last executing test programs: 4m52.206824284s ago: executing program 32 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) 4m49.187211303s ago: executing program 33 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x1, 0xff, 0xffff, 0x6}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2}}, @val={0x76, 0x6, {0x4, 0x6, 0x26, 0x4}}}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0) 4m44.484848777s ago: executing program 4 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffa, 0x2, 0xfff, 0x18, 0x966c}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000000}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m43.476444177s ago: executing program 34 (id=391): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbacf, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x3}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 4m33.530363018s ago: executing program 4 (id=411): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x1ac, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa8, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc232, 0xfffffffffffffffc]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) close_range(r3, 0xffffffffffffffff, 0x0) 4m32.659175454s ago: executing program 4 (id=412): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000001020102"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) 4m31.78841238s ago: executing program 4 (id=413): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001", @ANYRES16=r0], 0x7c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) 4m31.678729731s ago: executing program 4 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m30.828078285s ago: executing program 4 (id=415): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1aa6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) 4m29.817828265s ago: executing program 35 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xd, 0x3, "709c897c82b1095a67"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4m27.683396115s ago: executing program 5 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 4m27.642221029s ago: executing program 5 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffa, 0x2, 0xfff, 0x18, 0x966c}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000000}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m16.556153484s ago: executing program 5 (id=419): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x1ac, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa8, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc232, 0xfffffffffffffffc]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r6, 0xffff) close_range(r4, 0xffffffffffffffff, 0x0) 4m15.676598481s ago: executing program 5 (id=421): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001", @ANYRES16=r0], 0x7c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) 4m15.662970682s ago: executing program 36 (id=415): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1aa6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) 4m15.495590548s ago: executing program 5 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 4m14.639123893s ago: executing program 5 (id=428): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 3m58.66374209s ago: executing program 37 (id=428): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 2m58.294197019s ago: executing program 8 (id=512): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2m57.411479027s ago: executing program 8 (id=520): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x814) 2m56.447491122s ago: executing program 8 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2m45.988349605s ago: executing program 8 (id=530): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2m45.084602243s ago: executing program 8 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2m44.472283954s ago: executing program 0 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="ca3588421017", @multicast, @val={@void, {0x88a8}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x5, @remote, @mcast1, @remote, @loopback}}}}, 0x0) 2m44.012764239s ago: executing program 8 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x46b) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2m33.591858798s ago: executing program 0 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2b}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m33.3696303s ago: executing program 0 (id=547): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2m32.520664594s ago: executing program 0 (id=551): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0}) 2m32.465526209s ago: executing program 0 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2m31.610895764s ago: executing program 0 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2b}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m28.517551609s ago: executing program 38 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x46b) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2m15.95068996s ago: executing program 39 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2b}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m7.691840055s ago: executing program 7 (id=574): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2m6.479690475s ago: executing program 7 (id=579): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) 2m5.602121861s ago: executing program 7 (id=582): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x2, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m55.008768427s ago: executing program 7 (id=586): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 1m54.106578146s ago: executing program 7 (id=589): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x1ac, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa8, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc232, 0xfffffffffffffffc]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r6, 0xffff) close_range(r4, 0xffffffffffffffff, 0x0) 1m53.232126903s ago: executing program 7 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffa, 0x2, 0xfff, 0x18, 0x966c}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000000}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m37.298246476s ago: executing program 40 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffa, 0x2, 0xfff, 0x18, 0x966c}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000000}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.057475514s ago: executing program 2 (id=1331): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="d8", 0x1}], 0x14) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.195654988s ago: executing program 2 (id=1338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 5.236115463s ago: executing program 2 (id=1347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 5.203747687s ago: executing program 3 (id=1348): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="d8", 0x1}], 0x14) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.060789121s ago: executing program 2 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040), 0x2000c00, 0x0) 5.060402651s ago: executing program 2 (id=1352): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 4.324594083s ago: executing program 2 (id=1356): unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x102090, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000190001090000000020000000021800000002fd010000000008000100ac14140008000500640101000c001680080001000600000089a3a11190f0ced786e9778a52400600150004000000bcd828131285d6838757bfb483c61d79ce08c28deea874243c5edcae139da5fa7d8ff6a680bbbf6d30652a7cfaa367b8896fa995ffce74e2d8825beaf84eef2bc97530da0e6687c34014127192cfb7210fb3e85136c7d9e3e3728d44b22d00043fffaf2c82fc2d51da253542a42af1e3e89c02ff9ba3c5969937aad01161cae29a75e7a7684a983884324317f709f2b0a0576ef482776adda0d5b04da945a536eedf68ed1aa821d6f472e0"], 0x40}}, 0x0) chdir(0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x2e00, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfa184000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xfc}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc7e}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(r3, 0x38, 0x0, 0x4) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000104010100000000000000000d00040405000100010000004b557cbe6578b362f89bd2b5d34a8725f85ab7868c1bcf33b2d9a4d81adada2741777d0ec29baaee949364843e4a752d6ce3144aee2d60434e358223e5c7e18114ce9ec341bacbc9e81f6dc84f2532db089fc51ec59da73bfa94f81d08fb5cbf6ee03d4c547100bcffa415b4fcc93a4c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) openat$cuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x82e00, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000580), 0x2) fchown(r0, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 4.291277167s ago: executing program 41 (id=1356): unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x102090, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000190001090000000020000000021800000002fd010000000008000100ac14140008000500640101000c001680080001000600000089a3a11190f0ced786e9778a52400600150004000000bcd828131285d6838757bfb483c61d79ce08c28deea874243c5edcae139da5fa7d8ff6a680bbbf6d30652a7cfaa367b8896fa995ffce74e2d8825beaf84eef2bc97530da0e6687c34014127192cfb7210fb3e85136c7d9e3e3728d44b22d00043fffaf2c82fc2d51da253542a42af1e3e89c02ff9ba3c5969937aad01161cae29a75e7a7684a983884324317f709f2b0a0576ef482776adda0d5b04da945a536eedf68ed1aa821d6f472e0"], 0x40}}, 0x0) chdir(0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x2e00, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfa184000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xfc}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc7e}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(r3, 0x38, 0x0, 0x4) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000104010100000000000000000d00040405000100010000004b557cbe6578b362f89bd2b5d34a8725f85ab7868c1bcf33b2d9a4d81adada2741777d0ec29baaee949364843e4a752d6ce3144aee2d60434e358223e5c7e18114ce9ec341bacbc9e81f6dc84f2532db089fc51ec59da73bfa94f81d08fb5cbf6ee03d4c547100bcffa415b4fcc93a4c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) openat$cuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x82e00, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000580), 0x2) fchown(r0, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 4.272443148s ago: executing program 3 (id=1358): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0x0, [{@remote}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0) r3 = socket(0x10, 0x80002, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x70, 0x13, 0x53b, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x73}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 4.25156223s ago: executing program 1 (id=1359): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.099112354s ago: executing program 3 (id=1365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync() close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) 3.098670354s ago: executing program 1 (id=1366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 2.959177898s ago: executing program 1 (id=1368): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x514, 0xe4, 0x0, 0xe4, 0x304, 0x304, 0x4dc, 0x4dc, 0x4dc, 0x4dc, 0x4dc, 0x6, 0x0, {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x4}, [0x0, 0xff000000], [0xff, 0xffffffff, 0xff000000, 0xff], 'ip6gretap0\x00', 'wg2\x00', {0xff}, {}, 0x29, 0x7, 0x4, 0x58}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x9, {0x5}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x5}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x11}, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {0xff}, {}, 0x88, 0x7f, 0x1, 0x2}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@ipv6header={{0x24}, {0x30}}, @common=@mh={{0x24}, {"0174", 0x1}}]}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x6, 0x3}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00, 0x1000001ff], [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x2c, 0x0, 0x0, 0x41}, 0x0, 0xa4, 0xc8}, @inet=@TOS={0x24, 'TOS\x00', 0x0, {0x8, 0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x570) 2.868478177s ago: executing program 1 (id=1369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000190c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/tcp\x00') pread64(r4, &(0x7f0000000080)=""/102355, 0x18fd3, 0xc2a) read$sequencer(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, 0x0, &(0x7f0000000280)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r4}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') read$FUSE(r5, &(0x7f0000005380)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000019080)=0x0, &(0x7f0000000000)=0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x6651, 0x60c9, 0x21, 0x0, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.833576521s ago: executing program 6 (id=1370): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.788902735s ago: executing program 6 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004040)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2.692954634s ago: executing program 9 (id=1372): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x5, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @multicast1, {0x5, 0x4, 0x3, 0x1f, 0x800, 0x69, 0x7f2, 0x48, 0x1, 0xf, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, "2b3e2a0daee29c99"}}}}}, 0x0) 2.665846807s ago: executing program 6 (id=1373): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x106, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x27, 0x1, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.665418017s ago: executing program 9 (id=1374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0x0, [{@remote}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0) r3 = socket(0x10, 0x80002, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x70, 0x13, 0x53b, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x73}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 1.759988237s ago: executing program 6 (id=1375): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.568677405s ago: executing program 1 (id=1376): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b0"], 0x40}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 1.328203419s ago: executing program 9 (id=1377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 1.191627533s ago: executing program 9 (id=1378): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 1.11278871s ago: executing program 9 (id=1379): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000080)="d8", 0x1}], 0x14) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.049535357s ago: executing program 3 (id=1380): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 990.820173ms ago: executing program 3 (id=1381): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x1ac, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa8, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc232, 0xfffffffffffffffc]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r6, 0xffff) close_range(r4, 0xffffffffffffffff, 0x0) 848.721417ms ago: executing program 6 (id=1382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004040)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 848.301086ms ago: executing program 1 (id=1383): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="08003b117c123a", 0x7}], 0x1}, 0x20008890) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x3) r5 = dup(r2) read$FUSE(r5, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r5, &(0x7f0000000100)={0x28, 0x0, r6, {{0xa, 0x3, 0x2, r3}}}, 0x28) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 843.339237ms ago: executing program 6 (id=1384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x106, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x27, 0x1, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 29.586647ms ago: executing program 3 (id=1385): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000480)={0x1}) 0s ago: executing program 9 (id=1386): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0x0, [{@remote}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0) r3 = socket(0x10, 0x80002, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x70, 0x13, 0x53b, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x73}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) kernel console output (not intermixed with test programs): 241.620809][ T6669] tipc: Enabled bearer , priority 0 [ 241.626158][ T6240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.644494][ T39] bond0: (slave bond_slave_0): interface is now down [ 241.655336][ T39] bond0: (slave bond_slave_1): interface is now down [ 241.656546][ T39] bond0: (slave syz_tun): interface is now down [ 241.734775][ T4455] bond0: (slave bond_slave_0): interface is now down [ 241.769166][ T4455] bond0: (slave bond_slave_1): interface is now down [ 241.815981][ T4455] bond0: (slave syz_tun): interface is now down [ 241.865032][ T9] bond0: (slave bond_slave_0): interface is now down [ 241.874706][ T9] bond0: (slave bond_slave_1): interface is now down [ 241.883806][ T9] bond0: (slave syz_tun): interface is now down [ 241.906044][ T6149] bond0: (slave bond_slave_0): interface is now down [ 241.914028][ T6149] bond0: (slave bond_slave_1): interface is now down [ 241.915723][ T6149] bond0: (slave syz_tun): interface is now down [ 241.931165][ T6661] device syzkaller0 entered promiscuous mode [ 241.934964][ T4455] bond0: (slave bond_slave_0): interface is now down [ 241.935741][ T6240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.936607][ T4455] bond0: (slave bond_slave_1): interface is now down [ 241.938142][ T4455] bond0: (slave syz_tun): interface is now down [ 241.955416][ T39] bond0: (slave bond_slave_0): interface is now down [ 241.956519][ T39] bond0: (slave bond_slave_1): interface is now down [ 241.957696][ T39] bond0: (slave syz_tun): interface is now down [ 241.974589][ T6679] bond0: (slave bond_slave_0): interface is now down [ 241.976959][ T6679] bond0: (slave bond_slave_1): interface is now down [ 241.978378][ T6679] bond0: (slave syz_tun): interface is now down [ 241.990093][ T6661] tipc: Resetting bearer [ 241.994958][ T39] bond0: (slave bond_slave_0): interface is now down [ 241.996188][ T39] bond0: (slave bond_slave_1): interface is now down [ 241.997315][ T39] bond0: (slave syz_tun): interface is now down [ 241.999169][ T6660] tipc: Resetting bearer [ 242.014485][ T39] bond0: (slave bond_slave_0): interface is now down [ 242.015756][ T39] bond0: (slave bond_slave_1): interface is now down [ 242.016897][ T39] bond0: (slave syz_tun): interface is now down [ 242.034669][ T4419] bond0: (slave bond_slave_0): interface is now down [ 242.035829][ T4419] bond0: (slave bond_slave_1): interface is now down [ 242.036817][ T4419] bond0: (slave syz_tun): interface is now down [ 242.054448][ T39] bond0: (slave bond_slave_0): interface is now down [ 242.055132][ T6660] tipc: Disabling bearer [ 242.055535][ T39] bond0: (slave bond_slave_1): interface is now down [ 242.057567][ T39] bond0: (slave syz_tun): interface is now down [ 242.074378][ T4419] bond0: (slave bond_slave_0): interface is now down [ 242.075601][ T4419] bond0: (slave bond_slave_1): interface is now down [ 242.076939][ T4419] bond0: (slave syz_tun): interface is now down [ 242.104544][ T4455] bond0: (slave bond_slave_0): interface is now down [ 242.105751][ T4455] bond0: (slave bond_slave_1): interface is now down [ 242.106788][ T4455] bond0: (slave syz_tun): interface is now down [ 242.127148][ T4419] bond0: (slave bond_slave_0): interface is now down [ 242.128364][ T4419] bond0: (slave bond_slave_1): interface is now down [ 242.129660][ T4419] bond0: (slave syz_tun): interface is now down [ 242.132536][ T4419] bond0: now running without any active interface! [ 242.149438][ T6240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.170566][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.172100][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.180152][ T6240] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.194013][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.196041][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.240032][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.241264][ T6679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.243871][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.254140][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.256818][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.259463][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.261424][ T6571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.299250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.311655][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.337955][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.340757][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.342491][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.346676][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.348621][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.354917][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.358633][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.367927][ T6240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.397370][ T6240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.410299][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.412112][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.552924][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.554493][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.560037][ T6240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.583832][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.585733][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.599839][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.601622][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.603414][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.613195][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.658969][ T6240] device veth0_vlan entered promiscuous mode [ 242.662512][ T6240] device veth1_vlan entered promiscuous mode [ 242.680421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.682056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.684015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.689750][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.706820][ T6240] device veth0_macvtap entered promiscuous mode [ 242.719642][ T6240] device veth1_macvtap entered promiscuous mode [ 242.745709][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.747406][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.759308][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.760983][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.762522][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.764136][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.767638][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.769490][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.771149][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.774551][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.777077][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.778660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.781991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.784217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.789937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.798553][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.800209][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.801998][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.803541][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.809162][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.811263][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.813038][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.815305][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.816856][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.819513][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.823270][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.826889][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.828624][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.832647][ T6240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.837620][ T6240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.839130][ T6240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.841735][ T6240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.889469][ T5113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.890907][ T5113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.893074][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.911177][ T5113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.912613][ T5113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.917720][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.003911][ T6744] autofs4:pid:6744:autofs_fill_super: called with bogus options [ 243.008287][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 243.050472][ T6748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 243.122776][ T6753] netlink: 36 bytes leftover after parsing attributes in process `syz.8.501'. [ 243.139589][ T6753] netlink: 'syz.8.501': attribute type 10 has an invalid length. [ 243.228265][ T6758] device syzkaller0 entered promiscuous mode [ 248.794713][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.795796][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.548956][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 254.553993][ T6826] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 254.642940][ T6836] netlink: 36 bytes leftover after parsing attributes in process `syz.7.513'. [ 254.647476][ T6836] netlink: 'syz.7.513': attribute type 10 has an invalid length. [ 254.653766][ T6840] autofs4:pid:6840:autofs_fill_super: called with bogus options [ 254.748368][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 255.182599][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.184178][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.189539][ T6877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.190733][ T6877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.865678][ T6907] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.932717][ T6909] device syzkaller0 entered promiscuous mode [ 266.234415][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 266.767705][ T6964] tipc: Enabling of bearer rejected, failed to enable media [ 266.769754][ T6966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'. [ 266.771507][ T4455] bond0: (slave bond_slave_0): interface is now down [ 266.772370][ T6972] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 266.772624][ T4455] bond0: (slave bond_slave_1): interface is now down [ 266.782121][ T6972] device syz_tun entered promiscuous mode [ 266.786801][ T6972] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 266.794517][ T4455] bond0: (slave bond_slave_0): interface is now down [ 266.795576][ T4455] bond0: (slave bond_slave_1): interface is now down [ 266.796638][ T4455] bond0: (slave syz_tun): interface is now down [ 266.799320][ T4455] bond0: now running without any active interface! [ 266.861600][ T6986] autofs4:pid:6986:autofs_fill_super: called with bogus options [ 266.899227][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 267.012757][ T7001] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.819494][ T7038] fuse: Bad value for 'fd' [ 268.080057][ T7051] device syzkaller0 entered promiscuous mode [ 276.474333][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 279.243524][ T7057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.539'. [ 279.245697][ T7062] netlink: 'syz.0.539': attribute type 10 has an invalid length. [ 279.250121][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.251428][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.252983][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.254087][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.312314][ T7078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 279.360651][ T7080] tipc: Started in network mode [ 279.361557][ T7080] tipc: Node identity f62ab8935904, cluster identity 4711 [ 279.362750][ T7080] tipc: Enabled bearer , priority 0 [ 279.365021][ T7080] device syzkaller0 entered promiscuous mode [ 279.371349][ T7080] tipc: Resetting bearer [ 279.387389][ T7079] tipc: Resetting bearer [ 279.505084][ T7079] tipc: Disabling bearer [ 280.418785][ T7146] fuse: Bad value for 'fd' [ 280.536856][ T7157] netlink: 36 bytes leftover after parsing attributes in process `syz.9.553'. [ 280.541473][ T7157] netlink: 'syz.9.553': attribute type 10 has an invalid length. [ 280.667090][ T7168] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 280.680345][ T7166] device syzkaller0 entered promiscuous mode [ 284.385393][ T4320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.393306][ T4320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.395423][ T4320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.397051][ T4320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.398492][ T4320] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.400281][ T4320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.474412][ T4320] Bluetooth: hci5: command 0x0409 tx timeout [ 288.554354][ T4320] Bluetooth: hci5: command 0x041b tx timeout [ 290.644423][ T4322] Bluetooth: hci5: command 0x040f tx timeout [ 291.919418][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.920626][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.922755][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.923990][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.152304][ T5876] bond0: (slave syz_tun): Releasing backup interface [ 292.199412][ T7231] netlink: 144 bytes leftover after parsing attributes in process `syz.9.563'. [ 292.304217][ T7215] chnl_net:caif_netlink_parms(): no params data found [ 292.326396][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.327674][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.507692][ T7250] 9pnet_virtio: no channels available for device syz [ 292.634903][ T7215] device bridge_slave_0 entered promiscuous mode [ 292.638867][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.641220][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.645154][ T7215] device bridge_slave_1 entered promiscuous mode [ 292.659962][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.662870][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.677386][ T7215] team0: Port device team_slave_0 added [ 292.679851][ T7215] team0: Port device team_slave_1 added [ 292.687074][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.688354][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.692692][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.697549][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.698756][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.702867][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.724435][ T4320] Bluetooth: hci5: command 0x0419 tx timeout [ 292.745625][ T7215] device hsr_slave_0 entered promiscuous mode [ 292.796502][ T7215] device hsr_slave_1 entered promiscuous mode [ 292.834422][ T7215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.835673][ T7215] Cannot create hsr debugfs directory [ 292.988195][ T7215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.617705][ T7215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.650440][ T7278] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 293.736904][ T7215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.741049][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.9.567'. [ 293.748651][ T7281] netlink: 'syz.9.567': attribute type 10 has an invalid length. [ 293.876735][ T7215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.900613][ T7288] device syzkaller0 entered promiscuous mode [ 296.963421][ T4320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.970358][ T4320] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.971963][ T4320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.974112][ T4320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.976615][ T4320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.977895][ T4320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.034409][ T4322] Bluetooth: hci4: command 0x0409 tx timeout [ 301.114384][ T4320] Bluetooth: hci4: command 0x041b tx timeout [ 302.074491][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 303.194649][ T4322] Bluetooth: hci4: command 0x040f tx timeout [ 305.007827][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.009106][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.010690][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.011827][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.160378][ T6240] bond0: (slave syz_tun): Releasing backup interface [ 305.262122][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.575'. [ 305.275218][ T4322] Bluetooth: hci4: command 0x0419 tx timeout [ 305.510851][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.575'. [ 305.587010][ T4708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.665633][ T4708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.671182][ T7215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.706358][ T7351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.708475][ T7215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.748111][ T7215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.828139][ T7315] chnl_net:caif_netlink_parms(): no params data found [ 305.830625][ T7215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.380277][ T4708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.412736][ T7359] netlink: 36 bytes leftover after parsing attributes in process `syz.9.578'. [ 306.433822][ T7359] netlink: 'syz.9.578': attribute type 10 has an invalid length. [ 306.457661][ T4708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.511804][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.512917][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.516130][ T7315] device bridge_slave_0 entered promiscuous mode [ 306.524613][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.527370][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.529792][ T7315] device bridge_slave_1 entered promiscuous mode [ 306.536514][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.550048][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.551588][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.555207][ T7215] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.558699][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.563395][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.566619][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.568360][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.569804][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.570921][ T1606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.573104][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.609747][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.612375][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.624968][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.626080][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.643193][ T7315] team0: Port device team_slave_0 added [ 306.651744][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.666582][ T7383] device syzkaller0 entered promiscuous mode [ 306.669760][ T7251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.673219][ T7315] team0: Port device team_slave_1 added [ 306.683308][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.685208][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.690419][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.236327][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.237441][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.733182][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.734406][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.738325][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.747217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.749218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.752714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.825670][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.827385][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.828971][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.830456][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.832627][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.834091][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.844886][ T7408] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 317.873321][ T7215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.936995][ T7315] device hsr_slave_0 entered promiscuous mode [ 318.003061][ T7315] device hsr_slave_1 entered promiscuous mode [ 318.076619][ T7315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.079010][ T7315] Cannot create hsr debugfs directory [ 318.303115][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.305625][ T7213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.309832][ T7215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.323626][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.326154][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.436851][ T7315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.503487][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.505422][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.558502][ T7315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.562820][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.565562][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.610978][ T7215] device veth0_vlan entered promiscuous mode [ 318.657110][ T7315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.699108][ T7215] device veth1_vlan entered promiscuous mode [ 318.707248][ T7455] netlink: 36 bytes leftover after parsing attributes in process `syz.6.588'. [ 318.716886][ T7455] netlink: 'syz.6.588': attribute type 10 has an invalid length. [ 318.831604][ T7315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.846375][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.847978][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 319.183836][ T7215] device veth0_macvtap entered promiscuous mode [ 319.200545][ T186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.202519][ T186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.205358][ T186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.220468][ T7215] device veth1_macvtap entered promiscuous mode [ 319.271467][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.273173][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.275913][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.277696][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.280007][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.292660][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.294257][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.297319][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.470351][ T7315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.511120][ T7493] device syzkaller0 entered promiscuous mode [ 330.514708][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.516340][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.517913][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.519618][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.521872][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.524139][ T7215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.527366][ T7215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.528607][ T7215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.529911][ T7215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.609190][ T4322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.611521][ T4322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.612990][ T4322] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.621281][ T4322] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.622657][ T4322] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.623876][ T4322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.674383][ T4320] Bluetooth: hci3: command 0x0409 tx timeout [ 339.754392][ T4320] Bluetooth: hci3: command 0x041b tx timeout [ 341.613482][ T186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.615342][ T186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.618818][ T7315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.666187][ T7315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.715612][ T7508] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 341.825703][ T5858] bond0: (slave syz_tun): Releasing backup interface [ 341.834656][ T4322] Bluetooth: hci3: command 0x040f tx timeout [ 341.898910][ T7315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.337022][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.9.599'. [ 342.353070][ T7543] netlink: 'syz.9.599': attribute type 10 has an invalid length. [ 342.468383][ T4708] device hsr_slave_0 left promiscuous mode [ 342.485178][ T4708] device hsr_slave_1 left promiscuous mode [ 342.956007][ T4708] device bridge_slave_1 left promiscuous mode [ 342.958131][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.000029][ T4708] device bridge_slave_0 left promiscuous mode [ 343.001260][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.104838][ T4708] device veth1_macvtap left promiscuous mode [ 343.106273][ T4708] device veth0_macvtap left promiscuous mode [ 343.107388][ T4708] device veth1_vlan left promiscuous mode [ 343.108397][ T4708] device veth0_vlan left promiscuous mode [ 343.915191][ T4322] Bluetooth: hci3: command 0x0419 tx timeout [ 344.837367][ T4322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.839968][ T4322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.841641][ T4322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.843088][ T4322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.846661][ T4322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.847862][ T4322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.168948][ T4708] team0 (unregistering): Port device team_slave_1 removed [ 345.346922][ T4708] team0 (unregistering): Port device team_slave_0 removed [ 345.504930][ T4708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.704868][ T4708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.874350][ T4322] Bluetooth: hci2: command 0x0409 tx timeout [ 347.986044][ T4708] bond0 (unregistering): Released all slaves [ 348.335451][ T7605] loop9: detected capacity change from 0 to 7 [ 348.337852][ T7605] Dev loop9: unable to read RDB block 7 [ 348.338711][ T7605] loop9: unable to read partition table [ 348.339656][ T7605] loop9: partition table beyond EOD, truncated [ 348.340530][ T7605] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 348.340530][ T7605] ) failed (rc=-5) [ 348.380870][ T7609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 348.420936][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 348.443107][ T7614] netlink: 'syz.6.607': attribute type 10 has an invalid length. [ 348.451424][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.477748][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.479357][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.517750][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.986844][ T4322] Bluetooth: hci2: command 0x041b tx timeout [ 349.058954][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.060821][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.062537][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.063757][ T5432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.079062][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.080384][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.082100][ T7514] device bridge_slave_0 entered promiscuous mode [ 349.085967][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.088807][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.090658][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.092228][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.093444][ T5432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.106842][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.108906][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.112066][ T7599] chnl_net:caif_netlink_parms(): no params data found [ 349.137252][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.138975][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.140679][ T7514] device bridge_slave_1 entered promiscuous mode [ 349.142756][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.148515][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.150415][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.152040][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.153698][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.156223][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.172127][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.173786][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.184538][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.191674][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.195552][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.204055][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.237247][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.238605][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.240486][ T7599] device bridge_slave_0 entered promiscuous mode [ 349.250345][ T7514] team0: Port device team_slave_0 added [ 349.252651][ T7514] team0: Port device team_slave_1 added [ 349.253908][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.258480][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.260294][ T7599] device bridge_slave_1 entered promiscuous mode [ 349.292455][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.297442][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.301625][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.339673][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.348080][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.350079][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.351237][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.355596][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.370976][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.372307][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.384232][ T7599] team0: Port device team_slave_0 added [ 349.393123][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.471334][ T7315] device veth0_vlan entered promiscuous mode [ 349.480248][ T7599] team0: Port device team_slave_1 added [ 349.556912][ T7514] device hsr_slave_0 entered promiscuous mode [ 349.584650][ T7514] device hsr_slave_1 entered promiscuous mode [ 349.825640][ T7514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.827288][ T7514] Cannot create hsr debugfs directory [ 349.847417][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.850942][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.853944][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.883089][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.888556][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.893309][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.898088][ T7315] device veth1_vlan entered promiscuous mode [ 349.921653][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.924203][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.932384][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.941085][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.942988][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.945915][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.947732][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.952525][ T7315] device veth0_macvtap entered promiscuous mode [ 349.955609][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.956851][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.960831][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.970154][ T7315] device veth1_macvtap entered promiscuous mode [ 350.279551][ T4708] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.291115][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.293731][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.353324][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.356229][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.357776][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.359274][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.360678][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.369760][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.372102][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.408479][ T4708] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.413818][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.416035][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.465597][ T7599] device hsr_slave_0 entered promiscuous mode [ 350.505990][ T7599] device hsr_slave_1 entered promiscuous mode [ 350.524979][ T7599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.526228][ T7599] Cannot create hsr debugfs directory [ 350.593574][ T4708] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.600908][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.602611][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.604162][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.606292][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.607979][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.609596][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.612015][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.638204][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.639931][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.676307][ T4708] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.692583][ T7315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.694004][ T7315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.696533][ T7315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.697954][ T7315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.806267][ T7514] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.813149][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.814813][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.823573][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.829091][ T7711] netlink: 'syz.6.616': attribute type 10 has an invalid length. [ 350.861386][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.862703][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.315925][ T4320] Bluetooth: hci2: command 0x040f tx timeout [ 351.327084][ T7514] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.345334][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.437975][ T7514] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.325885][ T7514] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.329323][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.330632][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.332211][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.333318][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.448109][ T7756] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 352.557866][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.620'. [ 353.305252][ T7798] netlink: 'syz.6.624': attribute type 10 has an invalid length. [ 353.354373][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 353.412891][ T7812] netlink: 144 bytes leftover after parsing attributes in process `syz.9.626'. [ 353.620901][ T7822] 9pnet_virtio: no channels available for device syz [ 354.035196][ T7514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.076692][ T7514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.136786][ T7514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.195489][ T7514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.218794][ T7851] autofs4:pid:7851:autofs_fill_super: called with bogus options [ 354.260158][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.627'. [ 354.312375][ T4708] device hsr_slave_0 left promiscuous mode [ 354.409219][ T4708] device hsr_slave_1 left promiscuous mode [ 354.491342][ T4708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.492678][ T4708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.498669][ T4708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.499913][ T4708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.502335][ T4708] device bridge_slave_1 left promiscuous mode [ 354.505086][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.545497][ T4708] device bridge_slave_0 left promiscuous mode [ 354.546550][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.674650][ T4708] device veth1_macvtap left promiscuous mode [ 354.675717][ T4708] device veth0_macvtap left promiscuous mode [ 354.676680][ T4708] device veth1_vlan left promiscuous mode [ 354.677679][ T4708] device veth0_vlan left promiscuous mode [ 356.427931][ T4708] team0 (unregistering): Port device team_slave_1 removed [ 356.596138][ T4708] team0 (unregistering): Port device team_slave_0 removed [ 356.765601][ T4708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.976092][ T4708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.290246][ T4708] bond0 (unregistering): Released all slaves [ 359.526261][ T7892] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 359.535103][ T7892] device syz_tun entered promiscuous mode [ 359.543286][ T7892] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 359.548838][ T7897] process 'syz.6.634' launched './file1' with NULL argv: empty string added [ 359.576057][ T7599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.602416][ T7599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 359.622098][ T7908] netlink: 144 bytes leftover after parsing attributes in process `syz.6.637'. [ 359.623849][ T7907] netlink: 144 bytes leftover after parsing attributes in process `syz.9.636'. [ 359.639691][ T7599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 359.806371][ T7913] 9pnet_virtio: no channels available for device syz [ 360.027484][ T7599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.153962][ T7917] 9pnet_virtio: no channels available for device syz [ 360.894985][ T7942] autofs4:pid:7942:autofs_fill_super: called with bogus options [ 360.903510][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.9.640'. [ 360.912389][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.921731][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.940563][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.942317][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.956253][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.962155][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.963982][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.972803][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.974018][ T6679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.976703][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.979345][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.986050][ T7599] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.987982][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.989644][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.991225][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.992747][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.993850][ T6679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.008884][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.010848][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.013622][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.020781][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.021982][ T6679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.024962][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.028721][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.033849][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.041588][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.044758][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.055083][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.058260][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.060058][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.061751][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.063137][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.064321][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.066104][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.079615][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.088110][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.089668][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.091144][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.093241][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.102435][ T7514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.106618][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.109311][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.111157][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.113242][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.117815][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.133378][ T7599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.136484][ T7599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.138969][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.140635][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.142341][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.149927][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.156483][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.338526][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.339822][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.342997][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.371044][ T7969] netlink: 'syz.9.643': attribute type 10 has an invalid length. [ 361.382608][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.387685][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.389108][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.392776][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.395654][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.424231][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.426377][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.428488][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.429919][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.451046][ T7514] device veth0_vlan entered promiscuous mode [ 361.460578][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.462937][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.473592][ T7514] device veth1_vlan entered promiscuous mode [ 361.542535][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 361.544998][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 361.546518][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.548103][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.550417][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.557203][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.573476][ T7599] device veth0_vlan entered promiscuous mode [ 361.578241][ T7599] device veth1_vlan entered promiscuous mode [ 361.590466][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 361.592150][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 361.593700][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.598061][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.611865][ T7514] device veth0_macvtap entered promiscuous mode [ 361.673901][ T7514] device veth1_macvtap entered promiscuous mode [ 361.692891][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.695428][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.696854][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.698406][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.718584][ T7599] device veth0_macvtap entered promiscuous mode [ 361.757078][ T7599] device veth1_macvtap entered promiscuous mode [ 361.763480][ T7991] netlink: 144 bytes leftover after parsing attributes in process `syz.2.648'. [ 361.767097][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.769630][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.771334][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.773048][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.778145][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.788977][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.790635][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.792021][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.793635][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.813918][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.820347][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.827738][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.853202][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.858537][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.867960][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.878962][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.956349][ T7994] 9pnet_virtio: no channels available for device syz [ 362.188189][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.198999][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.201766][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.203453][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.209751][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.211267][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.212856][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.214579][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.216090][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.218587][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.220266][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.221759][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.223721][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.226090][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.229188][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.232871][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.238018][ T7514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.241398][ T7514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.242934][ T7514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.246442][ T7514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.248849][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.250609][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.277002][ T7599] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.278553][ T7599] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.280107][ T7599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.281995][ T7599] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.303792][ T8000] netlink: 144 bytes leftover after parsing attributes in process `syz.9.649'. [ 362.315912][ T8002] autofs4:pid:8002:autofs_fill_super: called with bogus options [ 362.338407][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.650'. [ 362.406308][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.407793][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.411929][ T7995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.422220][ T5113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.423645][ T5113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.558787][ T8008] 9pnet_virtio: no channels available for device syz [ 362.766945][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.789401][ T4635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.790973][ T4635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.814095][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.823535][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.824977][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.834571][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.935223][ T8023] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 362.955457][ T8019] tipc: Started in network mode [ 362.956316][ T8019] tipc: Node identity 62ce13ef703e, cluster identity 4711 [ 362.957549][ T8019] tipc: Enabled bearer , priority 0 [ 362.959293][ T8019] device syzkaller0 entered promiscuous mode [ 362.970969][ T8019] tipc: Resetting bearer [ 362.978376][ T8018] tipc: Resetting bearer [ 363.010669][ T8018] tipc: Disabling bearer [ 363.113661][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.116064][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.123701][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.125387][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.441455][ T8039] netlink: 144 bytes leftover after parsing attributes in process `syz.6.659'. [ 363.618966][ T8046] 9pnet_virtio: no channels available for device syz [ 363.873786][ T8049] netlink: 228 bytes leftover after parsing attributes in process `syz.2.661'. [ 364.122206][ T8067] loop7: detected capacity change from 0 to 7 [ 364.125479][ T8067] Dev loop7: unable to read RDB block 7 [ 364.126389][ T8067] loop7: unable to read partition table [ 364.127424][ T8067] loop7: partition table beyond EOD, truncated [ 364.136743][ T8067] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 364.143027][ T6566] loop: Write error at byte offset 4, length 3584. [ 364.144230][ C0] blk_print_req_error: 23 callbacks suppressed [ 364.144237][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 364.146825][ C0] buffer_io_error: 23 callbacks suppressed [ 364.146837][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 364.152378][ T3936] Dev loop7: unable to read RDB block 7 [ 364.153268][ T3936] loop7: unable to read partition table [ 364.154259][ T3936] loop7: partition table beyond EOD, truncated [ 364.278109][ T8075] autofs4:pid:8075:autofs_fill_super: called with bogus options [ 364.279967][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 364.320823][ T8077] netlink: 'syz.6.665': attribute type 10 has an invalid length. [ 364.429073][ T8081] netlink: 144 bytes leftover after parsing attributes in process `syz.2.666'. [ 364.518914][ T8087] 9pnet_virtio: no channels available for device syz [ 364.611532][ T8090] 9pnet_virtio: no channels available for device syz [ 365.409870][ T8114] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 365.410916][ T8114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.420903][ T8114] vhci_hcd vhci_hcd.0: Device attached [ 365.483053][ T8113] Bluetooth: MGMT ver 1.22 [ 365.545983][ T8116] device wlan0 entered promiscuous mode [ 365.556179][ T8112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.584249][ T8129] netlink: 144 bytes leftover after parsing attributes in process `syz.9.675'. [ 365.695556][ T8132] autofs4:pid:8132:autofs_fill_super: called with bogus options [ 365.697516][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.676'. [ 365.714776][ T8006] usb 4-1: new low-speed USB device number 3 using vhci_hcd [ 365.775900][ T8133] 9pnet_virtio: no channels available for device syz [ 365.986816][ T8115] vhci_hcd: connection reset by peer [ 365.988267][ T4419] vhci_hcd: stop threads [ 365.988997][ T4419] vhci_hcd: release socket [ 365.989762][ T4419] vhci_hcd: disconnect device [ 366.105455][ T8137] netlink: 'syz.6.677': attribute type 10 has an invalid length. [ 366.855453][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.856748][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.860631][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.861930][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.152164][ T8169] netlink: 144 bytes leftover after parsing attributes in process `syz.1.686'. [ 367.171167][ T8173] autofs4:pid:8173:autofs_fill_super: called with bogus options [ 367.228878][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'. [ 367.618651][ T8184] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 367.685363][ T8189] tipc: Enabling of bearer rejected, failed to enable media [ 367.743407][ T8195] netlink: 144 bytes leftover after parsing attributes in process `syz.2.693'. [ 367.920894][ T8202] 9pnet_virtio: no channels available for device syz [ 368.359169][ T8223] autofs4:pid:8223:autofs_fill_super: called with bogus options [ 368.361330][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 368.712402][ T8232] tipc: Started in network mode [ 368.713261][ T8232] tipc: Node identity cae55f28da99, cluster identity 4711 [ 368.720597][ T8232] tipc: Enabled bearer , priority 0 [ 368.722305][ T8232] device syzkaller0 entered promiscuous mode [ 368.737219][ T8232] tipc: Resetting bearer [ 368.742086][ T8231] tipc: Resetting bearer [ 368.795385][ T8231] tipc: Disabling bearer [ 368.801017][ T8234] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 368.802825][ T8234] device syz_tun entered promiscuous mode [ 368.816674][ T8234] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 369.427774][ T8257] netlink: 144 bytes leftover after parsing attributes in process `syz.6.709'. [ 369.524647][ T8266] autofs4:pid:8266:autofs_fill_super: called with bogus options [ 369.527198][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 369.896175][ T8272] netlink: 144 bytes leftover after parsing attributes in process `syz.1.712'. [ 370.079116][ T8279] 9pnet_virtio: no channels available for device syz [ 370.433724][ T8288] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 370.441355][ T8288] device syz_tun entered promiscuous mode [ 370.462908][ T8288] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 370.472224][ T8290] tipc: Enabled bearer , priority 0 [ 370.477694][ T8290] device syzkaller0 entered promiscuous mode [ 370.495406][ T8290] tipc: Resetting bearer [ 370.504910][ T8289] tipc: Resetting bearer [ 370.565045][ T8289] tipc: Disabling bearer [ 370.891270][ T8006] vhci_hcd: vhci_device speed not set [ 371.313683][ T8320] autofs4:pid:8320:autofs_fill_super: called with bogus options [ 371.316228][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 371.329359][ T8322] netlink: 144 bytes leftover after parsing attributes in process `syz.9.727'. [ 371.761757][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.765056][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.787380][ T8327] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 371.923990][ T8339] tipc: Started in network mode [ 371.925012][ T8339] tipc: Node identity 2e0e3e950c19, cluster identity 4711 [ 371.926148][ T8339] tipc: Enabled bearer , priority 0 [ 371.927699][ T8339] device syzkaller0 entered promiscuous mode [ 371.956939][ T8339] tipc: Resetting bearer [ 371.960918][ T8343] 9pnet_virtio: no channels available for device syz [ 371.966184][ T8338] tipc: Resetting bearer [ 371.969019][ T8345] netlink: 144 bytes leftover after parsing attributes in process `syz.2.733'. [ 372.045510][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 372.055376][ T8338] tipc: Disabling bearer [ 372.271127][ T8360] 9pnet_virtio: no channels available for device syz [ 373.105039][ T8389] autofs4:pid:8389:autofs_fill_super: called with bogus options [ 373.119096][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 373.477338][ T8400] netlink: 'syz.9.744': attribute type 10 has an invalid length. [ 373.575733][ T8410] netlink: 144 bytes leftover after parsing attributes in process `syz.6.747'. [ 373.667390][ T8418] tipc: Enabled bearer , priority 0 [ 373.669221][ T8418] device syzkaller0 entered promiscuous mode [ 374.049175][ T8431] tipc: Resetting bearer [ 374.052553][ T8413] tipc: Resetting bearer [ 374.088607][ T8436] netlink: 144 bytes leftover after parsing attributes in process `syz.3.753'. [ 374.155071][ T8413] tipc: Disabling bearer [ 374.208020][ T8436] 9pnet_virtio: no channels available for device syz [ 374.718648][ T8473] netlink: 'syz.6.759': attribute type 10 has an invalid length. [ 374.813921][ T8482] autofs4:pid:8482:autofs_fill_super: called with bogus options [ 374.820637][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 374.992967][ T8500] netlink: 144 bytes leftover after parsing attributes in process `syz.1.766'. [ 375.002778][ T8502] netlink: 144 bytes leftover after parsing attributes in process `syz.2.765'. [ 375.176208][ T8508] 9pnet_virtio: no channels available for device syz [ 375.274786][ T8513] tipc: Enabled bearer , priority 0 [ 375.282087][ T8513] device syzkaller0 entered promiscuous mode [ 375.351865][ T8521] tipc: Resetting bearer [ 375.358450][ T8512] tipc: Resetting bearer [ 375.425260][ T8512] tipc: Disabling bearer [ 375.665514][ T8535] netlink: 'syz.3.770': attribute type 10 has an invalid length. [ 375.667543][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.669860][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.715127][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.716433][ T8535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.717793][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.718907][ T8535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.762745][ T8535] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 375.967034][ T8552] netlink: 'syz.2.773': attribute type 10 has an invalid length. [ 376.072631][ T8567] autofs4:pid:8567:autofs_fill_super: called with bogus options [ 376.565391][ T8587] tipc: Enabled bearer , priority 0 [ 376.567013][ T8587] device syzkaller0 entered promiscuous mode [ 376.616999][ T8587] tipc: Resetting bearer [ 376.621455][ T8586] tipc: Resetting bearer [ 376.685219][ T8586] tipc: Disabling bearer [ 376.788863][ T8604] __nla_validate_parse: 1 callbacks suppressed [ 376.788875][ T8604] netlink: 144 bytes leftover after parsing attributes in process `syz.3.784'. [ 376.925009][ T8606] 9pnet_virtio: no channels available for device syz [ 376.932676][ T8608] netlink: 144 bytes leftover after parsing attributes in process `syz.9.785'. [ 377.752295][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.6.788'. [ 377.754069][ T8633] netlink: 'syz.6.788': attribute type 10 has an invalid length. [ 377.993324][ T8656] autofs4:pid:8656:autofs_fill_super: called with bogus options [ 377.995259][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.792'. [ 378.100476][ T8662] tipc: Enabled bearer , priority 0 [ 378.126076][ T8662] device syzkaller0 entered promiscuous mode [ 378.238434][ T8660] tipc: Resetting bearer [ 378.597507][ T8660] tipc: Disabling bearer [ 378.793835][ T8692] netlink: 144 bytes leftover after parsing attributes in process `syz.9.799'. [ 378.864225][ T8697] netlink: 144 bytes leftover after parsing attributes in process `syz.1.800'. [ 379.182238][ T8701] 9pnet_virtio: no channels available for device syz [ 379.688744][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.9.802'. [ 379.690468][ T8709] netlink: 'syz.9.802': attribute type 10 has an invalid length. [ 379.892518][ T8733] autofs4:pid:8733:autofs_fill_super: called with bogus options [ 379.902522][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.807'. [ 379.953940][ T8737] tipc: Enabled bearer , priority 0 [ 379.962117][ T8737] device syzkaller0 entered promiscuous mode [ 380.016228][ T8736] tipc: Resetting bearer [ 380.098868][ T8736] tipc: Disabling bearer [ 380.594905][ T8767] netlink: 144 bytes leftover after parsing attributes in process `syz.1.814'. [ 380.708460][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.9.815'. [ 380.710324][ T8773] netlink: 'syz.9.815': attribute type 10 has an invalid length. [ 381.168610][ T8777] 9pnet_virtio: no channels available for device syz [ 381.519929][ T8796] tipc: Enabled bearer , priority 0 [ 381.533036][ T8796] device syzkaller0 entered promiscuous mode [ 381.542859][ T8801] autofs4:pid:8801:autofs_fill_super: called with bogus options [ 381.596722][ T8793] tipc: Resetting bearer [ 381.686662][ T8793] tipc: Disabling bearer [ 382.260441][ T8836] __nla_validate_parse: 1 callbacks suppressed [ 382.260453][ T8836] netlink: 144 bytes leftover after parsing attributes in process `syz.2.828'. [ 382.486301][ T8839] 9pnet_virtio: no channels available for device syz [ 382.818086][ T8847] netlink: 144 bytes leftover after parsing attributes in process `syz.1.832'. [ 382.842900][ T4320] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 382.845476][ T4320] CPU: 0 PID: 4320 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 382.846699][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 382.848407][ T4320] Workqueue: hci1 hci_rx_work [ 382.849147][ T4320] Call trace: [ 382.849654][ T4320] dump_backtrace+0x1c8/0x1f4 [ 382.850361][ T4320] show_stack+0x2c/0x3c [ 382.850950][ T4320] __dump_stack+0x30/0x40 [ 382.851647][ T4320] dump_stack_lvl+0xf8/0x160 [ 382.852322][ T4320] dump_stack+0x1c/0x5c [ 382.852907][ T4320] sysfs_create_dir_ns+0x22c/0x24c [ 382.853673][ T4320] kobject_add_internal+0x5a8/0xb30 [ 382.854489][ T4320] kobject_add+0x134/0x1f8 [ 382.855207][ T4320] device_add+0x3f0/0xf94 [ 382.855901][ T4320] hci_conn_add_sysfs+0xbc/0x1cc [ 382.856681][ T4320] le_conn_complete_evt+0xcb0/0x1220 [ 382.857596][ T4320] hci_le_conn_complete_evt+0x114/0x3f8 [ 382.858503][ T4320] hci_le_meta_evt+0x2c0/0x4a4 [ 382.859302][ T4320] hci_event_packet+0x6ac/0xf08 [ 382.860060][ T4320] hci_rx_work+0x324/0xaa0 [ 382.860778][ T4320] process_one_work+0x7f4/0x13a8 [ 382.861633][ T4320] worker_thread+0x8c8/0xfbc [ 382.862355][ T4320] kthread+0x250/0x2d8 [ 382.863028][ T4320] ret_from_fork+0x10/0x20 [ 382.865098][ T4320] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 382.867665][ T4320] Bluetooth: hci1: failed to register connection device [ 383.318401][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.834'. [ 383.320402][ T8853] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 383.366460][ T8857] tipc: Enabling of bearer rejected, failed to enable media [ 383.502748][ T8869] autofs4:pid:8869:autofs_fill_super: called with bogus options [ 383.506456][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 383.668489][ T8884] netlink: 144 bytes leftover after parsing attributes in process `syz.3.843'. [ 383.823254][ T8893] tipc: Enabled bearer , priority 0 [ 383.826236][ T8893] device syzkaller0 entered promiscuous mode [ 383.951847][ T8895] 9pnet_virtio: no channels available for device syz [ 384.153662][ T8891] tipc: Resetting bearer [ 384.316953][ T8891] tipc: Disabling bearer [ 384.421704][ T8916] autofs4:pid:8916:autofs_fill_super: called with bogus options [ 384.423526][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 384.548999][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 384.549009][ T27] audit: type=1326 audit(384.540:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.583843][ T27] audit: type=1326 audit(384.570:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.600678][ T27] audit: type=1326 audit(384.570:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.608313][ T8928] netlink: 144 bytes leftover after parsing attributes in process `syz.9.855'. [ 384.612006][ T27] audit: type=1326 audit(384.570:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.616610][ T27] audit: type=1326 audit(384.570:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.621183][ T27] audit: type=1326 audit(384.570:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.631333][ T27] audit: type=1326 audit(384.570:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.640655][ T27] audit: type=1326 audit(384.570:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.644157][ T27] audit: type=1326 audit(384.570:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 384.648620][ T27] audit: type=1326 audit(384.570:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.3.854" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9ba3081c code=0x7ffc0000 [ 384.676583][ T8932] tmpfs: Unknown parameter 'quota' [ 385.598739][ T8949] tipc: Enabled bearer , priority 0 [ 385.600187][ T8949] device syzkaller0 entered promiscuous mode [ 385.636010][ T8948] tipc: Resetting bearer [ 385.715689][ T8948] tipc: Disabling bearer [ 385.747080][ T8955] netlink: 144 bytes leftover after parsing attributes in process `syz.6.864'. [ 385.879868][ T8956] 9pnet_virtio: no channels available for device syz [ 386.360343][ T8967] autofs4:pid:8967:autofs_fill_super: called with bogus options [ 386.362536][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 386.535260][ T8972] loop7: detected capacity change from 0 to 7 [ 386.537355][ T7601] Dev loop7: unable to read RDB block 7 [ 386.538187][ T7601] loop7: unable to read partition table [ 386.539129][ T7601] loop7: partition table beyond EOD, truncated [ 386.548052][ T8972] Dev loop7: unable to read RDB block 7 [ 386.548919][ T8972] loop7: unable to read partition table [ 386.550311][ T8972] loop7: partition table beyond EOD, truncated [ 386.551220][ T8972] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 386.560634][ T6279] loop: Write error at byte offset 4, length 3584. [ 386.561881][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 386.563304][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 386.567759][ T3936] Dev loop7: unable to read RDB block 7 [ 386.568693][ T3936] loop7: unable to read partition table [ 386.569797][ T3936] loop7: partition table beyond EOD, truncated [ 386.649695][ T8974] netlink: 144 bytes leftover after parsing attributes in process `syz.1.870'. [ 387.362140][ T8990] tipc: Enabling of bearer rejected, failed to enable media [ 387.622444][ T9005] autofs4:pid:9005:autofs_fill_super: called with bogus options [ 387.628736][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 387.828912][ T4320] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 387.828949][ T4320] CPU: 0 PID: 4320 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 387.828957][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 387.828962][ T4320] Workqueue: hci2 hci_rx_work [ 387.828981][ T4320] Call trace: [ 387.828983][ T4320] dump_backtrace+0x1c8/0x1f4 [ 387.828999][ T4320] show_stack+0x2c/0x3c [ 387.829003][ T4320] __dump_stack+0x30/0x40 [ 387.829014][ T4320] dump_stack_lvl+0xf8/0x160 [ 387.829023][ T4320] dump_stack+0x1c/0x5c [ 387.829031][ T4320] sysfs_create_dir_ns+0x22c/0x24c [ 387.829039][ T4320] kobject_add_internal+0x5a8/0xb30 [ 387.829049][ T4320] kobject_add+0x134/0x1f8 [ 387.829058][ T4320] device_add+0x3f0/0xf94 [ 387.829067][ T4320] hci_conn_add_sysfs+0xbc/0x1cc [ 387.829076][ T4320] le_conn_complete_evt+0xcb0/0x1220 [ 387.829085][ T4320] hci_le_conn_complete_evt+0x114/0x3f8 [ 387.829093][ T4320] hci_le_meta_evt+0x2c0/0x4a4 [ 387.829099][ T4320] hci_event_packet+0x6ac/0xf08 [ 387.829104][ T4320] hci_rx_work+0x324/0xaa0 [ 387.829112][ T4320] process_one_work+0x7f4/0x13a8 [ 387.829118][ T4320] worker_thread+0x8c8/0xfbc [ 387.829123][ T4320] kthread+0x250/0x2d8 [ 387.829132][ T4320] ret_from_fork+0x10/0x20 [ 387.829144][ T4320] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 387.829155][ T4320] Bluetooth: hci2: failed to register connection device [ 388.488626][ T9028] netlink: 144 bytes leftover after parsing attributes in process `syz.9.887'. [ 388.596123][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.888'. [ 388.600289][ T9031] netlink: 'syz.6.888': attribute type 10 has an invalid length. [ 388.909440][ T9034] tipc: Enabled bearer , priority 0 [ 388.912756][ T9034] tipc: Resetting bearer [ 389.015359][ T9033] tipc: Disabling bearer [ 389.093901][ T9047] autofs4:pid:9047:autofs_fill_super: called with bogus options [ 389.103393][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.894'. [ 389.282088][ T9057] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 389.438580][ T4322] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 389.440123][ T4322] CPU: 0 PID: 4322 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 389.441307][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 389.442921][ T4322] Workqueue: hci0 hci_rx_work [ 389.443621][ T4322] Call trace: [ 389.444077][ T4322] dump_backtrace+0x1c8/0x1f4 [ 389.444863][ T4322] show_stack+0x2c/0x3c [ 389.445571][ T4322] __dump_stack+0x30/0x40 [ 389.446279][ T4322] dump_stack_lvl+0xf8/0x160 [ 389.446997][ T4322] dump_stack+0x1c/0x5c [ 389.447591][ T4322] sysfs_create_dir_ns+0x22c/0x24c [ 389.448385][ T4322] kobject_add_internal+0x5a8/0xb30 [ 389.449114][ T4322] kobject_add+0x134/0x1f8 [ 389.449839][ T4322] device_add+0x3f0/0xf94 [ 389.450500][ T4322] hci_conn_add_sysfs+0xbc/0x1cc [ 389.451338][ T4322] le_conn_complete_evt+0xcb0/0x1220 [ 389.452236][ T4322] hci_le_conn_complete_evt+0x114/0x3f8 [ 389.453035][ T4322] hci_le_meta_evt+0x2c0/0x4a4 [ 389.453685][ T4322] hci_event_packet+0x6ac/0xf08 [ 389.454388][ T4322] hci_rx_work+0x324/0xaa0 [ 389.455049][ T4322] process_one_work+0x7f4/0x13a8 [ 389.455747][ T4322] worker_thread+0x8c8/0xfbc [ 389.456478][ T4322] kthread+0x250/0x2d8 [ 389.457108][ T4322] ret_from_fork+0x10/0x20 [ 389.457896][ T4322] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 389.459890][ T4322] Bluetooth: hci0: failed to register connection device [ 389.829177][ T9080] tipc: Enabling of bearer rejected, failed to enable media [ 390.120220][ T9090] netlink: 144 bytes leftover after parsing attributes in process `syz.3.909'. [ 390.613992][ T9094] autofs4:pid:9094:autofs_fill_super: called with bogus options [ 390.615993][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.910'. [ 390.807693][ T4322] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 390.906323][ T9105] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 391.068476][ T9116] netlink: 'syz.2.912': attribute type 9 has an invalid length. [ 391.069662][ T9116] netlink: 'syz.2.912': attribute type 6 has an invalid length. [ 391.085614][ T9116] netlink: 'syz.2.912': attribute type 7 has an invalid length. [ 391.086876][ T9116] netlink: 'syz.2.912': attribute type 8 has an invalid length. [ 391.258511][ T9123] device syzkaller0 entered promiscuous mode [ 392.035314][ T4320] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 392.116682][ T9145] loop9: detected capacity change from 0 to 7 [ 392.119645][ T7601] Dev loop9: unable to read RDB block 7 [ 392.120744][ T7601] loop9: unable to read partition table [ 392.121762][ T7601] loop9: partition table beyond EOD, truncated [ 392.134927][ T9145] Dev loop9: unable to read RDB block 7 [ 392.135809][ T9145] loop9: unable to read partition table [ 392.139332][ T9145] loop9: partition table beyond EOD, truncated [ 392.145934][ T9145] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 392.145934][ T9145] ) failed (rc=-5) [ 392.431197][ T9159] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 392.916079][ T9176] loop9: detected capacity change from 0 to 7 [ 392.918043][ T7601] Dev loop9: unable to read RDB block 7 [ 392.919046][ T7601] loop9: unable to read partition table [ 392.920346][ T7601] loop9: partition table beyond EOD, truncated [ 392.923020][ T9176] Dev loop9: unable to read RDB block 7 [ 392.926824][ T9176] loop9: unable to read partition table [ 392.934852][ T9176] loop9: partition table beyond EOD, truncated [ 392.939656][ T9176] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 392.939656][ T9176] ) failed (rc=-5) [ 392.977259][ T9178] tmpfs: Unknown parameter 'quota' [ 393.759104][ T9204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.957578][ T9271] loop9: detected capacity change from 0 to 7 [ 395.964918][ T9271] Dev loop9: unable to read RDB block 7 [ 395.966674][ T9271] loop9: unable to read partition table [ 395.967767][ T9271] loop9: partition table beyond EOD, truncated [ 395.976287][ T9271] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 395.976287][ T9271] ) failed (rc=-5) [ 396.026725][ T9276] 9pnet_virtio: no channels available for device syz [ 396.960329][ T9306] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 397.032603][ T27] kauditd_printk_skb: 7654 callbacks suppressed [ 397.032618][ T27] audit: type=1326 audit(397.020:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.9.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8315b3a8 code=0x7ffc0000 [ 397.038753][ T27] audit: type=1326 audit(397.020:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.9.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8315b3a8 code=0x7ffc0000 [ 397.042320][ T27] audit: type=1326 audit(397.020:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.9.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffff8315b3a8 code=0x7ffc0000 [ 397.048382][ T27] audit: type=1326 audit(397.020:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.9.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8315b3a8 code=0x7ffc0000 [ 397.054166][ T27] audit: type=1326 audit(397.020:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.9.984" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8315b3a8 code=0x7ffc0000 [ 397.063981][ T9312] loop9: detected capacity change from 0 to 7 [ 397.066481][ T7601] Dev loop9: unable to read RDB block 7 [ 397.067391][ T7601] loop9: unable to read partition table [ 397.068943][ T7601] loop9: partition table beyond EOD, truncated [ 397.074497][ T9312] Dev loop9: unable to read RDB block 7 [ 397.075383][ T9312] loop9: unable to read partition table [ 397.076454][ T9312] loop9: partition table beyond EOD, truncated [ 397.077388][ T9312] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 397.077388][ T9312] ) failed (rc=-5) [ 397.244530][ T9324] xt_l2tp: missing protocol rule (udp|l2tpip) [ 397.970764][ T9350] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 398.042020][ T4322] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 398.043894][ T4322] CPU: 0 PID: 4322 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 398.045104][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 398.046764][ T4322] Workqueue: hci4 hci_rx_work [ 398.047495][ T4322] Call trace: [ 398.048001][ T4322] dump_backtrace+0x1c8/0x1f4 [ 398.048692][ T4322] show_stack+0x2c/0x3c [ 398.049391][ T4322] __dump_stack+0x30/0x40 [ 398.050023][ T4322] dump_stack_lvl+0xf8/0x160 [ 398.050695][ T4322] dump_stack+0x1c/0x5c [ 398.051354][ T4322] sysfs_create_dir_ns+0x22c/0x24c [ 398.052161][ T4322] kobject_add_internal+0x5a8/0xb30 [ 398.053014][ T4322] kobject_add+0x134/0x1f8 [ 398.053741][ T4322] device_add+0x3f0/0xf94 [ 398.054453][ T4322] hci_conn_add_sysfs+0xbc/0x1cc [ 398.055344][ T4322] le_conn_complete_evt+0xcb0/0x1220 [ 398.056259][ T4322] hci_le_conn_complete_evt+0x114/0x3f8 [ 398.057113][ T4322] hci_le_meta_evt+0x2c0/0x4a4 [ 398.057854][ T4322] hci_event_packet+0x6ac/0xf08 [ 398.058684][ T4322] hci_rx_work+0x324/0xaa0 [ 398.059434][ T4322] process_one_work+0x7f4/0x13a8 [ 398.060213][ T4322] worker_thread+0x8c8/0xfbc [ 398.060899][ T4322] kthread+0x250/0x2d8 [ 398.061517][ T4322] ret_from_fork+0x10/0x20 [ 398.063481][ T4322] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 398.066055][ T4322] Bluetooth: hci4: failed to register connection device [ 398.316135][ T9358] loop9: detected capacity change from 0 to 7 [ 398.317746][ T9358] Dev loop9: unable to read RDB block 7 [ 398.319290][ T9358] loop9: unable to read partition table [ 398.322649][ T9358] loop9: partition table beyond EOD, truncated [ 398.337033][ T9358] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 398.337033][ T9358] ) failed (rc=-5) [ 398.570204][ T9371] input: syz1 as /devices/virtual/input/input10 [ 398.844630][ T9379] input: syz0 as /devices/virtual/input/input11 [ 399.056772][ T9386] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 399.765971][ T9403] loop9: detected capacity change from 0 to 7 [ 399.768949][ T7601] Dev loop9: unable to read RDB block 7 [ 399.770012][ T7601] loop9: unable to read partition table [ 399.771101][ T7601] loop9: partition table beyond EOD, truncated [ 399.778177][ T9403] Dev loop9: unable to read RDB block 7 [ 399.780247][ T9403] loop9: unable to read partition table [ 399.781718][ T9403] loop9: partition table beyond EOD, truncated [ 399.782831][ T9403] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 399.782831][ T9403] ) failed (rc=-5) [ 399.915631][ T4322] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 399.939044][ T9411] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 400.023241][ T27] audit: type=1326 audit(400.010:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9675b3a8 code=0x7ffc0000 [ 400.023436][ T27] audit: type=1326 audit(400.010:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=81 compat=0 ip=0xffff9675b3a8 code=0x7ffc0000 [ 400.043698][ T27] audit: type=1326 audit(400.030:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9675b3a8 code=0x7ffc0000 [ 400.045053][ T27] audit: type=1326 audit(400.040:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9675b3a8 code=0x7ffc0000 [ 400.045440][ T27] audit: type=1326 audit(400.040:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.1.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9675b3a8 code=0x7ffc0000 [ 400.207855][ T9418] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 400.209012][ T9418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.211199][ T9418] vhci_hcd vhci_hcd.0: Device attached [ 400.486299][ T4350] usb 6-1: new low-speed USB device number 3 using vhci_hcd [ 400.782875][ T9419] vhci_hcd: connection reset by peer [ 400.783996][ T8577] vhci_hcd: stop threads [ 400.784999][ T8577] vhci_hcd: release socket [ 400.785706][ T8577] vhci_hcd: disconnect device [ 400.961682][ T9450] loop9: detected capacity change from 0 to 7 [ 400.963569][ T7601] Dev loop9: unable to read RDB block 7 [ 400.964603][ T7601] loop9: unable to read partition table [ 400.965562][ T7601] loop9: partition table beyond EOD, truncated [ 401.280040][ T9450] Dev loop9: unable to read RDB block 7 [ 401.281037][ T9450] loop9: unable to read partition table [ 401.282007][ T9450] loop9: partition table beyond EOD, truncated [ 401.282984][ T9450] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 401.282984][ T9450] ) failed (rc=-5) [ 401.285734][ T9457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 401.857122][ T4320] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 402.358058][ T9503] loop9: detected capacity change from 0 to 7 [ 402.360936][ T7601] Dev loop9: unable to read RDB block 7 [ 402.361883][ T7601] loop9: unable to read partition table [ 402.362931][ T7601] loop9: partition table beyond EOD, truncated [ 402.369474][ T9503] Dev loop9: unable to read RDB block 7 [ 402.370364][ T9503] loop9: unable to read partition table [ 402.371322][ T9503] loop9: partition table beyond EOD, truncated [ 402.373057][ T9505] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 402.377209][ T9503] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 402.377209][ T9503] ) failed (rc=-5) [ 402.852021][ T9523] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 402.853057][ T9523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 402.855179][ T9523] vhci_hcd vhci_hcd.0: Device attached [ 403.292622][ T3898] usb 8-1: new low-speed USB device number 3 using vhci_hcd [ 403.365103][ T9524] vhci_hcd: connection reset by peer [ 403.366113][ T9535] vhci_hcd: stop threads [ 403.366791][ T9535] vhci_hcd: release socket [ 403.367592][ T9535] vhci_hcd: disconnect device [ 403.386140][ T9541] loop9: detected capacity change from 0 to 7 [ 403.387877][ T7601] Dev loop9: unable to read RDB block 7 [ 403.388746][ T7601] loop9: unable to read partition table [ 403.389707][ T7601] loop9: partition table beyond EOD, truncated [ 403.401164][ T9541] Dev loop9: unable to read RDB block 7 [ 403.402119][ T9541] loop9: unable to read partition table [ 403.403057][ T9541] loop9: partition table beyond EOD, truncated [ 403.403994][ T9541] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 403.403994][ T9541] ) failed (rc=-5) [ 403.468318][ T4322] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 404.146624][ T9571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 404.502671][ T9579] loop9: detected capacity change from 0 to 7 [ 404.506441][ T7601] Dev loop9: unable to read RDB block 7 [ 404.507379][ T7601] loop9: unable to read partition table [ 404.508594][ T7601] loop9: partition table beyond EOD, truncated [ 404.511705][ T9579] Dev loop9: unable to read RDB block 7 [ 404.514947][ T9579] loop9: unable to read partition table [ 404.518298][ T9579] loop9: partition table beyond EOD, truncated [ 404.528048][ T9579] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 404.528048][ T9579] ) failed (rc=-5) [ 404.766613][ T4320] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 405.088850][ T9604] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 405.090398][ T9604] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.1078'. [ 405.233186][ T9618] loop9: detected capacity change from 0 to 7 [ 405.236014][ T9618] Dev loop9: unable to read RDB block 7 [ 405.237144][ T9618] loop9: unable to read partition table [ 405.238317][ T9618] loop9: partition table beyond EOD, truncated [ 405.239432][ T9618] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 405.239432][ T9618] ) failed (rc=-5) [ 405.634345][ T4350] vhci_hcd: vhci_device speed not set [ 405.695559][ T9639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 406.095230][ T9654] loop9: detected capacity change from 0 to 7 [ 406.097050][ T7601] Dev loop9: unable to read RDB block 7 [ 406.097991][ T7601] loop9: unable to read partition table [ 406.098888][ T7601] loop9: partition table beyond EOD, truncated [ 406.107292][ T9654] Dev loop9: unable to read RDB block 7 [ 406.110303][ T9654] loop9: unable to read partition table [ 406.115208][ T9654] loop9: partition table beyond EOD, truncated [ 406.116265][ T9654] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 406.116265][ T9654] ) failed (rc=-5) [ 406.374368][ T4322] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 406.985997][ T9685] loop7: detected capacity change from 0 to 7 [ 406.987873][ T7601] Dev loop7: unable to read RDB block 7 [ 406.988828][ T7601] loop7: unable to read partition table [ 406.989773][ T7601] loop7: partition table beyond EOD, truncated [ 407.002506][ T9685] Dev loop7: unable to read RDB block 7 [ 407.006847][ T9685] loop7: unable to read partition table [ 407.013843][ T9685] loop7: partition table beyond EOD, truncated [ 407.023251][ T9685] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 407.235372][ T9693] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 407.448743][ T9708] 9pnet_virtio: no channels available for device syz [ 407.599184][ T9715] loop9: detected capacity change from 0 to 7 [ 407.612551][ T9715] Dev loop9: unable to read RDB block 7 [ 407.613518][ T9715] loop9: unable to read partition table [ 407.618656][ T9715] loop9: partition table beyond EOD, truncated [ 407.625287][ T9715] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 407.625287][ T9715] ) failed (rc=-5) [ 407.729426][ T9723] loop7: detected capacity change from 0 to 7 [ 407.732256][ T7601] Dev loop7: unable to read RDB block 7 [ 407.733137][ T7601] loop7: unable to read partition table [ 407.734104][ T7601] loop7: partition table beyond EOD, truncated [ 407.739001][ T9723] Dev loop7: unable to read RDB block 7 [ 407.739943][ T9723] loop7: unable to read partition table [ 407.740889][ T9723] loop7: partition table beyond EOD, truncated [ 407.742097][ T9723] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 407.793996][ T4320] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 408.280530][ T9733] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 408.405069][ T3898] vhci_hcd: vhci_device speed not set [ 408.620472][ T9743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 408.793999][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.807992][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.120965][ T9760] loop9: detected capacity change from 0 to 7 [ 409.123857][ T7601] Dev loop9: unable to read RDB block 7 [ 409.125273][ T7601] loop9: unable to read partition table [ 409.126852][ T7601] loop9: partition table beyond EOD, truncated [ 409.128371][ T9760] Dev loop9: unable to read RDB block 7 [ 409.129578][ T9760] loop9: unable to read partition table [ 409.131211][ T9760] loop9: partition table beyond EOD, truncated [ 409.132559][ T9760] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 409.132559][ T9760] ) failed (rc=-5) [ 409.278040][ T9765] loop7: detected capacity change from 0 to 7 [ 409.279594][ T9765] Dev loop7: unable to read RDB block 7 [ 409.281710][ T9765] loop7: unable to read partition table [ 409.284050][ T9765] loop7: partition table beyond EOD, truncated [ 409.288103][ T9765] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 409.407719][ T4322] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 410.247364][ T9804] 9pnet_virtio: no channels available for device syz [ 410.340555][ T9817] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 410.740460][ T4320] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 410.803488][ T9840] netlink: 'syz.6.1159': attribute type 1 has an invalid length. [ 410.804924][ T9840] netlink: 14436 bytes leftover after parsing attributes in process `syz.6.1159'. [ 410.886871][ T9845] 9pnet_virtio: no channels available for device syz [ 410.929131][ T9849] loop9: detected capacity change from 0 to 7 [ 410.930571][ T9849] Dev loop9: unable to read RDB block 7 [ 410.931467][ T9849] loop9: unable to read partition table [ 410.932398][ T9849] loop9: partition table beyond EOD, truncated [ 410.933440][ T9849] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 410.933440][ T9849] ) failed (rc=-5) [ 411.486853][ T9853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 411.488060][ T9853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.491620][ T9853] vhci_hcd vhci_hcd.0: Device attached [ 411.501332][ T9854] vhci_hcd: connection closed [ 411.501467][ T4455] vhci_hcd: stop threads [ 411.502899][ T4455] vhci_hcd: release socket [ 411.503625][ T4455] vhci_hcd: disconnect device [ 411.603112][ T9862] loop7: detected capacity change from 0 to 7 [ 411.622309][ T9862] Dev loop7: unable to read RDB block 7 [ 411.625706][ T9862] loop7: unable to read partition table [ 411.628116][ T9862] loop7: partition table beyond EOD, truncated [ 411.629739][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 411.635888][ T9862] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 411.902607][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.904147][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.115525][ T9889] loop9: detected capacity change from 0 to 7 [ 412.122484][ T9889] Dev loop9: unable to read RDB block 7 [ 412.123450][ T9889] loop9: unable to read partition table [ 412.126068][ T9889] loop9: partition table beyond EOD, truncated [ 412.131963][ T9889] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 412.131963][ T9889] ) failed (rc=-5) [ 412.136464][ T9890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.294008][ T4322] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 412.296021][ T4322] CPU: 1 PID: 4322 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 412.297175][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 412.298833][ T4322] Workqueue: hci3 hci_rx_work [ 412.299621][ T4322] Call trace: [ 412.300185][ T4322] dump_backtrace+0x1c8/0x1f4 [ 412.300914][ T4322] show_stack+0x2c/0x3c [ 412.301607][ T4322] __dump_stack+0x30/0x40 [ 412.302349][ T4322] dump_stack_lvl+0xf8/0x160 [ 412.303154][ T4322] dump_stack+0x1c/0x5c [ 412.303823][ T4322] sysfs_create_dir_ns+0x22c/0x24c [ 412.304635][ T4322] kobject_add_internal+0x5a8/0xb30 [ 412.305479][ T4322] kobject_add+0x134/0x1f8 [ 412.306177][ T4322] device_add+0x3f0/0xf94 [ 412.306893][ T4322] hci_conn_add_sysfs+0xbc/0x1cc [ 412.307708][ T4322] le_conn_complete_evt+0xcb0/0x1220 [ 412.308572][ T4322] hci_le_conn_complete_evt+0x114/0x3f8 [ 412.309490][ T4322] hci_le_meta_evt+0x2c0/0x4a4 [ 412.310258][ T4322] hci_event_packet+0x6ac/0xf08 [ 412.310950][ T4322] hci_rx_work+0x324/0xaa0 [ 412.311707][ T4322] process_one_work+0x7f4/0x13a8 [ 412.312537][ T4322] worker_thread+0x8c8/0xfbc [ 412.313295][ T4322] kthread+0x250/0x2d8 [ 412.313962][ T4322] ret_from_fork+0x10/0x20 [ 412.315470][ T4322] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 412.317409][ T4322] Bluetooth: hci3: failed to register connection device [ 413.031399][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 413.032828][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 413.066672][ T9907] loop7: detected capacity change from 0 to 7 [ 413.068888][ T7601] Dev loop7: unable to read RDB block 7 [ 413.069780][ T7601] loop7: unable to read partition table [ 413.070930][ T7601] loop7: partition table beyond EOD, truncated [ 413.076710][ T9907] Dev loop7: unable to read RDB block 7 [ 413.078872][ T9907] loop7: unable to read partition table [ 413.080284][ T9907] loop7: partition table beyond EOD, truncated [ 413.081339][ T9907] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 413.171352][ T9915] loop9: detected capacity change from 0 to 7 [ 413.173374][ T7640] Dev loop9: unable to read RDB block 7 [ 413.174928][ T7640] loop9: unable to read partition table [ 413.176018][ T7640] loop9: partition table beyond EOD, truncated [ 413.183263][ T9915] Dev loop9: unable to read RDB block 7 [ 413.184194][ T9915] loop9: unable to read partition table [ 413.185380][ T9915] loop9: partition table beyond EOD, truncated [ 413.186369][ T9915] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 413.186369][ T9915] ) failed (rc=-5) [ 413.282184][ T4322] Bluetooth: Wrong link type (-22) [ 413.431562][ T9937] netlink: 'syz.3.1194': attribute type 7 has an invalid length. [ 413.440554][ T9937] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.442209][ T9937] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.443551][ T9937] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.445064][ T9937] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.448184][ T9940] loop9: detected capacity change from 0 to 7 [ 413.449365][ T9941] loop7: detected capacity change from 0 to 7 [ 413.450870][ T9941] Dev loop7: unable to read RDB block 7 [ 413.452222][ T9941] loop7: unable to read partition table [ 413.453139][ T9941] loop7: partition table beyond EOD, truncated [ 413.453366][ T9940] Dev loop9: unable to read RDB block 7 [ 413.455687][ T9940] loop9: unable to read partition table [ 413.455945][ T9941] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 413.460193][ T9942] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 413.462119][ T9940] loop9: partition table beyond EOD, truncated [ 413.463205][ T9940] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 413.463205][ T9940] ) failed (rc=-5) [ 413.513938][ T4322] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 413.661343][ T9960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1203'. [ 415.005978][T10001] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 415.176637][T10008] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 415.177720][T10008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.182491][T10008] vhci_hcd vhci_hcd.0: Device attached [ 415.454354][ T8006] usb 8-1: new low-speed USB device number 4 using vhci_hcd [ 415.653754][T10021] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1223'. [ 415.896754][T10021] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1223'. [ 415.936348][T10009] vhci_hcd: connection reset by peer [ 415.938247][ T4419] vhci_hcd: stop threads [ 415.939957][ T4419] vhci_hcd: release socket [ 415.940782][ T4419] vhci_hcd: disconnect device [ 416.027638][T10021] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1223'. [ 416.378137][T10020] Process accounting resumed [ 416.531315][T10052] loop7: detected capacity change from 0 to 7 [ 416.541003][ T7601] Dev loop7: unable to read RDB block 7 [ 416.542064][ T7601] loop7: unable to read partition table [ 416.543198][ T7601] loop7: partition table beyond EOD, truncated [ 416.548723][T10052] Dev loop7: unable to read RDB block 7 [ 416.550858][T10052] loop7: unable to read partition table [ 416.551950][T10052] loop7: partition table beyond EOD, truncated [ 416.556194][T10052] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 416.710093][T10066] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 417.198346][T10073] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 417.546641][T10083] binder: 10080:10083 tried to acquire reference to desc 0, got 1 instead [ 417.555667][T10083] binder: 10080:10083 got reply transaction with bad transaction stack, transaction 5 has target 10080:0 [ 417.557529][T10083] binder: 10080:10083 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2970 [ 417.564878][ T4580] binder: release 10080:10083 transaction 5 out, still active [ 417.566261][ T4580] binder: undelivered TRANSACTION_ERROR: 29201 [ 417.584533][ T4580] binder: send failed reply for transaction 5, target dead [ 417.747193][T10094] loop7: detected capacity change from 0 to 7 [ 417.765288][ T7601] Dev loop7: unable to read RDB block 7 [ 417.766332][ T7601] loop7: unable to read partition table [ 417.767269][ T7601] loop7: partition table beyond EOD, truncated [ 417.770123][T10094] Dev loop7: unable to read RDB block 7 [ 417.771071][T10094] loop7: unable to read partition table [ 417.772104][T10094] loop7: partition table beyond EOD, truncated [ 417.773084][T10094] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 418.446211][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 418.448161][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 418.451673][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 418.452986][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 418.536541][T10109] ceph: No mds server is up or the cluster is laggy [ 418.811424][T10120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.282684][T10129] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1254'. [ 419.289532][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 419.295672][T10129] IPv6: sit1: Disabled Multicast RS [ 419.834452][ T4320] Bluetooth: hci4: command 0x0406 tx timeout [ 420.564432][ T8006] vhci_hcd: vhci_device speed not set [ 420.573626][T10162] autofs4:pid:10162:autofs_fill_super: called with bogus options [ 420.715483][T10165] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 421.602487][T10191] netlink: 'syz.9.1273': attribute type 9 has an invalid length. [ 421.614050][T10191] netlink: 'syz.9.1273': attribute type 6 has an invalid length. [ 421.618422][T10191] netlink: 'syz.9.1273': attribute type 7 has an invalid length. [ 421.619609][T10191] netlink: 'syz.9.1273': attribute type 8 has an invalid length. [ 421.622655][T10194] autofs4:pid:10194:autofs_fill_super: called with bogus options [ 422.522424][T10221] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 422.674147][T10229] autofs4:pid:10229:autofs_fill_super: called with bogus options [ 422.848189][T10237] random: crng reseeded on system resumption [ 423.422679][T10260] autofs4:pid:10260:autofs_fill_super: called with bogus options [ 423.972958][T10268] netlink: 'syz.1.1297': attribute type 9 has an invalid length. [ 423.974801][T10268] netlink: 'syz.1.1297': attribute type 6 has an invalid length. [ 423.976862][T10268] netlink: 'syz.1.1297': attribute type 7 has an invalid length. [ 423.978133][T10268] netlink: 'syz.1.1297': attribute type 8 has an invalid length. [ 424.085291][T10274] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 424.137603][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 424.137613][ T27] audit: type=1326 audit(424.130:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.143132][ T27] audit: type=1326 audit(424.130:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.154516][ T27] audit: type=1326 audit(424.140:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=81 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.169892][ T27] audit: type=1326 audit(424.160:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.178314][ T27] audit: type=1326 audit(424.160:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.198492][ T27] audit: type=1326 audit(424.170:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.201859][ T27] audit: type=1326 audit(424.170:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.217574][ T27] audit: type=1326 audit(424.170:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.221138][ T27] audit: type=1326 audit(424.170:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.250306][ T27] audit: type=1326 audit(424.170:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f5b3a8 code=0x7ffc0000 [ 424.423597][T10290] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 424.593928][T10296] autofs4:pid:10296:autofs_fill_super: called with bogus options [ 424.627669][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 424.886792][T10298] device hsr_slave_1 left promiscuous mode [ 425.575954][T10323] netlink: 'syz.2.1321': attribute type 16 has an invalid length. [ 425.577622][T10323] netlink: 'syz.2.1321': attribute type 17 has an invalid length. [ 425.586911][T10323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.588338][T10323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.599412][T10326] autofs4:pid:10326:autofs_fill_super: called with bogus options [ 425.614402][T10323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.824131][T10346] autofs4:pid:10346:autofs_fill_super: called with bogus options [ 425.827689][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 426.053328][T10359] Injecting memory failure for pfn 0x14061c at process virtual address 0x20000000 [ 426.057797][T10359] Memory failure: 0x14061c: recovery action for dirty LRU page: Recovered [ 426.059714][T10359] Injecting memory failure for pfn 0x2112a1 at process virtual address 0x20001000 [ 426.061353][T10359] Memory failure: 0x2112a1: recovery action for reserved kernel page: Ignored [ 427.028352][T10381] autofs4:pid:10381:autofs_fill_super: called with bogus options [ 427.030177][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 428.397316][ T7315] bond0: (slave syz_tun): Releasing backup interface [ 428.714923][ T4320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.729555][ T4320] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.812897][ T4320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.816892][ T4320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.818345][ T4320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.819923][ T4320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.119577][T10427] chnl_net:caif_netlink_parms(): no params data found [ 429.165940][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.168363][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.171753][T10427] device bridge_slave_0 entered promiscuous mode [ 429.177231][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.179565][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.182998][T10427] device bridge_slave_1 entered promiscuous mode [ 429.203315][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.209659][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.223075][T10427] team0: Port device team_slave_0 added [ 429.225607][T10427] team0: Port device team_slave_1 added [ 429.232690][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.233927][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.238289][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.241476][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.242698][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.246731][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.295692][T10427] device hsr_slave_0 entered promiscuous mode [ 429.364703][T10427] device hsr_slave_1 entered promiscuous mode [ 429.404495][T10427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.700574][T10427] Cannot create hsr debugfs directory [ 430.206538][T10495] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 430.337449][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 430.337459][ T27] audit: type=1326 audit(430.330:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 430.690027][ T27] audit: type=1326 audit(430.330:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 430.690857][ T27] audit: type=1326 audit(430.680:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=81 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 430.729789][ T27] audit: type=1326 audit(430.720:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 430.734489][ T27] audit: type=1326 audit(430.720:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab5b3a8 code=0x7ffc0000 [ 430.887044][ T4320] Bluetooth: hci4: command 0x0409 tx timeout [ 431.373415][T10427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.407161][T10427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.467134][T10427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.504496][T10528] device wireguard0 entered promiscuous mode [ 431.643160][T10427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.783534][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.815273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.816934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.820098][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.823480][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.826005][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.827427][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.828539][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.833267][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.838377][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.840222][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.841751][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.842890][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.849410][ T6149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.862361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.881035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.883915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.886319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.889628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.893734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.901726][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.903344][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.975193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.977093][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.982025][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.386075][ T4320] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 432.387621][ T4320] CPU: 0 PID: 4320 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 432.388667][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 432.390097][ T4320] Workqueue: hci3 hci_rx_work [ 432.390839][ T4320] Call trace: [ 432.391307][ T4320] dump_backtrace+0x1c8/0x1f4 [ 432.391978][ T4320] show_stack+0x2c/0x3c [ 432.392638][ T4320] __dump_stack+0x30/0x40 [ 432.393339][ T4320] dump_stack_lvl+0xf8/0x160 [ 432.394062][ T4320] dump_stack+0x1c/0x5c [ 432.394787][ T4320] sysfs_create_dir_ns+0x22c/0x24c [ 432.395616][ T4320] kobject_add_internal+0x5a8/0xb30 [ 432.396416][ T4320] kobject_add+0x134/0x1f8 [ 432.397083][ T4320] device_add+0x3f0/0xf94 [ 432.397726][ T4320] hci_conn_add_sysfs+0xbc/0x1cc [ 432.398532][ T4320] le_conn_complete_evt+0xcb0/0x1220 [ 432.399391][ T4320] hci_le_conn_complete_evt+0x114/0x3f8 [ 432.400254][ T4320] hci_le_meta_evt+0x2c0/0x4a4 [ 432.401008][ T4320] hci_event_packet+0x6ac/0xf08 [ 432.401805][ T4320] hci_rx_work+0x324/0xaa0 [ 432.402557][ T4320] process_one_work+0x7f4/0x13a8 [ 432.403386][ T4320] worker_thread+0x8c8/0xfbc [ 432.404170][ T4320] kthread+0x250/0x2d8 [ 432.404817][ T4320] ret_from_fork+0x10/0x20 [ 432.407007][ T4320] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 432.408989][ T4320] Bluetooth: hci3: failed to register connection device [ 432.848441][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.850133][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.862540][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.875043][ T4579] Unable to handle kernel paging request at virtual address dfff800000000026 [ 432.876466][ T4579] KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137] [ 432.877930][ T4579] Mem abort info: [ 432.878521][ T4579] ESR = 0x0000000096000006 [ 432.879299][ T4579] EC = 0x25: DABT (current EL), IL = 32 bits [ 432.880259][ T4579] SET = 0, FnV = 0 [ 432.880860][ T4579] EA = 0, S1PTW = 0 [ 432.881412][ T4579] FSC = 0x06: level 2 translation fault [ 432.882271][ T4579] Data abort info: [ 432.882813][ T4579] ISV = 0, ISS = 0x00000006 [ 432.883522][ T4579] CM = 0, WnR = 0 [ 432.884143][ T4579] [dfff800000000026] address between user and kernel address ranges [ 432.885341][ T4579] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 432.886507][ T4579] Modules linked in: [ 432.887153][ T4579] CPU: 0 PID: 4579 Comm: kworker/0:17 Not tainted syzkaller #0 [ 432.888292][ T4579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 432.890006][ T4579] Workqueue: events l2cap_info_timeout [ 432.890885][ T4579] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 432.892134][ T4579] pc : __lock_acquire+0xe0/0x6544 [ 432.892954][ T4579] lr : lock_acquire+0x20c/0x644 [ 432.893712][ T4579] sp : ffff800020d975e0 [ 432.894334][ T4579] x29: ffff800020d977f0 x28: dfff800000000000 x27: 0000000000000000 [ 432.895522][ T4579] x26: ffff800010c13358 x25: 1ffff00002a180b0 x24: 0000000000000000 [ 432.896822][ T4579] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000 [ 432.898101][ T4579] x20: 0000000000000130 x19: 0000000000000000 x18: 0000000000000000 [ 432.899459][ T4579] x17: ffff8000181f8000 x16: ffff8000082d22e0 x15: ffff800017cd8fc0 [ 432.900889][ T4579] x14: ffff0000d90bddd8 x13: ffff0000d90bde78 x12: 0000000000ff0100 [ 432.902257][ T4579] x11: ff0080000a8931b4 x10: ffff7000041b2edc x9 : ffff8000150c0584 [ 432.903463][ T4579] x8 : 0000000000000026 x7 : ffff800010c13358 x6 : 0000000000000000 [ 432.904703][ T4579] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 432.905926][ T4579] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000130 [ 432.907083][ T4579] Call trace: [ 432.907523][ T4579] __lock_acquire+0xe0/0x6544 [ 432.908244][ T4579] lock_acquire+0x20c/0x644 [ 432.908965][ T4579] lock_sock_nested+0x70/0x130 [ 432.909729][ T4579] l2cap_sock_ready_cb+0x4c/0x130 [ 432.910519][ T4579] l2cap_conn_start+0x594/0xb38 [ 432.911286][ T4579] l2cap_info_timeout+0x68/0xb8 [ 432.912071][ T4579] process_one_work+0x7f4/0x13a8 [ 432.912757][ T4579] worker_thread+0x8c8/0xfbc [ 432.913479][ T4579] kthread+0x250/0x2d8 [ 432.914121][ T4579] ret_from_fork+0x10/0x20 [ 432.914927][ T4579] Code: b0067488 b9472108 340001c8 d343fe88 (387c6908) [ 432.916020][ T4579] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.136498][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.137567][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.233936][ T4579] Kernel panic - not syncing: Oops: Fatal exception [ 433.235105][ T4579] SMP: stopping secondary CPUs [ 433.235873][ T4579] Kernel Offset: disabled [ 433.236581][ T4579] CPU features: 0x080000,000f0097,a65bfea7 [ 433.237607][ T4579] Memory Limit: none [ 433.535205][ T4579] Rebooting in 86400 seconds..