last executing test programs: 7m44.679080849s ago: executing program 4 (id=599): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040080}, 0x800) 7m44.41829157s ago: executing program 4 (id=600): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x0, @fd_index=0xa, 0x4, 0x0, 0x0, 0x1, 0x1, {0x1, 0x0, 0x1, '\x00', 0x0, 0x8000000000000001}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 7m44.097795251s ago: executing program 4 (id=602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000000)="e1", 0x1, 0x20000000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)="5c9e8f57cc9a", 0x6}], 0x1}}], 0x1, 0x0) 7m43.858807009s ago: executing program 4 (id=604): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@abort}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(0x0, &(0x7f0000000500)='./file1\x00', 0x0, 0x1000840, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 7m42.972733679s ago: executing program 4 (id=611): r0 = io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x4000, 0x80, 0x0, 0x2a8}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 7m41.7691272s ago: executing program 4 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 7m41.311533893s ago: executing program 32 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x49d8, 0x1, 0x5, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 7m27.528627618s ago: executing program 0 (id=724): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 7m27.305200344s ago: executing program 0 (id=725): ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0}, 0x18) 7m27.123339002s ago: executing program 0 (id=726): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xca, r0, 0x700}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 7m26.888860879s ago: executing program 0 (id=728): r0 = epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0xffffffb8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 7m25.918022823s ago: executing program 0 (id=731): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xa1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 7m23.949198785s ago: executing program 0 (id=747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) 7m23.492357778s ago: executing program 33 (id=747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) 7m13.579076569s ago: executing program 6 (id=748): socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x2, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 7m13.331506719s ago: executing program 6 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffff, 0x78416278, 0x4, 0x4, 0x100, 0xa15, 0x0, 0x0, 0x40, 0x2}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb22f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3be, 0x100080, {0x400000006, 0x6, 0x4000000000040000, 0xfe2b25d, 0x2, 0x0, 0x3, 0x4, 0x0, 0x4000, 0xfffffffc, 0x0, 0x0, 0xfffffff9, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m12.996206122s ago: executing program 6 (id=831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000580)='z', 0x1, 0xd15e1afcd63ff7a1, 0x0, 0x0) 7m12.63413607s ago: executing program 6 (id=834): syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xdf, 0x2a0, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000980)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7m12.236250733s ago: executing program 6 (id=837): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffe38]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 7m11.545218482s ago: executing program 6 (id=840): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x42) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) 7m11.098127673s ago: executing program 34 (id=840): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x42) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r1], 0x2b) sendfile(r3, r1, 0x0, 0x4000000053d2) 2m44.454947767s ago: executing program 5 (id=2735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 2m44.237223492s ago: executing program 5 (id=2737): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 2m44.085766986s ago: executing program 5 (id=2739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2m43.724548143s ago: executing program 5 (id=2741): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffdb1, 0x0}, 0x0) 2m43.229313561s ago: executing program 5 (id=2745): socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2m42.885130436s ago: executing program 5 (id=2748): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) 2m27.853136419s ago: executing program 35 (id=2748): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n\x00', 0x2) 36.288831037s ago: executing program 8 (id=3464): socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 36.064903292s ago: executing program 8 (id=3467): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002480), &(0x7f0000002500)=0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 35.981030616s ago: executing program 8 (id=3471): fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) r1 = syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001900010000000000000000000a0000000000000a0000000c140005"], 0x30}}, 0x0) 35.695755661s ago: executing program 8 (id=3474): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x1, 0x6af, &(0x7f0000003180)="$eJzs3ctrHPcdAPDvjFYrrQuOktiJWwIVMaSlorYeyK16idtD0SGU4B5CSy+LvY6F10qQlCKb0qrvaw/5A9KDDoWcCr0b0tJTm1uuOpVAoZecdFOZ2ZndlVa71trSru18PjA7v5nfc77z2J0RYgL40lqdi8rDSGJ17q3tbHlvd6m5t7s0VWQ3IyJLpxGV1iyS9Yjkk4jr0Zriq9nKonzSr58P11ZufPbF3uetpUox5eXTQfVOZqeYYjYiJop5r8nHau9m3/YGq7dTSXsLs4BdLgMH43bQY2eY6k943gJPg6T1vdljJuJcREwXvwOiuDqkox3d6RvqKgcAAADPqBf2Yz+24/y4xwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPkuL9/0kxpWV6NpLy/f+VYl2mGhE30jGPeXhJO/VwrOMAAAAAAAAAgNPx9f3Yj+04Xy4ftP40Xsk/L+SfX4kPYjMasRFXYjvqsRVbsRELETHT1VB1u761tbEQrz+y5uKxNRdHsbUAAAAAAAAA8Nz6Tax2/v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPgyRiojXLpwtleibSSkRMR0Q1K7cT8WmZfkYkZaLWtfLheMYCAAAAj236uJWf/mNgnRf2Yz+243y5fJDk9/yv5PfL0/FBrMdWrMVWNKMRt4p76OyuP93bXWru7S7d29tdyjv+2UFLq53v/2+ooectRuvZw/E9X8pL1OJ2rOVrrsTNfDC3Is1rZi4V42lPhzv5dTam2puFE47sVjHPOvtT91OE05YOW2EmrzTZjsh8MbasoRcHR+KRe6cysKeFSNtPfi4M6KncpGTImJ8r60XEH47E/M3//OUnJ2zmDLQjkUYeicWuo++VdhSmjq/8jb99/M6d5vrdO7c3587sMBqVo8fEUlckXh189D3lkagMWX6+faS3NmU1fhg/jrmYjbdjI9bi55EdD40oroxRL8plnzNdUYroidT1Q0tvP2ok1WK/tK6iaVxs5/SOqR5b0YjZmMpT9Xg9r3s+1iKJ9+JWNOJaXGufesuxHCtde/hi3z2cV8ivtOlwZ/3lb3ZCGH888ph2oH+etODwWl+pWVxf7Ipr9zV3Js/rXtOJ0ksn+D4a8tpY+VqRyPr4bT7/6VPyEP5oJBa6IvHy4Ej8OT83Npvrdzfu1N/v0/7OkeU3Jjvp35/lN/PQsh3yUkwXV5LDR0eW93L7KnM4XtXiLy6tvLQn72KelyTlmfqjrjP1WizGQnynOFOrxW+43pYW87xXe/MmypFf6so79Hsr3vvXeOIJwJDOfetctfbf2r9rH9V+V7tTe2v6B1PfnXqtGpN/n/xeZX7ijfS15K/xUfyyc/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vs37D+7Wm83GxvGJtH/W6SaS4kU+/cpUohan1VfxwsJfdWVNxllv4P0H1d5N3jn1vmJE++vJEuWbq560nXeuj2DMExGjjGrMHHcWTJ1SxHoT2eaVayaik1V0eOzLRYHnwdWte+9f3bz/4Ntr9+rvNt5trE8uL6/MryxfW7p6e63ZmG99jnuUwFno/B7oV+Lj0Q4IAAAAAAAAAAAAeKRR/FdDV3ezY9xUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bm1OheVyUhiYf7KfLa8t7vUzKYy3SlZiYg0jUh+EZF8EnE9WlPMdDWX9Ovnw7WVG599sfd5p61KWT4dVK9UHZi7U0wxGxETxXxgGwcHJ27vZr/2Tixpb2EWsMtl4GDc/h8AAP//ZlAA0Q==") write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 35.229553825s ago: executing program 8 (id=3475): pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40), 0x1, 0xeb0, &(0x7f0000000f80)="$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") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000003c0)=@chain={'key_or_keyring:', r3}) mount$9p_fd(0x0, &(0x7f0000001500)='.\x00', &(0x7f0000000000), 0x1000052, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 34.941208761s ago: executing program 8 (id=3478): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) 34.56720744s ago: executing program 36 (id=3478): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) 12.409986673s ago: executing program 1 (id=3586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 11.221003161s ago: executing program 1 (id=3590): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x731e, 0x100, 0x0, 0x232}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 9.540336388s ago: executing program 1 (id=3598): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='port=2049,addr=127.0.0.1,clientaddr=127.0.0.1,timeo=1,retrans=1\x00') r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(r2, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r3 = gettid() tkill(r3, 0x13) 9.250452923s ago: executing program 1 (id=3602): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x2000006, 0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) 9.030874938s ago: executing program 1 (id=3605): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000002300)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x350}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 7.617291193s ago: executing program 1 (id=3608): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000060)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000070)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='2\n', 0x2) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,noresvport']) 6.862709392s ago: executing program 7 (id=3612): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89", 0x1) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x101}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 5.509279137s ago: executing program 3 (id=3614): openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0x19}, @l2cap_cid_signaling={{0x15}, [@l2cap_create_chan_rsp={{0xd, 0x1c, 0x8}, {0x4, 0xd321, 0x93, 0x5}}, @l2cap_create_chan_req={{0xc, 0x41, 0x5}, {0x1, 0x1d2d, 0x4}}]}}, 0x1e) syz_emit_vhci(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4}, "22fc6115"}, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 5.368132659s ago: executing program 7 (id=3616): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) 4.839530703s ago: executing program 3 (id=3620): unshare(0x26020480) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x40, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ntfs\x00', 0x0, &(0x7f0000000140)='lo\x00') landlock_create_ruleset(&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x1c}, 0x30, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4.41704148s ago: executing program 9 (id=3623): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x2e8}}], 0x2, 0x0) 4.406527392s ago: executing program 3 (id=3624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 4.198305234s ago: executing program 9 (id=3626): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.694092275s ago: executing program 7 (id=3628): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x2, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{}, 0x1}}}, 0x7) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0xfffffffffffffffe, 0x0, 0x5}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) 3.235593527s ago: executing program 3 (id=3629): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, "1e00", "799298c9493f4cbdfb5868d41337f3a2", "8df6c736", "ae7ebf0500e38175"}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) 3.102224848s ago: executing program 2 (id=3630): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.989591856s ago: executing program 2 (id=3631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 2.657309759s ago: executing program 9 (id=3632): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 2.387001092s ago: executing program 2 (id=3633): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000048c0)=[{&(0x7f00000021c0)="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", 0xe41}, {&(0x7f0000003280)='/', 0x1}], 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) 1.626443572s ago: executing program 9 (id=3634): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@private2, r3}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.617082624s ago: executing program 7 (id=3635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.290971026s ago: executing program 2 (id=3636): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x2e8}}], 0x2, 0x0) 1.244216583s ago: executing program 9 (id=3637): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) 1.110790764s ago: executing program 2 (id=3638): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000010c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 1.052909233s ago: executing program 7 (id=3639): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x800000, 0x0) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000180), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x1000001, 0x12, r1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt(r0, 0x28, 0x0, 0x0, 0x0) 810.704401ms ago: executing program 2 (id=3640): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x100000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) 283.488516ms ago: executing program 3 (id=3641): syz_open_dev$usbfs(&(0x7f0000000500), 0xc, 0x4001) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) 153.430866ms ago: executing program 7 (id=3642): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) socket(0x23, 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x2b, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfb, {0xa, 0x17, 0x0, 0xff, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x94a, 0x20008001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x8001, 0xd) 107.782993ms ago: executing program 9 (id=3643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x1007}]}) timer_create(0x2, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000540)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\xc1j\xb3!\x0fZ\t\xf6\f\xdc\x94\x90\x8bp\x10\xec\xc0t\x8a\xba\xc6\xfb\xd2\f\xef&\x01\xa8I\xd2\x1b\xb0)\x81\x1c\x8a\f\xa4D\xe3l\x0e\\\x15Hd~\\\x11\x95\xf8\xe6\xff\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQq\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8cse\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\xfb\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2C\r\xa2\x87\x1c\x04\x00\x00\x00\x00\x00\x00\x00\xd4C]\xc7{t\xf9\xd5`IZ \xfe\xd9\x86\xe12N\x1f\xd8{x\xe0\xbd\b\x10 \xda\x8a\xf0\xafN*j\xa9b\xe4\xb2\x99n\x85\x91\xb9\x19\xccL\xbbM\xbc\xca\xca\x99a[\xceWS\xaf2\xf8\xbd\xcc\xdf\x98\xae\x93\x04Y\xba\x9bY\xbf\x81{=\x02|6\x1f?F#aP\x87s\xd8\x00\xbfG\xb4\x9d\xf1L\x82O\xe3\xff\xd4\xaav.\x81\xaa\xa6J\x98\x87[Z\x1e\x9ff\n\xf79\xbc\xf0\x05\x12i\x9a!\x89\xc8&\xf5\xc6\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3644): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x2f, 0x1, @tid=r0}, &(0x7f0000000200)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_gettime(r1, &(0x7f0000000240)) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x109480) ioctl$EVIOCGVERSION(r3, 0x8004453f, 0x0) mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004050) kernel console output (not intermixed with test programs): `syz.5.1603'. [ 304.504120][ T9799] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 304.680532][ T9812] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 304.784999][ T9816] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.833487][ T9816] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.842622][ T9816] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.851915][ T9816] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.874571][ T9816] bond4: (slave geneve2): making interface the new active one [ 304.902803][ T9816] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 306.152746][ T9851] loop5: detected capacity change from 0 to 512 [ 306.242162][ T9851] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1622: Unrecognised inode hash code 255 [ 306.272599][ T9851] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1622: Corrupt directory, running e2fsck is recommended [ 306.323963][ T9851] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 306.332586][ T9851] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1622: corrupted in-inode xattr [ 306.347042][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.360873][ T9855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.401628][ T9851] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1622: couldn't read orphan inode 15 (err -117) [ 306.453770][ T9851] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 306.487851][ T9851] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1622: Unrecognised inode hash code 255 [ 306.510867][ T9851] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1622: Corrupt directory, running e2fsck is recommended [ 306.535852][ T9851] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1622: Unrecognised inode hash code 255 [ 306.566644][ T9851] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1622: Corrupt directory, running e2fsck is recommended [ 306.596516][ T9864] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1622: Unrecognised inode hash code 255 [ 306.638419][ T9864] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1622: Corrupt directory, running e2fsck is recommended [ 306.652463][ T9851] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1622: Unrecognised inode hash code 255 [ 306.701009][ T9851] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1622: Corrupt directory, running e2fsck is recommended [ 306.751874][ T9864] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.1622: Unrecognised inode hash code 255 [ 306.779502][ T9864] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1622: Corrupt directory, running e2fsck is recommended [ 306.869017][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 307.136584][ T9880] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 307.198619][ T9880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.325036][ T9882] bond6: (slave gretap2): making interface the new active one [ 307.396543][ T9882] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 307.435148][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 308.028276][ T9900] loop5: detected capacity change from 0 to 128 [ 308.085727][ T9900] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 308.299851][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.320116][ T9900] FAT-fs (loop5): Filesystem has been set read-only [ 308.353344][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.368695][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.402143][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.422754][ T9900] syz.5.1633: attempt to access beyond end of device [ 308.422754][ T9900] loop5: rw=0, sector=161, nr_sectors = 1 limit=128 [ 308.468933][ T9900] Buffer I/O error on dev loop5, logical block 161, async page read [ 308.504128][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.540649][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.572445][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.612835][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.644034][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.670269][ T9900] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 308.701763][ T9900] syz.5.1633: attempt to access beyond end of device [ 308.701763][ T9900] loop5: rw=0, sector=161, nr_sectors = 1 limit=128 [ 308.741553][ T9900] Buffer I/O error on dev loop5, logical block 161, async page read [ 308.781525][ T27] kauditd_printk_skb: 616 callbacks suppressed [ 308.781543][ T27] audit: type=1800 audit(2000000573.194:1001): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1633" name="file2" dev="loop5" ino=1048616 res=0 errno=0 [ 308.840225][ T9900] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 308.993810][ T9900] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 311.973160][ T4322] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 312.163340][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 312.172837][ T4322] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 312.203243][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.228328][ T4322] usb 6-1: Product: syz [ 312.236308][ T4322] usb 6-1: Manufacturer: syz [ 312.253269][ T4322] usb 6-1: SerialNumber: syz [ 312.273730][ T4322] usb 6-1: config 0 descriptor?? [ 312.524686][ T4322] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 312.728017][ T4322] usb 6-1: USB disconnect, device number 4 [ 316.160457][ T9998] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 316.379524][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 316.502985][T10041] device bond7 entered promiscuous mode [ 316.533730][T10041] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.705207][T10041] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.769989][T10041] bond7: (slave sit2): The slave device specified does not support setting the MAC address [ 316.831269][T10041] bond7: (slave sit2): Error -95 calling set_mac_address [ 317.556393][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.562801][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.300931][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 321.486741][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 321.542984][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 322.068693][T10263] futex_wake_op: syz.3.1736 tries to shift op by 32; fix this program [ 322.683335][ T4323] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 322.917645][T10271] device hsr_slave_0 left promiscuous mode [ 322.934898][T10271] device hsr_slave_1 left promiscuous mode [ 323.100068][T10291] device bond0 entered promiscuous mode [ 323.142200][T10291] device gretap0 entered promiscuous mode [ 323.170319][T10291] device dummy0 entered promiscuous mode [ 323.187723][T10291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.203358][T10291] Cannot create hsr debugfs directory [ 323.216704][T10293] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1739'. [ 323.316056][T10293] device dummy0 left promiscuous mode [ 323.409705][ T4323] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.439852][ T4323] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 323.467935][ T4323] usb 6-1: can't read configurations, error -71 [ 324.753466][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 332.370516][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 332.824536][T10527] overlayfs: failed to clone upperpath [ 333.146933][T10531] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.156886][T10531] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.166365][T10531] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.175328][T10531] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.857415][T10542] loop1: detected capacity change from 0 to 32768 [ 333.973905][T10542] XFS (loop1): Mounting V5 Filesystem [ 334.138256][T10542] XFS (loop1): Ending clean mount [ 334.777562][ T4271] XFS (loop1): Unmounting Filesystem [ 335.097937][T10574] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.107105][T10574] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.116283][T10574] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.125327][T10574] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.559029][T10582] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.1832'. [ 335.607986][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1832'. [ 335.847280][T10592] netlink: 'syz.5.1838': attribute type 4 has an invalid length. [ 335.896123][T10592] netlink: 'syz.5.1838': attribute type 4 has an invalid length. [ 337.767454][T10639] netlink: 'syz.2.1864': attribute type 3 has an invalid length. [ 340.148097][T10666] tipc: Enabling of bearer rejected, already enabled [ 341.756816][T10687] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1870'. [ 343.508245][T10737] loop1: detected capacity change from 0 to 512 [ 343.703981][T10737] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1885: Unrecognised inode hash code 255 [ 343.716635][T10737] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1885: Corrupt directory, running e2fsck is recommended [ 343.742769][T10737] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 343.752464][T10737] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1885: corrupted in-inode xattr [ 343.771380][T10737] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1885: couldn't read orphan inode 15 (err -117) [ 343.793858][T10737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 343.819509][T10737] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1885: Unrecognised inode hash code 255 [ 343.873596][T10737] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1885: Corrupt directory, running e2fsck is recommended [ 344.085756][T10753] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1885: Unrecognised inode hash code 255 [ 344.086461][T10751] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1885: Unrecognised inode hash code 255 [ 344.153313][T10737] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1885: Unrecognised inode hash code 255 [ 344.202077][T10737] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1885: Corrupt directory, running e2fsck is recommended [ 344.252689][T10753] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1885: Corrupt directory, running e2fsck is recommended [ 344.409115][T10751] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1885: Corrupt directory, running e2fsck is recommended [ 344.595615][T10756] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1885: Unrecognised inode hash code 255 [ 344.633800][T10756] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1885: Corrupt directory, running e2fsck is recommended [ 345.234092][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 347.026047][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'. [ 347.054790][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'. [ 347.086495][T10842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'. [ 347.669027][T10865] loop5: detected capacity change from 0 to 1024 [ 347.681710][T10865] hfsplus: unable to parse mount options [ 348.467764][ T27] audit: type=1326 audit(2000000612.884:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 348.569760][ T27] audit: type=1326 audit(2000000612.934:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 348.689152][ T27] audit: type=1326 audit(2000000612.934:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 348.796150][ T27] audit: type=1326 audit(2000000612.934:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 348.980403][ T27] audit: type=1326 audit(2000000612.934:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 349.116976][ T27] audit: type=1326 audit(2000000612.934:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 349.266567][ T27] audit: type=1326 audit(2000000612.934:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 349.401815][ T27] audit: type=1326 audit(2000000612.934:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 349.557974][ T27] audit: type=1326 audit(2000000612.934:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 349.654334][ T27] audit: type=1326 audit(2000000612.934:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.1.1919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4df879e159 code=0x7ffc0000 [ 353.102793][T10971] loop1: detected capacity change from 0 to 1024 [ 353.144255][T10971] EXT4-fs: Ignoring removed orlov option [ 353.349374][T10971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 353.613790][T10985] overlayfs: failed to clone upperpath [ 355.410334][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 356.069053][T11036] loop5: detected capacity change from 0 to 1024 [ 356.100737][T11036] ext4: Unknown parameter 'hash' [ 358.986269][T11118] device hsr_slave_0 left promiscuous mode [ 359.012176][T11118] device hsr_slave_1 left promiscuous mode [ 359.416057][T11120] device bond0 entered promiscuous mode [ 359.465038][T11120] device gretap0 entered promiscuous mode [ 359.551143][T11120] device dummy0 entered promiscuous mode [ 359.599048][T11120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.645569][T11120] Cannot create hsr debugfs directory [ 359.730300][T11124] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1976'. [ 359.911399][T11124] device dummy0 left promiscuous mode [ 361.259902][ T3599] kernel read not supported for file [userfaultfd] (pid: 3599 comm: kworker/1:3) [ 361.447139][T11174] futex_wake_op: syz.1.1992 tries to shift op by 32; fix this program [ 361.505134][T11174] loop1: detected capacity change from 0 to 512 [ 361.528627][T11174] ext4: Unknown parameter 'fsuuid' [ 361.789739][T11168] tipc: Enabling of bearer rejected, failed to enable media [ 363.014636][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1997'. [ 363.401903][T11208] loop5: detected capacity change from 0 to 256 [ 363.521066][T11208] FAT-fs (loop5): Directory bread(block 64) failed [ 363.540623][T11208] FAT-fs (loop5): Directory bread(block 65) failed [ 363.583638][T11208] FAT-fs (loop5): Directory bread(block 66) failed [ 363.590346][T11208] FAT-fs (loop5): Directory bread(block 67) failed [ 363.625004][T11208] FAT-fs (loop5): Directory bread(block 68) failed [ 363.658833][T11208] FAT-fs (loop5): Directory bread(block 69) failed [ 363.681005][T11208] FAT-fs (loop5): Directory bread(block 70) failed [ 363.708997][T11208] FAT-fs (loop5): Directory bread(block 71) failed [ 363.736118][T11208] FAT-fs (loop5): Directory bread(block 72) failed [ 363.742906][T11208] FAT-fs (loop5): Directory bread(block 73) failed [ 364.373449][ T27] kauditd_printk_skb: 150 callbacks suppressed [ 364.373528][ T27] audit: type=1326 audit(2000000628.794:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11224 comm="syz.3.2009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x0 [ 364.457877][T11227] loop5: detected capacity change from 0 to 1024 [ 370.623092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 370.698223][T11352] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 370.742429][T11352] netlink: 64363 bytes leftover after parsing attributes in process `syz.2.2050'. [ 373.873007][T11405] loop5: detected capacity change from 0 to 32768 [ 373.913818][T11405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2065 (11405) [ 373.991545][T11405] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 374.024160][T11405] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 374.063401][T11405] BTRFS info (device loop5): force clearing of disk cache [ 374.070874][T11405] BTRFS info (device loop5): metadata ratio 0 [ 374.103593][T11405] BTRFS info (device loop5): using free space tree [ 374.304100][T11405] BTRFS info (device loop5): enabling ssd optimizations [ 374.340212][T11405] BTRFS info (device loop5): rebuilding free space tree [ 374.864628][ T6315] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 376.885021][T11510] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 376.953999][T11510] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 376.978425][T11510] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2087'. [ 377.093953][T11513] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 377.167487][T11513] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 377.193708][T11513] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2087'. [ 377.949664][T10405] syz.1.1771 (10405) used greatest stack depth: 17712 bytes left [ 378.777257][T11544] loop5: detected capacity change from 0 to 1024 [ 378.828796][T11544] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 378.892963][T11544] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 378.996755][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.003279][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.141791][T11544] binder: 11543:11544 ioctl c0306201 200000000000 returned -14 [ 379.272248][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 379.391233][T11554] loop5: detected capacity change from 0 to 7 [ 379.405956][T11175] loop5: [ 379.409308][T11175] loop5: partition table partially beyond EOD, truncated [ 379.444389][T11554] loop5: [ 379.447470][T11554] loop5: partition table partially beyond EOD, truncated [ 379.755221][T11561] loop1: detected capacity change from 0 to 1024 [ 379.789697][T11561] EXT4-fs: Ignoring removed nobh option [ 379.803268][T11561] EXT4-fs: Ignoring removed oldalloc option [ 379.819512][T11561] EXT4-fs: Ignoring removed bh option [ 379.870253][T11561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 380.511797][T11573] EXT4-fs (loop1): unmounting filesystem. [ 381.051197][T11588] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 381.103765][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2113'. [ 381.143392][T11588] CIFS: Attempting to mount \\127.0.0.1\share [ 381.173885][T11588] CIFS: VFS: Error connecting to socket. Aborting operation. [ 381.195865][T11588] CIFS: VFS: cifs_mount failed w/return code = -101 [ 381.696236][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.709810][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.720266][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.728423][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.736568][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.744185][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.738285][T11602] chnl_net:caif_netlink_parms(): no params data found [ 383.043785][T11602] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.051107][T11602] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.086960][T11602] device bridge_slave_0 entered promiscuous mode [ 383.147933][T11602] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.189724][T11602] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.223357][T11602] device bridge_slave_1 entered promiscuous mode [ 383.299294][T11602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.316043][T11602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.392382][T11602] team0: Port device team_slave_0 added [ 383.435843][T11602] team0: Port device team_slave_1 added [ 383.501798][T11602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.523343][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.604144][T11602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.628985][T11602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.647080][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.715938][T11602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.728348][T11634] loop5: detected capacity change from 0 to 1024 [ 383.793588][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 383.820302][T11602] device hsr_slave_0 entered promiscuous mode [ 383.832949][T11602] device hsr_slave_1 entered promiscuous mode [ 383.870483][T11602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.888711][T11602] Cannot create hsr debugfs directory [ 384.372800][T11602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 384.393225][T11602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 384.407038][T11602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 384.418653][T11602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.549410][T11602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 384.560133][T11602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 384.571098][T11602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 384.582718][T11602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.681276][T11602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 384.703329][T11602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 384.714981][T11602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 384.725926][T11602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.889624][T11602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 384.951449][T11602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 384.984234][T11602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 385.014075][T11602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.081301][T11667] CIFS: Attempting to mount \\127.0.0.1\share [ 385.276755][T11602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.297347][T11602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.318012][T11602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.352123][T11602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.529690][T11602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.551991][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.570246][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.588893][T11602] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.619064][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.637312][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.651407][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.658673][ T5487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.676992][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.689690][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.699673][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.710877][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.718177][ T5487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.728623][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.747548][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.757378][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.770375][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.818763][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.835842][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.854787][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.865444][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.873477][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 385.881584][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.907462][T11602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.925611][T11667] CIFS: VFS: Error connecting to socket. Aborting operation. [ 385.945408][T11667] CIFS: VFS: cifs_mount failed w/return code = -4 [ 385.955203][T11602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.965969][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.995358][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.627954][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.644452][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.669367][T11602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.735521][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.758305][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.793132][T11703] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 386.822961][T11703] device bond5 entered promiscuous mode [ 386.851732][T11703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.870461][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2148'. [ 387.018977][T11707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.035555][T11707] bond5: (slave bond6): making interface the new active one [ 387.044865][T11707] device bond6 entered promiscuous mode [ 387.051384][T11707] bond5: (slave bond6): Enslaving as an active interface with an up link [ 387.068381][T11602] device veth0_vlan entered promiscuous mode [ 387.091552][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 387.128825][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.149646][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.162349][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.179134][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.227903][T11602] device veth1_vlan entered promiscuous mode [ 387.312717][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.340356][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.365429][T11602] device veth0_macvtap entered promiscuous mode [ 387.397910][T11602] device veth1_macvtap entered promiscuous mode [ 387.436090][T11602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.449877][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.465022][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.478354][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.492505][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.511038][T11602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.521488][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.534861][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.549117][T11602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.583197][T11602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.601569][T11602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.623341][T11602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.787968][ T5487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.807623][ T5487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.831572][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.860037][ T4965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.877032][ T4965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.886869][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.953589][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 388.971036][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 390.033516][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 390.039534][T11785] netlink: 'syz.3.2172': attribute type 4 has an invalid length. [ 390.153481][T11787] netlink: 'syz.3.2172': attribute type 4 has an invalid length. [ 390.885683][T11814] device-mapper: ioctl: Invalid ioctl structure: uuid Á€, name , dev 2e [ 391.706066][ T4965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.886554][ T4965] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.094574][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.107333][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.120130][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.129632][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.139120][ T4965] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.140334][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 392.159310][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.300679][ T4965] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.529616][T11871] device syz_tun entered promiscuous mode [ 393.342341][T11863] chnl_net:caif_netlink_parms(): no params data found [ 393.970304][T11863] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.995831][T11863] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.014928][T11863] device bridge_slave_0 entered promiscuous mode [ 394.038420][T11863] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.056970][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.076490][T11863] device bridge_slave_1 entered promiscuous mode [ 394.172856][T11863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.196845][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 394.236869][T11863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.360390][T11863] team0: Port device team_slave_0 added [ 394.392523][T11863] team0: Port device team_slave_1 added [ 394.506129][T11863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.573642][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.702045][T11863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.876129][T11863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.887916][T11863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.977902][T11863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.468617][T11863] device hsr_slave_0 entered promiscuous mode [ 395.551676][T11863] device hsr_slave_1 entered promiscuous mode [ 395.586886][T11863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.607183][T11863] Cannot create hsr debugfs directory [ 396.283410][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 398.142531][ T4965] device hsr_slave_0 left promiscuous mode [ 398.161495][ T4965] device hsr_slave_1 left promiscuous mode [ 398.175183][ T4965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.203364][ T4965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.217103][ T4965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.234964][ T4965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.264495][ T4965] device bridge_slave_1 left promiscuous mode [ 398.271415][ T4965] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.293588][ T3599] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 398.324751][ T4965] device bridge_slave_0 left promiscuous mode [ 398.345984][ T4965] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.354845][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 398.493171][ T3599] usb 6-1: Using ep0 maxpacket: 32 [ 398.501692][ T4965] device veth1_macvtap left promiscuous mode [ 398.503646][ T3599] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.515861][ T4965] device veth0_macvtap left promiscuous mode [ 398.553585][ T4965] device veth1_vlan left promiscuous mode [ 398.554746][ T3599] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 398.560352][ T4965] device veth0_vlan left promiscuous mode [ 398.608255][ T3599] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 398.628395][ T3599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.647898][ T3599] usb 6-1: Product: syz [ 398.656314][ T3599] usb 6-1: Manufacturer: syz [ 398.670191][ T3599] usb 6-1: SerialNumber: syz [ 398.901561][ T3599] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 398.936413][ T3599] snd-usb-audio: probe of 6-1:1.1 failed with error -71 [ 398.957187][ T3599] usb 6-1: USB disconnect, device number 7 [ 399.474401][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.443407][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 400.497717][ T4965] team0 (unregistering): Port device team_slave_1 removed [ 400.574143][ T4965] team0 (unregistering): Port device team_slave_0 removed [ 400.644581][ T4965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.738914][ T4965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.395830][ T4965] bond0 (unregistering): Released all slaves [ 401.775678][T11863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.837435][T11863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.862390][T11863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.877288][T11863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.239650][T11863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.303683][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.314978][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.339853][T11863] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.370245][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.390027][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.407982][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.415463][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.441527][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.458800][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.479391][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.492136][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.500081][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.518274][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.542698][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.571514][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.598693][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.623471][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.655262][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.691418][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.733474][T11863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.807477][T11863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.850073][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.890635][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.912042][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.927128][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.012228][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.945204][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.961900][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.998230][T11863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.102881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.121346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.202187][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.229464][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.271312][T11863] device veth0_vlan entered promiscuous mode [ 404.289003][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.312306][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.346434][T11863] device veth1_vlan entered promiscuous mode [ 404.455956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 404.485142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 404.522053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.571680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.616847][T11863] device veth0_macvtap entered promiscuous mode [ 404.665843][T11863] device veth1_macvtap entered promiscuous mode [ 404.732026][T11863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.751809][T12086] netlink: 'syz.5.2251': attribute type 11 has an invalid length. [ 404.773876][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 404.793466][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.812677][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.842865][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.891072][T11863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.029109][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.051315][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.127523][T11863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.161362][T11863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.193170][T11863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.243321][T11863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.532622][ T4963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.549436][ T4963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.593137][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 405.662306][ T4979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.692713][ T4979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.728082][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.732841][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 406.764016][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 406.815421][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 406.851125][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 406.884236][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 406.925485][T12135] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 407.041577][T12135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.065083][T12135] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.107418][T12135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.181918][T12155] FAULT_INJECTION: forcing a failure. [ 409.181918][T12155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 409.243322][T12155] CPU: 1 PID: 12155 Comm: syz.1.2268 Not tainted syzkaller #0 [ 409.250873][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.260986][T12155] Call Trace: [ 409.264380][T12155] [ 409.267432][T12155] dump_stack_lvl+0x188/0x24e [ 409.272290][T12155] ? show_regs_print_info+0x12/0x12 [ 409.277684][T12155] ? load_image+0x410/0x410 [ 409.282542][T12155] ? __lock_acquire+0x7c40/0x7c40 [ 409.287709][T12155] should_fail_ex+0x390/0x4c0 [ 409.293351][T12155] prepare_alloc_pages+0x1e1/0x5b0 [ 409.298606][T12155] __alloc_pages+0x130/0x4f0 [ 409.303259][T12155] ? __lock_acquire+0x7c40/0x7c40 [ 409.308242][T12176] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000005 [ 409.308320][T12155] ? zone_statistics+0x170/0x170 [ 409.322587][T12155] pte_alloc_one+0x7b/0x310 [ 409.327208][T12155] ? pfn_modify_allowed+0x560/0x560 [ 409.332469][T12155] ? count_memcg_event_mm+0x36b/0x3c0 [ 409.338035][T12155] ? count_memcg_event_mm+0x8a/0x3c0 [ 409.343375][T12155] ? put_page+0x270/0x270 [ 409.347762][T12155] __pte_alloc+0x21/0x150 [ 409.352204][T12155] handle_mm_fault+0x34b1/0x3d40 [ 409.357222][T12155] ? numa_migrate_prep+0x250/0x250 [ 409.362434][T12155] ? vma_is_secretmem+0x9/0x40 [ 409.367532][T12155] ? check_vma_flags+0x45c/0x4c0 [ 409.372716][T12155] __get_user_pages+0x40d/0xec0 [ 409.377713][T12155] ? populate_vma_page_range+0x2b0/0x2b0 [ 409.383652][T12155] ? verify_lock_unused+0x140/0x140 [ 409.389770][T12155] ? mark_lock+0x94/0x320 [ 409.394578][T12155] get_user_pages_unlocked+0x255/0x720 [ 409.400405][T12155] ? __gup_longterm_locked+0x1b20/0x1b20 [ 409.407277][T12155] ? internal_get_user_pages_fast+0x1dc8/0x2670 [ 409.413816][T12155] internal_get_user_pages_fast+0x1f49/0x2670 [ 409.420382][T12155] ? __lock_acquire+0x7c40/0x7c40 [ 409.425735][T12155] ? get_user_pages_fast_only+0x40/0x40 [ 409.431689][T12155] get_futex_key+0x214/0x1000 [ 409.436493][T12155] ? __lock_acquire+0x7c40/0x7c40 [ 409.441928][T12155] ? futex_setup_timer+0xc0/0xc0 [ 409.447165][T12155] ? get_futex_key+0x38c/0x1000 [ 409.452128][T12155] ? put_page+0xea/0x270 [ 409.456468][T12155] ? get_futex_key+0x38c/0x1000 [ 409.461503][T12155] ? get_futex_key+0xc0f/0x1000 [ 409.466692][T12155] futex_wait_setup+0xb8/0x270 [ 409.471946][T12155] ? futex_wait_multiple+0x920/0x920 [ 409.477444][T12155] futex_wait_requeue_pi+0x350/0x9c0 [ 409.482758][T12155] ? futex_requeue_pi_complete+0x210/0x210 [ 409.488682][T12155] ? futex_wait+0x4a3/0x5c0 [ 409.493216][T12155] ? futex_wait_setup+0x270/0x270 [ 409.498260][T12155] ? preempt_schedule_thunk+0x16/0x18 [ 409.503913][T12155] ? up_read+0x20/0x20 [ 409.508086][T12155] do_futex+0x165/0x320 [ 409.512294][T12155] ? __ia32_sys_get_robust_list+0x100/0x100 [ 409.518671][T12155] __se_sys_futex+0x381/0x410 [ 409.523374][T12155] ? __x64_sys_futex+0xf0/0xf0 [ 409.528169][T12155] ? __x64_sys_futex+0x1d/0xf0 [ 409.532942][T12155] do_syscall_64+0x4c/0xa0 [ 409.537439][T12155] ? clear_bhb_loop+0x60/0xb0 [ 409.542307][T12155] ? clear_bhb_loop+0x60/0xb0 [ 409.547101][T12155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.553162][T12155] RIP: 0033:0x7f369b59e159 [ 409.558129][T12155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.578551][T12155] RSP: 002b:00007f369c52b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 409.587805][T12155] RAX: ffffffffffffffda RBX: 00007f369b825fa0 RCX: 00007f369b59e159 [ 409.595905][T12155] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000000000000000 [ 409.603897][T12155] RBP: 00007f369b63506b R08: 0000200000000200 R09: 0000000000000000 [ 409.611979][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.620075][T12155] R13: 00007f369b826038 R14: 00007f369b825fa0 R15: 00007ffc59aa5f28 [ 409.628627][T12155] [ 410.730593][T12210] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 412.271984][T12243] batman_adv: batadv0: Adding interface: bridge1 [ 412.320617][T12243] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.383124][T12243] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 413.677969][T12276] netlink: 'syz.1.2306': attribute type 12 has an invalid length. [ 414.898329][T12294] x_tables: ip_tables: osf match: only valid for protocol 6 [ 415.164987][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2318'. [ 415.602172][T12317] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 416.453063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 416.463083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 416.473059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 416.533059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 416.543062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 416.553074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 416.583053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 418.617178][T12335] device lo entered promiscuous mode [ 418.835134][T12335] device tunl0 entered promiscuous mode [ 418.862533][T12335] device gre0 entered promiscuous mode [ 418.927749][T12335] device erspan0 entered promiscuous mode [ 418.964895][T12335] device ip_vti0 entered promiscuous mode [ 419.015159][T12335] device ip6_vti0 entered promiscuous mode [ 419.064758][T12335] device sit0 entered promiscuous mode [ 419.514502][T12335] device ip6tnl0 entered promiscuous mode [ 419.593000][T12335] device ip6gre0 entered promiscuous mode [ 419.743497][T12335] device ip6gretap0 entered promiscuous mode [ 419.783415][T12335] device bridge0 entered promiscuous mode [ 419.861197][T12335] device team0 entered promiscuous mode [ 419.887072][T12335] device nlmon0 entered promiscuous mode [ 419.909964][T12335] device caif0 entered promiscuous mode [ 419.935382][T12335] device batadv0 entered promiscuous mode [ 419.951592][T12335] device vxcan0 entered promiscuous mode [ 419.969703][T12335] device vxcan1 entered promiscuous mode [ 419.990211][T12335] device veth0 entered promiscuous mode [ 420.004261][T12335] device veth1 entered promiscuous mode [ 420.016958][T12335] device wg0 entered promiscuous mode [ 420.029631][T12335] device wg1 entered promiscuous mode [ 420.042524][T12335] device wg2 entered promiscuous mode [ 420.055374][T12335] device veth0_to_bridge entered promiscuous mode [ 420.070401][T12335] device bridge_slave_0 entered promiscuous mode [ 420.085369][T12335] device veth1_to_bridge entered promiscuous mode [ 420.102825][T12335] device bridge_slave_1 entered promiscuous mode [ 420.118117][T12335] device veth0_to_bond entered promiscuous mode [ 420.137243][T12335] device bond_slave_0 entered promiscuous mode [ 420.155090][T12335] device veth1_to_bond entered promiscuous mode [ 420.176280][T12335] device bond_slave_1 entered promiscuous mode [ 420.191600][T12335] device veth0_to_team entered promiscuous mode [ 420.208411][T12335] device team_slave_0 entered promiscuous mode [ 420.222481][T12335] device veth1_to_team entered promiscuous mode [ 420.232863][T12335] device team_slave_1 entered promiscuous mode [ 420.239973][T12335] device veth0_to_batadv entered promiscuous mode [ 420.247033][T12335] device batadv_slave_0 entered promiscuous mode [ 420.262297][T12335] device xfrm0 entered promiscuous mode [ 420.275003][T12335] device veth0_to_hsr entered promiscuous mode [ 420.295590][T12335] device hsr_slave_0 entered promiscuous mode [ 420.312948][T12335] device veth1_to_hsr entered promiscuous mode [ 420.329777][T12335] device hsr_slave_1 entered promiscuous mode [ 420.346957][T12335] device veth1_virt_wifi entered promiscuous mode [ 420.363626][T12335] device veth0_virt_wifi entered promiscuous mode [ 420.379249][T12335] device virt_wifi0 entered promiscuous mode [ 420.394934][T12335] device vlan0 entered promiscuous mode [ 420.411674][T12335] device vlan1 entered promiscuous mode [ 420.425153][T12335] device macvlan0 entered promiscuous mode [ 420.431492][T12335] device macvlan1 entered promiscuous mode [ 420.438188][T12335] device ipvlan0 entered promiscuous mode [ 420.444734][T12335] device ipvlan1 entered promiscuous mode [ 420.451308][T12335] device macvtap0 entered promiscuous mode [ 420.459721][T12335] device macsec0 entered promiscuous mode [ 420.473490][T12335] device geneve0 entered promiscuous mode [ 420.487423][T12335] device geneve1 entered promiscuous mode [ 420.502709][T12335] device netdevsim0 entered promiscuous mode [ 420.519728][T12335] device netdevsim1 entered promiscuous mode [ 420.544034][T12335] device netdevsim2 entered promiscuous mode [ 420.567723][T12335] device netdevsim3 entered promiscuous mode [ 420.590348][T12335] device wlan0 entered promiscuous mode [ 420.615099][T12335] device wlan1 entered promiscuous mode [ 420.630246][T12335] device veth2 entered promiscuous mode [ 420.645362][T12335] device veth3 entered promiscuous mode [ 420.660823][T12335] device bridge1 entered promiscuous mode [ 420.709028][T12335] device vlan2 entered promiscuous mode [ 420.720557][T12335] device veth4 entered promiscuous mode [ 420.733843][T12335] device veth5 entered promiscuous mode [ 420.744104][T12335] device bond1 entered promiscuous mode [ 420.770225][T12335] device vlan3 entered promiscuous mode [ 420.778863][T12335] device geneve2 entered promiscuous mode [ 420.802939][T12335] device bond2 entered promiscuous mode [ 420.834357][T12335] device vlan4 entered promiscuous mode [ 420.840515][T12335] device geneve3 entered promiscuous mode [ 420.847200][T12335] device syztnl1 entered promiscuous mode [ 420.860637][T12335] device vlan5 entered promiscuous mode [ 420.868169][T12335] device hsr0 entered promiscuous mode [ 420.882214][T12335] device syztnl0 entered promiscuous mode [ 420.889711][T12335] device ip6erspan0 entered promiscuous mode [ 420.904864][T12335] device bridge2 entered promiscuous mode [ 420.928499][T12335] device vlan0000 entered promiscuous mode [ 421.240292][ T27] audit: type=1326 audit(2000000685.654:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.293214][ T27] audit: type=1326 audit(2000000685.654:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.413147][ T27] audit: type=1326 audit(2000000685.654:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.480043][ T27] audit: type=1326 audit(2000000685.654:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.522056][ T27] audit: type=1326 audit(2000000685.654:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.599927][ T27] audit: type=1326 audit(2000000685.654:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.641499][T12374] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 421.698100][ T27] audit: type=1326 audit(2000000685.654:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.780620][ T27] audit: type=1326 audit(2000000685.654:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.866814][ T27] audit: type=1326 audit(2000000685.654:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 421.953269][ T27] audit: type=1326 audit(2000000685.664:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.3.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f01fcb9e159 code=0x7ffc0000 [ 424.611690][T12434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2363'. [ 426.520355][ T3599] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 426.578396][T12496] syz.1.2384: attempt to access beyond end of device [ 426.578396][T12496] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 426.626591][T12496] EXT4-fs (loop2): unable to read superblock [ 426.683140][ T3599] usb 6-1: device descriptor read/64, error -71 [ 426.953237][ T3599] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 427.150496][ T3599] usb 6-1: device descriptor read/64, error -71 [ 427.273298][ T3599] usb usb6-port1: attempt power cycle [ 427.703175][ T3599] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 427.753843][ T3599] usb 6-1: device descriptor read/8, error -71 [ 428.413141][ T3599] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 428.915656][ T3599] usb 6-1: device descriptor read/8, error -71 [ 429.003534][T12533] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 429.050550][ T3599] usb usb6-port1: unable to enumerate USB device [ 429.432222][T12545] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.2403'. [ 429.830499][T12565] device gretap1 entered promiscuous mode [ 429.857709][T12565] loop5: detected capacity change from 0 to 256 [ 430.809952][T12586] device ip6gretap1 entered promiscuous mode [ 430.829918][T12586] bond1: (slave ip6gretap1): no link monitoring support [ 430.879521][T12586] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 430.985431][T12586] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 431.113607][T12594] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2420'. [ 433.797785][T12665] loop5: detected capacity change from 0 to 8 [ 433.824476][T12665] unable to read xattr id index table [ 433.917995][T12667] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 434.231012][T12672] loop5: detected capacity change from 0 to 512 [ 434.278959][T12672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 434.313860][T12672] System zones: 1-12 [ 434.355916][T12672] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.2446: missing EA_INODE flag [ 434.428511][T12672] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2446: error while reading EA inode 12 err=-117 [ 434.513747][T12672] EXT4-fs (loop5): 1 orphan inode deleted [ 434.520432][T12672] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 434.636923][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 436.779346][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 436.779363][ T27] audit: type=1326 audit(2000000701.194:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.2475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7fc00000 [ 436.848431][ T27] audit: type=1326 audit(2000000701.224:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.1.2475" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f369b59e159 code=0x7fc00000 [ 438.508851][ T27] audit: type=1326 audit(2000000702.924:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12779 comm="syz.5.2487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7fc00000 [ 438.602378][ T27] audit: type=1326 audit(2000000702.964:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12779 comm="syz.5.2487" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7ba659e159 code=0x7fc00000 [ 440.435831][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.442376][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.876202][T12828] fuse: Bad value for 'fd' [ 441.746399][T12851] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 441.788569][T12851] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 441.840964][T12854] loop5: detected capacity change from 0 to 7 [ 441.862510][T12854] loop5: [ 441.878314][T12854] loop5: partition table partially beyond EOD, truncated [ 442.610330][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 442.739625][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 443.009556][T12888] ip_tables: iptables: counters copy to user failed while replacing table [ 443.164424][T12896] CIFS: Attempting to mount \\127.0.0.1\share [ 443.993513][T12896] CIFS: VFS: Error connecting to socket. Aborting operation. [ 444.001518][T12896] CIFS: VFS: cifs_mount failed w/return code = -4 [ 444.917385][T12926] fuse: Bad value for 'fd' [ 446.345985][T12943] tipc: Failed to remove unknown binding: 66,1,1/2886997007:922956737/922956739 [ 446.401005][T12943] tipc: Failed to remove unknown binding: 66,1,1/2886997007:922956737/922956739 [ 446.443485][T12943] tipc: Failed to remove unknown binding: 66,1,1/2886997007:922956737/922956739 [ 447.334308][T12962] device syzkaller1 entered promiscuous mode [ 447.466405][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 449.119546][T13028] netlink: 'syz.7.2579': attribute type 4 has an invalid length. [ 449.150182][T13028] netlink: 'syz.7.2579': attribute type 4 has an invalid length. [ 450.211476][ T27] audit: type=1326 audit(2000000714.624:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.289969][ T27] audit: type=1326 audit(2000000714.664:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.376353][ T27] audit: type=1326 audit(2000000714.664:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.452387][ T27] audit: type=1326 audit(2000000714.664:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.560209][ T27] audit: type=1326 audit(2000000714.664:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.620102][ T27] audit: type=1326 audit(2000000714.664:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.672537][ T27] audit: type=1326 audit(2000000714.664:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.742534][ T27] audit: type=1326 audit(2000000714.664:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.799800][ T27] audit: type=1326 audit(2000000714.664:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.857317][ T27] audit: type=1326 audit(2000000714.664:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13047 comm="syz.5.2589" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba659e159 code=0x7ffc0000 [ 450.935129][ T7] kernel read not supported for file inotify (pid: 7 comm: kworker/0:0) [ 451.953349][ T4276] Bluetooth: hci3: command 0x2016 tx timeout [ 452.881938][T13122] device syz_tun entered promiscuous mode [ 452.906052][T13122] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 452.988575][T13130] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 455.751392][T13205] overlayfs: failed to clone upperpath [ 456.171146][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2649'. [ 456.188254][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2649'. [ 458.016566][T13256] overlayfs: failed to clone upperpath [ 458.341970][T13261] overlayfs: failed to clone upperpath [ 459.175741][ T4276] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 460.088383][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 460.088400][ T27] audit: type=1326 audit(2000000724.504:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13301 comm="syz.3.2676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x7fc00000 [ 460.224084][ T27] audit: type=1326 audit(2000000724.544:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13301 comm="syz.3.2676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01fcb9e159 code=0x7fc00000 [ 460.940042][T13316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.965384][T13316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.963144][ T27] audit: type=1326 audit(2000000727.374:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.1.2696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7fc00000 [ 463.037700][ T27] audit: type=1326 audit(2000000727.374:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.1.2696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f369b59e159 code=0x7fc00000 [ 464.210843][T13399] netlink: 'syz.2.2710': attribute type 12 has an invalid length. [ 465.000316][T13412] x_tables: ip_tables: osf match: only valid for protocol 6 [ 465.265283][T13418] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 465.953998][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2718'. [ 468.161179][T13480] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 468.588066][ T27] audit: type=1326 audit(2000000733.004:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 468.650147][ T27] audit: type=1326 audit(2000000733.004:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 468.692467][ T27] audit: type=1326 audit(2000000733.054:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 468.775959][ T27] audit: type=1326 audit(2000000733.054:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 468.837904][ T27] audit: type=1326 audit(2000000733.054:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 468.889490][ T27] audit: type=1326 audit(2000000733.054:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 469.009744][ T27] audit: type=1326 audit(2000000733.054:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 469.074010][ T27] audit: type=1326 audit(2000000733.054:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 469.135447][ T27] audit: type=1326 audit(2000000733.054:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 469.210202][ T27] audit: type=1326 audit(2000000733.054:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.2740" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 469.729270][T13518] Cannot find add_set index 0 as target [ 472.675043][T13557] device ip6gretap1 entered promiscuous mode [ 472.722844][T13557] bond9: (slave ip6gretap1): no link monitoring support [ 472.756381][T13557] bond9: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 472.845763][T13557] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 473.222675][T13569] netlink: 1319 bytes leftover after parsing attributes in process `syz.7.2767'. [ 477.128187][T13640] overlayfs: failed to clone upperpath [ 478.612814][T13669] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 478.692264][T13671] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2811'. [ 480.422166][T13702] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 482.094075][T13732] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2821'. [ 482.184519][T13732] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2821'. [ 482.302034][T13732] device erspan0 entered promiscuous mode [ 482.381174][T13732] device gretap0 entered promiscuous mode [ 482.461732][T13732] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 482.561973][T13732] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 482.665895][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2821'. [ 482.774822][T13737] overlayfs: failed to clone upperpath [ 482.783237][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2821'. [ 485.170454][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.185534][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.210094][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.221344][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.241832][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 485.251188][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.716254][T13774] chnl_net:caif_netlink_parms(): no params data found [ 485.841226][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.921900][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.987080][T13774] device bridge_slave_0 entered promiscuous mode [ 486.024264][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.061519][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.073715][T13774] device bridge_slave_1 entered promiscuous mode [ 486.148759][T13774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.206397][T13774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.344653][T13774] team0: Port device team_slave_0 added [ 486.379127][T13774] team0: Port device team_slave_1 added [ 486.448107][T13774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.489403][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.525910][T13774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.552169][T13774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.599763][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.699712][T13774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.818282][T13774] device hsr_slave_0 entered promiscuous mode [ 486.830465][T13774] device hsr_slave_1 entered promiscuous mode [ 486.847404][T13774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.867869][T13774] Cannot create hsr debugfs directory [ 487.291641][T13774] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 487.313343][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 487.338211][T13774] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 487.386190][T13774] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 487.443696][T13774] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 487.701637][T13774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.119687][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.153576][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.188229][T13774] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.255673][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.279071][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.314695][ T4979] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.322304][ T4979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.365296][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.384910][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.409909][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.453108][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.462050][ T4979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.523512][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.564389][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.738352][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.755582][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.829256][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.854324][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.894011][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.924277][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.961427][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.974378][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 489.000253][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.035519][T13774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.394727][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 490.010309][T13774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.052860][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.063432][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.856645][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.250305][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.683711][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 491.801162][T13774] device veth0_vlan entered promiscuous mode [ 491.883211][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.905218][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.937162][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.974201][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.029511][T13774] device veth1_vlan entered promiscuous mode [ 492.067735][T13897] netlink: 'syz.3.2870': attribute type 12 has an invalid length. [ 492.134687][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.148261][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.178713][T13774] device veth0_macvtap entered promiscuous mode [ 492.208418][T13774] device veth1_macvtap entered promiscuous mode [ 492.272887][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.291446][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.305875][T13774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.314562][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 492.323951][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.347528][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.385803][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.410708][T13774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.443122][T13774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.475011][T13774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.482679][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.507155][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.546111][T13774] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.563787][T13774] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.573410][T13774] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.582599][T13774] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.729644][ T4959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.762223][ T4959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.785187][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 492.819330][ T4965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.830250][ T4965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.856787][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 493.703754][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2883'. [ 493.723261][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 493.729933][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2883'. [ 493.808124][T13950] device erspan0 entered promiscuous mode [ 493.892377][T13950] device erspan0 left promiscuous mode [ 493.945843][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2883'. [ 493.988160][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2883'. [ 494.041774][T13952] device erspan0 entered promiscuous mode [ 494.088728][T13952] device erspan0 left promiscuous mode [ 494.260550][T13967] loop8: detected capacity change from 0 to 164 [ 494.664069][T13976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.695502][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 496.731892][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 496.850960][T14004] device erspan0 entered promiscuous mode [ 496.882857][T14004] device gretap0 entered promiscuous mode [ 496.907696][T14004] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 496.937581][T14004] Cannot create hsr debugfs directory [ 496.957967][T14004] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 496.988809][T14004] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 497.022408][T14009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 497.033241][T14009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 499.604955][T14053] device geneve0 entered promiscuous mode [ 502.096735][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.103906][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.190336][T14061] Set syz1 is full, maxelem 6117 reached [ 502.643251][ T14] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 502.752773][T14101] netlink: 'syz.2.2921': attribute type 4 has an invalid length. [ 502.788871][T14101] netlink: 'syz.2.2921': attribute type 4 has an invalid length. [ 502.865290][ T14] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.894596][ T14] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 502.945544][ T14] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 502.966155][ T3934] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.982937][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.983174][ T3934] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.021893][ T14] usb 9-1: Product: syz [ 503.028994][ T14] usb 9-1: Manufacturer: syz [ 503.029323][ T3934] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.049541][ T14] usb 9-1: SerialNumber: syz [ 503.063148][ T3934] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.071888][ T3934] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.085020][ T14] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 503.092212][ T3934] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.113129][ T3934] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.121905][ T14] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 503.132600][ T3934] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.152648][ T3934] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.172052][ T3934] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.182546][ T14] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 503.190878][ T3934] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.203093][ T3934] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.892767][T14092] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 505.907730][T14092] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 505.917145][T14092] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 505.994143][T14092] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 506.364977][ T4320] usb 9-1: USB disconnect, device number 2 [ 506.413685][ T4320] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 506.486508][ T4320] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 506.530896][ T4320] ti_usb_3410_5052 9-1:2.0: device disconnected [ 506.734117][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 506.734134][ T27] audit: type=1326 audit(2000000771.154:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 506.837117][ T27] audit: type=1326 audit(2000000771.184:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 506.917913][ T27] audit: type=1326 audit(2000000771.184:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 507.015857][ T27] audit: type=1326 audit(2000000771.194:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 507.111562][ T27] audit: type=1326 audit(2000000771.194:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 507.177520][ T27] audit: type=1326 audit(2000000771.194:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 507.263432][ T27] audit: type=1326 audit(2000000771.194:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 507.333179][ T27] audit: type=1326 audit(2000000771.194:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 507.408678][ T27] audit: type=1326 audit(2000000771.194:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 507.463086][ T27] audit: type=1326 audit(2000000771.194:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.1.2941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369b59e159 code=0x7ffc0000 [ 508.022099][T14182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.032663][T14182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.062813][T14204] netlink: 'syz.1.2962': attribute type 4 has an invalid length. [ 509.308033][T14210] netlink: 'syz.1.2962': attribute type 4 has an invalid length. [ 510.812847][T14227] device syz_tun entered promiscuous mode [ 514.783736][ T7] kernel read not supported for file inotify (pid: 7 comm: kworker/0:0) [ 514.852369][T14266] netlink: 'syz.8.2970': attribute type 4 has an invalid length. [ 514.892776][T14266] netlink: 'syz.8.2970': attribute type 4 has an invalid length. [ 515.080271][T14279] loop8: detected capacity change from 0 to 512 [ 515.130737][T14279] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.2971: inode has both inline data and extents flags [ 515.150223][T14279] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2971: couldn't read orphan inode 15 (err -117) [ 515.165602][T14279] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 515.417894][T13774] EXT4-fs (loop8): unmounting filesystem. [ 515.745685][T14297] loop8: detected capacity change from 0 to 512 [ 515.826773][T14297] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 515.909217][T14297] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.2976: inode #88: comm syz.8.2976: iget: illegal inode # [ 515.962422][T14297] EXT4-fs (loop8): Remounting filesystem read-only [ 516.040333][T14297] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2976: error while reading EA inode 88 err=-117 [ 516.113127][ T4291] Bluetooth: hci4: command 0x2016 tx timeout [ 516.136699][T14297] EXT4-fs (loop8): Remounting filesystem read-only [ 516.156764][T14297] EXT4-fs (loop8): 1 orphan inode deleted [ 516.203165][T14297] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 516.282074][T14302] Set syz1 is full, maxelem 6117 reached [ 517.434519][T13774] EXT4-fs (loop8): unmounting filesystem. [ 518.858964][T14349] device lo entered promiscuous mode [ 519.315672][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 519.325381][T14349] device tunl0 entered promiscuous mode [ 519.362465][T14349] device gre0 entered promiscuous mode [ 519.511980][T14349] device gretap0 entered promiscuous mode [ 519.543862][T14349] device erspan0 entered promiscuous mode [ 519.571497][T14349] device ip_vti0 entered promiscuous mode [ 519.591219][T14349] device ip6_vti0 entered promiscuous mode [ 519.617243][T14349] device sit0 entered promiscuous mode [ 519.652303][T14349] device ip6tnl0 entered promiscuous mode [ 519.678384][T14349] device ip6gre0 entered promiscuous mode [ 519.707912][T14349] device syz_tun entered promiscuous mode [ 519.734259][T14349] device ip6gretap0 entered promiscuous mode [ 519.756894][T14349] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.764478][T14349] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.772116][T14349] device bridge0 entered promiscuous mode [ 519.800031][T14349] device vcan0 entered promiscuous mode [ 519.812916][T14349] device bond0 entered promiscuous mode [ 519.819251][T14349] device bond_slave_0 entered promiscuous mode [ 519.826624][T14349] device bond_slave_1 entered promiscuous mode [ 519.850673][T14349] device team0 entered promiscuous mode [ 519.856883][T14349] device team_slave_0 entered promiscuous mode [ 519.863896][T14349] device team_slave_1 entered promiscuous mode [ 519.884513][T14349] device dummy0 entered promiscuous mode [ 519.903533][T14349] device nlmon0 entered promiscuous mode [ 519.921427][T14349] device caif0 entered promiscuous mode [ 519.928904][T14349] device batadv0 entered promiscuous mode [ 519.948470][T14349] device vxcan0 entered promiscuous mode [ 519.959231][T14349] device vxcan1 entered promiscuous mode [ 519.978347][T14349] device veth0 entered promiscuous mode [ 520.000796][T14349] device veth1 entered promiscuous mode [ 520.024964][T14349] device wg0 entered promiscuous mode [ 520.041340][T14349] device wg1 entered promiscuous mode [ 520.058474][T14349] device wg2 entered promiscuous mode [ 520.077247][T14349] device veth0_to_bridge entered promiscuous mode [ 520.114207][T14349] device veth1_to_bridge entered promiscuous mode [ 520.152833][T14349] device veth0_to_bond entered promiscuous mode [ 520.180967][T14349] device veth1_to_bond entered promiscuous mode [ 520.210259][T14349] device veth0_to_team entered promiscuous mode [ 520.246962][T14349] device veth1_to_team entered promiscuous mode [ 520.267273][T14349] device veth0_to_batadv entered promiscuous mode [ 520.303594][T14349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.312278][T14349] device batadv_slave_0 entered promiscuous mode [ 520.332211][T14349] device veth1_to_batadv entered promiscuous mode [ 520.346770][T14349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.355691][T14349] device batadv_slave_1 entered promiscuous mode [ 520.384570][T14349] device xfrm0 entered promiscuous mode [ 520.410693][T14349] device veth0_to_hsr entered promiscuous mode [ 520.457288][T14349] device veth1_to_hsr entered promiscuous mode [ 520.489916][T14349] device hsr0 entered promiscuous mode [ 520.515951][T14349] device veth1_virt_wifi entered promiscuous mode [ 520.539617][T14349] device veth0_virt_wifi entered promiscuous mode [ 520.548153][T14349] device virt_wifi0 entered promiscuous mode [ 520.625149][T14349] device vlan0 entered promiscuous mode [ 520.641523][T14349] device vlan1 entered promiscuous mode [ 520.648925][T14349] device macvlan0 entered promiscuous mode [ 520.684244][T14349] device macvlan1 entered promiscuous mode [ 520.713634][T14349] device ipvlan0 entered promiscuous mode [ 520.719680][T14349] device ipvlan1 entered promiscuous mode [ 520.760248][T14349] device macvtap0 entered promiscuous mode [ 520.784476][T14349] device macsec0 entered promiscuous mode [ 520.809606][T14349] device geneve0 entered promiscuous mode [ 520.834264][T14349] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.843682][T14349] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.852749][T14349] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.862005][T14349] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.872131][T14349] device geneve1 entered promiscuous mode [ 520.897642][T14349] device netdevsim0 entered promiscuous mode [ 520.916286][T14349] device netdevsim1 entered promiscuous mode [ 520.930408][T14349] device netdevsim2 entered promiscuous mode [ 520.941878][T14349] device netdevsim3 entered promiscuous mode [ 520.965607][T14349] device wlan0 entered promiscuous mode [ 520.987692][T14349] device wlan1 entered promiscuous mode [ 521.750044][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 521.750062][ T27] audit: type=1804 audit(2000000786.164:1338): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3004" name="/newroot/32/bus/bus" dev="overlay" ino=195 res=1 errno=0 [ 527.610149][ T4377] libceph: connect (1)[c::]:6789 error -101 [ 527.618076][ T4377] libceph: mon0 (1)[c::]:6789 connect error [ 527.703943][T14515] ceph: No mds server is up or the cluster is laggy [ 534.266505][T14606] overlayfs: failed to resolve './file0': -2 [ 534.908720][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3084'. [ 535.066618][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3084'. [ 535.479762][T14631] overlayfs: failed to clone lowerpath [ 535.499693][T14631] overlayfs: failed to clone lowerpath [ 535.667823][T14638] loop8: detected capacity change from 0 to 128 [ 535.722100][T14638] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 535.820733][T14638] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 1) [ 535.842055][T14638] FAT-fs (loop8): Filesystem has been set read-only [ 535.924538][T13774] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 536.079845][T14644] binder_alloc: 14643: pid 14643 spamming oneway? 2 buffers allocated for a total size of 5120 [ 536.484914][T14653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.514285][T14653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.539766][T14653] bond0 (unregistering): Released all slaves [ 536.812342][T14663] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3102'. [ 537.656441][T14679] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 539.262541][T14727] device wlan0 left promiscuous mode [ 539.311685][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 540.411005][T14748] loop8: detected capacity change from 0 to 1024 [ 540.447491][T14748] EXT4-fs: Ignoring removed orlov option [ 540.554125][T14748] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 540.728587][T14753] netlink: set zone limit has 8 unknown bytes [ 540.759251][T14753] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3128'. [ 540.800955][T14753] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3128'. [ 540.872052][T13774] EXT4-fs (loop8): unmounting filesystem. [ 540.904880][T14753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3128'. [ 541.803972][T14771] device wlan0 entered promiscuous mode [ 543.388337][T14818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.645586][T14822] netlink: 'syz.3.3152': attribute type 12 has an invalid length. [ 544.294083][T14829] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 544.417906][T14831] device bridge3 entered promiscuous mode [ 544.500294][T14831] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 544.811063][ T27] audit: type=1326 audit(2000000809.224:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14832 comm="syz.3.3155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01fcb9e159 code=0x0 [ 544.872646][T14839] netlink: 'syz.2.3156': attribute type 2 has an invalid length. [ 545.083917][T14839] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.3156'. [ 545.370122][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3156'. [ 546.432459][T14863] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 547.776718][T14890] device bond0 left promiscuous mode [ 547.808420][T14890] bond0 (unregistering): Released all slaves [ 549.416410][T14941] loop8: detected capacity change from 0 to 256 [ 549.468574][T14941] exFAT-fs (loop8): failed to load upcase table [ 549.518061][T14941] exFAT-fs (loop8): failed to recognize exfat type [ 550.962592][T14975] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.3210'. [ 551.146388][T14977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3211'. [ 551.178877][T14977] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3211'. [ 551.219722][T14977] netlink: 'syz.1.3211': attribute type 6 has an invalid length. [ 551.238111][T14982] IPVS: Error connecting to the multicast addr [ 551.258051][T14977] netlink: 'syz.1.3211': attribute type 5 has an invalid length. [ 551.272194][T14977] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3211'. [ 551.737407][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 551.747755][ T4276] CPU: 0 PID: 4276 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 551.755700][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.767195][ T4276] Workqueue: hci0 hci_rx_work [ 551.772026][ T4276] Call Trace: [ 551.775527][ T4276] [ 551.778489][ T4276] dump_stack_lvl+0x188/0x24e [ 551.783229][ T4276] ? show_regs_print_info+0x12/0x12 [ 551.788901][ T4276] ? load_image+0x410/0x410 [ 551.793832][ T4276] sysfs_create_dir_ns+0x26a/0x290 [ 551.799710][ T4276] ? __lock_acquire+0x7c40/0x7c40 [ 551.805213][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 551.812061][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 551.817383][ T4276] kobject_add_internal+0x617/0xca0 [ 551.823023][ T4276] kobject_add+0x160/0x230 [ 551.828881][ T4276] ? kobject_init+0x1c0/0x1c0 [ 551.835470][ T4276] ? __raw_spin_lock_init+0x41/0x100 [ 551.842302][ T4276] ? klist_children_get+0x50/0x50 [ 551.849359][ T4276] ? get_device_parent+0x121/0x3e0 [ 551.854786][ T4276] device_add+0x470/0x1050 [ 551.859718][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 551.865743][ T4276] le_conn_complete_evt+0xf93/0x15c0 [ 551.871853][ T4276] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 551.879648][ T4276] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 551.885863][ T4276] ? mutex_unlock+0x10/0x10 [ 551.890975][ T4276] ? skb_pull_data+0xec/0x1f0 [ 551.897188][ T4276] hci_le_conn_complete_evt+0x183/0x440 [ 551.903420][ T4276] ? hci_remote_host_features_evt+0x230/0x230 [ 551.910164][ T4276] hci_event_packet+0x7b3/0x1290 [ 551.916113][ T4276] ? lock_chain_count+0x20/0x20 [ 551.921548][ T4276] ? bis_list+0x280/0x280 [ 551.926387][ T4276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 551.934084][ T4276] ? kcov_remote_start+0x50f/0x810 [ 551.939583][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 551.945752][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 551.952432][ T4276] hci_rx_work+0x3eb/0xd40 [ 551.957084][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 551.962810][ T4276] ? process_one_work+0x7b4/0x1160 [ 551.968109][ T4276] process_one_work+0x8ab/0x1160 [ 551.973682][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 551.979655][ T4276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 551.985628][ T4276] ? _raw_spin_lock_irqsave+0x100/0x100 [ 551.992431][ T4276] ? wq_worker_running+0x97/0x190 [ 551.997952][ T4276] worker_thread+0xaf5/0x12a0 [ 552.002989][ T4276] kthread+0x29d/0x330 [ 552.007722][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 552.013414][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 552.018145][ T4276] ret_from_fork+0x1f/0x30 [ 552.023069][ T4276] [ 552.028822][ T4276] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 552.045324][ T4276] Bluetooth: hci0: failed to register connection device [ 552.720403][T15012] Bluetooth: ISO socket layer initialized [ 554.753232][ T4289] Bluetooth: hci5: command 0x2044 tx timeout [ 554.753404][ T4291] Bluetooth: hci5: Opcode 0x2044 failed: -110 [ 554.770031][ T4291] Bluetooth: hci5: Unable to create PA: -110 [ 555.430029][T15022] ip_tables: iptables: counters copy to user failed while replacing table [ 555.849698][T15040] fuse: Bad value for 'fd' [ 556.304079][T15050] overlayfs: failed to clone upperpath [ 558.065251][T15092] tipc: Failed to remove unknown binding: 66,0,0/0:1744094384/1744094386 [ 558.102653][T15092] tipc: Failed to remove unknown binding: 66,0,0/0:1744094384/1744094385 [ 558.118842][T15097] tipc: Failed to remove unknown binding: 66,0,0/0:1744094384/1744094386 [ 558.128422][T15097] tipc: Failed to remove unknown binding: 66,0,0/0:1744094384/1744094385 [ 558.313210][ T3599] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 558.506079][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3260'. [ 558.523165][ T3599] usb 9-1: Using ep0 maxpacket: 16 [ 558.535260][ T3599] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.566653][ T3599] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.587021][ T3599] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.603205][ T3599] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.614435][ T3599] usb 9-1: Product: syz [ 558.618853][ T3599] usb 9-1: Manufacturer: syz [ 558.624989][ T3599] usb 9-1: SerialNumber: syz [ 558.864276][ T3599] usb 9-1: 0:2 : does not exist [ 558.883266][ T3599] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 558.937598][ T3599] usb 9-1: USB disconnect, device number 3 [ 562.478851][T15192] netlink: 'syz.2.3289': attribute type 12 has an invalid length. [ 563.375455][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.435980][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.383783][T15229] netlink: 'syz.1.3302': attribute type 1 has an invalid length. [ 564.556917][T15229] device bond2 entered promiscuous mode [ 564.579715][T15229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.654960][T15232] bond2: (slave erspan1): making interface the new active one [ 564.673689][T15232] device erspan1 entered promiscuous mode [ 564.698852][T15232] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 564.728506][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 565.805692][T15253] netlink: 'syz.7.3306': attribute type 12 has an invalid length. [ 566.199521][T15265] loop8: detected capacity change from 0 to 256 [ 566.266578][T15265] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 566.737809][T15275] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4059668917/4059668919 [ 566.781149][T15275] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4059668917/4059668918 [ 566.804251][T15279] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4059668917/4059668919 [ 566.822540][T15279] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4059668917/4059668918 [ 567.649309][T15292] overlayfs: failed to clone lowerpath [ 569.883192][ T4289] Bluetooth: hci5: unexpected event for opcode 0x040d [ 569.901366][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3337'. [ 573.241338][T15391] loop8: detected capacity change from 0 to 512 [ 573.289530][T15371] ip_tables: iptables: counters copy to user failed while replacing table [ 573.335247][T15391] EXT4-fs (loop8): 1 truncate cleaned up [ 573.340982][T15391] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 573.497618][T13774] EXT4-fs (loop8): unmounting filesystem. [ 574.427719][T15411] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3363'. [ 574.564093][T15413] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3363'. [ 576.000679][T15443] bond0: (slave bond_slave_0): Releasing backup interface [ 576.630124][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 578.910146][T15491] loop8: detected capacity change from 0 to 2048 [ 579.024100][T15491] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 579.063144][T15491] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.292008][ T27] audit: type=1804 audit(2000000843.704:1340): pid=15491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3386" name="/newroot/118/file0/file1" dev="loop8" ino=15 res=1 errno=0 [ 579.358376][T15491] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3386: bg 0: block 345: padding at end of block bitmap is not set [ 579.409453][T15491] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 117 [ 579.434674][T15491] EXT4-fs (loop8): This should not happen!! Data will be lost [ 579.434674][T15491] [ 579.666371][T13774] EXT4-fs (loop8): unmounting filesystem. [ 583.954876][T15569] FAULT_INJECTION: forcing a failure. [ 583.954876][T15569] name failslab, interval 1, probability 0, space 0, times 0 [ 584.000063][T15569] CPU: 0 PID: 15569 Comm: syz.8.3408 Not tainted syzkaller #0 [ 584.007606][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.017779][T15569] Call Trace: [ 584.021181][T15569] [ 584.024150][T15569] dump_stack_lvl+0x188/0x24e [ 584.028963][T15569] ? show_regs_print_info+0x12/0x12 [ 584.034399][T15569] ? load_image+0x410/0x410 [ 584.039052][T15569] ? __might_sleep+0xd0/0xd0 [ 584.043843][T15569] ? __lock_acquire+0x7c40/0x7c40 [ 584.048922][T15569] should_fail_ex+0x390/0x4c0 [ 584.054172][T15569] should_failslab+0x5/0x20 [ 584.058902][T15569] slab_pre_alloc_hook+0x59/0x300 [ 584.064757][T15569] ? nf_nat_register_fn+0x16e/0x540 [ 584.070148][T15569] ? nf_nat_register_fn+0x256/0x540 [ 584.075422][T15569] __kmem_cache_alloc_node+0x4f/0x270 [ 584.080837][T15569] ? nf_nat_register_fn+0x256/0x540 [ 584.086354][T15569] __kmalloc_node_track_caller+0xa0/0x240 [ 584.092257][T15569] ? net_generic+0x1e/0x240 [ 584.096902][T15569] kmemdup+0x27/0x60 [ 584.101016][T15569] nf_nat_register_fn+0x256/0x540 [ 584.106122][T15569] iptable_nat_table_init+0xd0/0x2d0 [ 584.111638][T15569] xt_find_table_lock+0x220/0x360 [ 584.116766][T15569] xt_request_find_table_lock+0x22/0x100 [ 584.122442][T15569] do_ipt_get_ctl+0x6e2/0x11a0 [ 584.127254][T15569] ? do_ipt_set_ctl+0xe00/0xe00 [ 584.132249][T15569] ? nf_getsockopt+0x21b/0x280 [ 584.137117][T15569] ? __lock_acquire+0x7c40/0x7c40 [ 584.142188][T15569] ? trace_contention_end+0x5f/0x170 [ 584.147509][T15569] ? __mutex_lock+0x1ab/0xae0 [ 584.152486][T15569] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 584.158160][T15569] ? mutex_unlock+0x10/0x10 [ 584.162904][T15569] ? __might_fault+0xa6/0x120 [ 584.167618][T15569] ? __lock_acquire+0x7c40/0x7c40 [ 584.172683][T15569] nf_getsockopt+0x25e/0x280 [ 584.177322][T15569] ip_getsockopt+0x19b/0x230 [ 584.182230][T15569] ? ip_get_mcast_msfilter+0x3c0/0x3c0 [ 584.187958][T15569] ? aa_sock_opt_perm+0x74/0x100 [ 584.193183][T15569] ? sctp_getsockopt+0x9e/0x8a0 [ 584.198219][T15569] ? sock_recv_errqueue+0x590/0x590 [ 584.203461][T15569] __sys_getsockopt+0x1b0/0x230 [ 584.208352][T15569] __x64_sys_getsockopt+0xb1/0xc0 [ 584.213406][T15569] do_syscall_64+0x4c/0xa0 [ 584.217859][T15569] ? clear_bhb_loop+0x60/0xb0 [ 584.222575][T15569] ? clear_bhb_loop+0x60/0xb0 [ 584.227302][T15569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.233342][T15569] RIP: 0033:0x7f53c779e159 [ 584.237810][T15569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.257544][T15569] RSP: 002b:00007f53c85ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 584.266088][T15569] RAX: ffffffffffffffda RBX: 00007f53c7a25fa0 RCX: 00007f53c779e159 [ 584.274095][T15569] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 584.282288][T15569] RBP: 00007f53c783506b R08: 00002000000000c0 R09: 0000000000000000 [ 584.290392][T15569] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 584.298486][T15569] R13: 00007f53c7a26038 R14: 00007f53c7a25fa0 R15: 00007ffcfb5390a8 [ 584.306616][T15569] [ 593.838208][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3446'. [ 594.539059][T15725] overlayfs: failed to clone upperpath [ 595.584312][T15734] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 595.655102][T15739] loop8: detected capacity change from 0 to 256 [ 596.138039][T15748] device vlan2 entered promiscuous mode [ 596.723980][T15773] loop8: detected capacity change from 0 to 1024 [ 596.732221][T15774] overlayfs: failed to clone upperpath [ 596.772427][T15773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 596.827101][T15773] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 596.901979][T15773] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 597.062032][T15778] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 598.278065][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.316034][T15805] device bridge_slave_1 left promiscuous mode [ 598.342872][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.471928][T15805] team0: Port device bridge0 removed [ 598.495389][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 598.516884][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 598.530151][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 598.538388][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 598.546457][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 598.554447][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 599.047922][T15808] chnl_net:caif_netlink_parms(): no params data found [ 599.255355][T15808] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.262581][T15808] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.282750][T15808] device bridge_slave_0 entered promiscuous mode [ 599.329838][T15808] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.383399][T15808] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.391740][T15808] device bridge_slave_1 entered promiscuous mode [ 599.514810][T15808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.548685][T15808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.668787][T15808] team0: Port device team_slave_0 added [ 599.697317][T15808] team0: Port device team_slave_1 added [ 599.780554][T15808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.839479][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.878613][T15808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.936576][T15808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.985031][T15808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.035345][T15808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.151303][T15808] device hsr_slave_0 entered promiscuous mode [ 600.194588][T15808] device hsr_slave_1 entered promiscuous mode [ 600.221654][T15808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.241336][T15808] Cannot create hsr debugfs directory [ 600.675200][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 601.337805][T15843] netlink: 'syz.2.3493': attribute type 1 has an invalid length. [ 601.451598][T15847] bond12: (slave gretap3): making interface the new active one [ 601.510779][T15847] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 601.580410][T15843] bond12: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 601.858647][T15808] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 601.880876][T15808] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 601.928512][T15808] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 601.965957][T15808] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 602.192520][T15808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.217365][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 602.243849][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 602.266032][T15808] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.308500][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.326354][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.353766][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.360957][ T8288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.397565][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 602.408776][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.431085][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.468035][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.475339][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.520195][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.554332][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.568014][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.581054][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 602.611869][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 602.634379][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 602.673007][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 602.694958][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 602.716387][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 602.753113][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 602.753940][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 602.834005][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.885599][T15808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 603.672543][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.682450][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.714084][T15808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.610861][T15902] netlink: 'syz.3.3506': attribute type 10 has an invalid length. [ 604.684861][T15904] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 604.770644][T15904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.833122][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 604.842823][T15905] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 604.885874][T15905] bond3: (slave batadv1): making interface the new active one [ 604.945446][T15905] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 605.013283][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 605.029930][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 605.070741][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 605.941348][T15904] bond3 (unregistering): (slave batadv1): Releasing active interface [ 606.159559][T15904] bond3 (unregistering): Released all slaves [ 606.251591][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 606.267640][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.278579][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.287543][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 606.333434][T15808] device veth0_vlan entered promiscuous mode [ 606.365703][T15808] device veth1_vlan entered promiscuous mode [ 606.415290][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 606.435591][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 606.454172][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 606.485234][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.501152][T15808] device veth0_macvtap entered promiscuous mode [ 606.531140][T15808] device veth1_macvtap entered promiscuous mode [ 606.579203][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.615263][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.650517][T15808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.673899][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 606.701653][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 606.710242][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.719320][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.749979][T15808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.946127][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 607.033298][T15808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.264596][T15808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.467242][T15808] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.517827][T15808] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.567157][T15808] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.593098][T15808] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.637017][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.654582][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.838521][ T5484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.853327][ T5484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.909249][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 607.937984][ T5484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.954195][ T5484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.961864][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.057209][T15949] loop9: detected capacity change from 0 to 512 [ 608.098135][T15949] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.3479: bg 0: block 7: invalid block bitmap [ 608.131129][T15949] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 608.143761][T15949] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2921: inode #11: comm syz.9.3479: corrupted xattr block 95 [ 608.163447][T15949] EXT4-fs warning (device loop9): ext4_evict_inode:301: xattr delete (err -117) [ 608.176967][T15949] EXT4-fs (loop9): 1 orphan inode deleted [ 608.182829][T15949] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 608.221156][T15808] EXT4-fs (loop9): unmounting filesystem. [ 609.085975][T15963] ip_tables: iptables: counters copy to user failed while replacing table [ 611.324659][T16000] netlink: 'syz.2.3535': attribute type 39 has an invalid length. [ 617.204907][T16090] device bridge_slave_0 left promiscuous mode [ 617.211472][T16090] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.338735][T16095] device bridge_slave_1 left promiscuous mode [ 617.388728][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.149994][T16106] netlink: 'syz.7.3574': attribute type 10 has an invalid length. [ 618.853146][T16106] device syz_tun entered promiscuous mode [ 618.930798][T16106] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 621.490270][T16175] netlink: 'syz.7.3592': attribute type 1 has an invalid length. [ 621.518534][T16175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 621.547298][T16175] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 621.558343][T16175] bond4: (slave batadv1): making interface the new active one [ 621.570912][T16175] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 621.581050][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 621.636939][ T4291] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 621.646643][ T4291] Bluetooth: hci4: Injecting HCI hardware error event [ 621.657398][ T4289] Bluetooth: hci4: hardware error 0x00 [ 622.836894][T16200] loop9: detected capacity change from 0 to 512 [ 622.940615][T16200] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 622.978086][T16200] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.214488][T15808] EXT4-fs (loop9): unmounting filesystem. [ 623.246908][T16220] overlayfs: failed to clone upperpath [ 623.953943][ T4289] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 624.759023][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.766935][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.095972][T16175] bond4 (unregistering): (slave batadv1): Releasing active interface [ 625.126180][T16175] bond4 (unregistering): Released all slaves [ 625.153474][T16213] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 625.441780][T16250] device syz_tun left promiscuous mode [ 625.492894][T16250] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.531627][T16250] device dummy0 left promiscuous mode [ 625.568539][T16250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.575279][T16280] IPv6: NLM_F_CREATE should be specified when creating new route [ 627.596049][T16280] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3620'. [ 627.635311][T16281] loop9: detected capacity change from 0 to 128 [ 627.674066][T16131] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 627.688788][T16279] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 628.056430][T16289] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.083848][T16289] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.102096][T16289] device bridge_slave_0 entered promiscuous mode [ 628.124742][T16289] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.132493][T16289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.316570][T16289] device bridge_slave_0 left promiscuous mode [ 628.353999][T16289] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.878747][T16327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.321509][ T27] audit: type=1326 audit(2000000896.734:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.9.3643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99ca59e159 code=0x0 [ 632.437234][ T28] INFO: task syz.5.2748:13509 blocked for more than 143 seconds. [ 632.463192][ T28] Not tainted syzkaller #0 [ 632.468627][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.498805][ T28] task:syz.5.2748 state:D stack:27088 pid:13509 ppid:6315 flags:0x00004004 [ 632.515275][ T28] Call Trace: [ 632.519877][ T28] [ 632.524375][ T28] __schedule+0x107f/0x4030 [ 632.531337][ T28] ? release_firmware_map_entry+0x187/0x187 [ 632.539375][ T28] ? __mutex_trylock_common+0x86/0x260 [ 632.551572][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 632.562349][ T28] schedule+0xb9/0x180 [ 632.569444][ T28] schedule_preempt_disabled+0xf/0x20 [ 632.580620][ T28] __mutex_lock+0x548/0xae0 [ 632.587749][ T28] ? __mutex_lock+0x3ba/0xae0 [ 632.596560][ T28] ? nfsd_svc+0x61/0xab0 [ 632.606211][ T28] ? mutex_lock_nested+0x10/0x10 [ 632.614671][ T28] ? net_generic+0x1e/0x240 [ 632.622816][ T28] ? net_generic+0x1e/0x240 [ 632.631036][ T28] nfsd_svc+0x61/0xab0 [ 632.639778][ T28] ? qword_get+0x5a5/0x640 [ 632.654417][ T28] write_threads+0x2ea/0x350 [ 632.660902][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 632.669695][ T28] ? __might_fault+0xc2/0x120 [ 632.680794][ T28] ? _copy_from_user+0x10b/0x170 [ 632.701085][ T28] ? simple_transaction_get+0x119/0x140 [ 632.708655][ T28] nfsctl_transaction_write+0x105/0x150 [ 632.714652][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 632.720596][ T28] vfs_write+0x2dc/0x9a0 [ 632.725171][ T28] ? file_end_write+0x250/0x250 [ 632.730543][ T28] ? __fget_files+0x28/0x460 [ 632.735444][ T28] ? __fget_files+0x3fc/0x460 [ 632.740804][ T28] ? __fdget_pos+0x2ae/0x360 [ 632.755308][ T28] ? ksys_write+0x70/0x260 [ 632.762758][ T28] ksys_write+0x14d/0x260 [ 632.774956][ T28] ? __ia32_sys_read+0x80/0x80 [ 632.780446][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 632.794077][ T28] do_syscall_64+0x4c/0xa0 [ 632.803311][ T28] ? clear_bhb_loop+0x60/0xb0 [ 632.810323][ T28] ? clear_bhb_loop+0x60/0xb0 [ 632.819247][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.833226][ T28] RIP: 0033:0x7f7ba659e159 [ 632.838003][ T28] RSP: 002b:00007f7ba73b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.847256][ T28] RAX: ffffffffffffffda RBX: 00007f7ba6826090 RCX: 00007f7ba659e159 [ 632.855573][ T28] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 632.863943][ T28] RBP: 00007f7ba663506b R08: 0000000000000000 R09: 0000000000000000 [ 632.872196][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.880875][ T28] R13: 00007f7ba6826128 R14: 00007f7ba6826090 R15: 00007ffd1f112138 [ 632.889396][ T28] [ 632.892622][ T28] [ 632.892622][ T28] Showing all locks held in the system: [ 632.901123][ T28] 1 lock held by rcu_tasks_kthre/12: [ 632.910745][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 632.922117][ T28] 1 lock held by rcu_tasks_trace/13: [ 632.927892][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 632.947138][ T28] 1 lock held by khungtaskd/28: [ 632.959752][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 632.978162][ T28] 2 locks held by getty/4029: [ 632.990501][ T28] #0: ffff88814db75098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 633.010284][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 633.037366][ T28] 3 locks held by kworker/u4:12/4953: [ 633.048656][ T28] 3 locks held by syz.5.2748/13504: [ 633.060386][ T28] #0: ffff888043dc0fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 633.083241][ T28] #1: ffff888051a90460 (sb_writers#31){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 633.092446][ T28] #2: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 633.112883][ T28] 3 locks held by syz.5.2748/13509: [ 633.119788][ T28] #0: ffff88807a9ea0e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 633.141413][ T28] #1: ffff888051a90460 (sb_writers#31){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 633.173087][ T28] #2: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 633.181826][ T28] 2 locks held by syz.1.3608/16238: [ 633.208681][ T28] #0: ffff88802037a0e0 (&type->s_umount_key#107){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 633.220028][ T28] #1: ffffffff8cdcce48 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4f/0x1a0 [ 633.229970][ T28] 1 lock held by syz.3.3620/16283: [ 633.233839][ T4289] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 633.238117][ T28] 1 lock held by syz.7.3642/16356: [ 633.244243][ T4289] Bluetooth: hci1: Injecting HCI hardware error event [ 633.256601][ T28] [ 633.262985][ T4291] Bluetooth: hci1: hardware error 0x00 [ 633.273381][ T28] ============================================= [ 633.273381][ T28] [ 633.306381][ T28] NMI backtrace for cpu 1 [ 633.310866][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 633.318290][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.328467][ T28] Call Trace: [ 633.331742][ T28] [ 633.334682][ T28] dump_stack_lvl+0x188/0x24e [ 633.339576][ T28] ? irq_work_queue+0xb8/0x140 [ 633.344516][ T28] ? show_regs_print_info+0x12/0x12 [ 633.349766][ T28] ? load_image+0x410/0x410 [ 633.354472][ T28] ? vprintk_emit+0x59f/0x6a0 [ 633.359312][ T28] ? printk_sprint+0x460/0x460 [ 633.364176][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 633.369326][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 633.375527][ T28] ? _printk+0xda/0x130 [ 633.379811][ T28] ? load_image+0x410/0x410 [ 633.384350][ T28] ? load_image+0x410/0x410 [ 633.388890][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 633.395552][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 633.401843][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 633.408306][ T28] watchdog+0xf0e/0xf50 [ 633.412503][ T28] ? watchdog+0x1ed/0xf50 [ 633.416940][ T28] kthread+0x29d/0x330 [ 633.421023][ T28] ? hungtask_pm_notify+0x40/0x40 [ 633.426075][ T28] ? kthread_blkcg+0xd0/0xd0 [ 633.430761][ T28] ret_from_fork+0x1f/0x30 [ 633.435201][ T28] [ 633.439345][ T28] Sending NMI from CPU 1 to CPUs 0: [ 633.444889][ C0] NMI backtrace for cpu 0 [ 633.444901][ C0] CPU: 0 PID: 47 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 633.444916][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.444925][ C0] Workqueue: bat_events batadv_nc_worker [ 633.445033][ C0] RIP: 0010:__lock_acquire+0x15b/0x7c40 [ 633.445056][ C0] Code: 77 30 44 89 f0 4d 8d 7c c5 08 4c 89 f8 48 c1 e8 03 42 80 3c 00 00 74 12 4c 89 ff e8 6f 76 6f 00 49 b8 00 00 00 00 00 fc ff df <4d> 8b 3f 4d 85 ff 75 25 31 db 4c 89 ef 44 89 f6 31 d2 e8 7e df ff [ 633.445068][ C0] RSP: 0018:ffffc90000b87860 EFLAGS: 00000046 [ 633.445081][ C0] RAX: 1ffffffff1965afd RBX: 0000000000000000 RCX: 1ffff92000170f2c [ 633.445092][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cb2d7e0 [ 633.445101][ C0] RBP: ffffc90000b87a90 R08: dffffc0000000000 R09: 0000000000000000 [ 633.445111][ C0] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 0000000000000000 [ 633.445120][ C0] R13: ffffffff8cb2d7e0 R14: 0000000000000000 R15: ffffffff8cb2d7e8 [ 633.445131][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 633.445143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.445153][ C0] CR2: 00007f8cd61f14b8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 633.445168][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.445177][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 633.445186][ C0] Call Trace: [ 633.445191][ C0] [ 633.445207][ C0] ? verify_lock_unused+0x140/0x140 [ 633.445229][ C0] ? verify_lock_unused+0x140/0x140 [ 633.445251][ C0] ? try_to_wake_up+0x53e/0x10b0 [ 633.445294][ C0] lock_acquire+0x1bb/0x4a0 [ 633.445312][ C0] ? batadv_nc_worker+0xce/0x600 [ 633.445333][ C0] ? read_lock_is_recursive+0x10/0x10 [ 633.445352][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 633.445371][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 633.445390][ C0] ? batadv_nc_worker+0xce/0x600 [ 633.445407][ C0] batadv_nc_worker+0xeb/0x600 [ 633.445425][ C0] ? batadv_nc_worker+0xce/0x600 [ 633.445443][ C0] ? process_one_work+0x7b4/0x1160 [ 633.445460][ C0] process_one_work+0x8ab/0x1160 [ 633.445480][ C0] ? worker_detach_from_pool+0x240/0x240 [ 633.445497][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 633.445516][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 633.445535][ C0] ? wq_worker_running+0x97/0x190 [ 633.445557][ C0] worker_thread+0xaf5/0x12a0 [ 633.445582][ C0] kthread+0x29d/0x330 [ 633.445594][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 633.445609][ C0] ? kthread_blkcg+0xd0/0xd0 [ 633.445622][ C0] ret_from_fork+0x1f/0x30 [ 633.445644][ C0] [ 633.446256][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 633.718018][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 633.725230][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.735288][ T28] Call Trace: [ 633.738568][ T28] [ 633.741612][ T28] dump_stack_lvl+0x188/0x24e [ 633.746421][ T28] ? memcpy+0x3c/0x60 [ 633.750968][ T28] ? show_regs_print_info+0x12/0x12 [ 633.756286][ T28] ? load_image+0x410/0x410 [ 633.760817][ T28] panic+0x2d3/0x710 [ 633.764822][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 633.770714][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 633.775221][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 633.780858][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 633.787210][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 633.793406][ T28] watchdog+0xf4d/0xf50 [ 633.797693][ T28] ? watchdog+0x1ed/0xf50 [ 633.802076][ T28] kthread+0x29d/0x330 [ 633.806166][ T28] ? hungtask_pm_notify+0x40/0x40 [ 633.811377][ T28] ? kthread_blkcg+0xd0/0xd0 [ 633.816279][ T28] ret_from_fork+0x1f/0x30 [ 633.820752][ T28] [ 633.824370][ T28] Kernel Offset: disabled [ 633.828843][ T28] Rebooting in 86400 seconds..