last executing test programs: 8m31.202767317s ago: executing program 3 (id=122): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 8m30.839723205s ago: executing program 3 (id=125): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x27}, 0x28) syz_usb_connect$hid(0x2f3c20a306d466aa, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x20000000) 8m26.9945853s ago: executing program 3 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000000)={0x26, 0x0}) 8m25.734943694s ago: executing program 3 (id=142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xc5) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14157c, 0x62) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 8m25.106526527s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) setpriority(0x2, 0x0, 0xffffffffffffffcd) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, 0x0, 0x0) shutdown(r4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 8m22.711796883s ago: executing program 3 (id=151): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7d, 0x13, 0x5, 0x5, 0x3, 0x3, 0x2eef5e19, 0x272, 0x38, 0x30b, 0x7, 0x3, 0x20, 0x2, 0x1, 0x87, 0x400}, [{0x6, 0x2, 0x2, 0x9, 0xff, 0x4, 0x4e, 0x85}, {0x5, 0x81, 0x9, 0x2, 0x9, 0xe4f, 0x200, 0x8}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 8m22.260509882s ago: executing program 32 (id=151): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7d, 0x13, 0x5, 0x5, 0x3, 0x3, 0x2eef5e19, 0x272, 0x38, 0x30b, 0x7, 0x3, 0x20, 0x2, 0x1, 0x87, 0x400}, [{0x6, 0x2, 0x2, 0x9, 0xff, 0x4, 0x4e, 0x85}, {0x5, 0x81, 0x9, 0x2, 0x9, 0xe4f, 0x200, 0x8}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6m47.604157553s ago: executing program 2 (id=356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x4e23, 0x2000000, @mcast1, 0x20000000}}}, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB='@\x00', @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769", @ANYRES32, @ANYBLOB], 0x40}}, 0x24008810) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0xe, 0xffffffffffffffff, 0x0) 6m47.324435898s ago: executing program 2 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x270, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x73, 0x6e7, 0x1000000, 0x1, 0x7fffffff, 0x0, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x0, [0x0, 0x3, 0x7, 0x6, 0x5, 0x8, 0x3ff, 0x8001, 0x200, 0x1, 0xc, 0x7ff, 0xfff, 0x8, 0x81, 0x7], 0xf}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_io_uring_setup(0x2af8, 0x0, &(0x7f0000000340), &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) 6m45.020606393s ago: executing program 2 (id=364): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d78b092012000", 0x0, 0xffffffff, 0x5, 0xf6}, 0x3c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x7}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@remote, @broadcast, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d", 0x80}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c) 6m43.877735095s ago: executing program 2 (id=368): r0 = socket(0x11, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}}, 0x80000) 6m41.642630429s ago: executing program 2 (id=373): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m41.506412732s ago: executing program 2 (id=374): pipe(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6m25.421068216s ago: executing program 33 (id=374): pipe(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m44.626569253s ago: executing program 4 (id=1539): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) 2m44.511006945s ago: executing program 4 (id=1540): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x208, 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2e", 0x5f}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 2m43.275921219s ago: executing program 4 (id=1547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) 2m43.099900953s ago: executing program 4 (id=1550): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x4048001) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT], 0xf6, 0xa20, &(0x7f0000000d00)="$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") r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioprio_get$pid(0x2, r3) 2m42.70635083s ago: executing program 4 (id=1553): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c0008000300113f080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) 2m41.522692083s ago: executing program 4 (id=1567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x2edd, &(0x7f0000000100)={0x0, 0xdbcb, 0x80, 0x0, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setuid(0xee01) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 2m41.068507842s ago: executing program 34 (id=1567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x2edd, &(0x7f0000000100)={0x0, 0xdbcb, 0x80, 0x0, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setuid(0xee01) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 1m43.654514314s ago: executing program 6 (id=1808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004340)={0x2020}, 0x2020) 1m42.32588632s ago: executing program 6 (id=1810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$hid(0x2f3c20a306d466aa, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x20000000) 1m39.022014095s ago: executing program 6 (id=1820): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 1m38.25076559s ago: executing program 6 (id=1823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 1m37.73843518s ago: executing program 6 (id=1826): syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000840)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x16, 0x0, @gue={{0x1, 0x0, 0x1, 0x1, 0x0, @void}, "31d09707efc4b702ec65"}}}}}}, 0x0) 1m36.755261699s ago: executing program 6 (id=1834): r0 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ppoll(&(0x7f0000000440)=[{r1, 0x8200}, {r0, 0x4}], 0x2, 0x0, 0x0, 0x0) 1m36.121544042s ago: executing program 35 (id=1834): r0 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ppoll(&(0x7f0000000440)=[{r1, 0x8200}, {r0, 0x4}], 0x2, 0x0, 0x0, 0x0) 45.963153182s ago: executing program 7 (id=2046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x100) sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="f79a04cd68c3e21533a90f73b2ed6fff56719043fc499aaaf5577f2900000000a869263e3ea9467ccaa2cbc9921f0f443f", 0x31}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) 45.746414906s ago: executing program 7 (id=2050): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002740)=""/4071, &(0x7f00000004c0)=0xfe7) 45.526858571s ago: executing program 7 (id=2052): setresuid(0x0, 0xee00, 0x0) ioprio_set$uid(0x0, 0x0, 0x2004) 45.394766623s ago: executing program 7 (id=2055): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 45.238143606s ago: executing program 7 (id=2058): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = fsopen(0x0, 0x1) clock_gettime(0xfffffff2, &(0x7f0000000500)) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 44.718494847s ago: executing program 7 (id=2065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x13, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @link_local}, 0x10) 43.580153769s ago: executing program 36 (id=2065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x13, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @link_local}, 0x10) 29.146574091s ago: executing program 8 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 28.896777806s ago: executing program 8 (id=2160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x100) sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="f79a04cd68c3e21533a90f73b2ed6fff56719043fc499aaaf5577f2900000000a869263e3ea9467ccaa2cbc9921f0f443f", 0x31}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) 27.511628893s ago: executing program 8 (id=2166): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) 26.834249826s ago: executing program 37 (id=2166): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) 6.826550677s ago: executing program 0 (id=2247): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f", 0x18) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x100) sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="f79a04cd68c3e21533a90f73b2ed6fff56719043fc499aaaf5577f2900000000a869263e3ea9467ccaa2cbc9921f0f443f", 0x31}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) 6.618830731s ago: executing program 0 (id=2250): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa5e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c20605"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.004374253s ago: executing program 0 (id=2255): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x208, 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/133, 0x85}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0f", 0x6c}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 5.227036549s ago: executing program 9 (id=2263): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa5e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.930571104s ago: executing program 0 (id=2266): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x3) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) close(r2) 4.857352106s ago: executing program 0 (id=2267): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r0, &(0x7f0000009940)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x3b1}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x1, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$netlink(0x10, 0x3, 0x4) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) 4.690199039s ago: executing program 9 (id=2268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc", 0x24) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x100) sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="f79a04cd68c3e21533a90f73b2ed6fff56719043fc499aaaf5577f2900000000a869263e3ea9467ccaa2cbc9921f0f443f", 0x31}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) 4.466782493s ago: executing program 0 (id=2270): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 4.424530754s ago: executing program 9 (id=2271): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount(&(0x7f0000001200)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001280)='erofs\x00', 0x0, 0x0) 4.10543791s ago: executing program 9 (id=2275): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0xa00c1, 0x9c37611dc13d0da6) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.842718456s ago: executing program 1 (id=2277): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) capset(0x0, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r2, 0xd9a4, 0x200}, 0x8) 3.692788669s ago: executing program 1 (id=2278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe0, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2a90137b}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.977835902s ago: executing program 1 (id=2280): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 2.926720944s ago: executing program 9 (id=2281): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, 0x0, 0x7a) 2.675986348s ago: executing program 1 (id=2283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002740)=""/4071, &(0x7f00000004c0)=0xfe7) 2.547244541s ago: executing program 1 (id=2285): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x2a2, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 2.377447524s ago: executing program 9 (id=2286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x27}, 0x28) syz_usb_connect$hid(0x2f3c20a306d466aa, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x20000000) 2.038634591s ago: executing program 1 (id=2287): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200454, &(0x7f00000000c0)=ANY=[], 0x1, 0x1235, &(0x7f0000000ac0)="$eJzs3E9rHGUcB/BfNqlZU/NHrdVW0Ae9eFqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe+pVb74G8ehNEd9Arr4Cb715ykEcYSdtsrVBozFb7OdzmR/7m+/M87DLwizPs3ff+PKTzY2ytZH1ozExEY2tiLSfIkUj7nlptT7euLm63G6vXEvp6vL1xddTSnMv//jBZ9++8lP//PvfzX0/HXsLH96JpV/2Lu5duvv79Y87ZeqUqdvrpyzd6vX62a0iT+udcrOV0rtFnpV56nTLfHukv1H0trYGKeuuz85sbedlmbLuIG3mg9Tvpf72IGUfZZ1uarVaaXYmONa5vz5l7Zv9qvohoqrOxRNRVVX1ZMzExItfRcRcfBERT8cz8WxciMm4GM/HC3FpeNZZDB8AAAAAAAAAAAAAAAAAAAAeH/vD3fyj+//Px1MxG3MxHwv39/8/Z/8/AAAAAAAAAAAAAAAAAAAA/Gfeu3FzdbndXrmWUjOiuLOztrNWH+v+8kZ0oog8rsR8/BbD3f+1ur76dnvlShqajIjdg/zuztrkaH5x+HcCB/mpYe9efrHOp7hdHMlPx0ydb0ZEHksxHxeO3L95mF96aL4Zr7165P6tmK92I3pRxPrw3of5zxdTeuud9gP5y8PzAAAA4P+gle5bGH3+rZ/fW63j+nX+BL8PPPB8PRWXp8Y7dyLKwaebWVHk26NF80+vjK2YfjSGcZKi8W/i03FsqzHS+vrniHHP9JEomgef5dO44MSZD/40rnP7VOY+Woz5i4kzcfimj3skAAAAAAAAAAAAnMTfWQ/4a/zjVYRT8ZCVZW+OZ6oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//72mw60=") truncate(&(0x7f0000000040)='./file0\x00', 0x806e8) 2.038348951s ago: executing program 5 (id=2288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe0, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2a90137b}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 450.613452ms ago: executing program 5 (id=2289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e02742e8680d85009882762f86dd", 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 386.446303ms ago: executing program 5 (id=2290): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee4", 0x2a) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x100) sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="f79a04cd68c3e21533a90f73b2ed6fff56719043fc499aaaf5577f2900000000a869263e3ea9467ccaa2cbc9921f0f443f", 0x31}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) 270.723305ms ago: executing program 5 (id=2291): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 130.356418ms ago: executing program 5 (id=2292): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002740)=""/4071, &(0x7f00000004c0)=0xfe7) 0s ago: executing program 5 (id=2293): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, 0x0, 0x7a) kernel console output (not intermixed with test programs): from 0 to 1024 [ 208.155902][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.181528][ T6996] EXT4-fs: inline encryption not supported [ 208.219992][ T6996] EXT4-fs: Mount option(s) incompatible with ext2 [ 210.884518][ T7018] loop4: detected capacity change from 0 to 128 [ 210.949157][ T7018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 211.056109][ T7018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.347966][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 212.550935][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 212.557610][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 212.558548][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 216.092354][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 216.151297][ T7078] loop4: detected capacity change from 0 to 128 [ 216.202430][ T7078] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 216.291275][ T7075] IPv4: Oversized IP packet from 127.202.26.0 [ 216.332325][ T7078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.691115][ T28] audit: type=1800 audit(1757193260.512:11): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.277" name="file1" dev="loop4" ino=104 res=0 errno=0 [ 219.662563][ T7109] fuse: Unknown parameter 'user_id00000000000000000000' [ 221.214985][ T7131] loop1: detected capacity change from 0 to 128 [ 221.294437][ T7131] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 221.382500][ T7131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.675046][ T7153] fuse: Unknown parameter 'user_id00000000000000000000' [ 224.087709][ T7166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.211019][ T7175] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 225.773761][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 227.167249][ T7206] fuse: Unknown parameter 'user_id00000000000000000000' [ 227.646571][ T7216] xt_hashlimit: max too large, truncated to 1048576 [ 227.653799][ T7216] xt_hashlimit: invalid interval [ 231.655005][ T7241] Zero length message leads to an empty skb [ 231.841409][ T7245] fuse: Bad value for 'fd' [ 232.334811][ T7250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.600077][ T7269] loop4: detected capacity change from 0 to 2048 [ 235.725993][ T7269] Alternate GPT is invalid, using primary GPT. [ 235.751359][ T7269] loop4: p1 p2 p3 [ 236.664955][ T6213] udevd[6213]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 236.679668][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 236.692284][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 238.722377][ T7299] fuse: Bad value for 'fd' [ 239.527364][ T7312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.268252][ T7327] nbd0: detected capacity change from 0 to 63 [ 240.346224][ T5791] block nbd0: Receive control failed (result -104) [ 243.447257][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.328'. [ 243.594569][ T7354] fuse: Bad value for 'fd' [ 244.734494][ T7378] fuse: Unknown parameter '0x0000000000000003' [ 245.246515][ T7383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.313743][ T7416] xt_hashlimit: max too large, truncated to 1048576 [ 250.321074][ T7416] xt_hashlimit: invalid interval [ 251.363455][ T7427] nbd1: detected capacity change from 0 to 63 [ 251.419853][ T5791] block nbd1: Receive control failed (result -32) [ 251.467011][ T96] block nbd1: Dead connection, failed to find a fallback [ 251.474880][ T96] block nbd1: shutting down sockets [ 251.480912][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 252.239014][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 252.247088][ T96] Buffer I/O error on dev nbd1, logical block 1, async page read [ 252.254937][ T96] Buffer I/O error on dev nbd1, logical block 2, async page read [ 252.262831][ T96] Buffer I/O error on dev nbd1, logical block 3, async page read [ 252.273983][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.284185][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 252.292263][ T96] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 252.315339][ T96] Buffer I/O error on dev nbd1, logical block 1, async page read [ 252.323249][ T96] Buffer I/O error on dev nbd1, logical block 2, async page read [ 252.332780][ T96] Buffer I/O error on dev nbd1, logical block 3, async page read [ 252.341727][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.350891][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 252.370771][ T24] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 252.379904][ T24] Buffer I/O error on dev nbd1, logical block 1, async page read [ 252.410466][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 252.420890][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 252.432639][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 252.442627][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 252.452396][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 252.462019][ T5789] ldm_validate_partition_table(): Disk read failed. [ 252.486159][ T5789] Dev nbd1: unable to read RDB block 0 [ 252.516945][ T7443] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 252.527023][ T5789] nbd1: unable to read partition table [ 252.585824][ T7443] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.591385][ T5789] ldm_validate_partition_table(): Disk read failed. [ 252.638766][ T7443] bond0: (slave team0): Enslaving as an active interface with an up link [ 252.648937][ T5789] Dev nbd1: unable to read RDB block 0 [ 252.673727][ T5789] nbd1: unable to read partition table [ 256.110568][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.116998][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.136751][ T7469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.937168][ T7553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.791889][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 30 seconds [ 270.803240][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 30 seconds [ 270.814312][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 30 seconds [ 270.826694][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 30 seconds [ 270.864894][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.875939][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.885878][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.896664][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.910567][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.922184][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.932193][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.943001][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.954769][ T7567] batman_adv: batadv0: Adding interface: ipvlan2 [ 270.961725][ T7567] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.987332][ T7567] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 271.054086][ T7459] Set syz1 is full, maxelem 65536 reached [ 271.423930][ T7575] tipc: Started in network mode [ 271.460283][ T7575] tipc: Node identity 26f84f0d6e92, cluster identity 4711 [ 271.474233][ T7575] tipc: Enabled bearer , priority 0 [ 271.514715][ T7580] syzkaller0: entered promiscuous mode [ 271.520307][ T7580] syzkaller0: entered allmulticast mode [ 271.741469][ T7580] tipc: Resetting bearer [ 271.839834][ T7574] tipc: Resetting bearer [ 271.875047][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.885021][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.894289][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.903973][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.916076][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.923768][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.992622][ T7574] tipc: Disabling bearer [ 272.343638][ T7595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.991865][ T5791] Bluetooth: hci4: command tx timeout [ 274.209380][ T7586] chnl_net:caif_netlink_parms(): no params data found [ 274.475517][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.492363][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.507963][ T7586] bridge_slave_0: entered allmulticast mode [ 274.523942][ T7586] bridge_slave_0: entered promiscuous mode [ 274.539258][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.546999][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.554638][ T7586] bridge_slave_1: entered allmulticast mode [ 274.563775][ T7586] bridge_slave_1: entered promiscuous mode [ 274.633523][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.650706][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.717815][ T7586] team0: Port device team_slave_0 added [ 274.742689][ T7586] team0: Port device team_slave_1 added [ 274.793124][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.801414][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.830459][ T7586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.845244][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.852620][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.878939][ T7586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.128848][ T7586] hsr_slave_0: entered promiscuous mode [ 275.188882][ T7586] hsr_slave_1: entered promiscuous mode [ 275.200815][ T7586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.223671][ T7586] Cannot create hsr debugfs directory [ 276.070994][ T5791] Bluetooth: hci4: command tx timeout [ 276.383844][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 276.507679][ T7586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.538465][ T7586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.553238][ T7586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.562879][ T7630] netlink: set zone limit has 8 unknown bytes [ 276.585118][ T7586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.808861][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.885299][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.898838][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.906506][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.020042][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.027431][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.151050][ T5791] Bluetooth: hci4: command tx timeout [ 278.459524][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 279.894463][ T7665] tipc: Started in network mode [ 279.899665][ T7665] tipc: Node identity 621c389c3e4, cluster identity 4711 [ 279.908067][ T7665] tipc: Enabled bearer , priority 0 [ 279.918294][ T7665] syzkaller0: entered promiscuous mode [ 279.927249][ T7665] syzkaller0: entered allmulticast mode [ 279.969526][ T7665] tipc: Resetting bearer [ 279.977850][ T7664] tipc: Resetting bearer [ 280.009073][ T7664] tipc: Disabling bearer [ 280.038011][ T7586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.241153][ T5791] Bluetooth: hci4: command tx timeout [ 280.276500][ T7671] netlink: set zone limit has 8 unknown bytes [ 280.504784][ T7586] veth0_vlan: entered promiscuous mode [ 280.539249][ T7586] veth1_vlan: entered promiscuous mode [ 280.601343][ T7586] veth0_macvtap: entered promiscuous mode [ 280.625522][ T7586] veth1_macvtap: entered promiscuous mode [ 280.687707][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.707363][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.740826][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.758795][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.768841][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.785374][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.810626][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.822677][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.851182][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.881926][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.905049][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.962384][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.011669][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.025504][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.037104][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.047506][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.059282][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.072761][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.239557][ T7586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.343018][ T7586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.447687][ T7586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.542375][ T7586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.118634][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.161539][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.247284][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.257306][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.458272][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.456'. [ 288.394129][ T7742] loop5: detected capacity change from 0 to 128 [ 288.487942][ T7742] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 288.553165][ T7742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.582601][ T7744] bridge0: entered allmulticast mode [ 288.604812][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 288.740683][ T7744] bridge_slave_1: left allmulticast mode [ 288.746414][ T7744] bridge_slave_1: left promiscuous mode [ 288.818241][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.349405][ T28] audit: type=1800 audit(1757193331.282:12): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.465" name="file1" dev="loop5" ino=104 res=0 errno=0 [ 289.437061][ T7744] bridge_slave_0: left allmulticast mode [ 289.463446][ T7744] bridge_slave_0: left promiscuous mode [ 289.469373][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.802232][ T7744] bridge0 (unregistering): left allmulticast mode [ 291.049390][ T7770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.903395][ T7778] tipc: Started in network mode [ 291.918505][ T7778] tipc: Node identity 46c49274e796, cluster identity 4711 [ 291.928821][ T7778] tipc: Enabled bearer , priority 0 [ 291.946396][ T7781] loop1: detected capacity change from 0 to 128 [ 291.969194][ T7782] syzkaller0: entered promiscuous mode [ 291.980620][ T7782] syzkaller0: entered allmulticast mode [ 292.000574][ T7781] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 292.048098][ T7781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.635207][ T7782] tipc: Resetting bearer [ 292.802098][ T7777] tipc: Resetting bearer [ 292.961529][ T7777] tipc: Disabling bearer [ 292.978539][ T5790] tipc: Node number set to 2706543220 [ 295.951162][ T7816] loop4: detected capacity change from 0 to 128 [ 295.967286][ T7816] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 295.990684][ T7816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.833383][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.842187][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.424005][ T7813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.449642][ T7813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.742640][ T7813] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.751934][ T7813] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.761396][ T7813] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.770795][ T7813] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.970857][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 299.022790][ T7813] syz.5.486 (7813) used greatest stack depth: 20040 bytes left [ 299.303993][ T7875] loop1: detected capacity change from 0 to 128 [ 299.334181][ T7875] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 299.376605][ T7875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.517788][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 60 seconds [ 301.528724][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 60 seconds [ 301.541359][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 60 seconds [ 301.552630][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 60 seconds [ 302.413485][ T7895] tipc: Enabled bearer , priority 0 [ 302.432271][ T7895] syzkaller0: entered promiscuous mode [ 302.444806][ T7895] syzkaller0: entered allmulticast mode [ 302.481082][ T7895] tipc: Resetting bearer [ 302.517908][ T7894] tipc: Resetting bearer [ 302.617606][ T7894] tipc: Disabling bearer [ 302.844387][ T7903] loop1: detected capacity change from 0 to 128 [ 302.903253][ T7903] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 302.972434][ T7903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.507939][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'. [ 305.100611][ T7927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.917535][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 305.932474][ T7931] sctp: [Deprecated]: syz.0.515 (pid 7931) Use of int in max_burst socket option. [ 305.932474][ T7931] Use struct sctp_assoc_value instead [ 306.070292][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.078157][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.633173][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.688322][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.929016][ T7921] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.941766][ T7921] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.956880][ T7921] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.971125][ T7921] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.048208][ T7933] tipc: Enabling of bearer rejected, failed to enable media [ 311.102029][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.109827][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.397884][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.415287][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.556438][ T7966] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.569246][ T7966] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.589419][ T7966] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.600895][ T7966] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.681089][ T7974] tipc: Enabled bearer , priority 0 [ 311.708533][ T7975] syzkaller0: entered promiscuous mode [ 311.723751][ T7975] syzkaller0: entered allmulticast mode [ 311.757497][ T7983] tipc: Resetting bearer [ 311.831258][ T7970] tipc: Resetting bearer [ 311.874592][ T7970] tipc: Disabling bearer [ 311.944744][ T7995] tipc: Enabled bearer , priority 0 [ 311.958537][ T7995] syzkaller0: entered promiscuous mode [ 311.965288][ T7995] syzkaller0: entered allmulticast mode [ 312.107828][ T7999] tipc: Resetting bearer [ 312.171719][ T7994] tipc: Resetting bearer [ 313.249741][ T7994] tipc: Disabling bearer [ 315.045923][ T8022] tipc: Enabled bearer , priority 0 [ 315.125009][ T8026] syzkaller0: entered promiscuous mode [ 315.150140][ T8026] syzkaller0: entered allmulticast mode [ 316.070560][ T7939] tipc: Node number set to 1214926605 [ 316.103913][ T8032] tipc: Enabling of bearer rejected, failed to enable media [ 316.190970][ T8022] tipc: Resetting bearer [ 316.216549][ T8021] tipc: Resetting bearer [ 316.280948][ T8021] tipc: Disabling bearer [ 317.556326][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.563099][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.954362][ T8068] syz_tun: entered allmulticast mode [ 319.971717][ T8066] syz_tun: left allmulticast mode [ 323.261132][ T8094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.234789][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.567'. [ 324.386527][ T8106] loop5: detected capacity change from 0 to 128 [ 324.399748][ T8106] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 324.581931][ T8106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.070558][ T5791] Bluetooth: hci4: command tx timeout [ 328.704017][ T8141] loop1: detected capacity change from 0 to 128 [ 328.820791][ T8141] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 328.867727][ T8141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.636485][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 90 seconds [ 331.648510][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 90 seconds [ 331.659650][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 90 seconds [ 331.670805][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 90 seconds [ 332.069071][ T8169] syz.1.588 uses obsolete (PF_INET,SOCK_PACKET) [ 332.514675][ T8175] loop1: detected capacity change from 0 to 128 [ 332.621977][ T8175] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 332.668617][ T8175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.440471][ T28] audit: type=1800 audit(1757193375.362:13): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.592" name="file1" dev="loop1" ino=104 res=0 errno=0 [ 334.982068][ T8191] syzkaller1: entered promiscuous mode [ 334.987635][ T8191] syzkaller1: entered allmulticast mode [ 336.025535][ T8206] tipc: Enabled bearer , priority 0 [ 336.055709][ T8205] syzkaller0: entered promiscuous mode [ 336.070457][ T8205] syzkaller0: entered allmulticast mode [ 336.238037][ T8206] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 336.319155][ T8209] tipc: Resetting bearer [ 336.378033][ T8211] loop5: detected capacity change from 0 to 128 [ 336.391060][ T8204] tipc: Resetting bearer [ 336.429356][ T8211] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 336.475952][ T8211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.611452][ T8204] tipc: Disabling bearer [ 339.642174][ T8237] tipc: Enabling of bearer rejected, failed to enable media [ 340.535548][ T8248] tipc: Enabled bearer , priority 0 [ 340.601618][ T8248] syzkaller0: entered promiscuous mode [ 340.626893][ T8248] syzkaller0: entered allmulticast mode [ 340.729856][ T8248] tipc: Resetting bearer [ 340.794537][ T8247] tipc: Resetting bearer [ 340.897777][ T8247] tipc: Disabling bearer [ 343.084040][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 344.180537][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 346.630124][ T8326] tipc: Enabled bearer , priority 0 [ 346.657432][ T8326] syzkaller0: entered promiscuous mode [ 346.677608][ T8326] syzkaller0: entered allmulticast mode [ 346.800843][ T8328] tipc: Resetting bearer [ 346.931960][ T8325] tipc: Resetting bearer [ 347.244472][ T8325] tipc: Disabling bearer [ 347.892527][ T8338] tipc: Enabled bearer , priority 0 [ 348.831855][ T8329] tipc: Disabling bearer [ 349.010639][ T7939] tipc: Node number set to 1549547676 [ 351.225788][ T8381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.494302][ T8384] tipc: Enabled bearer , priority 0 [ 351.560831][ T8384] syzkaller0: entered promiscuous mode [ 351.598276][ T8384] syzkaller0: entered allmulticast mode [ 352.037690][ T8384] tipc: Resetting bearer [ 352.076704][ T8380] tipc: Resetting bearer [ 352.938355][ T8380] tipc: Disabling bearer [ 353.100771][ T8393] tipc: Enabling of bearer rejected, failed to enable media [ 353.732205][ T8406] tipc: Enabling of bearer rejected, failed to enable media [ 354.527481][ T8426] tipc: Enabled bearer , priority 0 [ 354.545698][ T8426] syzkaller0: entered promiscuous mode [ 354.565477][ T8426] syzkaller0: entered allmulticast mode [ 354.695567][ T8425] tipc: Resetting bearer [ 354.994473][ T8425] tipc: Disabling bearer [ 355.079455][ T8435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.430858][ T5100] Bluetooth: hci0: command 0x0406 tx timeout [ 356.714894][ T8464] team0: No ports can be present during mode change [ 356.735578][ T8461] tipc: Enabled bearer , priority 0 [ 356.765321][ T8461] syzkaller0: entered promiscuous mode [ 356.800459][ T8461] syzkaller0: entered allmulticast mode [ 357.029744][ T8460] tipc: Resetting bearer [ 357.463351][ T8460] tipc: Disabling bearer [ 357.558792][ T8478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.937656][ T8491] tipc: Enabled bearer , priority 0 [ 359.961763][ T8491] syzkaller0: entered promiscuous mode [ 359.967315][ T8491] syzkaller0: entered allmulticast mode [ 360.105590][ T8491] tipc: Resetting bearer [ 360.342128][ T8490] tipc: Resetting bearer [ 360.574978][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 360.689637][ T8490] tipc: Disabling bearer [ 360.937759][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 361.513039][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 361.670832][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 120 seconds [ 361.681773][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 120 seconds [ 361.693007][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 120 seconds [ 361.710713][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 120 seconds [ 361.939677][ T8516] tipc: Enabled bearer , priority 0 [ 361.966603][ T8516] syzkaller0: entered promiscuous mode [ 362.012905][ T8516] syzkaller0: entered allmulticast mode [ 362.246525][ T8515] tipc: Resetting bearer [ 362.487727][ T8515] tipc: Disabling bearer [ 362.526504][ T8534] netlink: 'syz.0.705': attribute type 16 has an invalid length. [ 362.544752][ T8534] netlink: 'syz.0.705': attribute type 17 has an invalid length. [ 363.270788][ T8549] tipc: Enabled bearer , priority 0 [ 363.305531][ T8550] syzkaller0: entered promiscuous mode [ 363.334068][ T8550] syzkaller0: entered allmulticast mode [ 363.395033][ T8546] tipc: Resetting bearer [ 363.485462][ T8545] tipc: Resetting bearer [ 363.660939][ T8545] tipc: Disabling bearer [ 364.171010][ T8566] tipc: Enabled bearer , priority 0 [ 364.347680][ T8566] syzkaller0: entered promiscuous mode [ 364.414238][ T8566] syzkaller0: entered allmulticast mode [ 364.622513][ T8565] tipc: Resetting bearer [ 364.671000][ T8578] loop1: detected capacity change from 0 to 2048 [ 364.713888][ T8578] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 364.730050][ T8578] loop1: p4 start 65536 is beyond EOD, [ 364.881650][ T8565] tipc: Disabling bearer [ 364.890699][ T8578] truncated [ 364.896223][ T8578] loop1: p5 start 65536 is beyond EOD, truncated [ 364.934330][ T8578] loop1: p6 start 65536 is beyond EOD, truncated [ 364.971603][ T8578] loop1: p7 start 65536 is beyond EOD, truncated [ 364.978203][ T8578] loop1: p8 start 65536 is beyond EOD, truncated [ 365.095651][ T8578] loop1: p9 start 65536 is beyond EOD, truncated [ 365.180964][ T8578] loop1: p10 start 65536 is beyond EOD, truncated [ 365.187789][ T8578] loop1: p11 start 65536 is beyond EOD, truncated [ 365.219518][ T8578] loop1: p12 start 65536 is beyond EOD, truncated [ 365.241103][ T8578] loop1: p13 start 65536 is beyond EOD, truncated [ 365.247794][ T8578] loop1: p14 start 65536 is beyond EOD, truncated [ 365.281871][ T8578] loop1: p15 start 65536 is beyond EOD, truncated [ 365.298762][ T8578] loop1: p16 start 65536 is beyond EOD, truncated [ 365.319969][ T8578] loop1: p17 start 65536 is beyond EOD, truncated [ 365.340433][ T8578] loop1: p18 start 65536 is beyond EOD, truncated [ 365.346971][ T8578] loop1: p19 start 65536 is beyond EOD, truncated [ 365.388479][ T8578] loop1: p20 start 65536 is beyond EOD, truncated [ 365.410484][ T8578] loop1: p21 start 65536 is beyond EOD, truncated [ 365.417015][ T8578] loop1: p22 start 65536 is beyond EOD, truncated [ 365.444970][ T8578] loop1: p23 start 65536 is beyond EOD, truncated [ 365.454982][ T8578] loop1: p24 start 65536 is beyond EOD, truncated [ 365.467324][ T8578] loop1: p25 start 65536 is beyond EOD, truncated [ 365.474382][ T8578] loop1: p26 start 65536 is beyond EOD, truncated [ 365.481407][ T8578] loop1: p27 start 65536 is beyond EOD, truncated [ 365.488234][ T8578] loop1: p28 start 65536 is beyond EOD, truncated [ 365.496543][ T8578] loop1: p29 start 65536 is beyond EOD, truncated [ 365.508667][ T8578] loop1: p30 start 65536 is beyond EOD, truncated [ 365.522473][ T8578] loop1: p31 start 65536 is beyond EOD, truncated [ 365.535069][ T8578] loop1: p32 start 65536 is beyond EOD, truncated [ 365.548222][ T8578] loop1: p33 start 65536 is beyond EOD, truncated [ 365.561981][ T8578] loop1: p34 start 65536 is beyond EOD, truncated [ 365.576519][ T8578] loop1: p35 start 65536 is beyond EOD, truncated [ 365.609326][ T8578] loop1: p36 start 65536 is beyond EOD, truncated [ 365.640293][ T8578] loop1: p37 start 65536 is beyond EOD, truncated [ 365.667557][ T8578] loop1: p38 start 65536 is beyond EOD, truncated [ 365.687556][ T8578] loop1: p39 start 65536 is beyond EOD, truncated [ 365.709671][ T8578] loop1: p40 start 65536 is beyond EOD, truncated [ 365.717214][ T8578] loop1: p41 start 65536 is beyond EOD, truncated [ 365.724214][ T8578] loop1: p42 start 65536 is beyond EOD, truncated [ 365.730877][ T8578] loop1: p43 start 65536 is beyond EOD, truncated [ 365.738181][ T8578] loop1: p44 start 65536 is beyond EOD, truncated [ 365.745248][ T8578] loop1: p45 start 65536 is beyond EOD, truncated [ 365.751977][ T8578] loop1: p46 start 65536 is beyond EOD, truncated [ 365.758534][ T8578] loop1: p47 start 65536 is beyond EOD, truncated [ 365.765112][ T8578] loop1: p48 start 65536 is beyond EOD, truncated [ 365.771710][ T8578] loop1: p49 start 65536 is beyond EOD, truncated [ 365.778376][ T8578] loop1: p50 start 65536 is beyond EOD, truncated [ 366.000851][ T8578] loop1: p51 start 65536 is beyond EOD, truncated [ 366.075430][ T8578] loop1: p52 start 65536 is beyond EOD, truncated [ 366.189979][ T8578] loop1: p53 start 65536 is beyond EOD, truncated [ 366.386942][ T8578] loop1: p54 start 65536 is beyond EOD, truncated [ 366.397009][ T8578] loop1: p55 start 65536 is beyond EOD, truncated [ 366.435375][ T8578] loop1: p56 start 65536 is beyond EOD, truncated [ 366.490425][ T8578] loop1: p57 start 65536 is beyond EOD, truncated [ 366.497042][ T8578] loop1: p58 start 65536 is beyond EOD, truncated [ 366.510476][ T8578] loop1: p59 start 65536 is beyond EOD, truncated [ 366.517222][ T8578] loop1: p60 start 65536 is beyond EOD, truncated [ 366.550583][ T8578] loop1: p61 start 65536 is beyond EOD, truncated [ 366.557109][ T8578] loop1: p62 start 65536 is beyond EOD, truncated [ 366.730821][ T8578] loop1: p63 start 65536 is beyond EOD, truncated [ 366.737352][ T8578] loop1: p64 start 65536 is beyond EOD, truncated [ 366.780918][ T8595] tipc: Enabled bearer , priority 0 [ 366.789109][ T8595] syzkaller0: entered promiscuous mode [ 366.794851][ T8595] syzkaller0: entered allmulticast mode [ 366.847099][ T8578] loop1: p65 start 65536 is beyond EOD, truncated [ 366.854086][ T8578] loop1: p66 start 65536 is beyond EOD, truncated [ 366.862501][ T8595] tipc: Resetting bearer [ 366.869040][ T8578] loop1: p67 start 65536 is beyond EOD, truncated [ 366.894854][ T8578] loop1: p68 start 65536 is beyond EOD, truncated [ 366.904235][ T8578] loop1: p69 start 65536 is beyond EOD, truncated [ 366.922090][ T8578] loop1: p70 start 65536 is beyond EOD, truncated [ 366.940247][ T8578] loop1: p71 start 65536 is beyond EOD, truncated [ 366.957144][ T8578] loop1: p72 start 65536 is beyond EOD, truncated [ 366.967334][ T8578] loop1: p73 start 65536 is beyond EOD, truncated [ 366.977604][ T8594] tipc: Resetting bearer [ 366.987602][ T8578] loop1: p74 start 65536 is beyond EOD, truncated [ 367.010053][ T8578] loop1: p75 start 65536 is beyond EOD, truncated [ 367.030715][ T8578] loop1: p76 start 65536 is beyond EOD, truncated [ 367.045060][ T8578] loop1: p77 start 65536 is beyond EOD, truncated [ 367.066640][ T8578] loop1: p78 start 65536 is beyond EOD, truncated [ 367.090528][ T8578] loop1: p79 start 65536 is beyond EOD, truncated [ 367.099299][ T8578] loop1: p80 start 65536 is beyond EOD, truncated [ 367.114466][ T8578] loop1: p81 start 65536 is beyond EOD, truncated [ 367.134026][ T8578] loop1: p82 start 65536 is beyond EOD, truncated [ 367.142549][ T8594] tipc: Disabling bearer [ 367.152000][ T8578] loop1: p83 start 65536 is beyond EOD, truncated [ 367.169684][ T8578] loop1: p84 start 65536 is beyond EOD, truncated [ 367.183880][ T8578] loop1: p85 start 65536 is beyond EOD, truncated [ 367.197990][ T8578] loop1: p86 start 65536 is beyond EOD, truncated [ 367.211463][ T8578] loop1: p87 start 65536 is beyond EOD, truncated [ 367.223810][ T8578] loop1: p88 start 65536 is beyond EOD, truncated [ 367.381065][ T8578] loop1: p89 start 65536 is beyond EOD, truncated [ 367.387640][ T8578] loop1: p90 start 65536 is beyond EOD, truncated [ 367.394926][ T8578] loop1: p91 start 65536 is beyond EOD, truncated [ 367.401798][ T8578] loop1: p92 start 65536 is beyond EOD, truncated [ 367.409507][ T8578] loop1: p93 start 65536 is beyond EOD, truncated [ 367.416250][ T8578] loop1: p94 start 65536 is beyond EOD, truncated [ 367.422896][ T8578] loop1: p95 start 65536 is beyond EOD, truncated [ 367.429412][ T8578] loop1: p96 start 65536 is beyond EOD, truncated [ 367.437015][ T8578] loop1: p97 start 65536 is beyond EOD, truncated [ 367.636248][ T8578] loop1: p98 start 65536 is beyond EOD, truncated [ 367.686012][ T8578] loop1: p99 start 65536 is beyond EOD, truncated [ 367.744108][ T8578] loop1: p100 start 65536 is beyond EOD, truncated [ 367.814316][ T8578] loop1: p101 start 65536 is beyond EOD, truncated [ 367.869768][ T8578] loop1: p102 start 65536 is beyond EOD, truncated [ 367.912797][ T8578] loop1: p103 start 65536 is beyond EOD, truncated [ 367.957309][ T8578] loop1: p104 start 65536 is beyond EOD, truncated [ 368.008087][ T8578] loop1: p105 start 65536 is beyond EOD, truncated [ 368.140446][ T8578] loop1: p106 start 65536 is beyond EOD, truncated [ 368.150822][ T8578] loop1: p107 start 65536 is beyond EOD, truncated [ 368.200197][ T8578] loop1: p108 start 65536 is beyond EOD, truncated [ 368.219114][ T8578] loop1: p109 start 65536 is beyond EOD, truncated [ 368.280503][ T8578] loop1: p110 start 65536 is beyond EOD, truncated [ 368.307870][ T8578] loop1: p111 start 65536 is beyond EOD, truncated [ 368.361708][ T8578] loop1: p112 start 65536 is beyond EOD, truncated [ 368.416692][ T8578] loop1: p113 start 65536 is beyond EOD, truncated [ 368.474592][ T8578] loop1: p114 start 65536 is beyond EOD, truncated [ 368.506646][ T8578] loop1: p115 start 65536 is beyond EOD, truncated [ 368.535438][ T8578] loop1: p116 start 65536 is beyond EOD, truncated [ 368.578423][ T8578] loop1: p117 start 65536 is beyond EOD, truncated [ 368.620578][ T8578] loop1: p118 start 65536 is beyond EOD, truncated [ 368.646003][ T8578] loop1: p119 start 65536 is beyond EOD, truncated [ 368.657291][ T8578] loop1: p120 start 65536 is beyond EOD, truncated [ 368.684026][ T8578] loop1: p121 start 65536 is beyond EOD, truncated [ 368.720611][ T8578] loop1: p122 start 65536 is beyond EOD, truncated [ 368.740429][ T8578] loop1: p123 start 65536 is beyond EOD, truncated [ 368.749415][ T8578] loop1: p124 start 65536 is beyond EOD, truncated [ 368.763510][ T8578] loop1: p125 start 65536 is beyond EOD, truncated [ 368.770299][ T8578] loop1: p126 start 65536 is beyond EOD, truncated [ 368.783721][ T8578] loop1: p127 start 65536 is beyond EOD, truncated [ 368.793994][ T8578] loop1: p128 start 65536 is beyond EOD, truncated [ 368.805178][ T8578] loop1: p129 start 65536 is beyond EOD, truncated [ 368.814479][ T8578] loop1: p130 start 65536 is beyond EOD, truncated [ 368.850532][ T8578] loop1: p131 start 65536 is beyond EOD, truncated [ 368.871375][ T8611] tipc: Enabling of bearer rejected, failed to enable media [ 368.902802][ T8578] loop1: p132 start 65536 is beyond EOD, truncated [ 368.940492][ T8578] loop1: p133 start 65536 is beyond EOD, truncated [ 369.000680][ T8578] loop1: p134 start 65536 is beyond EOD, truncated [ 369.010917][ T8578] loop1: p135 start 65536 is beyond EOD, truncated [ 369.034132][ T8578] loop1: p136 start 65536 is beyond EOD, truncated [ 369.055628][ T8578] loop1: p137 start 65536 is beyond EOD, truncated [ 369.076335][ T8578] loop1: p138 start 65536 is beyond EOD, truncated [ 369.098976][ T8578] loop1: p139 start 65536 is beyond EOD, truncated [ 369.120126][ T8578] loop1: p140 start 65536 is beyond EOD, truncated [ 369.146681][ T8578] loop1: p141 start 65536 is beyond EOD, truncated [ 369.165152][ T8578] loop1: p142 start 65536 is beyond EOD, truncated [ 369.184195][ T8578] loop1: p143 start 65536 is beyond EOD, truncated [ 369.207647][ T8578] loop1: p144 start 65536 is beyond EOD, truncated [ 369.227249][ T8578] loop1: p145 start 65536 is beyond EOD, truncated [ 369.254984][ T8578] loop1: p146 start 65536 is beyond EOD, truncated [ 369.277930][ T8578] loop1: p147 start 65536 is beyond EOD, truncated [ 369.320493][ T8578] loop1: p148 start 65536 is beyond EOD, truncated [ 369.360487][ T8578] loop1: p149 start 65536 is beyond EOD, truncated [ 369.379307][ T8578] loop1: p150 start 65536 is beyond EOD, truncated [ 369.407624][ T8578] loop1: p151 start 65536 is beyond EOD, truncated [ 369.434757][ T8578] loop1: p152 start 65536 is beyond EOD, truncated [ 369.454356][ T8578] loop1: p153 start 65536 is beyond EOD, truncated [ 369.476035][ T8578] loop1: p154 start 65536 is beyond EOD, truncated [ 369.622410][ T8578] loop1: p155 start 65536 is beyond EOD, truncated [ 369.629023][ T8578] loop1: p156 start 65536 is beyond EOD, truncated [ 369.680417][ T8578] loop1: p157 start 65536 is beyond EOD, truncated [ 369.687019][ T8578] loop1: p158 start 65536 is beyond EOD, truncated [ 369.710845][ T8578] loop1: p159 start 65536 is beyond EOD, truncated [ 369.717733][ T8578] loop1: p160 start 65536 is beyond EOD, truncated [ 369.760895][ T8578] loop1: p161 start 65536 is beyond EOD, truncated [ 369.767597][ T8578] loop1: p162 start 65536 is beyond EOD, truncated [ 369.776825][ T8578] loop1: p163 start 65536 is beyond EOD, truncated [ 369.797544][ T8578] loop1: p164 start 65536 is beyond EOD, truncated [ 369.815233][ T8578] loop1: p165 start 65536 is beyond EOD, truncated [ 369.832704][ T8578] loop1: p166 start 65536 is beyond EOD, truncated [ 369.853591][ T8578] loop1: p167 start 65536 is beyond EOD, truncated [ 369.870531][ T8578] loop1: p168 start 65536 is beyond EOD, truncated [ 369.900769][ T8578] loop1: p169 start 65536 is beyond EOD, truncated [ 369.908012][ T8578] loop1: p170 start 65536 is beyond EOD, truncated [ 369.922684][ T8578] loop1: p171 start 65536 is beyond EOD, truncated [ 369.941289][ T8578] loop1: p172 start 65536 is beyond EOD, truncated [ 369.970483][ T8578] loop1: p173 start 65536 is beyond EOD, truncated [ 369.979905][ T8578] loop1: p174 start 65536 is beyond EOD, truncated [ 369.994966][ T8578] loop1: p175 start 65536 is beyond EOD, truncated [ 370.011991][ T8578] loop1: p176 start 65536 is beyond EOD, truncated [ 370.086360][ T8578] loop1: p177 start 65536 is beyond EOD, truncated [ 370.108084][ T8578] loop1: p178 start 65536 is beyond EOD, truncated [ 370.129755][ T8578] loop1: p179 start 65536 is beyond EOD, truncated [ 370.175020][ T8578] loop1: p180 start 65536 is beyond EOD, truncated [ 370.201775][ T8578] loop1: p181 start 65536 is beyond EOD, truncated [ 370.244644][ T8578] loop1: p182 start 65536 is beyond EOD, truncated [ 370.252481][ T8578] loop1: p183 start 65536 is beyond EOD, truncated [ 370.259313][ T8578] loop1: p184 start 65536 is beyond EOD, truncated [ 370.266061][ T8578] loop1: p185 start 65536 is beyond EOD, truncated [ 370.273435][ T8578] loop1: p186 start 65536 is beyond EOD, truncated [ 370.280019][ T8578] loop1: p187 start 65536 is beyond EOD, truncated [ 370.286687][ T8578] loop1: p188 start 65536 is beyond EOD, truncated [ 370.293311][ T8578] loop1: p189 start 65536 is beyond EOD, truncated [ 370.299970][ T8578] loop1: p190 start 65536 is beyond EOD, truncated [ 370.307063][ T8578] loop1: p191 start 65536 is beyond EOD, truncated [ 370.320375][ T8578] loop1: p192 start 65536 is beyond EOD, truncated [ 370.327327][ T8578] loop1: p193 start 65536 is beyond EOD, truncated [ 370.337291][ T8578] loop1: p194 start 65536 is beyond EOD, truncated [ 370.350606][ T8578] loop1: p195 start 65536 is beyond EOD, truncated [ 370.357477][ T8578] loop1: p196 start 65536 is beyond EOD, truncated [ 370.380383][ T8578] loop1: p197 start 65536 is beyond EOD, truncated [ 370.397476][ T8578] loop1: p198 start 65536 is beyond EOD, truncated [ 370.406812][ T8578] loop1: p199 start 65536 is beyond EOD, truncated [ 370.430414][ T8578] loop1: p200 start 65536 is beyond EOD, truncated [ 370.450590][ T8578] loop1: p201 start 65536 is beyond EOD, truncated [ 370.470387][ T8578] loop1: p202 start 65536 is beyond EOD, truncated [ 370.490397][ T8578] loop1: p203 start 65536 is beyond EOD, truncated [ 370.497548][ T8578] loop1: p204 start 65536 is beyond EOD, truncated [ 370.530462][ T8578] loop1: p205 start 65536 is beyond EOD, truncated [ 370.550636][ T8578] loop1: p206 start 65536 is beyond EOD, truncated [ 370.568113][ T8578] loop1: p207 start 65536 is beyond EOD, truncated [ 370.588415][ T8578] loop1: p208 start 65536 is beyond EOD, truncated [ 370.598545][ T8578] loop1: p209 start 65536 is beyond EOD, truncated [ 370.610572][ T8578] loop1: p210 start 65536 is beyond EOD, truncated [ 370.617271][ T8578] loop1: p211 start 65536 is beyond EOD, truncated [ 370.671174][ T8578] loop1: p212 start 65536 is beyond EOD, truncated [ 370.677783][ T8578] loop1: p213 start 65536 is beyond EOD, truncated [ 370.710377][ T8578] loop1: p214 start 65536 is beyond EOD, truncated [ 370.717445][ T8578] loop1: p215 start 65536 is beyond EOD, truncated [ 370.750453][ T8578] loop1: p216 start 65536 is beyond EOD, truncated [ 370.757061][ T8578] loop1: p217 start 65536 is beyond EOD, truncated [ 370.790868][ T8578] loop1: p218 start 65536 is beyond EOD, truncated [ 370.803282][ T8578] loop1: p219 start 65536 is beyond EOD, truncated [ 370.809888][ T8578] loop1: p220 start 65536 is beyond EOD, truncated [ 370.920697][ T8578] loop1: p221 start 65536 is beyond EOD, truncated [ 370.977086][ T8578] loop1: p222 start 65536 is beyond EOD, truncated [ 370.994068][ T8578] loop1: p223 start 65536 is beyond EOD, truncated [ 371.019938][ T8578] loop1: p224 start 65536 is beyond EOD, truncated [ 371.051938][ T8578] loop1: p225 start 65536 is beyond EOD, truncated [ 371.058550][ T8578] loop1: p226 start 65536 is beyond EOD, truncated [ 371.090472][ T8578] loop1: p227 start 65536 is beyond EOD, truncated [ 371.097075][ T8578] loop1: p228 start 65536 is beyond EOD, truncated [ 371.110663][ T8578] loop1: p229 start 65536 is beyond EOD, truncated [ 371.117277][ T8578] loop1: p230 start 65536 is beyond EOD, truncated [ 371.140460][ T8578] loop1: p231 start 65536 is beyond EOD, truncated [ 371.147070][ T8578] loop1: p232 start 65536 is beyond EOD, truncated [ 371.170451][ T8578] loop1: p233 start 65536 is beyond EOD, truncated [ 371.177448][ T8578] loop1: p234 start 65536 is beyond EOD, truncated [ 371.370509][ T8578] loop1: p235 start 65536 is beyond EOD, truncated [ 371.377830][ T8578] loop1: p236 start 65536 is beyond EOD, truncated [ 371.384913][ T8578] loop1: p237 start 65536 is beyond EOD, truncated [ 371.392874][ T8578] loop1: p238 start 65536 is beyond EOD, truncated [ 371.399634][ T8578] loop1: p239 start 65536 is beyond EOD, truncated [ 371.407367][ T8578] loop1: p240 start 65536 is beyond EOD, truncated [ 371.415074][ T8578] loop1: p241 start 65536 is beyond EOD, truncated [ 371.422435][ T8578] loop1: p242 start 65536 is beyond EOD, truncated [ 371.429115][ T8578] loop1: p243 start 65536 is beyond EOD, truncated [ 371.436963][ T8578] loop1: p244 start 65536 is beyond EOD, truncated [ 371.915051][ T8578] loop1: p245 start 65536 is beyond EOD, truncated [ 371.954182][ T8578] loop1: p246 start 65536 is beyond EOD, truncated [ 372.050402][ T8578] loop1: p247 start 65536 is beyond EOD, truncated [ 372.057537][ T8578] loop1: p248 start 65536 is beyond EOD, truncated [ 372.084586][ T8578] loop1: p249 start 65536 is beyond EOD, truncated [ 372.121265][ T8578] loop1: p250 start 65536 is beyond EOD, truncated [ 372.370413][ T8578] loop1: p251 start 65536 is beyond EOD, truncated [ 372.405536][ T8578] loop1: p252 start 65536 is beyond EOD, truncated [ 372.466454][ T8643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.695351][ T8578] loop1: p253 start 65536 is beyond EOD, truncated [ 372.804558][ T8578] loop1: p254 start 65536 is beyond EOD, truncated [ 372.959360][ T8578] loop1: p255 start 65536 is beyond EOD, truncated [ 374.411827][ T8660] tipc: Enabled bearer , priority 0 [ 374.426903][ T8660] syzkaller0: entered promiscuous mode [ 374.432697][ T8660] syzkaller0: entered allmulticast mode [ 374.459713][ T8660] tipc: Resetting bearer [ 374.702114][ T8659] tipc: Resetting bearer [ 374.828842][ T8659] tipc: Disabling bearer [ 376.156247][ T8682] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 378.956600][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969336][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.684955][ T8720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.423734][ T8761] capability: warning: `syz.1.780' uses deprecated v2 capabilities in a way that may be insecure [ 384.971111][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 385.020867][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.796'. [ 385.435855][ T8817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.509345][ T8808] syzkaller0: entered promiscuous mode [ 385.522606][ T8808] syzkaller0: entered allmulticast mode [ 385.661416][ T8820] bond0: (slave bond_slave_0): Releasing backup interface [ 385.721157][ T8820] bond0: (slave bond_slave_1): Releasing backup interface [ 385.829752][ T8820] team0: Port device team_slave_0 removed [ 385.888228][ T8820] team0: Port device team_slave_1 removed [ 385.916431][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.932385][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.965108][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.989740][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.129597][ T8821] team0: Mode changed to "loadbalance" [ 386.902595][ T8837] loop1: detected capacity change from 0 to 164 [ 387.103859][ T28] audit: type=1326 audit(1757193429.042:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.1.808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76b758ebe9 code=0x0 [ 387.206827][ T8846] xt_hashlimit: max too large, truncated to 1048576 [ 387.264701][ T8848] syzkaller0: entered promiscuous mode [ 387.283030][ T8848] syzkaller0: entered allmulticast mode [ 390.006142][ T8873] syzkaller0: entered promiscuous mode [ 390.026521][ T8873] syzkaller0: entered allmulticast mode [ 392.472735][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 150 seconds [ 392.483625][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 150 seconds [ 392.495297][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 150 seconds [ 392.506636][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 150 seconds [ 392.834585][ T8905] syzkaller0: entered promiscuous mode [ 392.885412][ T8905] syzkaller0: entered allmulticast mode [ 393.362363][ T8910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.051018][ T8933] syzkaller0: entered promiscuous mode [ 396.078468][ T8933] syzkaller0: entered allmulticast mode [ 397.816516][ T8953] tipc: Enabled bearer , priority 0 [ 397.837414][ T8953] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 397.855276][ T8953] tipc: Resetting bearer [ 397.922485][ T8952] tipc: Disabling bearer [ 399.372222][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.855'. [ 401.322888][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 404.920846][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 405.062668][ T9027] tipc: Enabling of bearer rejected, failed to enable media [ 405.323413][ T5155] udevd[5155]: worker [6213] /devices/virtual/block/nbd0 is taking a long time [ 408.396236][ T9058] syzkaller0: entered promiscuous mode [ 408.424764][ T9058] syzkaller0: entered allmulticast mode [ 408.454762][ T9058] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 408.594625][ T9067] overlayfs: failed to clone upperpath [ 411.061394][ T9088] syzkaller1: entered promiscuous mode [ 411.066957][ T9088] syzkaller1: entered allmulticast mode [ 411.313022][ T9092] loop2: detected capacity change from 0 to 7 [ 411.338906][ T5789] Dev loop2: unable to read RDB block 7 [ 411.351595][ T5789] loop2: unable to read partition table [ 411.363562][ T5789] loop2: partition table beyond EOD, truncated [ 411.391543][ T9092] Dev loop2: unable to read RDB block 7 [ 411.407591][ T9092] loop2: unable to read partition table [ 411.449409][ T9092] loop2: partition table beyond EOD, truncated [ 411.460516][ T9092] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.344519][ T9127] loop4: detected capacity change from 0 to 128 [ 412.390582][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 414.099268][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'. [ 414.269003][ T9169] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 414.738587][ T9182] syzkaller0: entered promiscuous mode [ 414.745413][ T9182] syzkaller0: entered allmulticast mode [ 414.773823][ T9182] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 414.890060][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 415.312420][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.938'. [ 415.987036][ T9206] capability: warning: `syz.0.943' uses 32-bit capabilities (legacy support in use) [ 416.712588][ T9224] syzkaller1: entered promiscuous mode [ 416.728439][ T9224] syzkaller1: entered allmulticast mode [ 417.984202][ T9260] bridge: RTM_NEWNEIGH with invalid ether address [ 417.997307][ T9260] bridge: RTM_NEWNEIGH with invalid ether address [ 419.385459][ T9273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.006529][ T9266] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.025192][ T9266] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.034321][ T9266] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.043374][ T9266] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.909512][ T9287] tipc: Enabling of bearer rejected, failed to enable media [ 422.538248][ T9297] syzkaller1: entered promiscuous mode [ 422.582995][ T9297] syzkaller1: entered allmulticast mode [ 422.726210][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 422.752312][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 423.087224][ T9305] syzkaller0: entered promiscuous mode [ 423.109039][ T9305] syzkaller0: entered allmulticast mode [ 423.119336][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 180 seconds [ 423.130567][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 180 seconds [ 423.146478][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 180 seconds [ 423.158159][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 180 seconds [ 423.204169][ T9305] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 425.779081][ T9335] tipc: Enabling of bearer rejected, failed to enable media [ 428.627203][ T9361] syzkaller1: entered promiscuous mode [ 428.649268][ T9361] syzkaller1: entered allmulticast mode [ 429.064782][ T9371] tipc: Enabling of bearer rejected, failed to enable media [ 433.616753][ T9420] tipc: Enabling of bearer rejected, failed to enable media [ 434.356533][ T9440] syzkaller1: entered promiscuous mode [ 434.362957][ T9440] syzkaller1: entered allmulticast mode [ 437.868684][ T9474] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 440.221752][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 440.398809][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.410040][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.481168][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1041'. [ 440.774645][ T9515] tipc: Enabling of bearer rejected, failed to enable media [ 441.547270][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 441.742718][ T9541] netlink: 'syz.1.1052': attribute type 32 has an invalid length. [ 441.752079][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 441.761516][ T9541] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2) [ 442.880703][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 445.417067][ T9611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.094112][ T9689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.211272][ T28] audit: type=1326 audit(1757193492.152:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.1.1121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76b758ebe9 code=0x0 [ 452.710619][ T5100] Bluetooth: hci4: command 0x0406 tx timeout [ 452.736487][ T9749] tipc: Enabled bearer , priority 0 [ 452.745594][ T9749] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 452.764170][ T9749] tipc: Resetting bearer [ 452.836261][ T9748] tipc: Disabling bearer [ 452.995741][ T9755] syzkaller1: entered promiscuous mode [ 453.010472][ T9755] syzkaller1: entered allmulticast mode [ 453.190569][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 210 seconds [ 453.201907][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 210 seconds [ 453.213333][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 210 seconds [ 453.224409][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 210 seconds [ 453.628633][ T9774] loop4: detected capacity change from 0 to 128 [ 453.863650][ T9778] tipc: Enabled bearer , priority 0 [ 453.873396][ T9778] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 453.892282][ T9778] tipc: Resetting bearer [ 453.918509][ T9777] tipc: Disabling bearer [ 454.083135][ T9784] syzkaller1: entered promiscuous mode [ 454.088771][ T9784] syzkaller1: entered allmulticast mode [ 455.111711][ T9807] tipc: Enabled bearer , priority 0 [ 455.129223][ T9807] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 455.149870][ T9807] tipc: Resetting bearer [ 455.189746][ T9806] tipc: Disabling bearer [ 455.303260][ T9816] fuse: Bad value for 'fd' [ 455.526011][ T9825] loop5: detected capacity change from 0 to 128 [ 455.780501][ T28] audit: type=1800 audit(1757193497.712:16): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1164" name="pids.current" dev="fuse" ino=0 res=0 errno=0 [ 455.857123][ T9837] tipc: Enabling of bearer rejected, failed to enable media [ 456.960187][ T9878] tipc: Enabling of bearer rejected, failed to enable media [ 457.849661][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.867100][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.881859][ T9916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.911963][ T9919] tipc: Enabling of bearer rejected, failed to enable media [ 458.646073][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 458.667456][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 458.689103][ T9952] loop4: detected capacity change from 0 to 512 [ 458.754336][ T5789] blk_print_req_error: 81 callbacks suppressed [ 458.754354][ T5789] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 458.875321][ T9959] tipc: Enabling of bearer rejected, failed to enable media [ 459.423333][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 459.435852][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 460.236324][ T9995] tipc: Enabling of bearer rejected, failed to enable media [ 461.699687][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 461.721366][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 462.252717][T10035] tipc: Enabling of bearer rejected, failed to enable media [ 462.314562][T10038] overlayfs: failed to clone upperpath [ 462.474014][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 462.511881][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 463.811764][T10063] fuse: Bad value for 'fd' [ 463.833983][T10063] overlayfs: failed to clone upperpath [ 464.036003][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 464.051739][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 464.130703][ T28] audit: type=1326 audit(1757193506.062:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.4.1265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe885f8ebe9 code=0x0 [ 464.182916][T10078] tipc: Enabling of bearer rejected, failed to enable media [ 465.087734][T10110] tipc: Enabling of bearer rejected, failed to enable media [ 466.837294][T10161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1297'. [ 467.075430][T10167] fuse: Bad value for 'fd' [ 467.682808][T10190] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 468.227224][T10216] loop4: detected capacity change from 0 to 1764 [ 468.314481][ T5789] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.626152][T10229] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 468.661903][T10229] overlayfs: failed to set xattr on upper [ 468.667713][T10229] overlayfs: ...falling back to index=off. [ 468.685870][T10229] overlayfs: ...falling back to uuid=null. [ 469.561206][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 469.926042][T10279] tipc: Enabling of bearer rejected, failed to enable media [ 470.695475][T10315] batadv_slave_1: entered promiscuous mode [ 470.711787][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1359'. [ 470.792638][T10315] batadv_slave_1 (unregistering): left promiscuous mode [ 470.808041][T10315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.052981][T10326] loop4: detected capacity change from 0 to 128 [ 471.433701][T10334] fuse: root generation should be zero [ 472.563616][T10386] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 474.020198][ T28] audit: type=1326 audit(1757193515.952:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.5.1405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f623d98ebe9 code=0x0 [ 476.087018][T10455] loop5: detected capacity change from 0 to 128 [ 476.130079][T10455] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 476.190826][T10455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.147612][T10472] tipc: Enabling of bearer rejected, failed to enable media [ 478.513474][T10503] tipc: Enabled bearer , priority 0 [ 478.541443][T10503] tipc: Resetting bearer [ 478.588402][T10497] tipc: Disabling bearer [ 479.581425][T10526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.857438][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1439'. [ 481.654801][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1459'. [ 481.666116][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1459'. [ 481.678887][T10578] xt_CT: You must specify a L4 protocol and not use inversions on it 0J î  Ñ€€[ 482.275222][T10594] syzkaller0: entered promiscuous mode [ 482.286595][T10594] syzkaller0: entered allmulticast mode [ 482.315126][T10596] tipc: Enabling of bearer rejected, failed to enable media [ 482.710234][ T7858] kernel write not supported for file bpf-prog (pid: 7858 comm: kworker/0:17) [ 483.269315][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 483.278864][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 240 seconds [ 483.289867][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 240 seconds [ 483.301947][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 240 seconds [ 483.313319][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 240 seconds [ 483.585780][T10626] syzkaller0: entered promiscuous mode [ 483.595923][T10626] syzkaller0: entered allmulticast mode [ 483.718679][T10628] tipc: Enabling of bearer rejected, failed to enable media [ 485.775028][T10664] tipc: Enabled bearer , priority 0 [ 485.803074][T10664] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 485.842223][T10664] tipc: Resetting bearer [ 485.908595][T10663] tipc: Disabling bearer [ 486.187303][T10679] loop5: detected capacity change from 0 to 136 [ 486.501215][T10682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.800816][T10690] syzkaller0: entered promiscuous mode [ 486.806504][T10690] syzkaller0: entered allmulticast mode [ 487.362008][T10704] fuse: Bad value for 'fd' [ 489.481771][T10750] syzkaller0: entered promiscuous mode [ 489.510458][T10750] syzkaller0: entered allmulticast mode [ 489.760986][T10760] syzkaller0: entered promiscuous mode [ 489.766742][T10760] syzkaller0: entered allmulticast mode [ 489.778028][T10760] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 491.069102][T10780] mmap: syz.4.1530 (10780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 491.830838][T10801] loop5: detected capacity change from 0 to 128 [ 491.864996][T10801] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 491.907469][T10801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.203224][T10815] syzkaller0: entered promiscuous mode [ 493.203785][T10818] loop4: detected capacity change from 0 to 1764 [ 493.219084][T10815] syzkaller0: entered allmulticast mode [ 493.770880][ T28] audit: type=1326 audit(1757193535.702:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.0.1558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f310138ebe9 code=0x0 [ 494.510143][T10848] loop5: detected capacity change from 0 to 1764 [ 495.399481][T10869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.478816][ T48] tipc: Left network mode [ 496.061124][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.072163][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.081021][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.089954][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.100203][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 496.108849][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.166604][ T48] hsr_slave_0: left promiscuous mode [ 497.187088][ T48] hsr_slave_1: left promiscuous mode [ 497.195671][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.208062][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.227024][ T48] bridge_slave_1: left allmulticast mode [ 497.236083][ T48] bridge_slave_1: left promiscuous mode [ 497.252379][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.272704][ T48] bridge_slave_0: left allmulticast mode [ 497.278430][ T48] bridge_slave_0: left promiscuous mode [ 497.294803][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.160554][ T5100] Bluetooth: hci0: command tx timeout [ 498.677839][ T28] audit: type=1326 audit(1757193540.612:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623d98ebe9 code=0x7ffc0000 [ 498.704243][ T28] audit: type=1326 audit(1757193540.612:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623d98ebe9 code=0x7ffc0000 [ 498.738633][ T28] audit: type=1326 audit(1757193540.612:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f623d98ebe9 code=0x7ffc0000 [ 498.787179][ T28] audit: type=1326 audit(1757193540.612:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623d98ebe9 code=0x7ffc0000 [ 498.819490][ T28] audit: type=1326 audit(1757193540.612:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f623d98ebe9 code=0x7ffc0000 [ 498.876246][ T28] audit: type=1326 audit(1757193540.622:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623d98ebe9 code=0x7ffc0000 [ 498.904091][ T48] team0 (unregistering): Port device team_slave_1 removed [ 498.999538][ T48] team0 (unregistering): Port device team_slave_0 removed [ 499.081952][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.149948][T10939] loop5: detected capacity change from 0 to 128 [ 499.183878][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.259597][T10939] syz.5.1588: attempt to access beyond end of device [ 499.259597][T10939] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 500.161019][ T48] bond0 (unregistering): Released all slaves [ 500.231251][ T5100] Bluetooth: hci0: command tx timeout [ 500.254985][T10883] chnl_net:caif_netlink_parms(): no params data found [ 500.682705][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.700145][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.720749][T10883] bridge_slave_0: entered allmulticast mode [ 500.728398][T10883] bridge_slave_0: entered promiscuous mode [ 500.778532][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.791408][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.807489][T10883] bridge_slave_1: entered allmulticast mode [ 500.830575][T10883] bridge_slave_1: entered promiscuous mode [ 500.983903][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.026947][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.158383][T10987] syzkaller0: entered promiscuous mode [ 501.173934][T10987] syzkaller0: entered allmulticast mode [ 501.220151][T10883] team0: Port device team_slave_0 added [ 501.247614][T10883] team0: Port device team_slave_1 added [ 501.262310][T10983] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 501.499856][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.514372][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.560157][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.622219][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.640448][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.729905][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.844377][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.852592][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.968593][T10883] hsr_slave_0: entered promiscuous mode [ 501.988046][T10883] hsr_slave_1: entered promiscuous mode [ 502.313198][ T5100] Bluetooth: hci0: command tx timeout [ 502.421164][T10883] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 502.454023][T10883] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 502.483353][T10883] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 502.511844][T10883] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 502.751159][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.799629][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.854439][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.861718][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.929596][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.936864][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.641651][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.392425][ T5100] Bluetooth: hci0: command tx timeout [ 506.629789][ T5155] udevd[5155]: worker [6213] /devices/virtual/block/nbd0 timeout; kill it [ 506.678734][ T5155] udevd[5155]: seq 11892 '/devices/virtual/block/nbd0' killed [ 506.785711][T10883] veth0_vlan: entered promiscuous mode [ 506.799988][T10883] veth1_vlan: entered promiscuous mode [ 506.845932][T10883] veth0_macvtap: entered promiscuous mode [ 506.859435][T10883] veth1_macvtap: entered promiscuous mode [ 506.901533][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.922738][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.952945][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.984676][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.010814][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.037471][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.078444][T10883] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.099879][T10883] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.132827][T10883] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.150878][T10883] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.408712][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.443558][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.538660][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.570521][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.085700][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.093358][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.317724][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.359211][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.816917][T11125] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.828391][T11125] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.845079][T11125] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.855729][T11125] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.634125][T11173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.350828][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 270 seconds [ 513.365010][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 270 seconds [ 513.376779][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 270 seconds [ 513.396901][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 270 seconds [ 514.039506][T11199] syzkaller0: entered promiscuous mode [ 514.066192][T11199] syzkaller0: entered allmulticast mode [ 514.108745][T11199] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 514.269822][T11208] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 514.590984][T11220] team0: No ports can be present during mode change [ 514.809986][T11227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1659'. [ 520.537862][T11267] syzkaller0: entered promiscuous mode [ 520.550617][T11267] syzkaller0: entered allmulticast mode [ 521.093685][T11279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.272121][T11328] syzkaller0: entered promiscuous mode [ 523.277879][T11328] syzkaller0: entered allmulticast mode [ 523.295817][T11328] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 525.335031][T11362] syzkaller0: entered promiscuous mode [ 525.370592][T11362] syzkaller0: entered allmulticast mode [ 525.410545][T11362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 525.568827][T11368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.003771][T11433] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 531.112448][T11436] bridge_slave_0: left allmulticast mode [ 531.144647][T11436] bridge_slave_0: left promiscuous mode [ 531.151732][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.172590][T11436] bridge_slave_1: left allmulticast mode [ 531.178398][T11436] bridge_slave_1: left promiscuous mode [ 531.216044][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.238549][T11436] bond0: (slave bond_slave_0): Releasing backup interface [ 531.255028][T11436] bond0: (slave bond_slave_1): Releasing backup interface [ 531.291595][T11436] team0: Port device team_slave_0 removed [ 531.315014][T11436] team0: Port device team_slave_1 removed [ 531.321847][T11436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.332078][T11436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.957495][T11460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 533.604010][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 535.677815][T11483] team0 (unregistering): Port device team_slave_0 removed [ 535.717010][T11483] team0 (unregistering): Port device team_slave_1 removed [ 537.528384][T11533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.056935][T11579] loop6: detected capacity change from 0 to 512 [ 541.573578][T11591] syzkaller0: entered promiscuous mode [ 541.580951][T11591] syzkaller0: entered allmulticast mode [ 541.634778][T11591] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 544.765050][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 300 seconds [ 544.777577][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 300 seconds [ 544.827507][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 300 seconds [ 544.839187][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 300 seconds [ 545.051736][T11636] overlayfs: failed to clone upperpath [ 545.083708][T11636] overlayfs: failed to clone lowerpath [ 545.482148][T11654] syzkaller0: entered promiscuous mode [ 545.487710][T11654] syzkaller0: entered allmulticast mode [ 545.530568][T11654] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 548.192411][T11689] tipc: Enabling of bearer rejected, failed to enable media [ 548.684864][T11709] loop6: detected capacity change from 0 to 128 [ 548.738017][T11709] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 548.931229][T11709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 549.280036][T11722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.249103][T11751] tipc: Enabling of bearer rejected, failed to enable media [ 554.339347][T11806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.993641][T11809] loop5: detected capacity change from 0 to 128 [ 555.025026][T11809] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 555.089171][T11809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.936721][T11876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 560.760149][T11903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1842'. [ 560.791051][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.803272][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.812668][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.840601][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.861049][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 560.868952][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.870904][T11903] team0: No ports can be present during mode change [ 562.206898][T11937] tipc: Enabling of bearer rejected, failed to enable media [ 562.325219][T11938] syzkaller0: entered promiscuous mode [ 562.333586][T11938] syzkaller0: entered allmulticast mode [ 562.930662][T11906] chnl_net:caif_netlink_parms(): no params data found [ 562.950834][ T5100] Bluetooth: hci0: command tx timeout [ 563.237898][ T59] hsr_slave_0: left promiscuous mode [ 563.277481][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.284175][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.294638][ T59] hsr_slave_1: left promiscuous mode [ 563.394204][T11968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.030389][ T5100] Bluetooth: hci0: command tx timeout [ 565.959672][ T59] bond0 (unregistering): Released all slaves [ 566.209278][T11906] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.217012][T11906] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.232392][T11906] bridge_slave_0: entered allmulticast mode [ 566.251386][T11906] bridge_slave_0: entered promiscuous mode [ 566.309014][T11906] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.324700][T11906] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.332546][T11906] bridge_slave_1: entered allmulticast mode [ 566.341181][T11906] bridge_slave_1: entered promiscuous mode [ 566.361686][T11995] tipc: Enabling of bearer rejected, failed to enable media [ 566.469928][T11906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.598565][T11906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.769246][T11906] team0: Port device team_slave_0 added [ 566.822214][T11906] team0: Port device team_slave_1 added [ 567.110492][ T5100] Bluetooth: hci0: command tx timeout [ 567.590105][T12028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 568.447380][T11906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.456939][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.546000][T11906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.598645][T11906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.641014][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.714865][T11906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.862966][T11906] hsr_slave_0: entered promiscuous mode [ 568.874752][T11906] hsr_slave_1: entered promiscuous mode [ 569.190595][ T5100] Bluetooth: hci0: command tx timeout [ 569.405878][T11906] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 569.429232][T11906] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.456085][T11906] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.480651][T11906] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.747922][T11906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.808343][T11906] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.849807][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.857140][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.887232][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.894522][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.021430][T12061] tipc: Enabling of bearer rejected, failed to enable media [ 570.592365][T12075] devtmpfs: Unknown parameter '/dev/fuse' [ 571.088065][T11906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.921894][T11906] veth0_vlan: entered promiscuous mode [ 571.956139][T11906] veth1_vlan: entered promiscuous mode [ 572.148363][T11906] veth0_macvtap: entered promiscuous mode [ 572.229774][T12117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.874945][T11906] veth1_macvtap: entered promiscuous mode [ 572.907835][T12116] tipc: Enabling of bearer rejected, failed to enable media [ 572.941053][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.970312][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.988603][T11906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.041494][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.088175][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.113062][T11906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.162147][T11906] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.202683][T11906] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.232572][T11906] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.260772][T11906] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.508268][T12139] loop5: detected capacity change from 0 to 128 [ 573.521779][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.529650][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.561055][T12139] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 573.637870][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.650475][T12139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.658618][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.163020][T12149] overlayfs: failed to clone upperpath [ 574.474498][T12152] overlayfs: failed to clone upperpath [ 574.801455][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 330 seconds [ 575.598688][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 330 seconds [ 575.612296][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 330 seconds [ 575.646585][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 330 seconds [ 576.367096][T12159] syzkaller0: entered promiscuous mode [ 576.393023][T12159] syzkaller0: entered allmulticast mode [ 576.470635][T12163] fuse: Bad value for 'fd' [ 576.673650][T12165] tipc: Enabling of bearer rejected, failed to enable media [ 576.696010][T12165] syzkaller0: entered promiscuous mode [ 576.716466][T12165] syzkaller0: entered allmulticast mode [ 576.767164][T12165] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 577.056847][T12179] loop5: detected capacity change from 0 to 128 [ 577.108102][T12179] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 577.183581][T12179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.425464][T12187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 580.024830][T12210] tipc: Enabling of bearer rejected, failed to enable media [ 582.261124][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 582.301805][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1919'. [ 582.632199][T12259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.300182][T12264] tipc: Enabling of bearer rejected, failed to enable media [ 595.452895][T12457] IPv6: NLM_F_CREATE should be specified when creating new route [ 597.910858][T12487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1984'. [ 598.280520][T12500] syzkaller0: entered promiscuous mode [ 598.286075][T12500] syzkaller0: entered allmulticast mode [ 598.324826][T12500] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 598.994559][T12522] Illegal XDP return value 256 on prog (id 275) dev syz_tun, expect packet loss! [ 601.463081][T12561] syzkaller0: entered promiscuous mode [ 601.509066][T12561] syzkaller0: entered allmulticast mode [ 601.526949][T12564] loop7: detected capacity change from 0 to 256 [ 604.721075][T12607] syzkaller0: entered promiscuous mode [ 604.726653][T12607] syzkaller0: entered allmulticast mode [ 604.764438][T12607] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 604.881029][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 360 seconds [ 605.693485][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 360 seconds [ 605.704889][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 360 seconds [ 605.716150][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 360 seconds [ 607.909673][T12658] syzkaller0: entered promiscuous mode [ 607.918427][T12658] syzkaller0: entered allmulticast mode [ 607.940039][T12658] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 610.012663][T12703] syzkaller0: entered promiscuous mode [ 610.018219][T12703] syzkaller0: entered allmulticast mode [ 610.061805][T12703] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 611.158460][T12748] syzkaller0: entered promiscuous mode [ 611.176797][T12748] syzkaller0: entered allmulticast mode [ 611.195028][T12748] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 612.223953][T12478] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.494655][T12478] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.682907][T12478] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.878510][T12478] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.931696][T12783] loop5: detected capacity change from 0 to 128 [ 613.494581][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.665316][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.674411][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.683327][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.692918][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 613.735963][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 616.151631][ T5100] Bluetooth: hci0: command tx timeout [ 616.548281][T12795] chnl_net:caif_netlink_parms(): no params data found [ 617.216144][T12478] hsr_slave_0: left promiscuous mode [ 617.615334][T12478] hsr_slave_1: left promiscuous mode [ 617.811005][T12478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.849170][T12478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.889985][T12478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.948610][T12478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.021136][T12478] bridge_slave_1: left allmulticast mode [ 618.026881][T12478] bridge_slave_1: left promiscuous mode [ 618.073847][T12478] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.102481][T12478] bridge_slave_0: left allmulticast mode [ 618.118069][T12478] bridge_slave_0: left promiscuous mode [ 618.129439][T12478] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.230778][ T5100] Bluetooth: hci0: command tx timeout [ 618.237474][T12478] veth1_macvtap: left promiscuous mode [ 618.243632][T12478] veth0_macvtap: left promiscuous mode [ 618.249347][T12478] veth1_vlan: left promiscuous mode [ 618.255640][T12478] veth0_vlan: left promiscuous mode [ 620.143719][T12478] team0 (unregistering): Port device team_slave_1 removed [ 620.206306][T12478] team0 (unregistering): Port device team_slave_0 removed [ 620.270397][T12478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.318771][ T5100] Bluetooth: hci0: command tx timeout [ 620.339311][T12478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.021777][T12478] bond0 (unregistering): Released all slaves [ 621.146210][T12904] tipc: Enabling of bearer rejected, failed to enable media [ 621.177372][T12795] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.192596][T12795] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.200157][T12795] bridge_slave_0: entered allmulticast mode [ 621.208736][T12795] bridge_slave_0: entered promiscuous mode [ 621.240909][T12795] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.260450][T12795] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.267805][T12795] bridge_slave_1: entered allmulticast mode [ 621.312009][T12795] bridge_slave_1: entered promiscuous mode [ 621.429021][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2115'. [ 621.456109][T12795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.492014][T12795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.668017][T12795] team0: Port device team_slave_0 added [ 621.696886][T12795] team0: Port device team_slave_1 added [ 621.811232][T12795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.830949][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.876865][T12795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.914783][T12795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.937720][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.991224][T12795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.197948][T12795] hsr_slave_0: entered promiscuous mode [ 622.221391][T12795] hsr_slave_1: entered promiscuous mode [ 622.322466][T12965] tipc: Enabling of bearer rejected, failed to enable media [ 622.409669][ T5100] Bluetooth: hci0: command tx timeout [ 622.493156][T12975] syzkaller0: entered promiscuous mode [ 622.518220][T12975] syzkaller0: entered allmulticast mode [ 622.605165][T12975] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 622.863681][T12795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 622.904215][T12795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 622.962506][T12795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 622.983997][T12795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 623.261544][T12795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.328013][T12795] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.384289][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.391660][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.412926][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.420285][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.592778][T13012] tipc: Enabled bearer , priority 0 [ 623.627694][T13012] syzkaller0: entered promiscuous mode [ 623.640904][T13012] syzkaller0: entered allmulticast mode [ 623.667937][T13012] tipc: Resetting bearer [ 623.731022][T13011] tipc: Resetting bearer [ 623.817739][T13011] tipc: Disabling bearer [ 624.187130][T12795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.728300][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.737219][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.831942][ T28] audit: type=1326 audit(1757193666.772:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.2144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f310138ebe9 code=0x0 [ 624.838714][T13064] tipc: Enabled bearer , priority 0 [ 624.895220][T13067] syzkaller0: entered promiscuous mode [ 624.915336][T13067] syzkaller0: entered allmulticast mode [ 624.973959][T13064] tipc: Resetting bearer [ 625.004596][T13062] tipc: Resetting bearer [ 625.047861][T13062] tipc: Disabling bearer [ 625.207480][T12795] veth0_vlan: entered promiscuous mode [ 625.264700][T12795] veth1_vlan: entered promiscuous mode [ 625.407795][T13079] syzkaller0: entered promiscuous mode [ 625.430037][T13079] syzkaller0: entered allmulticast mode [ 625.482031][T13079] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 625.653233][T13086] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (129) [ 625.795383][T12795] veth0_macvtap: entered promiscuous mode [ 625.857736][T12795] veth1_macvtap: entered promiscuous mode [ 625.942818][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.976425][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.992909][T12795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.013184][T12795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.024631][T12795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.053489][T12795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.107053][T12795] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.174988][T12795] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.198793][T12795] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.239389][T12795] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.497109][T13109] loop5: detected capacity change from 0 to 128 [ 626.514420][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.538232][T13109] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 626.549186][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.662762][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.716378][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.727991][ T1086] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 627.418615][T13128] tipc: Enabling of bearer rejected, failed to enable media [ 628.643745][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 628.662690][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 628.685559][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 628.699556][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.708893][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 628.718681][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.724091][T13153] xt_hashlimit: size too large, truncated to 1048576 [ 628.814433][T13152] overlayfs: failed to clone upperpath [ 628.904893][ T48] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.213215][ T48] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.419321][ T48] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.641706][ T48] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.058599][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.071351][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.090163][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.108475][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.116541][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 630.127508][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.342473][T13146] chnl_net:caif_netlink_parms(): no params data found [ 630.790599][ T5100] Bluetooth: hci0: command tx timeout [ 630.948570][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.974732][T13146] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.007582][T13146] bridge_slave_0: entered allmulticast mode [ 631.018640][T13146] bridge_slave_0: entered promiscuous mode [ 631.044982][T13184] tipc: Enabling of bearer rejected, failed to enable media [ 631.156359][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.181632][T13146] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.220656][T13146] bridge_slave_1: entered allmulticast mode [ 631.228197][T13146] bridge_slave_1: entered promiscuous mode [ 631.439324][T13146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.498342][T13146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.724705][T13146] team0: Port device team_slave_0 added [ 631.851824][T13146] team0: Port device team_slave_1 added [ 632.230852][ T5100] Bluetooth: hci1: command tx timeout [ 632.346627][T13146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.360581][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.457964][T13146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.483112][T13146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.490141][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.570427][T13146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.695671][T13177] chnl_net:caif_netlink_parms(): no params data found [ 632.870451][ T5100] Bluetooth: hci0: command tx timeout [ 632.907222][T13146] hsr_slave_0: entered promiscuous mode [ 632.914866][T13146] hsr_slave_1: entered promiscuous mode [ 632.924527][T13146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.932710][T13146] Cannot create hsr debugfs directory [ 633.153300][ T48] hsr_slave_0: left promiscuous mode [ 633.165762][ T48] hsr_slave_1: left promiscuous mode [ 633.187247][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.204773][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.229602][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.249872][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.296895][ T48] bridge_slave_1: left allmulticast mode [ 633.318579][ T48] bridge_slave_1: left promiscuous mode [ 633.329682][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.345397][ T48] bridge_slave_0: left allmulticast mode [ 633.363714][ T48] bridge_slave_0: left promiscuous mode [ 633.369818][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.476403][ T48] veth1_macvtap: left promiscuous mode [ 633.491296][ T48] veth0_macvtap: left promiscuous mode [ 633.517842][ T48] veth1_vlan: left promiscuous mode [ 633.523356][ T48] veth0_vlan: left promiscuous mode [ 634.328820][ T5100] Bluetooth: hci1: command tx timeout [ 634.963102][ T5100] Bluetooth: hci0: command tx timeout [ 634.968940][ T96] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 390 seconds [ 635.052379][ T48] team0 (unregistering): Port device team_slave_1 removed [ 635.141954][ T48] team0 (unregistering): Port device team_slave_0 removed [ 635.234710][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.327653][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.754679][ T96] block nbd0: Possible stuck request ffff888021d68200: control (read@1024,1024B). Runtime 390 seconds [ 635.765913][ T96] block nbd0: Possible stuck request ffff888021d68400: control (read@2048,1024B). Runtime 390 seconds [ 635.777400][ T96] block nbd0: Possible stuck request ffff888021d68600: control (read@3072,1024B). Runtime 390 seconds [ 636.041319][ T48] bond0 (unregistering): Released all slaves [ 636.169362][T13234] tipc: Enabling of bearer rejected, failed to enable media [ 636.187413][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2181'. [ 636.221545][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.228767][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.254633][T13177] bridge_slave_0: entered allmulticast mode [ 636.271479][T13177] bridge_slave_0: entered promiscuous mode [ 636.289483][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.296856][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.305126][T13177] bridge_slave_1: entered allmulticast mode [ 636.322074][T13177] bridge_slave_1: entered promiscuous mode [ 636.391709][ T5100] Bluetooth: hci1: command tx timeout [ 636.544726][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.577290][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.768611][T13177] team0: Port device team_slave_0 added [ 636.795810][T13177] team0: Port device team_slave_1 added [ 636.883194][T13271] xt_hashlimit: size too large, truncated to 1048576 [ 636.962977][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.971606][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.999492][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.016311][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.023986][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.057182][ T5100] Bluetooth: hci0: command tx timeout [ 637.064420][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.189348][T13177] hsr_slave_0: entered promiscuous mode [ 637.197157][T13177] hsr_slave_1: entered promiscuous mode [ 637.909691][T13286] tipc: Enabled bearer , priority 0 [ 637.929959][T13286] syzkaller0: entered promiscuous mode [ 637.950289][T13286] syzkaller0: entered allmulticast mode [ 638.010758][T13286] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 638.094925][T13285] tipc: Resetting bearer [ 638.172970][T13285] tipc: Disabling bearer [ 638.382120][T13177] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 638.414254][T13177] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 638.461484][T13177] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 638.472867][ T5100] Bluetooth: hci1: command tx timeout [ 638.496620][T13177] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 638.786061][T13146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.863891][T13146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.883967][T13146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.914318][T13146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.161899][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.253974][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.326748][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.334209][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.362422][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.369651][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.509637][T13177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.567708][T13146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.642114][T13146] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.673222][T12478] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.680518][T12478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.704846][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.712094][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.150024][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.505538][T13146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.686185][T13146] veth0_vlan: entered promiscuous mode [ 640.751372][T13146] veth1_vlan: entered promiscuous mode [ 640.864043][T13146] veth0_macvtap: entered promiscuous mode [ 640.937155][T13146] veth1_macvtap: entered promiscuous mode [ 641.009200][T13352] tipc: Enabled bearer , priority 0 [ 641.031536][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.068415][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.092864][T13146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.119125][T13146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.140660][T13146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.159036][T13146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.182809][T13352] syzkaller0: entered promiscuous mode [ 641.188353][T13352] syzkaller0: entered allmulticast mode [ 641.247536][T13354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 641.312938][T13350] tipc: Resetting bearer [ 641.378380][T13350] tipc: Disabling bearer [ 641.413033][T13146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.440410][T13146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.460625][T13146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.469410][T13146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.728736][T13177] veth0_vlan: entered promiscuous mode [ 641.803448][T13177] veth1_vlan: entered promiscuous mode [ 641.893462][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.934852][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.005442][T13177] veth0_macvtap: entered promiscuous mode [ 642.047855][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.054108][T13177] veth1_macvtap: entered promiscuous mode [ 642.072963][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.158352][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.186858][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.222552][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.276113][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.312602][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.380755][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.437553][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.468087][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.506902][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.542561][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.600597][T13177] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.609835][T13177] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.639952][T13177] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.660177][T13177] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.984159][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.015482][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.143548][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.171333][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.486412][T13400] tipc: Started in network mode [ 643.508374][T13400] tipc: Node identity cab1dbd84b12, cluster identity 4711 [ 643.529033][T13400] tipc: Enabled bearer , priority 0 [ 643.547860][T13398] tipc: Enabled bearer , priority 0 [ 643.561064][T13401] syzkaller0: entered promiscuous mode [ 643.566615][T13401] syzkaller0: entered allmulticast mode [ 643.596972][T13403] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 643.638885][T13398] syzkaller0: entered promiscuous mode [ 643.661816][T13398] syzkaller0: entered allmulticast mode [ 643.698075][T13400] tipc: Resetting bearer [ 643.711376][T13406] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 643.774930][T13399] tipc: Resetting bearer [ 643.836134][T13399] tipc: Disabling bearer [ 643.868573][T13397] tipc: Resetting bearer [ 644.022393][T13397] tipc: Disabling bearer [ 644.828156][T13431] loop9: detected capacity change from 0 to 128 [ 645.459714][T13450] tipc: Enabling of bearer rejected, failed to enable media [ 645.477051][T13444] tipc: Enabled bearer , priority 0 [ 645.532506][T13444] syzkaller0: entered promiscuous mode [ 645.538129][T13444] syzkaller0: entered allmulticast mode [ 646.149725][T13444] tipc: Resetting bearer [ 646.327131][T13443] tipc: Resetting bearer [ 646.490324][ T7857] tipc: Node number set to 2174999512 [ 646.508310][T13463] loop1: detected capacity change from 0 to 512 [ 646.536143][T13443] tipc: Disabling bearer [ 647.214727][T13483] tipc: Enabled bearer , priority 0 [ 647.235213][T13483] syzkaller0: entered promiscuous mode [ 647.260174][T13483] syzkaller0: entered allmulticast mode [ 647.308501][T13483] tipc: Resetting bearer [ 647.347747][T13482] tipc: Resetting bearer [ 647.721749][T13482] tipc: Disabling bearer [ 648.842721][T13530] tipc: Started in network mode [ 648.848362][T13530] tipc: Node identity 6678dce8cade, cluster identity 4711 [ 648.857314][T13530] tipc: Enabled bearer , priority 0 [ 648.889119][T13530] syzkaller0: entered promiscuous mode [ 648.909520][T13530] syzkaller0: entered allmulticast mode [ 648.998559][T13530] tipc: Resetting bearer [ 649.031931][T13529] tipc: Resetting bearer [ 649.114801][T13529] tipc: Disabling bearer [ 650.248972][T13573] tipc: Enabled bearer , priority 0 [ 650.281502][T13573] syzkaller0: entered promiscuous mode [ 650.287069][T13573] syzkaller0: entered allmulticast mode [ 650.341301][T13573] tipc: Resetting bearer [ 650.375271][T13572] tipc: Resetting bearer [ 650.479768][T13572] tipc: Disabling bearer [ 650.815594][T13590] tipc: Enabled bearer , priority 0 [ 650.842369][T13590] syzkaller0: entered promiscuous mode [ 650.862858][T13590] syzkaller0: entered allmulticast mode [ 650.911247][T13590] tipc: Resetting bearer [ 650.948541][T13588] tipc: Resetting bearer [ 651.291436][T13588] tipc: Disabling bearer [ 651.822837][T13621] ./file0: Can't lookup blockdev [ 652.559632][T13642] tipc: Enabled bearer , priority 0 [ 652.589531][T13642] syzkaller0: entered promiscuous mode [ 652.620408][T13642] syzkaller0: entered allmulticast mode [ 652.675494][T13642] tipc: Resetting bearer [ 652.738193][T13640] tipc: Resetting bearer [ 652.857437][T13640] tipc: Disabling bearer [ 652.901284][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.914204][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 653.000657][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 653.022425][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 653.034226][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 653.042920][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.645807][T13663] loop1: detected capacity change from 0 to 128 [ 655.023430][T13682] tipc: Enabled bearer , priority 0 [ 655.054638][T13682] syzkaller0: entered promiscuous mode [ 655.087129][T13682] syzkaller0: entered allmulticast mode [ 655.111439][ T5791] Bluetooth: hci2: command tx timeout [ 655.151356][T13646] chnl_net:caif_netlink_parms(): no params data found [ 655.193324][T13690] loop1: detected capacity change from 0 to 8192 [ 655.248180][T13690] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 655.295403][T13690] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 655.311527][T13690] FAT-fs (loop1): Filesystem has been set read-only [ 655.326180][T13690] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 655.345469][T13690] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 655.346370][T13682] tipc: Resetting bearer [ 655.363233][T13690] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 655.379482][T13690] FAT-fs (loop1): error, clusters badly computed (5 != 4) [ 655.398203][T13690] FAT-fs (loop1): error, clusters badly computed (6 != 5) [ 655.408869][T13690] FAT-fs (loop1): error, clusters badly computed (7 != 6) [ 655.423605][T13681] tipc: Resetting bearer [ 655.437284][T13690] FAT-fs (loop1): error, clusters badly computed (8 != 7) [ 655.456742][T13690] FAT-fs (loop1): error, clusters badly computed (9 != 8) [ 655.469611][T13690] FAT-fs (loop1): error, clusters badly computed (10 != 9) [ 655.480694][T13690] FAT-fs (loop1): error, clusters badly computed (11 != 10) [ 655.494036][T13681] tipc: Disabling bearer [ 655.498295][T13690] FAT-fs (loop1): error, clusters badly computed (12 != 11) [ 655.555199][T13690] FAT-fs (loop1): error, clusters badly computed (13 != 12) [ 655.569918][T13690] FAT-fs (loop1): error, clusters badly computed (14 != 13) [ 655.589057][T13690] FAT-fs (loop1): error, clusters badly computed (15 != 14) [ 655.599064][T13690] FAT-fs (loop1): error, clusters badly computed (16 != 15) [ 655.684014][T13690] FAT-fs (loop1): error, clusters badly computed (17 != 16) [ 655.713079][T13690] FAT-fs (loop1): error, clusters badly computed (18 != 17) [ 655.760709][T13690] FAT-fs (loop1): error, clusters badly computed (19 != 18) [ 655.803476][T13690] FAT-fs (loop1): error, clusters badly computed (20 != 19) [ 655.825878][T13690] FAT-fs (loop1): error, clusters badly computed (21 != 20) [ 655.843736][T13690] FAT-fs (loop1): error, clusters badly computed (22 != 21) [ 655.868503][T13690] FAT-fs (loop1): error, clusters badly computed (23 != 22) [ 655.919178][T13690] FAT-fs (loop1): error, clusters badly computed (24 != 23) [ 655.932195][T13690] FAT-fs (loop1): error, clusters badly computed (25 != 24) [ 655.962229][T13690] FAT-fs (loop1): error, clusters badly computed (26 != 25) [ 655.985073][T13690] FAT-fs (loop1): error, clusters badly computed (27 != 26) [ 656.027795][T13690] FAT-fs (loop1): error, clusters badly computed (28 != 27) [ 656.057966][T13690] FAT-fs (loop1): error, clusters badly computed (29 != 28) [ 656.076886][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.078196][ T29] INFO: task udevd:6213 blocked for more than 143 seconds. [ 656.103546][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.105020][T13690] FAT-fs (loop1): error, clusters badly computed (30 != 29) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 656.130315][ T29] Not tainted syzkaller #0 [ 656.136946][T13690] FAT-fs (loop1): error, clusters badly computed (31 != 30) [ 656.148930][T13646] bridge_slave_0: entered allmulticast mode [ 656.158287][T13690] FAT-fs (loop1): error, clusters badly computed (32 != 31) [ 656.160381][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.182172][T13646] bridge_slave_0: entered promiscuous mode [ 656.221380][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.229601][ T29] task:udevd state:D stack:23560 pid:6213 ppid:5155 flags:0x00004006 [ 656.276560][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.291432][ T29] Call Trace: [ 656.305017][ T29] [ 656.308046][ T29] __schedule+0x14d2/0x44d0 [ 656.320673][T13646] bridge_slave_1: entered allmulticast mode [ 656.328218][T13646] bridge_slave_1: entered promiscuous mode [ 656.353205][ T29] ? asan.module_dtor+0x20/0x20 [ 656.358181][ T29] ? mark_lock+0x94/0x320 [ 656.400549][ T29] ? lock_chain_count+0x20/0x20 [ 656.405505][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 656.460427][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 656.465923][ T29] schedule+0xbd/0x170 [ 656.470047][ T29] io_schedule+0x80/0xd0 [ 656.530472][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 656.535894][ T29] ? folio_wait_bit+0x30/0x30 [ 656.562193][ T29] ? _compound_head+0x120/0x120 [ 656.567436][ T29] ? filemap_add_folio+0x192/0x3c0 [ 656.588401][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 656.595266][ T29] ? blkdev_writepage+0x30/0x30 [ 656.601325][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 656.606508][ T29] ? blkdev_writepage+0x30/0x30 [ 656.611550][ T29] read_part_sector+0xd2/0x350 [ 656.616374][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 656.622300][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 656.627664][ T29] ? put_partition+0x350/0x350 [ 656.640299][ T29] ? alloc_pages+0x4dc/0x740 [ 656.645010][ T29] bdev_disk_changed+0x73a/0x1410 [ 656.650134][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 656.670835][ T29] ? iput+0x347/0x920 [ 656.674924][ T29] blkdev_get_whole+0x30d/0x390 [ 656.679840][ T29] blkdev_get_by_dev+0x279/0x600 [ 656.700428][ T29] blkdev_open+0x152/0x360 [ 656.704946][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 656.709592][ T29] do_dentry_open+0x8c6/0x1500 [ 656.740541][ T29] path_openat+0x274b/0x3190 [ 656.745263][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 656.764217][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.798218][ T29] ? verify_lock_unused+0x140/0x140 [ 656.805572][ T29] ? do_filp_open+0x3d0/0x3d0 [ 656.828002][ T29] ? __virt_addr_valid+0x18c/0x540 [ 656.833704][ T29] do_filp_open+0x1c5/0x3d0 [ 656.838311][ T29] ? vfs_tmpfile+0x490/0x490 [ 656.858249][ T29] ? _raw_spin_unlock+0x28/0x40 [ 656.873419][ T29] ? alloc_fd+0x58f/0x630 [ 656.877908][ T29] do_sys_openat2+0x12c/0x1c0 [ 656.898114][ T29] ? do_sys_open+0xe0/0xe0 [ 656.910573][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 656.916666][ T29] ? lock_chain_count+0x20/0x20 [ 656.930943][ T29] __x64_sys_openat+0x139/0x160 [ 656.935945][ T29] do_syscall_64+0x55/0xb0 [ 656.948220][ T29] ? clear_bhb_loop+0x40/0x90 [ 656.954396][ T29] ? clear_bhb_loop+0x40/0x90 [ 656.959245][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.975098][ T29] RIP: 0033:0x7f816d0a7407 [ 656.979684][ T29] RSP: 002b:00007fff5c0c1010 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 656.988367][ T29] RAX: ffffffffffffffda RBX: 00007f816d853880 RCX: 00007f816d0a7407 [ 657.004678][ T29] RDX: 00000000000a0800 RSI: 000055e6a6e83520 RDI: ffffffffffffff9c [ 657.012976][ T29] RBP: 000055e6a6e82910 R08: 0000000000000000 R09: 0000000000000000 [ 657.028755][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e6a6e89c60 [ 657.037969][ T29] R13: 000055e6a6e9a410 R14: 0000000000000000 R15: 000055e6a6e89c60 [ 657.055674][ T29] [ 657.058905][ T29] [ 657.058905][ T29] Showing all locks held in the system: [ 657.073675][ T29] 1 lock held by khungtaskd/29: [ 657.078606][ T29] #0: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 657.088735][ T29] 2 locks held by kworker/u4:7/2916: [ 657.094192][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 657.126231][ T29] #1: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 657.170379][ T29] 5 locks held by kworker/u4:8/3457: [ 657.176551][ T29] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 657.191638][ T5791] Bluetooth: hci2: command tx timeout [ 657.221796][ T29] #1: ffffc9000ca07d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 657.253653][ T29] #2: ffffffff8dfaf650 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 657.288202][ T29] #3: ffff88807e2f6250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xe1/0x340 [ 657.330918][ T29] #4: ffffffff8dfbc488 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3f/0x180 [ 657.339945][ T29] 2 locks held by getty/5551: [ 657.373181][ T29] #0: ffff88802cede0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 657.400363][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 657.424106][ T29] 1 lock held by udevd/6213: [ 657.429002][ T29] #0: ffff888021c1f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 657.447851][ T29] 3 locks held by kworker/0:13/7854: [ 657.453539][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 657.465003][ T29] #1: ffffc9000486fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 657.475720][ T29] #2: ffffffff8cd35bf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 657.487363][ T29] 2 locks held by kworker/1:16/7940: [ 657.494910][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 657.506260][ T29] #1: ffffc90004ba7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 657.518694][ T29] 1 lock held by syz-executor/13146: [ 657.524320][ T29] #0: ffffffff8cd35bf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 657.536717][ T29] 4 locks held by syz.9.2286/13686: [ 657.542236][ T29] #0: ffff888052034e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510 [ 657.552525][ T29] #1: ffff8880520340b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 657.563496][ T29] #2: ffffffff8e129c08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 657.573870][ T29] #3: ffff88807e73e338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 657.584784][ T29] [ 657.587162][ T29] ============================================= [ 657.587162][ T29] [ 657.597073][ T29] NMI backtrace for cpu 0 [ 657.601579][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 657.608848][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.618931][ T29] Call Trace: [ 657.622230][ T29] [ 657.625174][ T29] dump_stack_lvl+0x16c/0x230 [ 657.629967][ T29] ? show_regs_print_info+0x20/0x20 [ 657.635192][ T29] ? load_image+0x3b0/0x3b0 [ 657.639729][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 657.644695][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 657.650871][ T29] ? _printk+0xd0/0x110 [ 657.655043][ T29] ? load_image+0x3b0/0x3b0 [ 657.659562][ T29] ? load_image+0x3b0/0x3b0 [ 657.664190][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 657.670316][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 657.676331][ T29] watchdog+0xf41/0xf80 [ 657.680510][ T29] ? watchdog+0x1e1/0xf80 [ 657.684880][ T29] kthread+0x2fa/0x390 [ 657.688966][ T29] ? hungtask_pm_notify+0x90/0x90 [ 657.694019][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.698629][ T29] ret_from_fork+0x48/0x80 [ 657.703164][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.707856][ T29] ret_from_fork_asm+0x11/0x20 [ 657.712914][ T29] [ 657.716653][ T29] Sending NMI from CPU 0 to CPUs 1: [ 657.722047][ C1] NMI backtrace for cpu 1 [ 657.722058][ C1] CPU: 1 PID: 13146 Comm: syz-executor Not tainted syzkaller #0 [ 657.722075][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.722086][ C1] RIP: 0010:__lock_acquire+0x34ad/0x7c80 [ 657.722111][ C1] Code: ba 00 00 00 00 00 fc ff df 75 1f 48 c7 c7 40 b9 aa 8a 48 c7 c6 a0 d1 aa 8a e8 bf d1 e8 ff 48 ba 00 00 00 00 00 fc ff df 0f 0b <4c> 8d 7b 2b 4c 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 c6 02 00 [ 657.722127][ C1] RSP: 0018:ffffc900045bf540 EFLAGS: 00000046 [ 657.722141][ C1] RAX: 0000000000000000 RBX: ffffc900045bf680 RCX: 0000000000000000 [ 657.722153][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc900045bf718 [ 657.722164][ C1] RBP: ffffc900045bf788 R08: ffffc900045bf717 R09: 0000000000000000 [ 657.722176][ C1] R10: ffffc900045bf6e0 R11: fffff520008b7ee3 R12: ffffffff9077492a [ 657.722189][ C1] R13: 1ffff920008b7ed2 R14: ffffc900045bf690 R15: ffffffff90774860 [ 657.722207][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 657.722221][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.722233][ C1] CR2: 000055966030a138 CR3: 000000002d24c000 CR4: 00000000003506e0 [ 657.722247][ C1] Call Trace: [ 657.722253][ C1] [ 657.722272][ C1] ? verify_lock_unused+0x140/0x140 [ 657.722303][ C1] lock_acquire+0x197/0x410 [ 657.722320][ C1] ? unregister_shrinker+0x66/0x300 [ 657.722347][ C1] ? __might_sleep+0xe0/0xe0 [ 657.722367][ C1] ? read_lock_is_recursive+0x20/0x20 [ 657.722385][ C1] ? __might_sleep+0xe0/0xe0 [ 657.722404][ C1] ? read_lock_is_recursive+0x20/0x20 [ 657.722425][ C1] down_write+0x97/0x1f0 [ 657.722449][ C1] ? unregister_shrinker+0x66/0x300 [ 657.722472][ C1] ? down_read_killable+0x340/0x340 [ 657.722496][ C1] ? down_write+0x162/0x1f0 [ 657.722518][ C1] ? down_read_killable+0x340/0x340 [ 657.722541][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 657.722564][ C1] unregister_shrinker+0x66/0x300 [ 657.722585][ C1] ? deactivate_locked_super+0x6d/0x100 [ 657.722613][ C1] deactivate_locked_super+0x79/0x100 [ 657.722639][ C1] cleanup_mnt+0x429/0x4c0 [ 657.722658][ C1] task_work_run+0x1ce/0x250 [ 657.722682][ C1] ? task_work_cancel+0x240/0x240 [ 657.722705][ C1] ? do_exit+0x906/0x23c0 [ 657.722727][ C1] ? kmem_cache_free+0xf8/0x280 [ 657.722753][ C1] do_exit+0x90b/0x23c0 [ 657.722780][ C1] ? put_task_struct+0xc0/0xc0 [ 657.722805][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 657.722824][ C1] ? get_signal+0x1068/0x1400 [ 657.722850][ C1] ? lock_chain_count+0x20/0x20 [ 657.722867][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 657.722893][ C1] do_group_exit+0x21b/0x2d0 [ 657.722917][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 657.722943][ C1] get_signal+0x12fc/0x1400 [ 657.722978][ C1] arch_do_signal_or_restart+0x96/0x780 [ 657.723004][ C1] ? __remove_hrtimer+0x470/0x470 [ 657.723022][ C1] ? get_sigframe_size+0x20/0x20 [ 657.723051][ C1] ? __se_sys_clock_nanosleep+0x2ea/0x370 [ 657.723079][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 657.723104][ C1] exit_to_user_mode_loop+0x70/0x110 [ 657.723127][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 657.723150][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 657.723175][ C1] do_syscall_64+0x61/0xb0 [ 657.723193][ C1] ? clear_bhb_loop+0x40/0x90 [ 657.723216][ C1] ? clear_bhb_loop+0x40/0x90 [ 657.723232][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.723258][ C1] RIP: 0033:0x7fbfcd7c14a5 [ 657.723271][ C1] Code: Unable to access opcode bytes at 0x7fbfcd7c147b. [ 657.723279][ C1] RSP: 002b:00007ffdddfec630 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 657.723294][ C1] RAX: fffffffffffffdfc RBX: 0000000000000047 RCX: 00007fbfcd7c14a5 [ 657.723306][ C1] RDX: 00007ffdddfec670 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.723316][ C1] RBP: 00007ffdddfec6dc R08: 0000000000000000 R09: 0000000000000000 [ 657.723326][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 657.723336][ C1] R13: 00000000000927c0 R14: 00000000000a021e R15: 00007ffdddfec730 [ 657.723354][ C1] [ 657.805958][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 657.805976][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 657.805995][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.806006][ T29] Call Trace: [ 657.806012][ T29] [ 657.806020][ T29] dump_stack_lvl+0x16c/0x230 [ 657.806058][ T29] ? show_regs_print_info+0x20/0x20 [ 657.806087][ T29] ? load_image+0x3b0/0x3b0 [ 657.806124][ T29] panic+0x2c0/0x710 [ 657.806156][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 657.806201][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 657.806234][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 657.806265][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 657.806302][ T29] watchdog+0xf80/0xf80 [ 657.806334][ T29] ? watchdog+0x1e1/0xf80 [ 657.806369][ T29] kthread+0x2fa/0x390 [ 657.806389][ T29] ? hungtask_pm_notify+0x90/0x90 [ 657.806418][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.806439][ T29] ret_from_fork+0x48/0x80 [ 657.806465][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.806486][ T29] ret_from_fork_asm+0x11/0x20 [ 657.806532][ T29] [ 657.808117][ T29] Kernel Offset: disabled [ 658.241553][ T29] Rebooting in 86400 seconds..