133317][ T6855] lo_ioctl+0x1234/0x177c [ 34.134032][ T6855] blkdev_ioctl+0x62c/0xadc [ 34.134715][ T6855] __arm64_sys_ioctl+0x14c/0x1c4 [ 34.135486][ T6855] invoke_syscall+0x98/0x254 [ 34.136176][ T6855] el0_svc_common+0xe8/0x23c [ 34.136913][ T6855] do_el0_svc+0x48/0x58 [ 34.137589][ T6855] el0_svc+0x5c/0x26c [ 34.138224][ T6855] el0t_64_sync_handler+0x84/0x12c [ 34.139094][ T6855] el0t_64_sync+0x198/0x19c [ 34.139851][ T6855] [ 34.139851][ T6855] other info that might help us debug this: [ 34.139851][ T6855] [ 34.141307][ T6855] Chain exists of: [ 34.141307][ T6855] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 34.141307][ T6855] [ 34.143497][ T6855] Possible unsafe locking scenario: [ 34.143497][ T6855] [ 34.144621][ T6855] CPU0 CPU1 [ 34.145429][ T6855] ---- ---- [ 34.146174][ T6855] lock(&q->q_usage_counter(io)#24); [ 34.146978][ T6855] lock(fs_reclaim); [ 34.147968][ T6855] lock(&q->q_usage_counter(io)#24); [ 34.149122][ T6855] rlock(&root->kernfs_iattr_rwsem); [ 34.149956][ T6855] [ 34.149956][ T6855] *** DEADLOCK *** [ 34.149956][ T6855] [ 34.151098][ T6855] 3 locks held by syz.0.76/6855: [ 34.151818][ T6855] #0: ffff0000cbfde448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xd20/0x177c [ 34.153103][ T6855] #1: ffff0000cbeedf60 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x11e0/0x177c [ 34.154636][ T6855] #2: ffff0000cbeedf98 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x11e0/0x177c [ 34.156247][ T6855] [ 34.156247][ T6855] stack backtrace: [ 34.157102][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT [ 34.158326][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 34.159800][ T6855] Call trace: [ 34.160283][ T6855] show_stack+0x2c/0x3c (C) [ 34.160952][ T6855] __dump_stack+0x30/0x40 [ 34.161575][ T6855] dump_stack_lvl+0xd8/0x12c [ 34.162218][ T6855] dump_stack+0x1c/0x28 [ 34.162865][ T6855] print_circular_bug+0x324/0x32c [ 34.163613][ T6855] check_noncircular+0x154/0x174 [ 34.164361][ T6855] __lock_acquire+0x1774/0x30a4 [ 34.165082][ T6855] lock_acquire+0x140/0x2e0 [ 34.165785][ T6855] down_read+0x58/0x308 [ 34.166404][ T6855] kernfs_iop_getattr+0xa0/0x410 [ 34.167135][ T6855] vfs_getattr_nosec+0x254/0x38c [ 34.167904][ T6855] vfs_getattr+0x60/0x84 [ 34.168541][ T6855] loop_assign_backing_file+0x1d8/0x390 [ 34.169377][ T6855] lo_ioctl+0x1234/0x177c [ 34.170030][ T6855] blkdev_ioctl+0x62c/0xadc [ 34.170689][ T6855] __arm64_sys_ioctl+0x14c/0x1c4 [ 34.171405][ T6855] invoke_syscall+0x98/0x254 [ 34.172123][ T6855] el0_svc_common+0xe8/0x23c [ 34.172811][ T6855] do_el0_svc+0x48/0x58 [ 34.173452][ T6855] el0_svc+0x5c/0x26c [ 34.174105][ T6855] el0t_64_sync_handler+0x84/0x12c [ 34.174898][ T6855] el0t_64_sync+0x198/0x19c [ 35.940740][ T6167] Bluetooth: hci4: command tx timeout [ 35.942100][ T6578] Bluetooth: hci0: command tx timeout [ 36.021182][ T6578] Bluetooth: hci1: command tx timeout [ 36.021196][ T6167] Bluetooth: hci3: command tx timeout [ 36.021203][ T6573] Bluetooth: hci2: command tx timeout [ 38.020766][ T6578] Bluetooth: hci4: command tx timeout [ 38.020802][ T6167] Bluetooth: hci0: command tx timeout [ 38.100767][ T6573] Bluetooth: hci3: command tx timeout [ 38.100807][ T6167] Bluetooth: hci1: command tx timeout [ 38.100825][ T6578] Bluetooth: hci2: command tx timeout