last executing test programs: 3m27.128829051s ago: executing program 0 (id=174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket(0x23, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) io_uring_setup(0x30d0, &(0x7f00000005c0)={0x0, 0x0, 0x10003}) 3m26.968828435s ago: executing program 0 (id=178): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffff0000, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x80800) 3m24.796043177s ago: executing program 0 (id=182): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) unshare(0x4020400) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x803, 0x5, 0x7fffffff, 0x3, 0x1, 0x6, 0x6, 0x2, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) close_range(r1, 0xffffffffffffffff, 0x0) 3m24.036814325s ago: executing program 0 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @host}, 0x10) 3m22.423383254s ago: executing program 0 (id=189): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x1000010, &(0x7f0000000040)={[{@noquota}, {@grpquota}, {@nolazytime}, {@nogrpid}, {@gquota}, {@uquota}]}, 0x1, 0x9798, &(0x7f000000cd80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x44800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 3m20.200613188s ago: executing program 0 (id=196): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 7.846820779s ago: executing program 2 (id=625): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8200000000000000, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8000000000000000, 0x8, 0x8, 0x100000000, 0x0, 0x0, 0xcc, 0x0, 0x2, 0x0, 0x1, 0xb, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58a9, 0x4, 0x0, 0x400000003, 0x0, 0x0, 0x0, 0x0, 0x9295]}) socket$nl_route(0x10, 0x3, 0x0) 7.846309179s ago: executing program 3 (id=626): syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) 7.845954119s ago: executing program 1 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x15, 0x2, 0x80, "8baa00000500c30000000006000000000000000000000000000400", 0x5160305}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) 6.226003699s ago: executing program 4 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x0) 5.886745577s ago: executing program 2 (id=630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$sock(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="77be4504de8ca5372aeaa8e435307b6937b16349766eef163e6fa374586b4e966adc39df65f87be0eb5fa3f91ed8376b7d268ed75292a98770626937e4a2335f97979b21166de0ade794b06766adba616d10124510c51be55332e638751cae4feb4000d9e95949a9724200a6d09b00edb57e085c2069e18a4bdf5652205ca9b5d240a66f8d2c11d951f1469ccacbb18bcd63d7a5a077818497ce3d756838b2b0f6a165148508", 0xffffffac}, {&(0x7f0000000400)="7fc90b024e48ecc18f722777e1288e1e1e444412d76a3d1eea0f0b93579ea3c8ff60a8622b821228e3f8394fc0980e9889e6fba39b421b74c96747e21c68b26349fd02da7b8c0710db65918654cdd7c09ed76d7a", 0x54}, {&(0x7f0000000480)="f40eacaab6ffe2b01dcfec03428bc46a74d68044e0e0de60eddb01a7abf2c2d8380d712f94866b18bad53d3b2e4ea0d77f04f89e16e2b2d0870e2e77edb9f967823edb1a92f8d5d14f4f074bdca6fe2a640af97e7f9ba34f0acb43a71bbeb42ce66c7604aecb4a2cb37bf9bcad9ac71220362430dcede27c99ec0ae4dfbb8e479ccb5312c67229c33a49303463acfa94732322adb1bdd5f66c571a8b4b1ae18bfba443a4ff18b7f6cc71c1ff2d4b9d4eb18ba6bb2b06dad35478afa0be657fa34e448514e1e4778c97d43c2dea7f4660e94653ad548a708793c07a78", 0xdc}, {&(0x7f0000000580)="7f49b98607c8eef4bcc367e4f3fa78a7f86f6ae31414075dd72f27311aa8e2ddb4b5475c71f5a3a659298093d0ca8af6850c34300b32e71b188db2debc9930aee2dfa08fae5d98677e96342150b7614ba053e9fb4206cd3f03e9491f34a6b7efa58dd83a44a58642753a27e578d3468ee024a8bf3d95cfb03ae5f78904", 0x7d}, {&(0x7f0000000600)="76e9a90fd70a25d3cd3ab2af78d89628ecdd4ab6ec729ee1899c57ef5227fc3131ee5a158a2857cdcddc3de529bc16270b6d2ba2a6a470fa9a25a38114d6970c922b0e44391b926bbc8b1cbf80", 0x4d}, {&(0x7f0000000680)="4e9b0ee9546a1bfd0a28b2a9361bdb9b898fb165901574b04d16551f7f3bbf53352156a0a67dc26fc36bed265d8a943418a090b5e1da6564c278d95d444386c74ae3205e267f4a738c8a00dc4d2bad289d99d57e691c7d75b257f9323369f0cf9e43276ed4521d32c5776dc5a6a835c714701c40c463d08ae318ee", 0x7b}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000008c0)="c198735e0313129560f9812383eed153763d7780cd0ad2facc90c2e6c14c69eeefb8e986c1a83b595b6a9b6f60f94f794a73deb69c5fd9921ea0c8d3b036e7f82c6ddb2855dc0ab4d3e2b67ea94a4945359e7a4249e92def5dbbd5c1709d248dc4d5bfe17588cec4da", 0x69}, {&(0x7f0000000940)="62bb1112981fb547b186226f57d1e3eebcbfb3e1417df7f14939203afe3aca06f00175696719a785a90d9c2189098428a73c", 0x32}, {&(0x7f0000000980)="9eb05bd01a9265a95e2411c3ef27c55e3f36413ffd4cff0a98c9fcd9294090aa70f751ca2b0699f198e9931de3c93b50b9caaac999b49aaf25ee95b15ac4c9944ed4571ea492662f7c659c8d8f4de0a2cd63b16a67ec702a3d93f2ec2a4dce45e5bc46aeca7d01", 0x67}, {&(0x7f0000000a00)="e67348dd645f643ecc8884a7e260eaef072fb81fdd855d58900d7fe88e94fd3ea4c661dc184b881f671cf5ca8c11bcb63bc24af4917f17b2e1a0e57e0e39d6906e6188702b9eb2af50627cc283881a7196a2510a87da044eb527417332ecd9084bab1aacfc97eaa98c1b2837469c7167da0fac71fd8536013ee408767496530214dd16d43e09994bc5ce861f49", 0x8d}, {&(0x7f0000000ac0)="d5741ba41b0dd71341ab4d8fb0f821161654b681fc58f9096de7edda129fafda73acd1d97b30793c4169f2a7821be634528c8b8ed0a51f204467204a85d4b1ec1eb574846fb913288e16b6c01124445907364110a5a3fab297cff701d6aab544b0", 0x61}, {&(0x7f0000000b40)="745fec41f03c6a44399bd766318cc1a8b6ebc25a6f9da7fdb06be5ac2c2a9bb7b2b77d960344f5494d8b95b204784bf8e34055e83ba8fcda2976b040156a9e3bbb874030206f99258f780c3976a47d7bd2f0ee97552e873178be6c9591ef54f231c31211b3647412237c0a3df48474a480c452851cbff93b40c2aebfca9814089cb480706a35578292b137e1c7d45f25bc7063ed9d9ebd9b95145f27b34ac50e00abe5c1a0a2d93bf22cad940a1fbd60d9ba88195d2bd93ced6ccde287b3794345d117db7ff5b5b1b5518de13c2ebee4729be5c1eec78c61fe53fed5f0123f6ccf4e9d106a7d875a49c09fb8dc20", 0xee}, {&(0x7f0000000c40)="886199d19bb2d84a1ba96c0144f97f7844535683b2615dab35cfc7079fa6734cb3962d80ed886a4fd265d4405acc525326e213249aa340ee495479ca0ff3d6076b81275f9df890f972792b645e3c158d3115ac06df3b6309a6db4ccea5b87fdd89eaf29a875b094fcd0cfe26a0f24bc0b7ac344520ac8825554b5309d9cdb9529602df99370b57720e6b126cada35129dd1ce2929ca888cf3d0153862c742c5324d4e78d5f00e4944f6772a311c9f0a5d423458d821dccd56ba5cd883bbbf0adb35b35241d655cc40c9e44365c29453ade093d419e9f0b29c674188da15f75db307aa4f7a82cfb4e26b868", 0xeb}], 0x7}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000dc0)="24a5f73d00f8525613b306e77e76689963dff19dd1525f22742cf7c446ecc39ba3451e2b63d06b31bfc1b8c5f6d8714dc03d718c74fc5a0f4274d97922a3c6f0d79773950b863607b860cbe99df87247277b45e529159f36732e3f9362901b930f3e165d0ab43dcc8162a56fe2b987e4ac7bfee1120ebfea8ccc7c932cdfcacadb2e05cb95a527343e8be849a83783121bd1ec1d5df40b01787da490", 0x9c}, {&(0x7f0000000e80)="2c06238f8158e308c1708ab8a587927ec5578b8f76d1fe807e16be246730b39454f4572784905da088de17208d9be0936b787414b4958b410136bddd2eedb4bfc50e99992f88d8cf4993c9ab01a9098d6325fd3bd9dfced8863eb0a2a9fb295ba0e5da4f2abfad8507803c500e5b2ccd963ac26393d215587a095e7915e8295b2a3a05b82d8ffefff32c94ea579d0174ddf9ce1e5a18cf9d4eb8733afc0bc7f04dcdb6f22241c68a3b4b7032beebbd8987de9f23d4935f840cf7caa038b8eb9583b1a5039f2eeab45812935a1d7feb", 0xcf}, {&(0x7f0000000f80)="abf0eea8255eaacec55b24e7260dde675edd5b8c47dd86f22b72efe0df75f84bc8b7701b680afb7599573a9ccf1a9736b5752d0ba74884cc87717b98eaf2f78ca31c1f7acb5d3325cfc6ce33b8a72bcc37c6f37f77d9cc4cbc76a445ba9e86ef7bb330d4", 0x64}, {&(0x7f0000001000)="af7e096c4e538dc7b098209dd9ebd6940a0f8a968083b79e5f46a4f1a29644e1b6406dfc2b87266ff6c1a5c3a91dcf2b0c6a25cffd20fd432e44db33bf0f15f8ab910540b32f4f1324bcdf2f683eba2502451969c39b84904e576a14f19c9c442a89bd2f927c0ab21e976e2984df44b6dc5ad3afd73b42944475e3ee70687ef22d3410ee27935aad2dd6dd24cde6b598bffeb11eae2184f862a342d4f18e0c", 0x9f}, {&(0x7f00000010c0)="57a009428694f983d754", 0xa}, {&(0x7f0000001100)="1d6b878b52fd5974ce1bd8eb5257e65720facca49493a6cf4d8fbe5dc3f6516fc25c4182f5320f1641127c9b9f42abddbbb30b1bd30bb37d0235a20126d4b898de95ca3ea987bb9c54a6ca19d8013f626598c84fa28310", 0x57}, {&(0x7f0000001180)="f44748d6fb92a82a97c8b2a3d165a8999db67e92e5ed4f12ae9f090650b0bdc2eec8fdd4aa57b46b6fe6f48ea94d7efa863877c1299ce6ea31d256829174f19a55c96b915f98f310cc1fa121479bc887397175baa93ff0e3e073071e8261932ae887f3ecc1e52f0dd58a673920df30af59704ef75c6683677e03cfd832dc276f93a0a29bf670fe2f7d436c1af52a94709069af392560bef638149a48094bbffe1bd0d1d3f18239bc6f62f5a17e1f7f6318def0245d", 0xb5}, {&(0x7f0000000100)="218f84b9c00e57973254d8f30dc420e970c81ad2f33617f7", 0x18}], 0x8}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002400)="f908d0426d6463b1e0f7074182d16481be699c5e0fcac225da69b9d6832938f3f9473c61de0d42c931de7d83323d19ac35d519b5c079b8ee9bf6e9a260d618102118646d4d869ec9fcff47721a386df4ae0f4b61a8d74b60913d49006d76f48ad621c0dacfd9298931a29c6f7ad1b5ef5f8fd5f1541c1a6bc68773ee8c4d01efd6", 0x81}, {&(0x7f00000024c0)="4ac75fb1b1ee1b9034bef69c6a084e5150c0d1eef44b630310a2d736cc9a9a17692fc26d7035acc27a9ff571ac303d17d24162cf68133d6964545ad15c82ebb767fc6c9597d44fd8a11bb223acca5b84cad761d8d7131d663e1b275c65c0f66b29ea0d58951f88f9a6ae32dc", 0x6c}, {&(0x7f0000002540)="66857b51bda250cded2f43ec7f4362b4dc9ed67d8c78fec020369f4bd75147978fa0305ab420a25349c377047498ff7b18f9ae0c6d02951cc4f25735eb71fb7ddf6305e1fa62107448c2dbc5d549897ce3ce997af751018eb2f1035928959acd58", 0x61}, {&(0x7f00000025c0)="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", 0x44a}], 0x4}}], 0x2, 0x44044) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffffa5}, &(0x7f0000000000)=0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 5.886331706s ago: executing program 3 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x1, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="010000", 0x3, 0xffffffffffffffff) 5.025488388s ago: executing program 1 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 4.874801701s ago: executing program 2 (id=633): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 4.806773723s ago: executing program 3 (id=634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff3, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x0, 0x7, 0x1, 0x1, 0xc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.925156554s ago: executing program 4 (id=635): add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = memfd_create(0x0, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000080, 0x0, 0x0) recvmsg(r1, 0x0, 0x2141) pwrite64(r0, 0x0, 0x0, 0x3fff) fcntl$addseals(r0, 0x409, 0x6) ftruncate(r0, 0x7) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) 3.812614977s ago: executing program 1 (id=636): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 3.706850019s ago: executing program 4 (id=637): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x0, {0xffffffff, 0x3, 0x8bb2, 0x8ab2}}) chdir(&(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="5896", 0x2, 0x4084090, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @local, 0xf}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r2, 0x1) syz_emit_ethernet(0x162, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12c, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7, [{0x18, 0x17, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009b0972d145d2e6c59b37cd8abb9b54f67fbd44a3c524f6d0749d6869636a90bca4c54c3ce345b74a1344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef115338e16fe0418e0f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364"}, {0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x3, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 3.70644389s ago: executing program 3 (id=638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, r4, 0x0) fanotify_init(0x200, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) 3.645828821s ago: executing program 1 (id=639): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x8) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004000)={0x2020}, 0x2020) 3.465088805s ago: executing program 4 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.378864167s ago: executing program 3 (id=641): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80) syz_emit_ethernet(0x5e, &(0x7f0000000c00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800fe000000000000000000003903669faeb9808aed37d12ec7a4a494b34ab0b263d63aa874b707327921b00db93a9259c87cc60d7790047982eb8d1999c84a3919fcfe932cda65e67ad97fb4b1f9c39a43187bdf043232b86dddae2488eaf6ccb53cfcc2da70a5164613667693fa613ab717c6e336b105f0a9118d3f"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xffff}, {0xfff2, 0x2}, {0x1, 0x9}}}, 0x24}}, 0x4000004) 3.28503199s ago: executing program 2 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) 1.688912459s ago: executing program 1 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x0) 1.654129889s ago: executing program 2 (id=644): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, 0x0, 0x1) socket(0x28, 0x4, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) 1.63465738s ago: executing program 4 (id=645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) 1.507769783s ago: executing program 3 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302", @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1df) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0xf000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[], 0xcc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) mmap$binder(&(0x7f0000465000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 30.711219ms ago: executing program 4 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 0s ago: executing program 2 (id=648): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0xb0, 0x7ffc1ffb}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8001, 0x9, 0x8, 0xfffffffffffffffc, 0x6, 0xffffffffffffffff}) sched_setscheduler(r0, 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='usb1', 0x4) setreuid(0xffffffffffffffff, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 72.434362][ T5764] cgroup: Unknown subsys name 'net' [ 72.561709][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.941012][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.347879][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.356593][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.376986][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.385052][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.404630][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.406585][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.416339][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.426977][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.434694][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.442653][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.442720][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.457433][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.465963][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.473061][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.486576][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.494265][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.496121][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.501650][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.526142][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.538552][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.546289][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.555770][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.562856][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.570163][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.933980][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 76.037379][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.048890][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.071481][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.108239][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.116200][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.123557][ T5778] bridge_slave_0: entered allmulticast mode [ 76.130908][ T5778] bridge_slave_0: entered promiscuous mode [ 76.170492][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.177855][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.185008][ T5778] bridge_slave_1: entered allmulticast mode [ 76.191924][ T5778] bridge_slave_1: entered promiscuous mode [ 76.277955][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.285108][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.292559][ T5777] bridge_slave_0: entered allmulticast mode [ 76.299374][ T5777] bridge_slave_0: entered promiscuous mode [ 76.326618][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.350380][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.357639][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.364824][ T5777] bridge_slave_1: entered allmulticast mode [ 76.372297][ T5777] bridge_slave_1: entered promiscuous mode [ 76.378785][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.387076][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.394215][ T5775] bridge_slave_0: entered allmulticast mode [ 76.401088][ T5775] bridge_slave_0: entered promiscuous mode [ 76.409752][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.416935][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.424126][ T5775] bridge_slave_1: entered allmulticast mode [ 76.431234][ T5775] bridge_slave_1: entered promiscuous mode [ 76.440387][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.497625][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.504798][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.512389][ T5776] bridge_slave_0: entered allmulticast mode [ 76.519120][ T5776] bridge_slave_0: entered promiscuous mode [ 76.527040][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.534508][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.541705][ T5776] bridge_slave_1: entered allmulticast mode [ 76.548977][ T5776] bridge_slave_1: entered promiscuous mode [ 76.576264][ T5778] team0: Port device team_slave_0 added [ 76.594837][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.607957][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.618825][ T5778] team0: Port device team_slave_1 added [ 76.634936][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.646981][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.675240][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.713023][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.739483][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.746666][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.772624][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.787371][ T5775] team0: Port device team_slave_0 added [ 76.803878][ T5777] team0: Port device team_slave_0 added [ 76.812566][ T5777] team0: Port device team_slave_1 added [ 76.819011][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.826359][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.852548][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.864968][ T5775] team0: Port device team_slave_1 added [ 76.884418][ T5776] team0: Port device team_slave_0 added [ 76.934005][ T5776] team0: Port device team_slave_1 added [ 76.940489][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.947645][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.973884][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.986629][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.993681][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.019656][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.039078][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.051459][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.077433][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.110800][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.117887][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.144263][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.157641][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.164619][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.190684][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.221758][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.228865][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.254835][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.286126][ T5778] hsr_slave_0: entered promiscuous mode [ 77.292354][ T5778] hsr_slave_1: entered promiscuous mode [ 77.341604][ T5776] hsr_slave_0: entered promiscuous mode [ 77.347992][ T5776] hsr_slave_1: entered promiscuous mode [ 77.354073][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.362002][ T5776] Cannot create hsr debugfs directory [ 77.387580][ T5777] hsr_slave_0: entered promiscuous mode [ 77.393755][ T5777] hsr_slave_1: entered promiscuous mode [ 77.399999][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.407635][ T5777] Cannot create hsr debugfs directory [ 77.471480][ T5775] hsr_slave_0: entered promiscuous mode [ 77.477731][ T5775] hsr_slave_1: entered promiscuous mode [ 77.483719][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.491616][ T5775] Cannot create hsr debugfs directory [ 77.606570][ T5788] Bluetooth: hci1: command tx timeout [ 77.612485][ T5788] Bluetooth: hci0: command tx timeout [ 77.618593][ T5780] Bluetooth: hci3: command tx timeout [ 77.618611][ T51] Bluetooth: hci2: command tx timeout [ 77.839215][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.851753][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.863106][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.873459][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.949765][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.960014][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.970639][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.990106][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.064991][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.074971][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.112793][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.123437][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.176222][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.202721][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.215316][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.225246][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.262369][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.294021][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.326625][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.362822][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.370164][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.389604][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.417020][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.424122][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.435461][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.442571][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.452589][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.459749][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.527946][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.584203][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.594912][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.638975][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.652518][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.659681][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.690298][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.697485][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.743900][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.803993][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.843405][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.850603][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.905366][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.912591][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.023507][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.165415][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.209195][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.292486][ T5775] veth0_vlan: entered promiscuous mode [ 79.362439][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.373122][ T5775] veth1_vlan: entered promiscuous mode [ 79.397439][ T5778] veth0_vlan: entered promiscuous mode [ 79.421518][ T5778] veth1_vlan: entered promiscuous mode [ 79.456706][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.473453][ T5776] veth0_vlan: entered promiscuous mode [ 79.501922][ T5776] veth1_vlan: entered promiscuous mode [ 79.514745][ T5775] veth0_macvtap: entered promiscuous mode [ 79.533402][ T5775] veth1_macvtap: entered promiscuous mode [ 79.592134][ T5778] veth0_macvtap: entered promiscuous mode [ 79.614674][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.624802][ T5778] veth1_macvtap: entered promiscuous mode [ 79.637327][ T5776] veth0_macvtap: entered promiscuous mode [ 79.646908][ T5777] veth0_vlan: entered promiscuous mode [ 79.657348][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.676094][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.687467][ T5780] Bluetooth: hci2: command tx timeout [ 79.692978][ T5780] Bluetooth: hci1: command tx timeout [ 79.695644][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.700214][ T5788] Bluetooth: hci3: command tx timeout [ 79.713595][ T5786] Bluetooth: hci0: command tx timeout [ 79.714482][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.732361][ T5776] veth1_macvtap: entered promiscuous mode [ 79.741439][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.752712][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761731][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.771805][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.793312][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.803983][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.814906][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.831736][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.841848][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.851589][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.860564][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.886505][ T5777] veth1_vlan: entered promiscuous mode [ 79.921697][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.939879][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.950989][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.961806][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.972662][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.000425][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.011758][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.024369][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.034932][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.047520][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.078157][ T5777] veth0_macvtap: entered promiscuous mode [ 80.091532][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.101422][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.110274][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.119644][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.153950][ T5777] veth1_macvtap: entered promiscuous mode [ 80.161823][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.182013][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.251320][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.262437][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.273314][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.284538][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.295069][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.307395][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.318740][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.344036][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.354686][ T2108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.362531][ T2108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.369968][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.380800][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.392632][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.402587][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.413703][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.424838][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.450920][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.465979][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.481412][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.493576][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.502362][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.514125][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.550017][ T2108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.563300][ T2108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.637855][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.671784][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.682014][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.692665][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.876038][ T2108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.903107][ T2108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.965360][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.975138][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.862388][ T5780] Bluetooth: hci2: command tx timeout [ 81.868067][ T5780] Bluetooth: hci1: command tx timeout [ 81.873480][ T5780] Bluetooth: hci0: command tx timeout [ 81.879043][ T5780] Bluetooth: hci3: command tx timeout [ 84.549407][ T5786] Bluetooth: hci3: command tx timeout [ 84.554937][ T5780] Bluetooth: hci0: command tx timeout [ 84.554999][ T51] Bluetooth: hci2: command tx timeout [ 84.566427][ T5788] Bluetooth: hci1: command tx timeout [ 85.397654][ T5887] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.406955][ T5887] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.415780][ T5887] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.424494][ T5887] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.437197][ T5887] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 87.926093][ T173] cfg80211: failed to load regulatory.db [ 88.641664][ T5907] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 89.095934][ T5916] ======================================================= [ 89.095934][ T5916] WARNING: The mand mount option has been deprecated and [ 89.095934][ T5916] and is ignored by this kernel. Remove the mand [ 89.095934][ T5916] option from the mount to silence this warning. [ 89.095934][ T5916] ======================================================= [ 92.504983][ T27] audit: type=1326 audit(1786402096.863:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.0.22" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411279e0d9 code=0x0 [ 92.557882][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 92.755985][ T5949] netlink: 'syz.3.33': attribute type 5 has an invalid length. [ 92.792653][ T5951] syz.1.34[5951]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.479840][ T5959] netlink: 2 bytes leftover after parsing attributes in process `syz.0.36'. [ 93.776218][ T5963] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET) [ 96.459180][ T5971] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 96.535668][ T5971] ref_ctr increment failed for inode: 0x3d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802bc0af80 [ 96.652459][ T5971] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 96.692838][ T5971] ref_ctr decrement failed for inode: 0x3d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802bc0af80 [ 96.991465][ T27] audit: type=1326 audit(1786402101.313:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 97.015186][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.212302][ T27] audit: type=1326 audit(1786402101.313:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 97.481715][ T27] audit: type=1326 audit(1786402101.343:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 97.541818][ T27] audit: type=1326 audit(1786402101.343:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 97.565489][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.284413][ T27] audit: type=1326 audit(1786402101.343:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.391169][ T27] audit: type=1326 audit(1786402101.343:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.489820][ T27] audit: type=1326 audit(1786402101.353:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.543850][ T6007] loop3: detected capacity change from 0 to 128 [ 98.585066][ T27] audit: type=1326 audit(1786402101.353:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.609217][ T27] audit: type=1326 audit(1786402101.353:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.638200][ T27] audit: type=1326 audit(1786402101.353:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.662383][ T27] audit: type=1326 audit(1786402101.353:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.690413][ T27] audit: type=1326 audit(1786402101.353:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 98.906610][ T27] audit: type=1326 audit(1786402101.353:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99319e0d9 code=0x7ffc0000 [ 99.077820][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.090425][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.102466][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.114393][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.142569][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.154524][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.166459][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.178354][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.190090][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.202396][ T6018] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.463296][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.472117][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.794636][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.802246][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.810312][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.817530][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.858360][ T6017] team0: Port device bridge0 added [ 99.957478][ T6007] loop3: detected capacity change from 0 to 2048 [ 100.022984][ T6007] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 100.036300][ T6007] loop3: partition table partially beyond EOD, truncated [ 100.054165][ T6007] loop3: p1 start 4278190080 is beyond EOD, truncated [ 100.071052][ T6007] loop3: p2 start 16908800 is beyond EOD, truncated [ 100.087037][ T6007] loop3: p4 start 11326 is beyond EOD, truncated [ 100.093614][ T6007] loop3: p5 start 16908800 is beyond EOD, truncated [ 100.100573][ T6007] loop3: p6 start 11326 is beyond EOD, truncated [ 100.132361][ T5142] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 100.149087][ T5142] loop3: partition table partially beyond EOD, truncated [ 100.190170][ T5142] loop3: p1 start 4278190080 is beyond EOD, truncated [ 100.226032][ T5142] loop3: p2 start 16908800 is beyond EOD, truncated [ 100.261010][ T5142] loop3: p4 start 11326 is beyond EOD, truncated [ 100.267680][ T5142] loop3: p5 start 16908800 is beyond EOD, truncated [ 100.274303][ T5142] loop3: p6 start 11326 is beyond EOD, truncated [ 100.349995][ T6037] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.132150][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 101.592839][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 101.822504][ T6056] loop0: detected capacity change from 0 to 2048 [ 102.636561][ T5786] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 102.646071][ T5786] Bluetooth: hci2: Injecting HCI hardware error event [ 102.655204][ T5786] Bluetooth: hci2: hardware error 0x00 [ 103.090831][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.165031][ T6056] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.366105][ T6098] Bluetooth: hci4: Frame reassembly failed (-84) [ 103.426836][ T6138] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 103.491932][ T6056] netlink: 'syz.0.58': attribute type 12 has an invalid length. [ 105.576226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.765279][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 105.765295][ T27] audit: type=1326 audit(1786402109.223:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.67" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fad9e0d9 code=0x7fc00000 [ 105.796197][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.804498][ T5786] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 105.839164][ T27] audit: type=1326 audit(1786402109.743:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.67" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2fad3f459 code=0x7fc00000 [ 106.036689][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.586358][ T6181] process 'syz.1.77' launched './file1' with NULL argv: empty string added [ 110.935713][ T6203] hub 2-0:1.0: USB hub found [ 110.938742][ T6211] netlink: 'syz.1.83': attribute type 2 has an invalid length. [ 110.961491][ T6203] hub 2-0:1.0: 1 port detected [ 111.137103][ T6217] syzkaller0: entered promiscuous mode [ 112.415614][ T6217] syzkaller0: entered allmulticast mode [ 112.822781][ T6231] netlink: 156 bytes leftover after parsing attributes in process `syz.3.89'. [ 113.622077][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.624445][ T6236] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.992361][ T6239] veth3: entered allmulticast mode [ 114.035995][ T6239] bond1: (slave veth3): Enslaving as an active interface with an up link [ 115.655638][ T6266] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.664715][ T6266] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.673618][ T6266] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.682441][ T6266] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.744635][ T6266] team0: Port device vxlan0 added [ 116.119811][ T6271] ceph: No mds server is up or the cluster is laggy [ 116.154036][ T6276] jffs2: notice: (6276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.160094][ T8] libceph: connect (1)[c::]:6789 error -101 [ 116.206503][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 117.614665][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 118.125326][ T6296] capability: warning: `syz.0.106' uses 32-bit capabilities (legacy support in use) [ 120.694577][ T6326] syzkaller0: entered promiscuous mode [ 120.702935][ T6326] syzkaller0: entered allmulticast mode [ 121.290700][ T6332] loop3: detected capacity change from 0 to 4096 [ 121.571632][ T6332] EXT4-fs: Ignoring removed i_version option [ 121.587975][ T6332] EXT4-fs: Ignoring removed oldalloc option [ 121.615733][ T6332] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.632824][ T6332] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 122.378781][ T6348] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.121'. [ 131.671059][ T6417] loop0: detected capacity change from 0 to 128 [ 131.679923][ T6417] EXT4-fs (loop0): Test dummy encryption mode enabled [ 131.722026][ T6417] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.748535][ T6415] tipc: Started in network mode [ 131.753663][ T6415] tipc: Node identity 561b9fd9101c, cluster identity 4711 [ 131.771797][ T6417] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.782891][ T6415] tipc: Enabled bearer , priority 0 [ 133.511571][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.518515][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.553392][ T6430] tipc: Resetting bearer [ 133.577787][ T5879] tipc: Node number set to 1174904793 [ 133.587680][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.606555][ T6414] tipc: Disabling bearer [ 134.676809][ T6439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.144'. [ 134.692106][ T6439] Zero length message leads to an empty skb [ 136.792836][ T6470] wg1: entered promiscuous mode [ 136.805784][ T6470] wg1: entered allmulticast mode [ 136.863125][ T6473] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by " [ 137.048914][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 138.920835][ T6500] veth0_vlan: entered allmulticast mode [ 138.942905][ T6501] loop3: detected capacity change from 0 to 256 [ 138.991662][ T6501] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 139.015205][ T6501] exFAT-fs (loop3): failed to load alloc-bitmap [ 139.032001][ T6501] exFAT-fs (loop3): failed to recognize exfat type [ 139.083693][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 139.127067][ T6500] xt_hashlimit: max too large, truncated to 1048576 [ 139.198343][ T6502] ªªªªªª: renamed from vlan0 [ 141.531597][ T6528] CIFS: Attempting to mount //127.0.0.1/share [ 141.734212][ T6534] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 141.806916][ T6528] CIFS: VFS: cifs_mount failed w/return code = -112 [ 142.205163][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'. [ 144.245150][ T6572] mmap: syz.0.182 (6572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.804518][ T6095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.883573][ T6626] loop2: detected capacity change from 0 to 1024 [ 148.937416][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.978227][ T6095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.210056][ T6095] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.336315][ T6095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.521169][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.541426][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.549554][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.568056][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.575938][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.795923][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.742492][ T6662] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 152.805173][ T6668] loop2: detected capacity change from 0 to 2048 [ 152.858320][ T6662] bond1 (unregistering): Released all slaves [ 152.932548][ T6668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.213475][ T6674] loop3: detected capacity change from 0 to 1024 [ 153.471334][ T6674] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 153.669761][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.845663][ T5788] Bluetooth: hci0: command tx timeout [ 156.106837][ T5788] Bluetooth: hci0: command tx timeout [ 156.531247][ T6095] hsr_slave_0: left promiscuous mode [ 156.552377][ T6095] hsr_slave_1: left promiscuous mode [ 156.573745][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.592742][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.601475][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.609122][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.617798][ T6095] bridge_slave_1: left allmulticast mode [ 156.623474][ T6095] bridge_slave_1: left promiscuous mode [ 156.630374][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.642437][ T6095] bridge_slave_0: left allmulticast mode [ 156.648684][ T6095] bridge_slave_0: left promiscuous mode [ 156.656121][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.706322][ T6095] veth1_macvtap: left promiscuous mode [ 156.712114][ T6095] veth0_macvtap: left promiscuous mode [ 156.717803][ T6095] veth1_vlan: left promiscuous mode [ 156.724329][ T6095] veth0_vlan: left promiscuous mode [ 157.184515][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 157.225037][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 157.263652][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.299363][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.605471][ T6095] bond0 (unregistering): Released all slaves [ 157.699455][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 157.712850][ T6718] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 157.722335][ T6720] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 157.776791][ T6646] chnl_net:caif_netlink_parms(): no params data found [ 158.019212][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.061561][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.075115][ T6646] bridge_slave_0: entered allmulticast mode [ 158.088047][ T6646] bridge_slave_0: entered promiscuous mode [ 158.123296][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.148753][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.167785][ T5788] Bluetooth: hci0: command tx timeout [ 158.172423][ T6646] bridge_slave_1: entered allmulticast mode [ 158.199067][ T6646] bridge_slave_1: entered promiscuous mode [ 158.424930][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.518831][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.619251][ T6756] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.219'. [ 158.629621][ T6756] openvswitch: netlink: ct_state flags 00030000 unsupported [ 159.181297][ T6646] team0: Port device team_slave_0 added [ 159.312474][ T6646] team0: Port device team_slave_1 added [ 159.413583][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.429085][ T6762] UHID_CREATE from different security context by process 188 (syz.3.221), this is not allowed. [ 159.454268][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.511206][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.616628][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.659786][ T6766] netlink: 96 bytes leftover after parsing attributes in process `syz.1.222'. [ 159.675688][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.825581][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.246344][ T5788] Bluetooth: hci0: command tx timeout [ 160.267542][ T6646] hsr_slave_0: entered promiscuous mode [ 160.332568][ T6646] hsr_slave_1: entered promiscuous mode [ 160.400445][ T6646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.449222][ T6646] Cannot create hsr debugfs directory [ 161.643463][ T9] IPVS: starting estimator thread 0... [ 161.755770][ T6777] IPVS: using max 19 ests per chain, 45600 per kthread [ 161.880740][ T6646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.908209][ T6646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.950160][ T6646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.002067][ T6646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.201335][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.626136][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 162.834382][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 162.854323][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.496005][ T6790] netlink: 176 bytes leftover after parsing attributes in process `syz.1.224'. [ 163.735588][ T23] usb 4-1: Product: syz [ 163.741681][ T23] usb 4-1: Manufacturer: syz [ 163.760201][ T23] usb 4-1: SerialNumber: syz [ 163.782683][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.802699][ T23] usb 4-1: config 0 descriptor?? [ 163.857438][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.864333][ T23] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 163.962721][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.970040][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.991352][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.998558][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.129245][ T6801] Invalid ELF header type: 2 != 1 [ 164.895075][ T23] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 164.933288][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 165.017856][ T23] usb 4-1: USB disconnect, device number 2 [ 165.102970][ T6807] tipc: Enabled bearer , priority 10 [ 165.147204][ T6807] netlink: 104 bytes leftover after parsing attributes in process `syz.2.230'. [ 165.182555][ T6807] tipc: Enabling of bearer rejected, failed to enable media [ 165.251704][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.794170][ T6646] veth0_vlan: entered promiscuous mode [ 167.839469][ T6646] veth1_vlan: entered promiscuous mode [ 168.236579][ T6646] veth0_macvtap: entered promiscuous mode [ 168.410626][ T6646] veth1_macvtap: entered promiscuous mode [ 168.645273][ T6846] tipc: Failed to remove unknown binding: 66,0,0/0:1156691457/1156691458 [ 168.659674][ T6849] tipc: Failed to remove unknown binding: 66,0,0/0:876740378/876740380 [ 168.687919][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.691251][ T6846] tipc: Failed to remove unknown binding: 66,0,0/0:1156691457/1156691458 [ 168.718608][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.764034][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.207530][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.265635][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.350169][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.393645][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.670193][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.705564][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.715419][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.104509][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.334222][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.369899][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.428519][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.480695][ T6646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.513315][ T6646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.538932][ T6646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.565901][ T6646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.610540][ T6864] batman_adv: batadv0: Adding interface: macsec1 [ 170.617066][ T6864] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.642811][ T6864] batman_adv: batadv0: Interface activated: macsec1 [ 170.758739][ T5788] Bluetooth: hci1: unexpected subevent 0x0e length: 32 > 15 [ 170.864846][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.900883][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.953364][ T6089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.991769][ T6089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.278765][ T6875] syzkaller0: entered promiscuous mode [ 171.285282][ T6875] syzkaller0: entered allmulticast mode [ 172.524398][ T6908] syzkaller0: entered promiscuous mode [ 172.530145][ T6908] syzkaller0: entered allmulticast mode [ 172.649858][ T6916] netlink: 1 bytes leftover after parsing attributes in process `syz.1.249'. [ 173.691557][ T6923] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 173.985897][ T6930] syzkaller0: entered promiscuous mode [ 174.029823][ T6930] syzkaller0: entered allmulticast mode [ 174.334371][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 176.405925][ T6953] binder: BINDER_SET_CONTEXT_MGR already set [ 176.464747][ T6953] binder: 6952:6953 ioctl 4018620d 200000000040 returned -16 [ 177.256231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 178.085326][ T6954] syz.4.258 (6954): drop_caches: 2 [ 180.445861][ T5781] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 180.765676][ T5781] usb 5-1: Using ep0 maxpacket: 32 [ 180.874552][ T5781] usb 5-1: config 1 has an invalid interface number: 33 but max is 2 [ 180.991051][ T5781] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.013290][ T5781] usb 5-1: config 1 has no interface number 2 [ 181.061512][ T5781] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 181.108405][ T5781] usb 5-1: config 1 interface 1 has no altsetting 0 [ 181.150778][ T5781] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 181.177094][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.205568][ T5781] usb 5-1: Product: syz [ 181.218758][ T5781] usb 5-1: Manufacturer: syz [ 181.398860][ T5781] usb 5-1: SerialNumber: syz [ 182.148496][ T5781] usb 5-1: interface 2 not found [ 182.375542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 183.336028][ T5781] usb 5-1: selecting invalid altsetting 0 [ 183.560756][ T7025] loop3: detected capacity change from 0 to 256 [ 183.569155][ T5781] usb 5-1: selecting invalid altsetting 0 [ 183.570055][ T7024] loop4: detected capacity change from 0 to 512 [ 183.575601][ T5781] usbtest: probe of 5-1:1.1 failed with error -22 [ 183.590955][ T5781] usb 5-1: selecting invalid altsetting 0 [ 183.596958][ T5781] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 183.604678][ T5781] usb 5-1: selecting invalid altsetting 0 [ 183.610710][ T5781] snd-ua101: probe of 5-1:1.1 failed with error -22 [ 183.626870][ T5781] usb 5-1: USB disconnect, device number 2 [ 183.663776][ T7025] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 183.726615][ T7029] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.303771][ T7024] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 184.397888][ T7024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.421510][ T27] audit: type=1800 audit(1786402188.783:19): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.270" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 184.456307][ T7024] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 184.522135][ T7024] EXT4-fs (loop4): 1 truncate cleaned up [ 184.558036][ T7024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.387556][ T6646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.612239][ T7066] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 187.906499][ T7066] bond1: entered promiscuous mode [ 187.935895][ T7066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.962701][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.277'. [ 188.010416][ T7068] bond1: entered allmulticast mode [ 188.140284][ T7076] bond1: (slave bridge1): making interface the new active one [ 188.161450][ T7076] bridge1: entered promiscuous mode [ 188.179921][ T7076] bridge1: entered allmulticast mode [ 188.187922][ T7076] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 188.323773][ T7078] syzkaller0: entered promiscuous mode [ 188.329647][ T7078] syzkaller0: entered allmulticast mode [ 188.383038][ T7078] tipc: Started in network mode [ 188.398615][ T7078] tipc: Node identity 4aa1a0ffbf75, cluster identity 4711 [ 188.413983][ T7078] tipc: Enabled bearer , priority 0 [ 188.427867][ T7077] tipc: Resetting bearer [ 188.455073][ T7077] tipc: Disabling bearer [ 188.465711][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 188.688807][ T7088] warning: `syz.4.283' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.881309][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 189.967516][ T7105] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 190.094830][ T7105] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 190.198698][ T7114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.212853][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 190.233573][ T6095] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 190.249182][ T7105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.330425][ T7117] bond_slave_0: entered promiscuous mode [ 190.336431][ T7117] bond_slave_1: entered promiscuous mode [ 190.397109][ T7117] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.412630][ T7117] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 190.450738][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 191.895161][ T7146] netlink: 64 bytes leftover after parsing attributes in process `syz.3.297'. [ 194.331315][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338462][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.420141][ T7165] loop3: detected capacity change from 0 to 512 [ 194.493532][ T7165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.521769][ T7165] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.280702][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.599527][ T7179] netlink: 168 bytes leftover after parsing attributes in process `syz.1.305'. [ 198.755505][ C0] sched: RT throttling activated [ 201.408675][ T7241] loop3: detected capacity change from 0 to 512 [ 201.485355][ T7241] EXT4-fs (loop3): 1 truncate cleaned up [ 201.529440][ T7241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.593692][ T7247] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 201.726211][ T7247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.864378][ T7249] bond1: (slave gretap1): making interface the new active one [ 201.898432][ T7249] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 202.855993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 203.188982][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 203.188995][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 203.231646][ T7249] syz.4.318 (7249) used greatest stack depth: 20056 bytes left [ 203.248128][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.833377][ T7272] syzkaller0: entered promiscuous mode [ 203.847488][ T7272] syzkaller0: entered allmulticast mode [ 207.912106][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 208.185651][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 208.201640][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 208.292374][ T7306] netlink: 'syz.1.329': attribute type 12 has an invalid length. [ 208.321591][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 208.360195][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.604541][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 208.720295][ T7315] loop2: detected capacity change from 0 to 40427 [ 208.752498][ T9] usb 4-1: config 0 descriptor?? [ 208.757564][ T7315] F2FS-fs (loop2): invalid crc value [ 208.769209][ T9] usb 4-1: can't set config #0, error -71 [ 208.783453][ T7315] F2FS-fs (loop2): Found nat_bits in checkpoint [ 208.842329][ T7315] F2FS-fs (loop2): Start checkpoint disabled! [ 208.872326][ T7315] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 208.881210][ T9] usb 4-1: USB disconnect, device number 3 [ 209.352509][ T7333] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 210.140028][ T7337] syzkaller0: entered promiscuous mode [ 210.145659][ T7337] syzkaller0: entered allmulticast mode [ 210.172326][ T6103] kworker/u4:19: attempt to access beyond end of device [ 210.172326][ T6103] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 210.204427][ T6103] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 210.382888][ T6103] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 213.096179][ T7367] netlink: 'syz.3.341': attribute type 11 has an invalid length. [ 215.129045][ T7379] syzkaller0: entered promiscuous mode [ 215.163958][ T7379] syzkaller0: entered allmulticast mode [ 215.334595][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 215.483796][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 218.215790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 220.960851][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 223.077178][ T7539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.674163][ T7543] bond_slave_0: entered promiscuous mode [ 223.679952][ T7543] bond_slave_1: entered promiscuous mode [ 223.685700][ T7543] vxlan0: entered promiscuous mode [ 223.715354][ T7543] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.738760][ T7543] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 223.933782][ T7555] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 224.165729][ T7558] veth3: entered allmulticast mode [ 224.174550][ T7558] bond2: (slave veth3): Enslaving as an active interface with a down link [ 224.192944][ T7562] bond2: (slave veth0_to_bond): making interface the new active one [ 224.280566][ T7562] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 224.826921][ T7555] macvlan3: entered promiscuous mode [ 224.832285][ T7555] macvlan3: entered allmulticast mode [ 224.839831][ T7566] loop2: detected capacity change from 0 to 2048 [ 224.859175][ T7555] bond2: entered promiscuous mode [ 224.864249][ T7555] veth0_to_bond: entered promiscuous mode [ 224.878029][ T7555] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 224.889023][ T7555] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 224.930343][ T7566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.972492][ T7555] bond2: left promiscuous mode [ 224.997048][ T7555] veth0_to_bond: left promiscuous mode [ 227.591938][ T7596] netlink: 184 bytes leftover after parsing attributes in process `syz.2.388'. [ 227.602672][ T7596] bond_slave_0: left promiscuous mode [ 227.609090][ T7596] bond_slave_1: left promiscuous mode [ 227.747319][ T51] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 227.852166][ T7596] vxlan0: left promiscuous mode [ 227.928818][ T7596] bond0: entered allmulticast mode [ 228.013213][ T7596] bond_slave_0: entered allmulticast mode [ 228.106699][ T7596] bond_slave_1: entered allmulticast mode [ 228.199382][ T7596] vxlan0: entered allmulticast mode [ 228.570401][ T7606] loop3: detected capacity change from 0 to 512 [ 229.085077][ T7606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 229.158003][ T7606] System zones: 1-12 [ 229.317875][ T7606] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.391: corrupted in-inode xattr: e_value size too large [ 229.380967][ T7606] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.391: couldn't read orphan inode 15 (err -117) [ 229.404192][ T7606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.027481][ T7616] dns_resolver: Unsupported server list version (6) [ 230.174325][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.181795][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.231654][ T7605] bond_slave_0: left promiscuous mode [ 231.457240][ T7605] bond_slave_1: left promiscuous mode [ 231.486023][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.279370][ T7639] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.396'. [ 233.289079][ T7639] openvswitch: netlink: ct_state flags 00030000 unsupported [ 234.255224][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.342196][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.141491][ T7605] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.154276][ T7605] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.506384][ T7605] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.736356][ T7605] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.976384][ T7605] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.985392][ T7605] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.994399][ T7605] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.003431][ T7605] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.062875][ T7641] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 236.116794][ T7641] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.166339][ T7642] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.221259][ T7643] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.267010][ T7644] bridge1: entered promiscuous mode [ 237.266893][ T7645] bridge1: entered promiscuous mode [ 239.305702][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.698694][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 240.403545][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 240.425631][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.483973][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 240.535721][ T9] gspca_spca501: reg write: error -32 [ 240.542055][ T9] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 240.645957][ T7687] jffs2: notice: (7687) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 240.693512][ T9] spca501: probe of 1-1:1.0 failed with error -22 [ 240.787104][ T7691] atomic_op ffff888072445998 conn xmit_atomic 0000000000000000 [ 241.510113][ T7687] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 243.250393][ T7713] netlink: 'syz.3.411': attribute type 9 has an invalid length. [ 243.258453][ T7713] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.411'. [ 244.551098][ T7718] loop2: detected capacity change from 0 to 512 [ 244.661984][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.711990][ T7722] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 244.803940][ T7726] netlink: 232 bytes leftover after parsing attributes in process `syz.3.415'. [ 244.825877][ T7718] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 244.842238][ T7726] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.415'. [ 244.862786][ T7726] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.415'. [ 245.373122][ T27] audit: type=1107 audit(1786402249.733:20): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 246.786338][ T7731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.488994][ T7761] CIFS: Attempting to mount //127.0.0.1/share [ 248.547625][ T7762] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 248.555040][ T7761] CIFS: VFS: cifs_mount failed w/return code = -112 [ 248.661359][ T7769] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.423'. [ 251.105518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 251.995531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 252.485954][ T51] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 255.052947][ T27] audit: type=1800 audit(1786402259.413:21): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.436" name="bus" dev="ramfs" ino=14406 res=0 errno=0 [ 256.147701][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.178681][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.555521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 261.871862][ T7872] tipc: Enabled bearer , priority 0 [ 261.890424][ T7872] syzkaller0: entered promiscuous mode [ 261.905620][ T7872] syzkaller0: entered allmulticast mode [ 262.058023][ T7872] tipc: Resetting bearer [ 262.128506][ T7871] tipc: Resetting bearer [ 262.196904][ T7871] tipc: Disabling bearer [ 265.285567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 267.505895][ C1] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 267.961829][ T7916] loop4: detected capacity change from 0 to 256 [ 268.071420][ T7916] FAT-fs (loop4): Directory bread(block 64) failed [ 268.078592][ T7916] FAT-fs (loop4): Directory bread(block 65) failed [ 268.085677][ T7916] FAT-fs (loop4): Directory bread(block 66) failed [ 268.092290][ T7916] FAT-fs (loop4): Directory bread(block 67) failed [ 268.099254][ T7916] FAT-fs (loop4): Directory bread(block 68) failed [ 268.106024][ T7916] FAT-fs (loop4): Directory bread(block 69) failed [ 268.112885][ T7916] FAT-fs (loop4): Directory bread(block 70) failed [ 268.119768][ T7916] FAT-fs (loop4): Directory bread(block 71) failed [ 268.126696][ T7916] FAT-fs (loop4): Directory bread(block 72) failed [ 268.133312][ T7916] FAT-fs (loop4): Directory bread(block 73) failed [ 268.168655][ T7916] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.244570][ T7920] syzkaller0: entered promiscuous mode [ 269.274639][ T7920] syzkaller0: entered allmulticast mode [ 269.686013][ T7920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.694814][ T7920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.978230][ T27] audit: type=1800 audit(1786402278.323:22): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.474" name="nexus" dev="configfs" ino=14607 res=0 errno=0 [ 276.945512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 279.208924][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 280.461252][ T8003] loop2: detected capacity change from 0 to 512 [ 280.468641][ T8003] EXT4-fs: quotafile must be on filesystem root [ 280.540824][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.067857][ T8034] loop3: detected capacity change from 0 to 512 [ 283.262042][ T8035] syzkaller0: entered promiscuous mode [ 283.356034][ T8035] syzkaller0: entered allmulticast mode [ 283.526343][ T8034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.894123][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.610444][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 285.666237][ T8054] syzkaller0: entered promiscuous mode [ 285.686159][ T8054] syzkaller0: entered allmulticast mode [ 285.725332][ T8049] tipc: Enabled bearer , priority 0 [ 287.101427][ T8048] tipc: Resetting bearer [ 287.194941][ T8048] tipc: Disabling bearer [ 287.443342][ T8064] loop2: detected capacity change from 0 to 1024 [ 287.566481][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.605732][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.650695][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.666232][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.742912][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.775223][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.827487][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.835986][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.922444][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.942433][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.994201][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.033530][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.083081][ T8073] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.106765][ T8073] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.119080][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.127784][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.254058][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.287060][ T8064] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.353534][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.432098][ T8065] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.610492][ T8073] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.718130][ T8073] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.068447][ T8078] loop4: detected capacity change from 0 to 40427 [ 289.096837][ T8078] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 289.104632][ T8078] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 289.122408][ T8078] F2FS-fs (loop4): invalid crc value [ 289.181284][ T8078] F2FS-fs (loop4): Found nat_bits in checkpoint [ 291.006583][ T8078] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 291.013701][ T8078] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 291.709396][ T8093] syzkaller0: entered promiscuous mode [ 291.731323][ T8094] syz.4.501: attempt to access beyond end of device [ 291.731323][ T8094] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 291.756130][ T8093] syzkaller0: entered allmulticast mode [ 294.346865][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 295.662270][ T8125] Bluetooth: MGMT ver 1.22 [ 296.279470][ T8131] loop3: detected capacity change from 0 to 128 [ 296.478769][ T8131] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.497972][ T8131] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.529908][ T8131] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.068690][ T8138] netlink: 92 bytes leftover after parsing attributes in process `syz.2.520'. [ 298.409736][ T7633] IPVS: starting estimator thread 0... [ 298.489742][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 298.532090][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 298.595275][ T8146] IPVS: using max 21 ests per chain, 50400 per kthread [ 300.134161][ T8157] syzkaller0: entered promiscuous mode [ 300.142903][ T8157] syzkaller0: entered allmulticast mode [ 304.248108][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 304.287128][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 304.579048][ T8192] tipc: Enabled bearer , priority 0 [ 304.598171][ T8192] syzkaller0: entered promiscuous mode [ 304.603764][ T8192] syzkaller0: entered allmulticast mode [ 304.649092][ T8192] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 304.740818][ T8192] tipc: Resetting bearer [ 304.769998][ T8190] tipc: Resetting bearer [ 304.823169][ T8190] tipc: Disabling bearer [ 305.974389][ T8204] syzkaller0: entered promiscuous mode [ 306.016728][ T8204] syzkaller0: entered allmulticast mode [ 307.191110][ T8220] loop2: detected capacity change from 0 to 256 [ 307.251504][ T8220] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 307.375815][ T27] audit: type=1800 audit(1786402311.733:23): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.545" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 307.491267][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 307.529806][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 307.921033][ T8234] syzkaller0: entered promiscuous mode [ 307.937430][ T8234] syzkaller0: entered allmulticast mode [ 309.236939][ T8243] syzkaller0: entered promiscuous mode [ 309.244628][ T8243] syzkaller0: entered allmulticast mode [ 309.287366][ T8243] tipc: Enabled bearer , priority 0 [ 309.297252][ T8242] tipc: Resetting bearer [ 309.360844][ T8242] tipc: Disabling bearer [ 310.429193][ T8248] syzkaller0: entered promiscuous mode [ 310.434710][ T8248] syzkaller0: entered allmulticast mode [ 311.465646][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 311.558473][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 312.340219][ T8275] tipc: Enabling of bearer rejected, failed to enable media [ 316.105807][ T8297] xt_CT: No such helper "netbios-ns" [ 317.369927][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.376408][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.506788][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 317.640727][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 319.363245][ T8320] syzkaller0: entered promiscuous mode [ 319.385954][ T8320] syzkaller0: entered allmulticast mode [ 323.688410][ T8344] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 327.124778][ T8381] syz.2.591: attempt to access beyond end of device [ 327.124778][ T8381] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 327.138689][ T8381] hfsplus: unable to find HFS+ superblock [ 330.070011][ T8395] syz.3.595 (8395) used greatest stack depth: 19544 bytes left [ 330.844050][ T51] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 330.953030][ T8429] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 331.229799][ T2201] IPVS: starting estimator thread 0... [ 331.614423][ T8435] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 331.672290][ T8433] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 331.696375][ T8430] IPVS: using max 26 ests per chain, 62400 per kthread [ 331.764785][ T8433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.778296][ T8438] macvlan2: entered promiscuous mode [ 331.783638][ T8438] macvlan2: entered allmulticast mode [ 331.789791][ T8438] bond2: entered allmulticast mode [ 331.794975][ T8438] bond2: entered promiscuous mode [ 331.802248][ T8438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 331.811704][ T8438] team0: Port device macvlan2 added [ 331.842027][ T8441] bond2: (slave ip6gretap1): making interface the new active one [ 331.850028][ T8441] ip6gretap1: entered promiscuous mode [ 331.855908][ T8441] ip6gretap1: entered allmulticast mode [ 331.863308][ T8441] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 331.874013][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 331.946099][ T8435] macvtap1: entered allmulticast mode [ 331.987669][ T8437] macvtap2: entered allmulticast mode [ 332.028857][ T8435] bond3: (slave bridge2): making interface the new active one [ 332.069713][ T8435] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 333.018144][ T8453] bad cache= option: no%e [ 333.018144][ T8453] [ 333.025139][ T8453] CIFS: VFS: bad cache= option: no%e [ 336.054771][ T8468] syzkaller0: entered promiscuous mode [ 336.106937][ T8468] syzkaller0: entered allmulticast mode [ 343.475244][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 344.271294][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 344.347165][ T8535] syzkaller0: entered promiscuous mode [ 344.422565][ T8535] syzkaller0: entered allmulticast mode [ 345.288403][ T8545] jffs2: notice: (8545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.673151][ T8554] syzkaller0: entered promiscuous mode [ 345.678795][ T8554] syzkaller0: entered allmulticast mode [ 345.693572][ T8554] tipc: Enabled bearer , priority 0 [ 346.076558][ T8553] tipc: Resetting bearer [ 346.642210][ T8553] tipc: Disabling bearer [ 347.216412][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 347.375580][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 347.443042][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 349.043549][ T27] audit: type=1326 audit(1786402353.403:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fad9e0d9 code=0x7ffc0000 [ 349.073776][ T8583] usb 1-1: USB disconnect, device number 2 [ 349.100267][ T27] audit: type=1326 audit(1786402353.403:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fad9e0d9 code=0x7ffc0000 [ 349.154783][ T27] audit: type=1326 audit(1786402353.403:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2fad5e90e code=0x7ffc0000 [ 349.160874][ T51] Bluetooth: hci1: unexpected event for opcode 0x080d [ 349.187929][ T27] audit: type=1326 audit(1786402353.403:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff2fad9f3d7 code=0x7ffc0000 [ 349.212384][ T27] audit: type=1326 audit(1786402353.403:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2fad9e0d9 code=0x7ffc0000 [ 349.238252][ T7634] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 349.247201][ T27] audit: type=1326 audit(1786402353.403:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff2fad9f3d7 code=0x7ffc0000 [ 349.260172][ T8583] ================================================================== [ 349.272343][ T27] audit: type=1326 audit(1786402353.403:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff2fad5e90e code=0x7ffc0000 [ 349.279125][ T8583] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x602/0x7b0 [ 349.304965][ T27] audit: type=1326 audit(1786402353.403:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fad9e0d9 code=0x7ffc0000 [ 349.310933][ T8583] Write of size 8 at addr ffff88802512c358 by task syz.2.648/8583 [ 349.310950][ T8583] [ 349.310972][ T8583] CPU: 0 PID: 8583 Comm: syz.2.648 Not tainted syzkaller #0 [ 349.310988][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.311004][ T8583] Call Trace: [ 349.311011][ T8583] [ 349.311018][ T8583] dump_stack_lvl+0x18c/0x250 [ 349.311057][ T8583] ? __lock_acquire+0x7d80/0x7d80 [ 349.311078][ T8583] ? show_regs_print_info+0x20/0x20 [ 349.311095][ T8583] ? load_image+0x420/0x420 [ 349.311128][ T8583] ? __virt_addr_valid+0x10c/0x380 [ 349.311150][ T8583] ? __virt_addr_valid+0x10c/0x380 [ 349.311168][ T8583] ? __virt_addr_valid+0x10c/0x380 [ 349.311186][ T8583] print_report+0xa8/0x210 [ 349.311200][ T8583] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 349.311215][ T8583] kasan_report+0x117/0x150 [ 349.311231][ T8583] ? slab_free_freelist_hook+0x130/0x1a0 [ 349.311246][ T8583] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 349.311263][ T8583] snd_usb_midi_v2_free+0x602/0x7b0 [ 349.311295][ T8583] snd_usb_midi_v2_free_all+0x67/0x90 [ 349.311314][ T8583] snd_usb_audio_free+0x4c/0x100 [ 349.311405][ T8583] ? try_to_register_card+0x350/0x350 [ 349.311423][ T8583] release_card_device+0x9f/0x1a0 [ 349.311471][ T8583] ? snd_power_wait+0x90/0x90 [ 349.311491][ T8583] device_release+0xbc/0x1e0 [ 349.311512][ T8583] kobject_put+0x21b/0x450 [ 349.311543][ T8583] usb_audio_disconnect+0x60c/0x700 [ 349.311565][ T8583] ? usb_audio_probe+0x1f00/0x1f00 [ 349.311586][ T8583] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 349.311641][ T8583] ? _raw_spin_unlock+0x40/0x40 [ 349.311671][ T8583] ? __lock_acquire+0x7d80/0x7d80 [ 349.311691][ T8583] ? usb_disable_interface+0x31d/0x350 [ 349.311715][ T8583] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 349.311743][ T8583] usb_unbind_interface+0x207/0x870 [ 349.311770][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 349.311797][ T8583] ? usb_driver_release_interface+0x1c0/0x1c0 [ 349.311820][ T8583] device_release_driver_internal+0x458/0x6f0 [ 349.311848][ T8583] bus_remove_device+0x43b/0x520 [ 349.311880][ T8583] ? bus_probe_device+0x260/0x260 [ 349.342645][ T27] audit: type=1326 audit(1786402353.403:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff2fad9e0d9 code=0x7ffc0000 [ 349.343503][ T8583] ? up_write+0x1be/0x410 [ 349.347466][ T27] audit: type=1326 audit(1786402353.403:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fad9e0d9 code=0x7ffc0000 [ 349.353073][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 349.454092][ T7634] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 349.455327][ T8583] device_del+0x51f/0x910 [ 349.455358][ T8583] ? kill_device+0x160/0x160 [ 349.473943][ T7634] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 349.474177][ T8583] ? mutex_lock_nested+0x20/0x20 [ 349.481946][ T7634] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 349.485137][ T8583] ? _raw_spin_lock_irq+0xbb/0xf0 [ 349.485168][ T8583] ? _raw_spin_lock_irqsave+0x100/0x100 [ 349.494581][ T7634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.495001][ T8583] usb_disable_device+0x3ee/0x8a0 [ 349.664283][ T8583] usb_disconnect+0x340/0x8a0 [ 349.668983][ T8583] hub_quiesce+0x171/0x330 [ 349.673423][ T8583] hub_disconnect+0xc6/0x450 [ 349.678028][ T8583] usb_unbind_interface+0x207/0x870 [ 349.683245][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 349.688984][ T8583] ? usb_driver_release_interface+0x1c0/0x1c0 [ 349.695068][ T8583] device_release_driver_internal+0x458/0x6f0 [ 349.701160][ T8583] bus_remove_device+0x43b/0x520 [ 349.706117][ T8583] ? bus_probe_device+0x260/0x260 [ 349.711158][ T8583] ? up_write+0x1be/0x410 [ 349.715499][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 349.721237][ T8583] device_del+0x51f/0x910 [ 349.725584][ T8583] ? kill_device+0x160/0x160 [ 349.730189][ T8583] ? kobject_put+0x421/0x450 [ 349.734797][ T8583] usb_disable_device+0x3ee/0x8a0 [ 349.739852][ T8583] usb_set_configuration+0x449/0x2150 [ 349.745242][ T8583] ? __up_read+0x2b8/0x6b0 [ 349.749666][ T8583] ? notifier_call_chain+0x160/0x380 [ 349.754968][ T8583] ? notifier_call_chain+0x36a/0x380 [ 349.760272][ T8583] ? blocking_notifier_call_chain+0x74/0x90 [ 349.766182][ T8583] ? usb_generic_driver_probe+0x150/0x150 [ 349.771919][ T8583] usb_unbind_device+0x72/0x160 [ 349.776788][ T8583] ? usb_probe_device+0x260/0x260 [ 349.781845][ T8583] device_release_driver_internal+0x458/0x6f0 [ 349.787934][ T8583] unbind_store+0x1a1/0x1d0 [ 349.789460][ T8581] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.792445][ T8583] ? sysfs_kf_read+0x360/0x360 [ 349.792467][ T8583] kernfs_fop_write_iter+0x3a4/0x520 [ 349.792491][ T8583] vfs_write+0x474/0x9a0 [ 349.810858][ T7634] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 349.814116][ T8583] ? file_end_write+0x250/0x250 [ 349.825046][ T8583] ? __fget_files+0x3fc/0x460 [ 349.829747][ T8583] ? __fdget_pos+0x2a3/0x330 [ 349.834358][ T8583] ? ksys_write+0x74/0x260 [ 349.838794][ T8583] ksys_write+0x151/0x260 [ 349.843152][ T8583] ? __ia32_sys_read+0x90/0x90 [ 349.847945][ T8583] do_syscall_64+0x55/0xb0 [ 349.850334][ T7634] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 349.852414][ T8583] ? clear_bhb_loop+0x40/0x90 [ 349.863965][ T8583] ? clear_bhb_loop+0x40/0x90 [ 349.868655][ T8583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.874579][ T8583] RIP: 0033:0x7ff2fad9e0d9 [ 349.879009][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.898635][ T8583] RSP: 002b:00007ff2fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.907067][ T8583] RAX: ffffffffffffffda RBX: 00007ff2fb025fa0 RCX: 00007ff2fad9e0d9 [ 349.915058][ T8583] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000007 [ 349.923052][ T8583] RBP: 00007ff2fae35024 R08: 0000000000000000 R09: 0000000000000000 [ 349.931041][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.939032][ T8583] R13: 00007ff2fb026038 R14: 00007ff2fb025fa0 R15: 00007ffe02eae378 [ 349.947027][ T8583] [ 349.950052][ T8583] [ 349.952384][ T8583] Allocated by task 9: [ 349.956460][ T8583] kasan_set_track+0x4e/0x70 [ 349.961065][ T8583] __kasan_kmalloc+0x8f/0xa0 [ 349.965678][ T8583] snd_ump_endpoint_new+0x7d/0x3a0 [ 349.970928][ T8583] create_midi2_ump+0x314/0x7b0 [ 349.975805][ T8583] snd_usb_midi_v2_create+0x1382/0x48a0 [ 349.981366][ T8583] snd_usb_create_stream+0x262/0x5d0 [ 349.986671][ T8583] usb_audio_probe+0xead/0x1f00 [ 349.991539][ T8583] usb_probe_interface+0x5c2/0xaf0 [ 349.996671][ T8583] really_probe+0x247/0xae0 [ 350.001191][ T8583] __driver_probe_device+0x1f5/0x390 [ 350.006497][ T8583] driver_probe_device+0x4f/0x420 [ 350.011537][ T8583] __device_attach_driver+0x2ca/0x510 [ 350.016930][ T8583] bus_for_each_drv+0x252/0x2e0 [ 350.021802][ T8583] __device_attach+0x2c1/0x420 [ 350.026586][ T8583] bus_probe_device+0x180/0x260 [ 350.031454][ T8583] device_add+0x87c/0xc40 [ 350.035801][ T8583] usb_set_configuration+0x1ad0/0x2150 [ 350.041278][ T8583] usb_generic_driver_probe+0x8d/0x150 [ 350.046757][ T8583] usb_probe_device+0x12a/0x260 [ 350.051681][ T8583] really_probe+0x247/0xae0 [ 350.057655][ T8583] __driver_probe_device+0x1f5/0x390 [ 350.062971][ T8583] driver_probe_device+0x4f/0x420 [ 350.068008][ T8583] __device_attach_driver+0x2ca/0x510 [ 350.073401][ T8583] bus_for_each_drv+0x252/0x2e0 [ 350.078266][ T8583] __device_attach+0x2c1/0x420 [ 350.083053][ T8583] bus_probe_device+0x180/0x260 [ 350.087922][ T8583] device_add+0x87c/0xc40 [ 350.092265][ T8583] usb_new_device+0x995/0x1550 [ 350.097051][ T8583] hub_event+0x29d5/0x4a80 [ 350.101478][ T8583] process_scheduled_works+0xa60/0x1600 [ 350.107038][ T8583] worker_thread+0xa5e/0xfe0 [ 350.111645][ T8583] kthread+0x2fa/0x390 [ 350.115730][ T8583] ret_from_fork+0x48/0x80 [ 350.120165][ T8583] ret_from_fork_asm+0x11/0x20 [ 350.124946][ T8583] [ 350.127288][ T8583] Freed by task 8583: [ 350.131276][ T8583] kasan_set_track+0x4e/0x70 [ 350.135890][ T8583] kasan_save_free_info+0x28/0x40 [ 350.140946][ T8583] ____kasan_slab_free+0x126/0x1f0 [ 350.146072][ T8583] slab_free_freelist_hook+0x130/0x1a0 [ 350.151546][ T8583] __kmem_cache_free+0xba/0x1f0 [ 350.156418][ T8583] snd_rawmidi_free+0x3f2/0x410 [ 350.161288][ T8583] snd_rawmidi_dev_free+0x38/0x40 [ 350.166328][ T8583] __snd_device_free+0x1cd/0x2e0 [ 350.171376][ T8583] snd_device_free_all+0xcf/0x180 [ 350.176421][ T8583] release_card_device+0x6f/0x1a0 [ 350.181464][ T8583] device_release+0xbc/0x1e0 [ 350.186077][ T8583] kobject_put+0x21b/0x450 [ 350.190556][ T8583] usb_audio_disconnect+0x60c/0x700 [ 350.195769][ T8583] usb_unbind_interface+0x207/0x870 [ 350.200983][ T8583] device_release_driver_internal+0x458/0x6f0 [ 350.207075][ T8583] bus_remove_device+0x43b/0x520 [ 350.212032][ T8583] device_del+0x51f/0x910 [ 350.216376][ T8583] usb_disable_device+0x3ee/0x8a0 [ 350.221420][ T8583] usb_disconnect+0x340/0x8a0 [ 350.226108][ T8583] hub_quiesce+0x171/0x330 [ 350.228853][ T8581] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 350.230520][ T8583] hub_disconnect+0xc6/0x450 [ 350.230539][ T8583] usb_unbind_interface+0x207/0x870 [ 350.230560][ T8583] device_release_driver_internal+0x458/0x6f0 [ 350.230583][ T8583] bus_remove_device+0x43b/0x520 [ 350.230599][ T8583] device_del+0x51f/0x910 [ 350.238350][ T8581] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 350.242041][ T8583] usb_disable_device+0x3ee/0x8a0 [ 350.242066][ T8583] usb_set_configuration+0x449/0x2150 [ 350.276388][ T8581] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 350.280354][ T8583] usb_unbind_device+0x72/0x160 [ 350.280384][ T8583] device_release_driver_internal+0x458/0x6f0 [ 350.280408][ T8583] unbind_store+0x1a1/0x1d0 [ 350.280427][ T8583] kernfs_fop_write_iter+0x3a4/0x520 [ 350.280447][ T8583] vfs_write+0x474/0x9a0 [ 350.280463][ T8583] ksys_write+0x151/0x260 [ 350.316562][ T8583] do_syscall_64+0x55/0xb0 [ 350.321000][ T8583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.326909][ T8583] [ 350.329241][ T8583] The buggy address belongs to the object at ffff88802512c000 [ 350.329241][ T8583] which belongs to the cache kmalloc-4k of size 4096 [ 350.343309][ T8583] The buggy address is located 856 bytes inside of [ 350.343309][ T8583] freed 4096-byte region [ffff88802512c000, ffff88802512d000) [ 350.357206][ T8583] [ 350.359539][ T8583] The buggy address belongs to the physical page: [ 350.365969][ T8583] page:ffffea0000944a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25128 [ 350.376131][ T8583] head:ffffea0000944a00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 350.385074][ T8583] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 350.393062][ T8583] page_type: 0xffffffff() [ 350.397422][ T8583] raw: 00fff00000000840 ffff888017c42140 dead000000000100 dead000000000122 [ 350.406019][ T8583] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 350.414604][ T8583] page dumped because: kasan: bad access detected [ 350.421099][ T8583] page_owner tracks the page as allocated [ 350.426390][ T8581] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 350.426808][ T8583] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2108, tgid 2108 (kworker/u4:6), ts 191776680140, free_ts 191671146586 [ 350.426844][ T8583] post_alloc_hook+0x1c1/0x200 [ 350.460793][ T8583] get_page_from_freelist+0x2181/0x22a0 [ 350.466361][ T8583] __alloc_pages+0x1f0/0x460 [ 350.470967][ T8583] alloc_slab_page+0x5d/0x180 [ 350.475659][ T8583] new_slab+0x87/0x2d0 [ 350.479737][ T8583] ___slab_alloc+0xc5c/0x12f0 [ 350.484423][ T8583] __kmem_cache_alloc_node+0x11f/0x250 [ 350.489898][ T8583] __kmalloc_node_track_caller+0xa4/0x230 [ 350.495633][ T8583] kmalloc_reserve+0x116/0x240 [ 350.500437][ T8583] __alloc_skb+0x138/0x2c0 [ 350.504865][ T8583] nsim_dev_trap_report_work+0x253/0xa90 [ 350.510506][ T8583] process_scheduled_works+0xa60/0x1600 [ 350.516065][ T8583] worker_thread+0xa5e/0xfe0 [ 350.520667][ T8583] kthread+0x2fa/0x390 [ 350.524742][ T8583] ret_from_fork+0x48/0x80 [ 350.529171][ T8583] ret_from_fork_asm+0x11/0x20 [ 350.533947][ T8583] page last free stack trace: [ 350.538621][ T8583] free_unref_page_prepare+0x7d7/0x8f0 [ 350.544089][ T8583] free_unref_page+0x32/0x2e0 [ 350.548775][ T8583] __unfreeze_partials+0x1cf/0x210 [ 350.553898][ T8583] put_cpu_partial+0x17c/0x250 [ 350.558672][ T8583] __slab_free+0x319/0x400 [ 350.563093][ T8583] qlist_free_all+0x75/0xd0 [ 350.567610][ T8583] kasan_quarantine_reduce+0x143/0x160 [ 350.573086][ T8583] __kasan_slab_alloc+0x22/0x80 [ 350.577949][ T8583] slab_post_alloc_hook+0x6a/0x4d0 [ 350.583077][ T8583] kmem_cache_alloc+0x17e/0x2c0 [ 350.587945][ T8583] getname_flags+0xbb/0x500 [ 350.592464][ T8583] user_path_at_empty+0x2c/0x60 [ 350.597326][ T8583] do_readlinkat+0xdd/0x490 [ 350.601841][ T8583] __x64_sys_readlink+0x7f/0x90 [ 350.606704][ T8583] do_syscall_64+0x55/0xb0 [ 350.611131][ T8583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.617097][ T8583] [ 350.619430][ T8583] Memory state around the buggy address: [ 350.625065][ T8583] ffff88802512c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 350.633135][ T8583] ffff88802512c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 350.641202][ T8583] >ffff88802512c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 350.649269][ T8583] ^ [ 350.656206][ T8583] ffff88802512c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 350.664276][ T8583] ffff88802512c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 350.672340][ T8583] ================================================================== [ 350.711714][ T7634] usb 4-1: USB disconnect, device number 4 [ 350.753194][ T7634] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 350.773838][ T7634] spcp8x5 4-1:1.0: device disconnected [ 350.793655][ T8583] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 350.800880][ T8583] CPU: 0 PID: 8583 Comm: syz.2.648 Not tainted syzkaller #0 [ 350.808153][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.818197][ T8583] Call Trace: [ 350.821469][ T8583] [ 350.824392][ T8583] dump_stack_lvl+0x18c/0x250 [ 350.829069][ T8583] ? show_regs_print_info+0x20/0x20 [ 350.834261][ T8583] ? load_image+0x420/0x420 [ 350.838771][ T8583] panic+0x2ca/0x720 [ 350.842671][ T8583] ? bpf_jit_dump+0xd0/0xd0 [ 350.847166][ T8583] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 350.853139][ T8583] ? _raw_spin_unlock+0x40/0x40 [ 350.857981][ T8583] ? print_memory_metadata+0x314/0x400 [ 350.863430][ T8583] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 350.868794][ T8583] check_panic_on_warn+0x84/0xa0 [ 350.873725][ T8583] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 350.879086][ T8583] end_report+0x6f/0x130 [ 350.883318][ T8583] kasan_report+0x128/0x150 [ 350.887811][ T8583] ? slab_free_freelist_hook+0x130/0x1a0 [ 350.893431][ T8583] ? snd_usb_midi_v2_free+0x602/0x7b0 [ 350.898822][ T8583] snd_usb_midi_v2_free+0x602/0x7b0 [ 350.904013][ T8583] snd_usb_midi_v2_free_all+0x67/0x90 [ 350.909386][ T8583] snd_usb_audio_free+0x4c/0x100 [ 350.914316][ T8583] ? try_to_register_card+0x350/0x350 [ 350.919678][ T8583] release_card_device+0x9f/0x1a0 [ 350.924693][ T8583] ? snd_power_wait+0x90/0x90 [ 350.929361][ T8583] device_release+0xbc/0x1e0 [ 350.933944][ T8583] kobject_put+0x21b/0x450 [ 350.938364][ T8583] usb_audio_disconnect+0x60c/0x700 [ 350.943575][ T8583] ? usb_audio_probe+0x1f00/0x1f00 [ 350.948692][ T8583] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 350.954586][ T8583] ? _raw_spin_unlock+0x40/0x40 [ 350.959439][ T8583] ? __lock_acquire+0x7d80/0x7d80 [ 350.964823][ T8583] ? usb_disable_interface+0x31d/0x350 [ 350.970288][ T8583] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 350.976183][ T8583] usb_unbind_interface+0x207/0x870 [ 350.981383][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 350.987097][ T8583] ? usb_driver_release_interface+0x1c0/0x1c0 [ 350.993154][ T8583] device_release_driver_internal+0x458/0x6f0 [ 350.999220][ T8583] bus_remove_device+0x43b/0x520 [ 351.004149][ T8583] ? bus_probe_device+0x260/0x260 [ 351.009163][ T8583] ? up_write+0x1be/0x410 [ 351.013484][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 351.019204][ T8583] device_del+0x51f/0x910 [ 351.023619][ T8583] ? kill_device+0x160/0x160 [ 351.028285][ T8583] ? mutex_lock_nested+0x20/0x20 [ 351.033217][ T8583] ? _raw_spin_lock_irq+0xbb/0xf0 [ 351.038237][ T8583] ? _raw_spin_lock_irqsave+0x100/0x100 [ 351.043777][ T8583] usb_disable_device+0x3ee/0x8a0 [ 351.048795][ T8583] usb_disconnect+0x340/0x8a0 [ 351.053468][ T8583] hub_quiesce+0x171/0x330 [ 351.057873][ T8583] hub_disconnect+0xc6/0x450 [ 351.062451][ T8583] usb_unbind_interface+0x207/0x870 [ 351.067643][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 351.073355][ T8583] ? usb_driver_release_interface+0x1c0/0x1c0 [ 351.079412][ T8583] device_release_driver_internal+0x458/0x6f0 [ 351.085471][ T8583] bus_remove_device+0x43b/0x520 [ 351.090410][ T8583] ? bus_probe_device+0x260/0x260 [ 351.095426][ T8583] ? up_write+0x1be/0x410 [ 351.099745][ T8583] ? kernfs_remove_by_name_ns+0x117/0x150 [ 351.105456][ T8583] device_del+0x51f/0x910 [ 351.109785][ T8583] ? kill_device+0x160/0x160 [ 351.114365][ T8583] ? kobject_put+0x421/0x450 [ 351.118945][ T8583] usb_disable_device+0x3ee/0x8a0 [ 351.123963][ T8583] usb_set_configuration+0x449/0x2150 [ 351.129327][ T8583] ? __up_read+0x2b8/0x6b0 [ 351.133729][ T8583] ? notifier_call_chain+0x160/0x380 [ 351.139005][ T8583] ? notifier_call_chain+0x36a/0x380 [ 351.144280][ T8583] ? blocking_notifier_call_chain+0x74/0x90 [ 351.150163][ T8583] ? usb_generic_driver_probe+0x150/0x150 [ 351.155878][ T8583] usb_unbind_device+0x72/0x160 [ 351.160722][ T8583] ? usb_probe_device+0x260/0x260 [ 351.165732][ T8583] device_release_driver_internal+0x458/0x6f0 [ 351.171794][ T8583] unbind_store+0x1a1/0x1d0 [ 351.176289][ T8583] ? sysfs_kf_read+0x360/0x360 [ 351.181039][ T8583] kernfs_fop_write_iter+0x3a4/0x520 [ 351.186317][ T8583] vfs_write+0x474/0x9a0 [ 351.190555][ T8583] ? file_end_write+0x250/0x250 [ 351.195396][ T8583] ? __fget_files+0x3fc/0x460 [ 351.200066][ T8583] ? __fdget_pos+0x2a3/0x330 [ 351.204654][ T8583] ? ksys_write+0x74/0x260 [ 351.209069][ T8583] ksys_write+0x151/0x260 [ 351.213390][ T8583] ? __ia32_sys_read+0x90/0x90 [ 351.218148][ T8583] do_syscall_64+0x55/0xb0 [ 351.222557][ T8583] ? clear_bhb_loop+0x40/0x90 [ 351.227221][ T8583] ? clear_bhb_loop+0x40/0x90 [ 351.231886][ T8583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.237769][ T8583] RIP: 0033:0x7ff2fad9e0d9 [ 351.242174][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.261771][ T8583] RSP: 002b:00007ff2fbcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.270179][ T8583] RAX: ffffffffffffffda RBX: 00007ff2fb025fa0 RCX: 00007ff2fad9e0d9 [ 351.278141][ T8583] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000007 [ 351.286100][ T8583] RBP: 00007ff2fae35024 R08: 0000000000000000 R09: 0000000000000000 [ 351.294058][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.302014][ T8583] R13: 00007ff2fb026038 R14: 00007ff2fb025fa0 R15: 00007ffe02eae378 [ 351.309977][ T8583] [ 351.313225][ T8583] Kernel Offset: disabled [ 351.317532][ T8583] Rebooting in 86400 seconds..