last executing test programs: 32.953698868s ago: executing program 3 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x125}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 30.405406352s ago: executing program 3 (id=93): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 27.889772284s ago: executing program 3 (id=96): socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000340)=0x8) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) 24.814356123s ago: executing program 3 (id=98): userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r2, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x18e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffdfffff}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 17.093616739s ago: executing program 3 (id=106): socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000340)=0x8) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) 16.507781947s ago: executing program 3 (id=107): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000080, &(0x7f0000000180)=ANY=[@ANYBLOB="0017b0615ea1def37e0058855f3cbcb7a66a0c69522e8e82a984cc8a80b6acf8061b28d6a835c49830f08c01afd4327410bb11e0fa68993217daaba5c6a5dfb2fb0038a5da43b38209017d4610ade811c43f3b8f28fdcadcebba31dab440f05639"], 0x12, 0x32b, &(0x7f0000000840)="$eJzs3cFrI1UcB/Bfu9tWKt30IIKC+NCLXoa2/gMG2QWxoNStrB6EWTvVkNmkZMJKVtHevPp3LB69CeI/0It3bx6EXjzuYTGSju22a5aVxTh1+/lA8n7Jy5d5Q3jhdwnv8Ma3t7q7VbabD2P+zRTzETF/L2L1qKrN1U9z9avFOG0/Xm/d+OWl9z/86J325ubVrZSuta+/sZFSuvLyj59/+d0rPw2f/eD7Kz8sxcHqx4e/b/x68PzBC4d/XP+sU6VOlXr9YcrTzX5/mN8si7TTqbpZSu+VRV4VqdOrisGZ+d/K/t7eKOW9nZXlvUFRVSnvjVK3GKVhPw0Ho5R/mnd6KcuytLIcPM723a2tvN30KpitwaCdTzbv0t9mtu82siAAoFH/uP+fvH9UN9n/7+r//1X6/4tg0v8v/rV/z9L/AwAAAAAAAAAAAADA/8G98bg1Ho9bx+PDjymRhQaWyYw8wffPU+TUH/eeiSi/ub19e7se6/n2bnSijCLWohX3I8Yn6vra25tX19KR1Vi59XWdn4yXzubXoxWr0/PrdT6dzS/E8un8RrTiuen5jan5xXjt1VP5LFrx8yfRjzJ2YpJ9kP9qPaW33t18KL909DkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALoYsnZh6fn+WPWq+zp+cr78Wrbg//Xz+tann81+OFy83e+8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKwa3enmZVkMFE9R8cWlJq6+cC7ufYbF3H69ac7Leh5bHO/yJ4k3+KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXlw6HfTKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBJ1ehONy/LYjDD4lHXnquH/f/wdgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM69PwMAAP//aEUjOw==") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xffffffffffffffff}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x204e) 15.277117237s ago: executing program 32 (id=107): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000080, &(0x7f0000000180)=ANY=[@ANYBLOB="0017b0615ea1def37e0058855f3cbcb7a66a0c69522e8e82a984cc8a80b6acf8061b28d6a835c49830f08c01afd4327410bb11e0fa68993217daaba5c6a5dfb2fb0038a5da43b38209017d4610ade811c43f3b8f28fdcadcebba31dab440f05639"], 0x12, 0x32b, &(0x7f0000000840)="$eJzs3cFrI1UcB/Bfu9tWKt30IIKC+NCLXoa2/gMG2QWxoNStrB6EWTvVkNmkZMJKVtHevPp3LB69CeI/0It3bx6EXjzuYTGSju22a5aVxTh1+/lA8n7Jy5d5Q3jhdwnv8Ma3t7q7VbabD2P+zRTzETF/L2L1qKrN1U9z9avFOG0/Xm/d+OWl9z/86J325ubVrZSuta+/sZFSuvLyj59/+d0rPw2f/eD7Kz8sxcHqx4e/b/x68PzBC4d/XP+sU6VOlXr9YcrTzX5/mN8si7TTqbpZSu+VRV4VqdOrisGZ+d/K/t7eKOW9nZXlvUFRVSnvjVK3GKVhPw0Ho5R/mnd6KcuytLIcPM723a2tvN30KpitwaCdTzbv0t9mtu82siAAoFH/uP+fvH9UN9n/7+r//1X6/4tg0v8v/rV/z9L/AwAAAAAAAAAAAADA/8G98bg1Ho9bx+PDjymRhQaWyYw8wffPU+TUH/eeiSi/ub19e7se6/n2bnSijCLWohX3I8Yn6vra25tX19KR1Vi59XWdn4yXzubXoxWr0/PrdT6dzS/E8un8RrTiuen5jan5xXjt1VP5LFrx8yfRjzJ2YpJ9kP9qPaW33t18KL909DkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALoYsnZh6fn+WPWq+zp+cr78Wrbg//Xz+tann81+OFy83e+8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKwa3enmZVkMFE9R8cWlJq6+cC7ufYbF3H69ac7Leh5bHO/yJ4k3+KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXlw6HfTKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBJ1ehONy/LYjDD4lHXnquH/f/wdgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM69PwMAAP//aEUjOw==") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xffffffffffffffff}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x204e) 14.323529294s ago: executing program 2 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x8810) sendmsg$nl_route(r2, 0x0, 0x8010) syz_usb_connect$uac2(0x3, 0x98, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 13.847488477s ago: executing program 0 (id=113): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 13.537581252s ago: executing program 0 (id=114): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r1, 0x1, 0x7, &(0x7f0000000040)="c04bfa0a", 0xa) read$FUSE(r2, &(0x7f0000002000)={0x2020}, 0xfffffc7c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 13.330257272s ago: executing program 1 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() gettid() timer_create(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) 12.807992517s ago: executing program 2 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) 12.052014334s ago: executing program 0 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.963694568s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x8) write$binfmt_aout(r2, 0x0, 0x6a) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000300)='`', 0x1}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/110, 0x6e}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040800) 10.535703268s ago: executing program 2 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 9.339430076s ago: executing program 1 (id=120): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="390200000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00d299988014986ce982", @ANYRES32=0x0, @ANYRES32=0x0], 0x239) 9.121278466s ago: executing program 0 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) pwritev2(r0, &(0x7f0000000840)=[{&(0x7f0000000600)='?', 0x1}], 0x1, 0x4, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') fanotify_mark(0xffffffffffffffff, 0x11, 0x8000013, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.01978544s ago: executing program 1 (id=122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.37010559s ago: executing program 2 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.195579328s ago: executing program 0 (id=124): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.887760102s ago: executing program 1 (id=125): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.665551779s ago: executing program 2 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x30}}, 0x20000000) 1.663851279s ago: executing program 0 (id=133): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x5, 0x4c0, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xca60, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x26, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}]}, 0x28}}, 0x0) 1.663390439s ago: executing program 1 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) close(r0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 0s ago: executing program 2 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r3}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 74.222786][ T5760] cgroup: Unknown subsys name 'net' [ 74.357361][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.041654][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.592633][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.602660][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.610377][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.610766][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.619942][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.626126][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.633209][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.639848][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.648463][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.653206][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.668263][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.676622][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.677944][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.684969][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.692692][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.705191][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.730686][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.739327][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.747491][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.754967][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.761409][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.774310][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.782134][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.790368][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.163412][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.222336][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 78.360149][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.368149][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.378224][ T5771] bridge_slave_0: entered allmulticast mode [ 78.386187][ T5771] bridge_slave_0: entered promiscuous mode [ 78.422744][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.430179][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.437347][ T5771] bridge_slave_1: entered allmulticast mode [ 78.444600][ T5771] bridge_slave_1: entered promiscuous mode [ 78.452304][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.478671][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.485960][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.493283][ T5775] bridge_slave_0: entered allmulticast mode [ 78.500173][ T5775] bridge_slave_0: entered promiscuous mode [ 78.514592][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.521813][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.528981][ T5775] bridge_slave_1: entered allmulticast mode [ 78.535937][ T5775] bridge_slave_1: entered promiscuous mode [ 78.554194][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.568841][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.589339][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.686771][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.709337][ T5771] team0: Port device team_slave_0 added [ 78.717452][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.757061][ T5771] team0: Port device team_slave_1 added [ 78.794154][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.801545][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.808689][ T5777] bridge_slave_0: entered allmulticast mode [ 78.815815][ T5777] bridge_slave_0: entered promiscuous mode [ 78.836533][ T5775] team0: Port device team_slave_0 added [ 78.854301][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.861710][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.868920][ T5777] bridge_slave_1: entered allmulticast mode [ 78.876415][ T5777] bridge_slave_1: entered promiscuous mode [ 78.897742][ T5775] team0: Port device team_slave_1 added [ 78.904148][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.911723][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.918882][ T5776] bridge_slave_0: entered allmulticast mode [ 78.926224][ T5776] bridge_slave_0: entered promiscuous mode [ 78.935078][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.942306][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.949458][ T5776] bridge_slave_1: entered allmulticast mode [ 78.956552][ T5776] bridge_slave_1: entered promiscuous mode [ 78.983379][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.990669][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.017236][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.047537][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.060594][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.071052][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.078010][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.104378][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.167225][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.174342][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.200584][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.214487][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.221631][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.248702][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.264827][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.277484][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.290101][ T5777] team0: Port device team_slave_0 added [ 79.330423][ T5777] team0: Port device team_slave_1 added [ 79.388537][ T5775] hsr_slave_0: entered promiscuous mode [ 79.395608][ T5775] hsr_slave_1: entered promiscuous mode [ 79.405669][ T5776] team0: Port device team_slave_0 added [ 79.419507][ T5771] hsr_slave_0: entered promiscuous mode [ 79.425934][ T5771] hsr_slave_1: entered promiscuous mode [ 79.432817][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.440735][ T5771] Cannot create hsr debugfs directory [ 79.458780][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.465904][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.492172][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.506041][ T5776] team0: Port device team_slave_1 added [ 79.543541][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.550807][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.576892][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.595596][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.605372][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.631725][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.650101][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.657106][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.683372][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.710286][ T5782] Bluetooth: hci0: command tx timeout [ 79.790449][ T5782] Bluetooth: hci3: command tx timeout [ 79.792591][ T5780] Bluetooth: hci1: command tx timeout [ 79.833306][ T5777] hsr_slave_0: entered promiscuous mode [ 79.840044][ T5777] hsr_slave_1: entered promiscuous mode [ 79.846122][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.854758][ T5777] Cannot create hsr debugfs directory [ 79.869862][ T5780] Bluetooth: hci2: command tx timeout [ 79.918194][ T5776] hsr_slave_0: entered promiscuous mode [ 79.924625][ T5776] hsr_slave_1: entered promiscuous mode [ 79.931711][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.939293][ T5776] Cannot create hsr debugfs directory [ 80.184273][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.198106][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.209190][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.240740][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.345293][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.363969][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.379398][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.389175][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.488583][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.510515][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.525461][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.535913][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.651669][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.670846][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.680728][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.691762][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.754957][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.785715][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.814955][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.828188][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.863005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.870614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.895393][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.908981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.916696][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.928785][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.935948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.962285][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.969437][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.046666][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.076994][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.084210][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.131347][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.149553][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.156885][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.227009][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.283397][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.343945][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.351161][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.389408][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.396648][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.687651][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.758883][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.790749][ T5780] Bluetooth: hci0: command tx timeout [ 81.862807][ T5771] veth0_vlan: entered promiscuous mode [ 81.870020][ T5780] Bluetooth: hci1: command tx timeout [ 81.871243][ T5782] Bluetooth: hci3: command tx timeout [ 81.930745][ T5771] veth1_vlan: entered promiscuous mode [ 81.950321][ T5782] Bluetooth: hci2: command tx timeout [ 81.968910][ T5775] veth0_vlan: entered promiscuous mode [ 81.985082][ T5775] veth1_vlan: entered promiscuous mode [ 82.017399][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.035036][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.079477][ T5771] veth0_macvtap: entered promiscuous mode [ 82.103803][ T5771] veth1_macvtap: entered promiscuous mode [ 82.118582][ T5775] veth0_macvtap: entered promiscuous mode [ 82.130626][ T5775] veth1_macvtap: entered promiscuous mode [ 82.171882][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.196585][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.209844][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.222137][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.236598][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.246786][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.258290][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.269236][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.297437][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.306656][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.315792][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.324594][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.340715][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.349454][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.359437][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.369254][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.385256][ T5776] veth0_vlan: entered promiscuous mode [ 82.399486][ T5777] veth0_vlan: entered promiscuous mode [ 82.446370][ T5777] veth1_vlan: entered promiscuous mode [ 82.457852][ T5776] veth1_vlan: entered promiscuous mode [ 82.587646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.592138][ T5776] veth0_macvtap: entered promiscuous mode [ 82.604408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.629139][ T5777] veth0_macvtap: entered promiscuous mode [ 82.646775][ T5776] veth1_macvtap: entered promiscuous mode [ 82.676484][ T5777] veth1_macvtap: entered promiscuous mode [ 82.713092][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.722396][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.736030][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.743498][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.793649][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.806426][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.817389][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.825086][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.843059][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.854002][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.866735][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.875994][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.888388][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.898707][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.909270][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.921236][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.932673][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.943713][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.958935][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.975129][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.987672][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.006621][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.036662][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.059497][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.072989][ T5833] ======================================================= [ 83.072989][ T5833] WARNING: The mand mount option has been deprecated and [ 83.072989][ T5833] and is ignored by this kernel. Remove the mand [ 83.072989][ T5833] option from the mount to silence this warning. [ 83.072989][ T5833] ======================================================= [ 83.077073][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.131987][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.143871][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.191925][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.215163][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.242506][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.264692][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.275835][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.286703][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.298631][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.315252][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.325925][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.335339][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.344478][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.025149][ T5782] Bluetooth: hci0: command tx timeout [ 84.032036][ T5780] Bluetooth: hci3: command tx timeout [ 84.037489][ T5780] Bluetooth: hci1: command tx timeout [ 84.043479][ T5778] Bluetooth: hci2: command tx timeout [ 84.269465][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.331332][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.340794][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.423728][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.447306][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.469786][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.490805][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.557677][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.713972][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.760469][ T5864] tipc: Started in network mode [ 85.791460][ T5864] tipc: Node identity 2ac61cd3f67b, cluster identity 4711 [ 85.854316][ T5864] tipc: Enabled bearer , priority 0 [ 85.901395][ T5867] syzkaller0: entered promiscuous mode [ 85.906962][ T5867] syzkaller0: entered allmulticast mode [ 86.109911][ T5780] Bluetooth: hci0: command tx timeout [ 86.115587][ T5780] Bluetooth: hci3: command tx timeout [ 86.123167][ T5778] Bluetooth: hci1: command tx timeout [ 86.128825][ T5782] Bluetooth: hci2: command tx timeout [ 86.507947][ T5864] tipc: Resetting bearer [ 86.557499][ T5862] tipc: Resetting bearer [ 86.682363][ T5862] tipc: Disabling bearer [ 90.234074][ T5889] syz.1.14[5889]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.369208][ T5889] loop1: detected capacity change from 0 to 128 [ 90.420108][ T5889] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 90.460133][ T5885] syzkaller0: entered promiscuous mode [ 90.461424][ T5765] udevd[5765]: incorrect ext4 checksum on /dev/loop1 [ 90.465660][ T5885] syzkaller0: entered allmulticast mode [ 90.646562][ T5885] 0: reclassify loop, rule prio 0, protocol 800 [ 91.022882][ T5894] Zero length message leads to an empty skb [ 92.131317][ T971] cfg80211: failed to load regulatory.db [ 92.280693][ T5901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.622927][ T5920] gadgetfs: bound to dummy_udc driver [ 95.180113][ T5918] gadgetfs: suspended from state 2 [ 96.520036][ T5810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.989747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.109851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.349626][ C0] sched: RT throttling activated [ 105.874389][ T5988] ip_tables: iptables: counters copy to user failed while replacing table [ 106.820007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 107.229787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.570167][ T6013] process 'syz.1.48' launched '/dev/fd/3' with NULL argv: empty string added [ 110.602998][ T28] audit: type=1326 audit(1790070030.531:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.2.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1aa419e159 code=0x0 [ 111.135632][ T6032] atomic_op ffff88805e65a998 conn xmit_atomic 0000000000000000 [ 114.499884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 114.909799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 117.059917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 117.633633][ T6063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.906046][ T6063] bond1: (slave geneve2): making interface the new active one [ 117.932737][ T6063] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 118.169784][ T6063] syz.1.54 (6063) used greatest stack depth: 20024 bytes left [ 118.402005][ T6072] FAULT_INJECTION: forcing a failure. [ 118.402005][ T6072] name failslab, interval 1, probability 0, space 0, times 1 [ 118.429954][ T6071] loop1: detected capacity change from 0 to 512 [ 118.439150][ T6072] CPU: 0 PID: 6072 Comm: syz.0.57 Not tainted syzkaller #0 [ 118.446423][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.456545][ T6072] Call Trace: [ 118.459877][ T6072] [ 118.462847][ T6072] dump_stack_lvl+0x18c/0x250 [ 118.467588][ T6072] ? show_regs_print_info+0x20/0x20 [ 118.472846][ T6072] ? load_image+0x420/0x420 [ 118.477397][ T6072] ? __might_sleep+0xe0/0xe0 [ 118.482037][ T6072] ? __lock_acquire+0x7d80/0x7d80 [ 118.487153][ T6072] should_fail_ex+0x394/0x4c0 [ 118.491888][ T6072] should_failslab+0x9/0x20 [ 118.496530][ T6072] slab_pre_alloc_hook+0x59/0x300 [ 118.501612][ T6072] ? x509_get_sig_params+0x215/0x860 [ 118.506951][ T6072] ? x509_get_sig_params+0x215/0x860 [ 118.512298][ T6072] __kmem_cache_alloc_node+0x53/0x250 [ 118.517819][ T6072] ? x509_get_sig_params+0x215/0x860 [ 118.523160][ T6072] __kmalloc+0xa7/0x240 [ 118.527377][ T6072] x509_get_sig_params+0x215/0x860 [ 118.532643][ T6072] ? __asan_memcpy+0x40/0x70 [ 118.537292][ T6072] x509_cert_parse+0x4af/0x7b0 [ 118.542117][ T6072] x509_key_preparse+0x64/0x6c0 [ 118.547018][ T6072] ? down_read+0x1ac/0x2e0 [ 118.551477][ T6072] asymmetric_key_preparse+0xa9/0x140 [ 118.556896][ T6072] __key_create_or_update+0x3a6/0xa60 [ 118.562329][ T6072] ? key_create_or_update+0x60/0x60 [ 118.567574][ T6072] ? bpf_lsm_key_permission+0x9/0x10 [ 118.572914][ T6072] ? lookup_user_key+0xb66/0x1140 [ 118.578000][ T6072] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 118.584036][ T6072] key_create_or_update+0x42/0x60 [ 118.589112][ T6072] __se_sys_add_key+0x34f/0x410 [ 118.594021][ T6072] ? __x64_sys_add_key+0xc0/0xc0 [ 118.599027][ T6072] ? lockdep_hardirqs_on+0x98/0x150 [ 118.604265][ T6072] ? __x64_sys_add_key+0x20/0xc0 [ 118.609254][ T6072] do_syscall_64+0x55/0xb0 [ 118.613720][ T6072] ? clear_bhb_loop+0x40/0x90 [ 118.618445][ T6072] ? clear_bhb_loop+0x40/0x90 [ 118.623176][ T6072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.629111][ T6072] RIP: 0033:0x7f06beb9e159 [ 118.633568][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.653305][ T6072] RSP: 002b:00007f06bfb43028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 118.661766][ T6072] RAX: ffffffffffffffda RBX: 00007f06bee25fa0 RCX: 00007f06beb9e159 [ 118.669776][ T6072] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 118.677799][ T6072] RBP: 00007f06bec3506b R08: ffffffffffffffff R09: 0000000000000000 [ 118.685814][ T6072] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 118.693831][ T6072] R13: 00007f06bee26038 R14: 00007f06bee25fa0 R15: 00007ffd79092188 [ 118.701867][ T6072] [ 118.708334][ T6071] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 119.087988][ T6085] tipc: Started in network mode [ 119.099183][ T6085] tipc: Node identity c6a51d61098e, cluster identity 4711 [ 119.124221][ T6085] tipc: Enabled bearer , priority 0 [ 119.160071][ T6085] syzkaller0: entered promiscuous mode [ 119.188929][ T6085] syzkaller0: entered allmulticast mode [ 119.331710][ T6085] tipc: Resetting bearer [ 119.406678][ T6091] snd_aloop snd_aloop.0: control 0:129:-2:syz0:245 is already present [ 119.448462][ T6084] tipc: Resetting bearer [ 119.981786][ T6084] tipc: Disabling bearer [ 121.906374][ T6083] syz.2.55 (6083): drop_caches: 2 [ 122.136888][ T28] audit: type=1800 audit(1790070042.061:3): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="attr_allow_any_host" dev="configfs" ino=8360 res=0 errno=0 [ 122.220069][ T28] audit: type=1800 audit(1790070042.111:4): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="addr_trtype" dev="configfs" ino=8366 res=0 errno=0 [ 122.240559][ T6100] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 122.289698][ T28] audit: type=1800 audit(1790070042.131:5): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="addr_traddr" dev="configfs" ino=8367 res=0 errno=0 [ 122.359732][ T28] audit: type=1800 audit(1790070042.131:6): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="addr_trsvcid" dev="configfs" ino=8368 res=0 errno=0 [ 122.415577][ T28] audit: type=1800 audit(1790070042.131:7): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="addr_adrfam" dev="configfs" ino=8369 res=0 errno=0 [ 124.739986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 128.867722][ T6150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.632452][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 131.386991][ T6164] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.212618][ T6178] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6179] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6178] [ 132.829791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.156165][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164991][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.229833][ T6186] loop0: detected capacity change from 0 to 512 [ 134.241427][ T6186] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.460546][ T6186] EXT4-fs: Invalid want_extra_isize 32768 [ 135.095285][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.547766][ T6194] tipc: Started in network mode [ 135.553177][ T6194] tipc: Node identity c26763302c6c, cluster identity 4711 [ 135.571316][ T6194] tipc: Enabled bearer , priority 0 [ 136.049038][ T6194] syzkaller0: entered promiscuous mode [ 136.124974][ T6194] syzkaller0: entered allmulticast mode [ 136.700225][ T27] tipc: Node number set to 3993723696 [ 136.741073][ T6194] tipc: Resetting bearer [ 136.766631][ T6193] tipc: Resetting bearer [ 136.818984][ T6193] tipc: Disabling bearer [ 136.890430][ T6200] syzkaller0: entered promiscuous mode [ 136.898674][ T6200] syzkaller0: entered allmulticast mode [ 137.077059][ T6201] tipc: Enabled bearer , priority 0 [ 137.361141][ T6205] tipc: Resetting bearer [ 137.968725][ T6199] tipc: Resetting bearer [ 138.690600][ T6199] tipc: Disabling bearer [ 139.175707][ T27] tipc: Node number set to 3475709281 [ 146.695406][ T6228] ip_tables: iptables: counters copy to user failed while replacing table [ 150.749775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 152.502055][ T1086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.791122][ T1086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.172689][ T1086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.352442][ T1086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.500364][ T6251] tipc: Enabled bearer , priority 0 [ 153.545959][ T6251] syzkaller0: entered promiscuous mode [ 153.600862][ T6251] syzkaller0: entered allmulticast mode [ 153.662304][ T6251] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 154.147049][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.158648][ T6257] tipc: Resetting bearer [ 154.170255][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.178448][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.184856][ T6263] loop1: detected capacity change from 0 to 1024 [ 154.200287][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.210993][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.218998][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.252941][ T6263] EXT4-fs: Ignoring removed bh option [ 154.291861][ T6250] tipc: Resetting bearer [ 154.315997][ T6263] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 154.348256][ T6250] tipc: Disabling bearer [ 154.356073][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.420300][ T6265] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 154.683779][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 154.711675][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 154.933229][ T1086] tipc: Left network mode [ 155.092456][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.491062][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 155.686529][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 156.275781][ T5778] Bluetooth: hci1: command tx timeout [ 157.920566][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.927823][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.935140][ T6261] bridge_slave_0: entered allmulticast mode [ 157.942684][ T6261] bridge_slave_0: entered promiscuous mode [ 157.958620][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.969767][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.977054][ T6261] bridge_slave_1: entered allmulticast mode [ 157.987281][ T6261] bridge_slave_1: entered promiscuous mode [ 158.369866][ T5778] Bluetooth: hci1: command tx timeout [ 158.709081][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.834335][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.092910][ T6261] team0: Port device team_slave_0 added [ 159.162706][ T6261] team0: Port device team_slave_1 added [ 160.431810][ T5778] Bluetooth: hci1: command tx timeout [ 160.494960][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 160.517041][ T6332] loop1: detected capacity change from 0 to 512 [ 162.068144][ T6332] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.122: invalid indirect mapped block 256 (level 2) [ 162.118875][ T6332] EXT4-fs (loop1): 2 truncates cleaned up [ 162.135568][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.772372][ T6344] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.122: bg 0: block 5: invalid block bitmap [ 163.349477][ T5778] Bluetooth: hci1: command tx timeout [ 163.371647][ T6344] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 163.384082][ T6344] EXT4-fs (loop1): This should not happen!! Data will be lost [ 163.384082][ T6344] [ 163.393824][ T6344] EXT4-fs (loop1): Total free blocks count 0 [ 163.399865][ T6344] EXT4-fs (loop1): Free/Dirty block details [ 163.405787][ T6344] EXT4-fs (loop1): free_blocks=0 [ 163.410765][ T6344] EXT4-fs (loop1): dirty_blocks=16000 [ 163.416139][ T6344] EXT4-fs (loop1): Block reservation details [ 163.422172][ T6344] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 163.449404][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.517259][ T38] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 163.531820][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.734168][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.772276][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.779272][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.857533][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.196508][ T6261] hsr_slave_0: entered promiscuous mode [ 164.246139][ T6261] hsr_slave_1: entered promiscuous mode [ 164.310012][ T6261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.317669][ T6261] Cannot create hsr debugfs directory [ 164.704907][ T1086] hsr_slave_0: left promiscuous mode [ 164.726702][ T1086] hsr_slave_1: left promiscuous mode [ 164.733260][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.753744][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.771306][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.779183][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.790561][ T1086] bridge_slave_1: left allmulticast mode [ 164.796272][ T1086] bridge_slave_1: left promiscuous mode [ 164.806432][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.837943][ T1086] bridge_slave_0: left allmulticast mode [ 164.849749][ T1086] bridge_slave_0: left promiscuous mode [ 164.855647][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.952970][ T1086] veth1_macvtap: left promiscuous mode [ 164.959091][ T1086] veth0_macvtap: left promiscuous mode [ 164.965255][ T1086] veth1_vlan: left promiscuous mode [ 164.973018][ T1086] veth0_vlan: left promiscuous mode [ 165.069529][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500000000 [ 165.104180][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 165.145497][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 165.166127][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 165.192425][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 165.236450][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 165.280638][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 165.324465][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 165.349820][ T6358] kvm: kvm [6357]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 165.980263][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 166.016766][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 166.060423][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.099691][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.398122][ T1086] bond0 (unregistering): Released all slaves [ 166.536457][ T6364] syzkaller0: entered promiscuous mode [ 166.542137][ T6364] syzkaller0: entered allmulticast mode [ 166.790509][ T6261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.818045][ T6261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.892514][ T6261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.435588][ T6261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.444021][ T6379] [ 168.446395][ T6379] ====================================================== [ 168.453418][ T6379] WARNING: possible circular locking dependency detected [ 168.455467][ T6388] loop0: detected capacity change from 0 to 512 [ 168.460444][ T6379] syzkaller #0 Not tainted [ 168.460455][ T6379] ------------------------------------------------------ [ 168.460462][ T6379] syz.1.127/6379 is trying to acquire lock: [ 168.460471][ T6379] ffff88802001eef0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 168.495677][ T6379] [ 168.495677][ T6379] but task is already holding lock: [ 168.503142][ T6379] ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 168.512391][ T6379] [ 168.512391][ T6379] which lock already depends on the new lock. [ 168.512391][ T6379] [ 168.522800][ T6379] [ 168.522800][ T6379] the existing dependency chain (in reverse order) is: [ 168.531816][ T6379] [ 168.531816][ T6379] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 168.539730][ T6379] __mutex_lock+0x135/0xc80 [ 168.544765][ T6379] tcm_alloc_inst+0x65/0x190 [ 168.549877][ T6379] usb_get_function_instance+0xdd/0x2e0 [ 168.555950][ T6379] function_make+0x11c/0x350 [ 168.561069][ T6379] configfs_mkdir+0x515/0x9e0 [ 168.566277][ T6379] vfs_mkdir+0x2a5/0x470 [ 168.571046][ T6379] do_mkdirat+0x1dc/0x450 [ 168.575901][ T6379] __x64_sys_mkdirat+0x89/0xa0 [ 168.581193][ T6379] do_syscall_64+0x55/0xb0 [ 168.586136][ T6379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.592565][ T6379] [ 168.592565][ T6379] -> #2 (func_lock){+.+.}-{3:3}: [ 168.599695][ T6379] __mutex_lock+0x135/0xc80 [ 168.604724][ T6379] usb_get_function_instance+0x2e/0x2e0 [ 168.610795][ T6379] function_make+0x11c/0x350 [ 168.615913][ T6379] configfs_mkdir+0x515/0x9e0 [ 168.621115][ T6379] vfs_mkdir+0x2a5/0x470 [ 168.625881][ T6379] do_mkdirat+0x1dc/0x450 [ 168.630736][ T6379] __x64_sys_mkdir+0x6e/0x80 [ 168.635850][ T6379] do_syscall_64+0x55/0xb0 [ 168.640795][ T6379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.647218][ T6379] [ 168.647218][ T6379] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 168.655476][ T6379] __mutex_lock+0x135/0xc80 [ 168.660500][ T6379] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 168.667193][ T6379] configfs_symlink+0x5a5/0xfe0 [ 168.672574][ T6379] vfs_symlink+0x138/0x2b0 [ 168.677514][ T6379] do_symlinkat+0x1ba/0x400 [ 168.682543][ T6379] __x64_sys_symlink+0x7e/0x90 [ 168.687841][ T6379] do_syscall_64+0x55/0xb0 [ 168.692803][ T6379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.699250][ T6379] [ 168.699250][ T6379] -> #0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 168.707962][ T6379] __lock_acquire+0x37ef/0x7d80 [ 168.713348][ T6379] lock_acquire+0x19e/0x420 [ 168.718397][ T6379] down_write+0x97/0x200 [ 168.723179][ T6379] configfs_depend_item_unlocked+0x157/0x430 [ 168.729695][ T6379] usbg_make_tpg+0x1e1/0x550 [ 168.734824][ T6379] target_fabric_make_tpg+0xa4/0x6d0 [ 168.740646][ T6379] configfs_mkdir+0x515/0x9e0 [ 168.745854][ T6379] vfs_mkdir+0x2a5/0x470 [ 168.750629][ T6379] do_mkdirat+0x1dc/0x450 [ 168.755488][ T6379] __x64_sys_mkdirat+0x89/0xa0 [ 168.760793][ T6379] do_syscall_64+0x55/0xb0 [ 168.765735][ T6379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.772164][ T6379] [ 168.772164][ T6379] other info that might help us debug this: [ 168.772164][ T6379] [ 168.782416][ T6379] Chain exists of: [ 168.782416][ T6379] &sb->s_type->i_mutex_key#21 --> func_lock --> tpg_instances_lock [ 168.782416][ T6379] [ 168.796261][ T6379] Possible unsafe locking scenario: [ 168.796261][ T6379] [ 168.803709][ T6379] CPU0 CPU1 [ 168.809075][ T6379] ---- ---- [ 168.814443][ T6379] lock(tpg_instances_lock); [ 168.819127][ T6379] lock(func_lock); [ 168.825544][ T6379] lock(tpg_instances_lock); [ 168.832742][ T6379] lock(&sb->s_type->i_mutex_key#21); [ 168.838210][ T6379] [ 168.838210][ T6379] *** DEADLOCK *** [ 168.838210][ T6379] [ 168.846351][ T6379] 4 locks held by syz.1.127/6379: [ 168.851552][ T6379] #0: ffff88801f6d2418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 168.860802][ T6379] #1: ffff88807c7395a0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 168.871609][ T6379] #2: ffffffff8db2bdb0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 168.881368][ T6379] #3: ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 168.891039][ T6379] [ 168.891039][ T6379] stack backtrace: [ 168.896928][ T6379] CPU: 0 PID: 6379 Comm: syz.1.127 Not tainted syzkaller #0 [ 168.904215][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.914272][ T6379] Call Trace: [ 168.917558][ T6379] [ 168.920501][ T6379] dump_stack_lvl+0x18c/0x250 [ 168.925216][ T6379] ? load_image+0x420/0x420 [ 168.929728][ T6379] ? show_regs_print_info+0x20/0x20 [ 168.934938][ T6379] ? print_circular_bug+0x12b/0x1a0 [ 168.940236][ T6379] check_noncircular+0x2fc/0x400 [ 168.945180][ T6379] ? look_up_lock_class+0x75/0x140 [ 168.950299][ T6379] ? print_deadlock_bug+0x5d0/0x5d0 [ 168.955501][ T6379] ? lockdep_lock+0xf5/0x230 [ 168.960095][ T6379] ? __lock_acquire+0x357f/0x7d80 [ 168.965125][ T6379] ? _find_first_zero_bit+0xd6/0x100 [ 168.970416][ T6379] __lock_acquire+0x37ef/0x7d80 [ 168.975282][ T6379] ? is_bpf_text_address+0x28f/0x2a0 [ 168.980574][ T6379] ? verify_lock_unused+0x140/0x140 [ 168.985788][ T6379] lock_acquire+0x19e/0x420 [ 168.990300][ T6379] ? configfs_depend_item_unlocked+0x157/0x430 [ 168.996463][ T6379] ? trace_raw_output_contention_end+0xd0/0xd0 [ 169.002637][ T6379] ? __might_sleep+0xe0/0xe0 [ 169.007244][ T6379] ? rcu_is_watching+0x15/0xb0 [ 169.012021][ T6379] ? read_lock_is_recursive+0x20/0x20 [ 169.017396][ T6379] ? trace_contention_end+0x39/0xe0 [ 169.022597][ T6379] ? __mutex_lock+0x30d/0xc80 [ 169.027275][ T6379] ? do_syscall_64+0x55/0xb0 [ 169.031871][ T6379] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.037948][ T6379] down_write+0x97/0x200 [ 169.042200][ T6379] ? configfs_depend_item_unlocked+0x157/0x430 [ 169.048363][ T6379] ? down_read_killable+0x340/0x340 [ 169.053585][ T6379] configfs_depend_item_unlocked+0x157/0x430 [ 169.059574][ T6379] usbg_make_tpg+0x1e1/0x550 [ 169.064184][ T6379] ? snprintf+0xe9/0x140 [ 169.068429][ T6379] ? configfs_mkdir+0x4b9/0x9e0 [ 169.073285][ T6379] ? usbg_drop_tport+0x20/0x20 [ 169.078083][ T6379] ? vscnprintf+0x80/0x80 [ 169.082423][ T6379] target_fabric_make_tpg+0xa4/0x6d0 [ 169.087720][ T6379] ? target_fabric_release_wwn+0xb0/0xb0 [ 169.093382][ T6379] configfs_mkdir+0x515/0x9e0 [ 169.098066][ T6379] vfs_mkdir+0x2a5/0x470 [ 169.102315][ T6379] do_mkdirat+0x1dc/0x450 [ 169.106667][ T6379] ? vfs_mkdir+0x470/0x470 [ 169.111106][ T6379] __x64_sys_mkdirat+0x89/0xa0 [ 169.115877][ T6379] do_syscall_64+0x55/0xb0 [ 169.120302][ T6379] ? clear_bhb_loop+0x40/0x90 [ 169.125005][ T6379] ? clear_bhb_loop+0x40/0x90 [ 169.129693][ T6379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.135591][ T6379] RIP: 0033:0x7fb3f2b9e159 [ 169.140013][ T6379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.159624][ T6379] RSP: 002b:00007fb3f3b5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 169.168052][ T6379] RAX: ffffffffffffffda RBX: 00007fb3f2e25fa0 RCX: 00007fb3f2b9e159 [ 169.176043][ T6379] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 169.184021][ T6379] RBP: 00007fb3f2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 169.191995][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.199975][ T6379] R13: 00007fb3f2e26038 R14: 00007fb3f2e25fa0 R15: 00007ffc7ff03ab8 [ 169.207955][ T6379] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.429543][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.520389][ T6388] fscrypt: Error allocating hmac(sha512): -2 [ 170.483450][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.589285][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.707540][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.807110][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.031942][ T1141] tipc: Left network mode [ 171.793837][ T1141] hsr_slave_0: left promiscuous mode [ 171.799998][ T1141] hsr_slave_1: left promiscuous mode [ 171.805922][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.815763][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.823819][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.831504][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.839201][ T1141] bridge_slave_1: left allmulticast mode [ 171.846436][ T1141] bridge_slave_1: left promiscuous mode [ 171.852599][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.863270][ T1141] bridge_slave_0: left allmulticast mode [ 171.868945][ T1141] bridge_slave_0: left promiscuous mode [ 171.876003][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.890028][ T1141] veth1_macvtap: left promiscuous mode [ 171.895597][ T1141] veth0_macvtap: left promiscuous mode [ 171.904674][ T1141] veth1_vlan: left promiscuous mode [ 171.911743][ T1141] veth0_vlan: left promiscuous mode [ 172.079130][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 172.107172][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 172.129245][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.154903][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.221489][ T1141] bond0 (unregistering): Released all slaves [ 172.825084][ T1141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.897026][ T1141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.956399][ T1141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.006270][ T1141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.157781][ T1141] tipc: Left network mode [ 173.864494][ T1141] hsr_slave_0: left promiscuous mode [ 173.871385][ T1141] hsr_slave_1: left promiscuous mode [ 173.877416][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.886101][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.894362][ T1141] bridge_slave_1: left allmulticast mode [ 173.900169][ T1141] bridge_slave_1: left promiscuous mode [ 173.905829][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.914011][ T1141] bridge_slave_0: left allmulticast mode [ 173.919898][ T1141] bridge_slave_0: left promiscuous mode [ 173.925597][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.936375][ T1141] hsr_slave_0: left promiscuous mode [ 173.942571][ T1141] hsr_slave_1: left promiscuous mode [ 173.948247][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.955700][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.963864][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.971295][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.978756][ T1141] bridge_slave_1: left allmulticast mode [ 173.985013][ T1141] bridge_slave_1: left promiscuous mode [ 173.990926][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.999390][ T1141] bridge_slave_0: left allmulticast mode [ 174.005238][ T1141] bridge_slave_0: left promiscuous mode [ 174.010945][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.021831][ T1141] veth1_macvtap: left promiscuous mode [ 174.027327][ T1141] veth0_macvtap: left promiscuous mode [ 174.033940][ T1141] veth1_vlan: left promiscuous mode [ 174.039184][ T1141] veth0_vlan: left promiscuous mode [ 174.176400][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 174.188111][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 174.221151][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.245462][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.295597][ T1141] bond0 (unregistering): Released all slaves [ 174.335864][ T1141] bond1 (unregistering): (slave geneve2): Releasing active interface [ 174.429337][ T1141] bond1 (unregistering): Released all slaves [ 174.546353][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 174.580323][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 174.595377][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.611747][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.667868][ T1141] bond0 (unregistering): Released all slaves