last executing test programs: 12m14.344363599s ago: executing program 2 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x60}}, 0x0) 12m13.900094119s ago: executing program 2 (id=240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000580)='z', 0x1, 0xd15e1afcd63ff7a1, 0x0, 0x0) 12m13.691410829s ago: executing program 2 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) remap_file_pages(&(0x7f0000ef2000/0x4000)=nil, 0x4000, 0x0, 0x3fa, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r5}, 0x10) 12m12.484467876s ago: executing program 2 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) 12m12.010742768s ago: executing program 2 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(r0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='call_site.function', 0x12) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, 0x0}) 12m9.460848348s ago: executing program 2 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m8.656200955s ago: executing program 32 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m49.559769581s ago: executing program 3 (id=2445): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0x5}, 0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) 3m48.679961083s ago: executing program 3 (id=2447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m48.53910877s ago: executing program 3 (id=2449): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r5) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x2e, "04e70787b64d173dbd81e6469a2100eca6aa0825476b045c4a935fa54f323c1829a007a40e24142b187c4a051000"}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x10000000, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 3m44.744651947s ago: executing program 3 (id=2467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f3, 0x200, 0x2}}}}]}, 0x58}}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m43.483960106s ago: executing program 3 (id=2471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r4, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0x5}, 0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) 3m43.004374739s ago: executing program 3 (id=2473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) waitid(0x1, 0x0, 0x0, 0xb, &(0x7f00000003c0)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) 3m27.745874084s ago: executing program 33 (id=2473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) waitid(0x1, 0x0, 0x0, 0xb, &(0x7f00000003c0)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) 4.423508743s ago: executing program 5 (id=3440): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6802000001050101000000000000000005000006"], 0x268}, 0x1, 0x0, 0x0, 0x20044081}, 0x20000885) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f7274000000006377ab8d7a0b92e3a9d94a56946ff3580008bb1ec7dfe55e9c8f6d"], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x40001000, 0x3a, 0xfff, 0x3a, 0xfffffffd, 0x3, 0x2}, 0x1c) bind$packet(r3, &(0x7f0000000100)={0x11, 0xf8, r2, 0x1, 0xf9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) 3.854218359s ago: executing program 5 (id=3447): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 3.700347516s ago: executing program 0 (id=3448): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="5ce9", 0x2}], 0x1}, 0x24000800) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r2, 0x0, 0x20010) close(r0) 3.499996986s ago: executing program 5 (id=3452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006d0001002abd0600fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40440a4}, 0x4040040) 3.476800447s ago: executing program 0 (id=3453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0xffffffffffffffff, 0x0, 0x0, 0x17ffffffffffb}, 0x40}, [@tmpl={0x184, 0x5, [{{@in6=@private1, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@initdev={0xac, 0x1e, 0xfc, 0x0}, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x2}]}]}, 0x23c}}, 0x0) 3.356090862s ago: executing program 6 (id=3455): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x3, 0x6, @remote}, 0x14) 3.1963371s ago: executing program 0 (id=3456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c102000bff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.886184661s ago: executing program 5 (id=3457): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2cb2"], 0x8) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000180)=0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000090000001c18872f00000000000000d6b061e5b56049705b"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc0d4) recvmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x10100, &(0x7f0000002040)={0x0, 0x989680}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) 1.644650523s ago: executing program 1 (id=3459): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001, 0x2}, 0x38) 1.548416997s ago: executing program 6 (id=3460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.512044409s ago: executing program 4 (id=3461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) 1.308657898s ago: executing program 1 (id=3462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 1.175247555s ago: executing program 6 (id=3463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.158564286s ago: executing program 0 (id=3464): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="5ce9", 0x2}], 0x1}, 0x24000800) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r2, 0x0, 0x20010) close(r0) 1.06184188s ago: executing program 1 (id=3465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.019583472s ago: executing program 4 (id=3466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="180600005670000000000000fb000000852900000200000040000000000000009500007b0000000095"], &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) r0 = socket$kcm(0x23, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b10000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='GPL\x00'}, 0x94) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff"], 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r4, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 957.165125ms ago: executing program 6 (id=3467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006d0001002abd0600fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40440a4}, 0x4040040) 926.427947ms ago: executing program 0 (id=3468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000066e400406000000000000000a0000020900010073797a31000000000900020073797a320000000034000000080a010200000000040000000a0000060900010073797a31"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 772.328494ms ago: executing program 1 (id=3469): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x110, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x100, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x110}], 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000fbffff97f0c636000000000018470000fb1e29e97e39f1951d0a40783912c4ffffff0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 722.307026ms ago: executing program 6 (id=3470): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x3, 0x6, @remote}, 0x14) 688.586538ms ago: executing program 4 (id=3471): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x360, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x100000001, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'ip6gre0\x00', {}, {}, 0x3b, 0xa2, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0xa14}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 668.078188ms ago: executing program 0 (id=3472): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x6a040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB="eb4d9d5ff594e2687f4c1ca901eb72e286916bb898fe86217b528e51dca2aa6c4947e5beeff7b31fb7a767366cf68c73cbbf25e4195743d6f41bdca840d835599a1fd8031076d97fbbf3675cf385ba886bce"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000001000000000000000000000085100000f8ffffff9535ead33b90cb11ec4477b1a2b2d2000000ff0f0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r5) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x7f8fd8ce9467eae8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00'}) 546.918834ms ago: executing program 5 (id=3473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 460.320138ms ago: executing program 1 (id=3474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c102000bff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 414.68526ms ago: executing program 4 (id=3475): unshare(0x2a020480) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000040000", @ANYBLOB="0000000000000000000000000000000000000000ab939a387ea54358cf51e48ac9f334b780a72e1a9c5ac522edb1f9d4707ff730060124fa6bb078289c73544ee5ccce19bb89ba2044f956fed2bbdb0adc35673036d07728f40ca9619ee073af11fcd45e345a8176b4c0b07eb76b207e9feaaca0c4b2e9ac97f2dbae18"], 0x50) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 258.691258ms ago: executing program 6 (id=3476): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) socket(0x27, 0x1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x23, 0x0, 0x0) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r1, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[], 0x0) r7 = socket(0x11, 0x3, 0x7) setsockopt$sock_int(r7, 0x1, 0x2e, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 172.351182ms ago: executing program 5 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) 124.759294ms ago: executing program 1 (id=3478): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="5ce9", 0x2}], 0x1}, 0x24000800) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r2, 0x0, 0x20010) close(r0) 122.360664ms ago: executing program 4 (id=3479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 4 (id=3480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 270976][ T5241] EXT4-fs (loop5): unmounting filesystem. [ 145.358971][ T6028] device syzkaller0 entered promiscuous mode [ 145.791645][ T6049] overlayfs: failed to resolve './file0': -2 [ 148.098029][ C0] sched: RT throttling activated [ 149.542788][ T6115] tipc: Can't bind to reserved service type 2 [ 153.078479][ T26] audit: type=1326 audit(1790131252.377:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 153.644737][ T26] audit: type=1326 audit(1790131252.377:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 153.719283][ T6169] overlayfs: failed to clone upperpath [ 153.773195][ T26] audit: type=1326 audit(1790131252.377:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 153.961167][ T26] audit: type=1326 audit(1790131252.377:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f695e95e98e code=0x7ffc0000 [ 154.318114][ T26] audit: type=1326 audit(1790131252.377:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 154.439695][ T26] audit: type=1326 audit(1790131252.377:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 154.464488][ T26] audit: type=1326 audit(1790131252.377:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 154.568370][ T26] audit: type=1326 audit(1790131252.377:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.4.545" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 155.865989][ T6223] bridge0: port 3(syz_tun) entered blocking state [ 155.908404][ T6223] bridge0: port 3(syz_tun) entered disabled state [ 155.928531][ T6226] overlayfs: failed to clone upperpath [ 155.964242][ T6223] device syz_tun entered promiscuous mode [ 155.972286][ T6223] bridge0: port 3(syz_tun) entered blocking state [ 155.979805][ T6223] bridge0: port 3(syz_tun) entered forwarding state [ 156.159024][ T6229] bridge0: port 4(ip6gretap0) entered blocking state [ 156.731326][ T6234] syz.5.561 (6234) used greatest stack depth: 20048 bytes left [ 157.055765][ T6229] bridge0: port 4(ip6gretap0) entered disabled state [ 157.126736][ T6229] device ip6gretap0 entered promiscuous mode [ 157.165340][ T6229] bridge0: port 4(ip6gretap0) entered blocking state [ 157.172214][ T6229] bridge0: port 4(ip6gretap0) entered forwarding state [ 158.372515][ T6265] fuse: Unknown parameter 'dont_measure' [ 158.765267][ T6275] overlayfs: failed to clone upperpath [ 158.765517][ T6273] netlink: 'syz.5.579': attribute type 29 has an invalid length. [ 158.815521][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.579'. [ 158.844091][ T6273] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 160.343385][ T6314] fuse: Unknown parameter 'dont_measure' [ 162.039968][ T6331] tmpfs: Unknown parameter 'noswap' [ 162.425326][ T6347] device syzkaller0 entered promiscuous mode [ 163.505825][ T6373] device-mapper: thin metadata: sb_check failed: blocknr 32768: wanted 0 [ 163.584054][ T6373] device-mapper: block manager: superblock validator check failed for block 0 [ 163.678068][ T6373] device-mapper: thin metadata: couldn't read superblock [ 163.859872][ T6373] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-ENOTBLK) [ 163.903694][ T6373] device-mapper: ioctl: error adding target to table [ 165.104878][ T6406] device syzkaller0 entered promiscuous mode [ 166.663869][ T6451] fuse: Unknown parameter 'dont_measure' [ 171.370093][ T6513] fuse: Unknown parameter 'dont_measure' [ 176.902810][ T6552] loop5: detected capacity change from 0 to 7 [ 176.970916][ T6399] loop5: [ 176.974083][ T6399] loop5: partition table partially beyond EOD, truncated [ 177.114345][ T6552] loop5: [ 177.118951][ T6552] loop5: partition table partially beyond EOD, truncated [ 183.295084][ T6707] overlayfs: failed to clone upperpath [ 183.399728][ T6710] overlayfs: failed to clone upperpath [ 185.906328][ T6746] device lo entered promiscuous mode [ 185.965104][ T6746] device tunl0 entered promiscuous mode [ 186.032163][ T6746] device gre0 entered promiscuous mode [ 186.089953][ T6755] fuse: Bad value for 'fd' [ 186.228235][ T6763] overlayfs: failed to clone upperpath [ 186.237718][ T6746] device gretap0 entered promiscuous mode [ 186.302489][ T6746] device erspan0 entered promiscuous mode [ 186.380838][ T6746] device ip_vti0 entered promiscuous mode [ 186.414382][ T6746] device ip6_vti0 entered promiscuous mode [ 186.458429][ T6746] device sit0 entered promiscuous mode [ 186.560162][ T6746] device ip6tnl0 entered promiscuous mode [ 186.857322][ T6746] device ip6gre0 entered promiscuous mode [ 187.237422][ T6746] device syz_tun entered promiscuous mode [ 187.317760][ T6746] device ip6gretap0 entered promiscuous mode [ 187.395255][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.403668][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.433962][ T6746] device bridge0 entered promiscuous mode [ 187.474397][ T6746] device vcan0 entered promiscuous mode [ 187.491754][ T6746] device bond0 entered promiscuous mode [ 187.497491][ T6746] device bond_slave_0 entered promiscuous mode [ 187.504586][ T6746] device bond_slave_1 entered promiscuous mode [ 187.536364][ T6746] device team0 entered promiscuous mode [ 187.542284][ T6746] device team_slave_0 entered promiscuous mode [ 187.549457][ T6746] device team_slave_1 entered promiscuous mode [ 187.581630][ T6746] device dummy0 entered promiscuous mode [ 187.612827][ T6746] device nlmon0 entered promiscuous mode [ 187.620881][ T6746] device caif0 entered promiscuous mode [ 187.641406][ T6746] device batadv0 entered promiscuous mode [ 187.672393][ T6746] device vxcan0 entered promiscuous mode [ 187.687281][ T6746] device vxcan1 entered promiscuous mode [ 187.702046][ T6746] device veth0 entered promiscuous mode [ 187.727359][ T6746] device veth1 entered promiscuous mode [ 187.753958][ T6746] device wg0 entered promiscuous mode [ 187.777711][ T6746] device wg1 entered promiscuous mode [ 187.802547][ T6746] device wg2 entered promiscuous mode [ 187.824521][ T6746] device veth0_to_bridge entered promiscuous mode [ 187.857528][ T6746] device veth1_to_bridge entered promiscuous mode [ 189.646328][ T6746] device veth0_to_bond entered promiscuous mode [ 189.674416][ T6746] device veth1_to_bond entered promiscuous mode [ 189.712039][ T6746] device veth0_to_team entered promiscuous mode [ 189.755378][ T6746] device veth1_to_team entered promiscuous mode [ 189.788684][ T6746] device veth0_to_batadv entered promiscuous mode [ 189.796782][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.818673][ T6746] device batadv_slave_0 entered promiscuous mode [ 189.840054][ T6746] device veth1_to_batadv entered promiscuous mode [ 189.854957][ T6746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.872476][ T6746] device batadv_slave_1 entered promiscuous mode [ 189.893170][ T6746] device xfrm0 entered promiscuous mode [ 189.912973][ T6746] device veth0_to_hsr entered promiscuous mode [ 189.941739][ T6746] device veth1_to_hsr entered promiscuous mode [ 189.971081][ T6746] device hsr0 entered promiscuous mode [ 189.992214][ T6746] device veth1_virt_wifi entered promiscuous mode [ 190.014268][ T6746] device veth0_virt_wifi entered promiscuous mode [ 190.022469][ T6746] device virt_wifi0 entered promiscuous mode [ 190.068625][ T6746] device vlan0 entered promiscuous mode [ 190.090068][ T6746] device macvlan0 entered promiscuous mode [ 190.110742][ T6746] device macvlan1 entered promiscuous mode [ 190.126295][ T6746] device ipvlan0 entered promiscuous mode [ 190.139065][ T6746] device ipvlan1 entered promiscuous mode [ 190.172510][ T6746] device macvtap0 entered promiscuous mode [ 190.192850][ T6746] device macsec0 entered promiscuous mode [ 190.218486][ T6746] device geneve0 entered promiscuous mode [ 190.241544][ T6746] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.250741][ T6746] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.259745][ T6746] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.268673][ T6746] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.277721][ T6746] device geneve1 entered promiscuous mode [ 190.298561][ T6746] device netdevsim0 entered promiscuous mode [ 190.315307][ T6746] device netdevsim1 entered promiscuous mode [ 190.333559][ T6746] device netdevsim2 entered promiscuous mode [ 190.348102][ T6746] device netdevsim3 entered promiscuous mode [ 190.364964][ T6746] device wlan0 entered promiscuous mode [ 190.383343][ T6746] device wlan1 entered promiscuous mode [ 190.629741][ T6793] overlayfs: failed to clone upperpath [ 192.059312][ T6826] device lo entered promiscuous mode [ 192.124482][ T6826] device tunl0 entered promiscuous mode [ 192.179701][ T6826] device gre0 entered promiscuous mode [ 192.393219][ T6826] device gretap0 entered promiscuous mode [ 192.474164][ T6826] device erspan0 entered promiscuous mode [ 192.544859][ T6826] device ip_vti0 entered promiscuous mode [ 192.567367][ T6826] device ip6_vti0 entered promiscuous mode [ 192.574161][ T6844] md: could not open device unknown-block(1,0). [ 192.618882][ T6826] device sit0 entered promiscuous mode [ 192.702604][ T6826] device ip6tnl0 entered promiscuous mode [ 192.766005][ T6826] device ip6gre0 entered promiscuous mode [ 192.863959][ T6826] bridge0: port 3(syz_tun) entered disabled state [ 193.011851][ T6826] bridge0: port 4(ip6gretap0) entered disabled state [ 193.380196][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.387954][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.663297][ T6826] device bridge0 entered promiscuous mode [ 193.736133][ T6826] device vcan0 entered promiscuous mode [ 193.778318][ T6826] device bond0 entered promiscuous mode [ 193.784168][ T6826] device bond_slave_0 entered promiscuous mode [ 193.807896][ T6826] device bond_slave_1 entered promiscuous mode [ 193.897881][ T6826] device team0 entered promiscuous mode [ 193.904128][ T6826] device team_slave_0 entered promiscuous mode [ 193.911497][ T6826] device team_slave_1 entered promiscuous mode [ 193.944260][ T6826] device dummy0 entered promiscuous mode [ 193.978407][ T6870] device-mapper: thin metadata: sb_check failed: blocknr 32768: wanted 0 [ 194.014093][ T6826] device nlmon0 entered promiscuous mode [ 194.021997][ T6826] device caif0 entered promiscuous mode [ 194.034213][ T6870] device-mapper: block manager: superblock validator check failed for block 0 [ 194.051893][ T6826] device batadv0 entered promiscuous mode [ 194.058858][ T6870] device-mapper: thin metadata: couldn't read superblock [ 194.098992][ T6826] device vxcan0 entered promiscuous mode [ 194.114322][ T6826] device vxcan1 entered promiscuous mode [ 194.127897][ T6826] device veth0 entered promiscuous mode [ 194.162988][ T6826] device veth1 entered promiscuous mode [ 194.167213][ T6870] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-ENOTBLK) [ 194.188242][ T6870] device-mapper: ioctl: error adding target to table [ 194.197822][ T6826] device wg1 entered promiscuous mode [ 194.223183][ T6826] device wg2 entered promiscuous mode [ 194.245849][ T6826] device veth0_to_bridge entered promiscuous mode [ 194.322738][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329223][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.409690][ T6826] device veth1_to_bridge entered promiscuous mode [ 194.492417][ T6826] device veth0_to_bond entered promiscuous mode [ 194.545305][ T6826] device veth1_to_bond entered promiscuous mode [ 194.603039][ T6826] device veth0_to_team entered promiscuous mode [ 194.677360][ T6826] device veth1_to_team entered promiscuous mode [ 194.771457][ T6826] device veth0_to_batadv entered promiscuous mode [ 194.794611][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.819923][ T6826] device batadv_slave_0 entered promiscuous mode [ 194.878983][ T6826] device veth1_to_batadv entered promiscuous mode [ 194.887941][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.945027][ T6826] device batadv_slave_1 entered promiscuous mode [ 194.988673][ T6826] device xfrm0 entered promiscuous mode [ 195.032534][ T6826] device veth0_to_hsr entered promiscuous mode [ 195.111182][ T6826] device veth1_to_hsr entered promiscuous mode [ 195.145964][ T6890] md: could not open device unknown-block(1,0). [ 195.175983][ T6826] device hsr0 entered promiscuous mode [ 195.208663][ T6826] device veth1_virt_wifi entered promiscuous mode [ 195.263637][ T6826] device veth0_virt_wifi entered promiscuous mode [ 195.281208][ T6826] device virt_wifi0 entered promiscuous mode [ 195.382231][ T6826] device vlan0 entered promiscuous mode [ 195.391469][ T6826] device macvlan0 entered promiscuous mode [ 195.429697][ T6826] device macvlan1 entered promiscuous mode [ 195.447246][ T6826] device ipvlan0 entered promiscuous mode [ 195.463090][ T6826] device ipvlan1 entered promiscuous mode [ 195.496752][ T6826] device macvtap0 entered promiscuous mode [ 195.517798][ T6826] device macsec0 entered promiscuous mode [ 195.539766][ T6826] device geneve0 entered promiscuous mode [ 195.561575][ T6826] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.570939][ T6826] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.579889][ T6826] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.589052][ T6826] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.598844][ T6826] device geneve1 entered promiscuous mode [ 195.616915][ T6826] device netdevsim0 entered promiscuous mode [ 195.638278][ T6826] device netdevsim1 entered promiscuous mode [ 195.648852][ T6826] device netdevsim2 entered promiscuous mode [ 195.670200][ T6826] device netdevsim3 entered promiscuous mode [ 195.692740][ T6826] device wlan0 entered promiscuous mode [ 195.712031][ T6826] device wlan1 entered promiscuous mode [ 196.459152][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 196.467904][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 196.476909][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 197.507829][ T6926] device-mapper: thin metadata: sb_check failed: blocknr 32768: wanted 0 [ 197.842390][ T6926] device-mapper: block manager: superblock validator check failed for block 0 [ 197.902334][ T6926] device-mapper: thin metadata: couldn't read superblock [ 197.962244][ T6935] overlayfs: failed to clone upperpath [ 198.099911][ T6926] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-ENOTBLK) [ 198.135586][ T6926] device-mapper: ioctl: error adding target to table [ 201.319512][ T6995] device lo entered promiscuous mode [ 201.445416][ T6995] device tunl0 entered promiscuous mode [ 201.475986][ T6995] device gre0 entered promiscuous mode [ 201.713761][ T6995] device gretap0 entered promiscuous mode [ 201.813779][ T6995] device erspan0 entered promiscuous mode [ 201.872137][ T6995] device ip_vti0 entered promiscuous mode [ 201.929505][ T6995] device ip6_vti0 entered promiscuous mode [ 201.995322][ T6995] device sit0 entered promiscuous mode [ 202.051267][ T6995] device ip6tnl0 entered promiscuous mode [ 202.351928][ T6995] device ip6gre0 entered promiscuous mode [ 202.559101][ T6995] device syz_tun entered promiscuous mode [ 202.706294][ T6995] device ip6gretap0 entered promiscuous mode [ 202.744529][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.752530][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.847071][ T6995] device bridge0 entered promiscuous mode [ 202.889374][ T6995] device vcan0 entered promiscuous mode [ 202.900158][ T6995] device bond0 entered promiscuous mode [ 202.905783][ T6995] device bond_slave_0 entered promiscuous mode [ 202.938981][ T6995] device bond_slave_1 entered promiscuous mode [ 203.013480][ T6995] device team0 entered promiscuous mode [ 203.221599][ T6995] device team_slave_0 entered promiscuous mode [ 204.148347][ T6995] device team_slave_1 entered promiscuous mode [ 204.231105][ T6995] device dummy0 entered promiscuous mode [ 204.295948][ T6995] device nlmon0 entered promiscuous mode [ 204.314405][ T6995] device caif0 entered promiscuous mode [ 204.359950][ T6995] device batadv0 entered promiscuous mode [ 204.443307][ T6995] device vxcan0 entered promiscuous mode [ 204.474554][ T6995] device vxcan1 entered promiscuous mode [ 204.504658][ T6995] device veth0 entered promiscuous mode [ 204.579833][ T6995] device veth1 entered promiscuous mode [ 204.647863][ T6995] device wg0 entered promiscuous mode [ 204.700145][ T6995] device wg1 entered promiscuous mode [ 204.758718][ T6995] device wg2 entered promiscuous mode [ 204.791917][ T6995] device veth0_to_bridge entered promiscuous mode [ 204.911153][ T6995] device veth1_to_bridge entered promiscuous mode [ 204.987827][ T6995] device veth0_to_bond entered promiscuous mode [ 205.060329][ T6995] device veth1_to_bond entered promiscuous mode [ 205.114378][ T6995] device veth0_to_team entered promiscuous mode [ 205.178187][ T6995] device veth1_to_team entered promiscuous mode [ 205.255859][ T6995] device veth0_to_batadv entered promiscuous mode [ 205.288631][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.317233][ T6995] device batadv_slave_0 entered promiscuous mode [ 205.362085][ T6995] device veth1_to_batadv entered promiscuous mode [ 205.385939][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.416850][ T6995] device batadv_slave_1 entered promiscuous mode [ 205.456645][ T6995] device xfrm0 entered promiscuous mode [ 205.498351][ T6995] device veth0_to_hsr entered promiscuous mode [ 205.557055][ T6995] device veth1_to_hsr entered promiscuous mode [ 205.593409][ T6995] device hsr0 entered promiscuous mode [ 205.612738][ T6995] device veth1_virt_wifi entered promiscuous mode [ 205.633568][ T6995] device veth0_virt_wifi entered promiscuous mode [ 205.641740][ T6995] device virt_wifi0 entered promiscuous mode [ 205.691720][ T6995] device vlan0 entered promiscuous mode [ 205.707516][ T6995] device macvlan0 entered promiscuous mode [ 205.728943][ T6995] device macvlan1 entered promiscuous mode [ 205.736152][ T6995] device ipvlan0 entered promiscuous mode [ 205.754991][ T6995] device ipvlan1 entered promiscuous mode [ 205.789792][ T6995] device macvtap0 entered promiscuous mode [ 205.807433][ T6995] device macsec0 entered promiscuous mode [ 205.827920][ T6995] device geneve0 entered promiscuous mode [ 205.848339][ T6995] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.857251][ T6995] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.866750][ T6995] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.875733][ T6995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.885233][ T6995] device geneve1 entered promiscuous mode [ 205.911722][ T6995] device netdevsim0 entered promiscuous mode [ 205.927222][ T6995] device netdevsim1 entered promiscuous mode [ 205.948495][ T6995] device netdevsim2 entered promiscuous mode [ 205.965654][ T6995] device netdevsim3 entered promiscuous mode [ 205.988711][ T6995] device wlan0 entered promiscuous mode [ 206.010633][ T6995] device wlan1 entered promiscuous mode [ 206.666236][ T7065] loop5: detected capacity change from 0 to 256 [ 206.765372][ T7065] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.454136][ T7205] overlayfs: failed to clone upperpath [ 216.713915][ T7218] overlayfs: failed to clone upperpath [ 223.481308][ T7310] fuse: Bad value for 'fd' [ 225.759544][ T7338] overlayfs: failed to clone upperpath [ 229.130532][ T7378] overlayfs: failed to clone upperpath [ 231.291431][ T7395] overlayfs: missing 'lowerdir' [ 232.718111][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 234.639479][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 234.649909][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 234.657510][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.667603][ T4291] Workqueue: hci0 hci_rx_work [ 234.672331][ T4291] Call Trace: [ 234.675641][ T4291] [ 234.678609][ T4291] dump_stack_lvl+0x188/0x24e [ 234.683326][ T4291] ? show_regs_print_info+0x12/0x12 [ 234.688643][ T4291] ? load_image+0x410/0x410 [ 234.693209][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 234.698359][ T4291] ? __lock_acquire+0x7c40/0x7c40 [ 234.703426][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 234.708150][ T4291] ? do_raw_spin_unlock+0x11d/0x230 [ 234.713375][ T4291] kobject_add_internal+0x617/0xca0 [ 234.718585][ T4291] kobject_add+0x160/0x230 [ 234.723016][ T4291] ? kobject_init+0x1c0/0x1c0 [ 234.727694][ T4291] ? __raw_spin_lock_init+0x41/0x100 [ 234.732976][ T4291] ? klist_children_get+0x50/0x50 [ 234.738020][ T4291] ? get_device_parent+0x121/0x3e0 [ 234.743196][ T4291] device_add+0x470/0x1050 [ 234.747675][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 234.752678][ T4291] le_conn_complete_evt+0xf93/0x15c0 [ 234.758028][ T4291] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 234.764336][ T4291] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 234.770018][ T4291] ? mutex_unlock+0x10/0x10 [ 234.774575][ T4291] ? skb_pull_data+0xec/0x1f0 [ 234.779309][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 234.784928][ T4291] ? hci_remote_host_features_evt+0x230/0x230 [ 234.791111][ T4291] hci_event_packet+0x7b3/0x1290 [ 234.796190][ T4291] ? lock_chain_count+0x20/0x20 [ 234.801087][ T4291] ? bis_list+0x280/0x280 [ 234.805467][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 234.811411][ T4291] ? kcov_remote_start+0x50f/0x810 [ 234.816653][ T4291] ? lockdep_hardirqs_on+0x94/0x140 [ 234.822014][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 234.827350][ T4291] hci_rx_work+0x3eb/0xd40 [ 234.831823][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 234.836730][ T4291] ? process_one_work+0x7b4/0x1160 [ 234.841987][ T4291] process_one_work+0x8ab/0x1160 [ 234.846987][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 234.852673][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 234.857747][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 234.863349][ T4291] ? wq_worker_running+0x97/0x190 [ 234.868416][ T4291] worker_thread+0xaf5/0x12a0 [ 234.873152][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 234.879110][ T4291] kthread+0x29d/0x330 [ 234.883216][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 234.888282][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 234.892922][ T4291] ret_from_fork+0x1f/0x30 [ 234.897409][ T4291] [ 234.902534][ T4291] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.916116][ T4291] Bluetooth: hci0: failed to register connection device [ 234.980708][ T7433] overlayfs: failed to clone upperpath [ 243.257232][ T7527] overlayfs: failed to clone upperpath [ 243.443490][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.950'. [ 243.646606][ T7534] netlink: 'syz.5.949': attribute type 4 has an invalid length. [ 245.922124][ T7570] overlayfs: failed to clone upperpath [ 255.798527][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804941][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.358798][ T7746] overlayfs: failed to clone upperpath [ 268.297200][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 268.797415][ T7900] device lo entered promiscuous mode [ 268.850976][ T7900] device tunl0 entered promiscuous mode [ 268.887734][ T7900] device gre0 entered promiscuous mode [ 269.033083][ T7906] 9pnet_fd: Insufficient options for proto=fd [ 269.055144][ T7900] device gretap0 entered promiscuous mode [ 269.185714][ T7900] device erspan0 entered promiscuous mode [ 269.271339][ T7900] device ip_vti0 entered promiscuous mode [ 269.316115][ T7900] device ip6_vti0 entered promiscuous mode [ 269.716376][ T7900] device sit0 entered promiscuous mode [ 270.037624][ T7900] device ip6tnl0 entered promiscuous mode [ 270.085080][ T7900] device ip6gre0 entered promiscuous mode [ 270.121193][ T7900] device syz_tun entered promiscuous mode [ 270.152248][ T7900] device ip6gretap0 entered promiscuous mode [ 270.184553][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.192150][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.201309][ T7900] device bridge0 entered promiscuous mode [ 270.232185][ T7900] device vcan0 entered promiscuous mode [ 270.247089][ T7900] device bond0 entered promiscuous mode [ 270.253109][ T7900] device bond_slave_0 entered promiscuous mode [ 270.259848][ T7900] device bond_slave_1 entered promiscuous mode [ 270.291962][ T7900] device team0 entered promiscuous mode [ 270.297722][ T7900] device team_slave_0 entered promiscuous mode [ 270.304449][ T7900] device team_slave_1 entered promiscuous mode [ 270.345790][ T7900] device dummy0 entered promiscuous mode [ 270.376751][ T7900] device nlmon0 entered promiscuous mode [ 270.387018][ T7900] device caif0 entered promiscuous mode [ 270.405092][ T7900] device batadv0 entered promiscuous mode [ 270.434921][ T7900] device vxcan0 entered promiscuous mode [ 270.449196][ T7900] device vxcan1 entered promiscuous mode [ 270.463269][ T7900] device veth0 entered promiscuous mode [ 270.493888][ T7900] device veth1 entered promiscuous mode [ 270.524091][ T7900] device wg0 entered promiscuous mode [ 270.546834][ T7900] device wg1 entered promiscuous mode [ 270.571437][ T7900] device wg2 entered promiscuous mode [ 270.594614][ T7900] device veth0_to_bridge entered promiscuous mode [ 270.640712][ T7900] device veth1_to_bridge entered promiscuous mode [ 270.686164][ T7900] device veth0_to_bond entered promiscuous mode [ 270.724455][ T7900] device veth1_to_bond entered promiscuous mode [ 270.763028][ T7900] device veth0_to_team entered promiscuous mode [ 270.809612][ T7900] device veth1_to_team entered promiscuous mode [ 270.870567][ T7900] device veth0_to_batadv entered promiscuous mode [ 270.885881][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.906557][ T7900] device batadv_slave_0 entered promiscuous mode [ 271.185382][ T7900] device veth1_to_batadv entered promiscuous mode [ 271.201116][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.219043][ T7900] device batadv_slave_1 entered promiscuous mode [ 271.258721][ T7900] device xfrm0 entered promiscuous mode [ 271.287685][ T7900] device veth0_to_hsr entered promiscuous mode [ 271.351835][ T7900] device veth1_to_hsr entered promiscuous mode [ 271.423367][ T7900] device hsr0 entered promiscuous mode [ 271.453532][ T7900] device veth1_virt_wifi entered promiscuous mode [ 271.484678][ T7900] device veth0_virt_wifi entered promiscuous mode [ 271.498846][ T7900] device virt_wifi0 entered promiscuous mode [ 271.574669][ T7900] device vlan0 entered promiscuous mode [ 271.603305][ T7900] device macvlan0 entered promiscuous mode [ 271.634616][ T7900] device macvlan1 entered promiscuous mode [ 271.646696][ T7900] device ipvlan0 entered promiscuous mode [ 271.659481][ T7900] device ipvlan1 entered promiscuous mode [ 271.726966][ T7900] device macvtap0 entered promiscuous mode [ 271.765422][ T7900] device macsec0 entered promiscuous mode [ 271.796955][ T7900] device geneve0 entered promiscuous mode [ 271.827731][ T7900] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.837170][ T7900] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.846805][ T7900] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.856842][ T7900] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.872425][ T7900] device geneve1 entered promiscuous mode [ 271.911437][ T7900] device netdevsim0 entered promiscuous mode [ 271.935938][ T7900] device netdevsim1 entered promiscuous mode [ 271.961051][ T7900] device netdevsim2 entered promiscuous mode [ 271.991124][ T7900] device netdevsim3 entered promiscuous mode [ 272.020294][ T7900] device wlan0 entered promiscuous mode [ 272.045456][ T7900] device wlan1 entered promiscuous mode [ 272.057906][ T7900] device vxlan0 entered promiscuous mode [ 272.225227][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 275.771909][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 277.248898][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 278.765972][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 278.984953][ T8031] device bond1 entered promiscuous mode [ 279.021590][ T8031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.351297][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 284.204153][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'. [ 284.305639][ T8109] device bond1 entered promiscuous mode [ 284.321258][ T8109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.051090][ T8135] overlayfs: failed to clone upperpath [ 301.751508][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 301.790250][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 304.304477][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1214'. [ 306.295372][ T8398] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 306.319298][ T8398] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 306.716378][ T8408] fuse: Unknown parameter 'grou00000000000000000000' [ 309.804751][ T8441] overlayfs: missing 'lowerdir' [ 309.987857][ T8447] fuse: Unknown parameter 'grou00000000000000000000' [ 311.318969][ T8463] device pimreg entered promiscuous mode [ 312.724135][ T8486] fuse: Unknown parameter 'group_i00000000000000000000' [ 315.195336][ T8525] fuse: Unknown parameter 'group_i00000000000000000000' [ 317.220530][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227488][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.439514][ T8565] process 'syz.4.1273' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 319.254801][ T8572] fuse: Unknown parameter 'group_i00000000000000000000' [ 320.620013][ T8590] bridge0: port 3(syz_tun) entered disabled state [ 320.790820][ T8590] bridge0: port 4(ip6gretap0) entered disabled state [ 320.881144][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.626557][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.720536][ T8590] bond0: (slave bond_slave_0): Releasing backup interface [ 322.731757][ T8590] bond0: (slave bond_slave_1): Releasing backup interface [ 322.751172][ T8590] team0: Port device team_slave_0 removed [ 322.759207][ T8590] team0: Port device team_slave_1 removed [ 322.766953][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.791728][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.214402][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 325.278643][ T8661] overlayfs: failed to clone upperpath [ 326.326071][ T8685] 9pnet_fd: Insufficient options for proto=fd [ 327.904997][ T8707] tipc: Cannot configure node identity twice [ 329.178447][ T8725] ip_tables: iptables: counters copy to user failed while replacing table [ 330.047437][ T8738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.954580][ T8746] overlayfs: missing 'workdir' [ 332.005550][ T8760] tipc: Enabling of bearer rejected, failed to enable media [ 332.266208][ T26] audit: type=1326 audit(1790131431.637:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.5.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 332.367036][ T26] audit: type=1326 audit(1790131431.667:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.5.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 332.444246][ T26] audit: type=1326 audit(1790131431.677:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.5.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 332.636685][ T8773] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 332.654739][ T26] audit: type=1326 audit(1790131431.677:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.5.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 332.746650][ T26] audit: type=1326 audit(1790131431.677:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.5.1335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 333.664174][ T8783] overlayfs: missing 'workdir' [ 333.774475][ T8786] fuse: Bad value for 'user_id' [ 334.026168][ T8791] overlayfs: failed to clone upperpath [ 336.245471][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'. [ 336.631391][ T8824] overlayfs: failed to clone upperpath [ 338.974185][ T8858] overlayfs: failed to clone upperpath [ 340.728672][ T8896] netlink: 1708 bytes leftover after parsing attributes in process `syz.0.1378'. [ 341.567280][ T8900] overlayfs: failed to clone upperpath [ 346.479150][ T8937] overlayfs: failed to clone upperpath [ 346.731807][ T8940] netlink: 1708 bytes leftover after parsing attributes in process `syz.0.1390'. [ 346.974577][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 346.984633][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 346.992237][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.002318][ T4291] Workqueue: hci0 hci_rx_work [ 347.007045][ T4291] Call Trace: [ 347.010348][ T4291] [ 347.013312][ T4291] dump_stack_lvl+0x188/0x24e [ 347.018124][ T4291] ? show_regs_print_info+0x12/0x12 [ 347.023355][ T4291] ? load_image+0x410/0x410 [ 347.027913][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 347.033077][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 347.037791][ T4291] ? preempt_schedule_thunk+0x16/0x18 [ 347.043214][ T4291] kobject_add_internal+0x617/0xca0 [ 347.048456][ T4291] kobject_add+0x160/0x230 [ 347.052911][ T4291] ? kobject_init+0x1c0/0x1c0 [ 347.057628][ T4291] ? __raw_spin_lock_init+0x41/0x100 [ 347.062938][ T4291] ? klist_children_get+0x50/0x50 [ 347.067988][ T4291] ? get_device_parent+0x121/0x3e0 [ 347.073408][ T4291] device_add+0x470/0x1050 [ 347.077953][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 347.083030][ T4291] le_conn_complete_evt+0xf93/0x15c0 [ 347.088397][ T4291] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 347.095521][ T4291] ? lockdep_hardirqs_on+0x94/0x140 [ 347.100831][ T4291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 347.106525][ T4291] ? skb_pull_data+0xec/0x1f0 [ 347.111351][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 347.116957][ T4291] ? hci_remote_host_features_evt+0x230/0x230 [ 347.123060][ T4291] hci_event_packet+0x7b3/0x1290 [ 347.128034][ T4291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 347.133702][ T4291] ? bis_list+0x280/0x280 [ 347.138080][ T4291] ? hci_rx_work+0xb1/0xd40 [ 347.142624][ T4291] ? hci_get_dev_info+0x490/0x700 [ 347.147680][ T4291] ? kasan_check_range+0x84/0x290 [ 347.152928][ T4291] hci_rx_work+0x3eb/0xd40 [ 347.157411][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 347.162312][ T4291] ? process_one_work+0x7b4/0x1160 [ 347.167455][ T4291] process_one_work+0x8ab/0x1160 [ 347.172442][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 347.178112][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 347.183170][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 347.188935][ T4291] ? wq_worker_running+0x97/0x190 [ 347.194004][ T4291] worker_thread+0xaf5/0x12a0 [ 347.198736][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 347.204683][ T4291] kthread+0x29d/0x330 [ 347.208780][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 347.213844][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 347.218473][ T4291] ret_from_fork+0x1f/0x30 [ 347.222963][ T4291] [ 347.232092][ T4291] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 347.245852][ T4291] Bluetooth: hci0: failed to register connection device [ 347.669701][ T26] audit: type=1326 audit(1790131446.684:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fe99e159 code=0x7ffc0000 [ 347.847102][ T26] audit: type=1326 audit(1790131446.684:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6fe99e159 code=0x7ffc0000 [ 348.599561][ T26] audit: type=1326 audit(1790131446.684:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fe99e159 code=0x7ffc0000 [ 348.645165][ T26] audit: type=1326 audit(1790131446.684:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa6fe99e159 code=0x7ffc0000 [ 348.696290][ T26] audit: type=1326 audit(1790131446.684:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.1394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fe99e159 code=0x7ffc0000 [ 349.282600][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 349.508286][ T8974] overlayfs: failed to clone upperpath [ 354.967791][ T9033] overlayfs: failed to clone upperpath [ 359.204282][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.227800][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.248332][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.270713][ T9105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.317959][ T9112] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 359.395946][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1450'. [ 361.061801][ T9152] overlayfs: failed to clone upperpath [ 361.510172][ T9162] netlink: 1708 bytes leftover after parsing attributes in process `syz.5.1462'. [ 362.609381][ T9175] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1468'. [ 364.545644][ T9189] overlayfs: failed to clone upperpath [ 375.398587][ T26] audit: type=1326 audit(1790131472.634:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 375.564329][ T26] audit: type=1326 audit(1790131472.634:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 375.597169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 375.607980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 375.618821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 375.629653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 375.640482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 375.651317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 376.398690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 376.409524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 376.420348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 376.431182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 376.520342][ T26] audit: type=1326 audit(1790131472.634:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 376.561713][ T26] audit: type=1326 audit(1790131472.634:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.4.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 379.719293][ T9431] netlink: 1708 bytes leftover after parsing attributes in process `syz.4.1555'. [ 380.885515][ T9447] tipc: Enabling of bearer rejected, failed to enable media [ 381.244451][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.257996][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.613401][ T9581] 9pnet_fd: Insufficient options for proto=fd [ 394.160039][ T9629] 9pnet_fd: Insufficient options for proto=fd [ 394.973800][ T9641] tmpfs: Bad value for 'mpol' [ 401.060697][ T9704] fuse: Unknown parameter 'user_i00000000000000000000' [ 410.223994][ T9813] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1677'. [ 423.180127][ T9994] ip_tables: iptables: counters copy to user failed while replacing table [ 429.051627][T10070] netlink: 1708 bytes leftover after parsing attributes in process `syz.5.1755'. [ 430.843812][T10101] fuse: Unknown parameter '0x0000000000000004' [ 431.973826][T10127] netlink: 1708 bytes leftover after parsing attributes in process `syz.5.1771'. [ 436.390590][T10175] netlink: 1708 bytes leftover after parsing attributes in process `syz.3.1786'. [ 439.772113][T10180] device syztnl0 entered promiscuous mode [ 441.816210][T10223] netlink: 1708 bytes leftover after parsing attributes in process `syz.1.1801'. [ 445.126767][T10276] netlink: 1708 bytes leftover after parsing attributes in process `syz.1.1817'. [ 445.545553][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.551908][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.073766][T10296] tmpfs: Bad value for 'mpol' [ 454.158272][T10400] fuse: Bad value for 'fd' [ 456.426882][ T4291] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 456.436234][ T4291] Bluetooth: hci0: Injecting HCI hardware error event [ 456.447929][ T4291] Bluetooth: hci0: hardware error 0x00 [ 456.993022][T10451] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 458.667484][ T4291] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 459.433707][T10513] overlayfs: failed to clone upperpath [ 460.205682][ T4291] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 460.214676][ T4291] Bluetooth: hci1: Injecting HCI hardware error event [ 460.223558][ T4291] Bluetooth: hci1: hardware error 0x00 [ 462.200374][T10532] futex_wake_op: syz.0.1894 tries to shift op by 144; fix this program [ 462.309545][T10532] futex_wake_op: syz.0.1894 tries to shift op by 144; fix this program [ 462.529457][ T4291] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 465.688385][ T26] audit: type=1326 audit(1790131558.258:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 465.810878][ T26] audit: type=1326 audit(1790131558.286:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 465.855935][ T26] audit: type=1326 audit(1790131558.286:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 465.901096][ T26] audit: type=1326 audit(1790131558.286:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 465.934704][ T26] audit: type=1326 audit(1790131558.286:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 465.978198][ T26] audit: type=1326 audit(1790131558.286:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 466.091257][ T26] audit: type=1326 audit(1790131558.286:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 466.305776][ T26] audit: type=1326 audit(1790131558.286:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 466.336043][ T26] audit: type=1326 audit(1790131558.286:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 466.553690][ T26] audit: type=1326 audit(1790131558.286:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.5.1917" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd79279e159 code=0x7ffc0000 [ 471.309230][T10667] tipc: Enabling of bearer rejected, failed to enable media [ 473.390946][T10708] tipc: Enabling of bearer rejected, failed to enable media [ 476.825507][T10751] tipc: Enabling of bearer rejected, failed to enable media [ 481.229216][T10810] tipc: Enabling of bearer rejected, failed to enable media [ 482.683277][T10825] 9pnet_fd: Insufficient options for proto=fd [ 487.741472][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 487.741487][ T26] audit: type=1326 audit(1790131579.174:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.4.2017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 487.841301][ T26] audit: type=1326 audit(1790131579.174:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.4.2017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 487.906409][ T26] audit: type=1326 audit(1790131579.204:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.4.2017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 487.932457][ T26] audit: type=1326 audit(1790131579.204:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.4.2017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 487.991390][ T26] audit: type=1326 audit(1790131579.204:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.4.2017" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e99e159 code=0x7ffc0000 [ 495.728164][T10984] tipc: Enabling of bearer rejected, failed to enable media [ 499.380874][T11038] tipc: Enabling of bearer rejected, failed to enable media [ 500.316533][T11056] netlink: 1708 bytes leftover after parsing attributes in process `syz.0.2071'. [ 502.542225][T11088] tipc: Enabling of bearer rejected, failed to enable media [ 503.774415][T11112] 9pnet_fd: Insufficient options for proto=fd [ 505.511068][T11139] netlink: 1708 bytes leftover after parsing attributes in process `syz.1.2091'. [ 508.816340][T11163] fuse: Unknown parameter 'group_id00000000000000000000' [ 508.853282][T11161] tipc: Enabling of bearer rejected, failed to enable media [ 509.028105][T11170] 9pnet_fd: Insufficient options for proto=fd [ 510.504443][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.510850][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.775424][T11201] fuse: Unknown parameter 'group_id00000000000000000000' [ 512.094418][T11216] tipc: Enabling of bearer rejected, failed to enable media [ 512.392750][T11218] 9pnet_fd: Insufficient options for proto=fd [ 517.467529][T11271] 9pnet_fd: Insufficient options for proto=fd [ 519.057830][T11279] tipc: Enabling of bearer rejected, failed to enable media [ 526.973037][T11410] tipc: Enabling of bearer rejected, failed to enable media [ 530.466618][T11447] netlink: 1708 bytes leftover after parsing attributes in process `syz.1.2167'. [ 531.028286][T11457] 9pnet_fd: Insufficient options for proto=fd [ 535.613193][T11498] tipc: Enabling of bearer rejected, failed to enable media [ 541.393585][T11553] tipc: Enabling of bearer rejected, failed to enable media [ 543.459530][ T4291] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 543.479542][ T4291] Bluetooth: hci4: Injecting HCI hardware error event [ 543.492085][T10446] Bluetooth: hci4: hardware error 0x00 [ 545.897675][T10446] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 545.979269][T11622] netlink: 1708 bytes leftover after parsing attributes in process `syz.4.2222'. [ 546.170246][T10446] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 546.179399][T10446] Bluetooth: hci3: Injecting HCI hardware error event [ 546.189107][ T4291] Bluetooth: hci3: hardware error 0x00 [ 548.330631][ T4291] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 554.682267][T11747] overlayfs: failed to clone upperpath [ 568.148779][T11916] fuse: Unknown parameter 'use00000000000000000000' [ 572.419855][T11957] fuse: Unknown parameter 'use00000000000000000000' [ 573.041530][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.047979][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.221362][T11987] 9pnet_fd: Insufficient options for proto=fd [ 575.124018][T11998] tipc: Enabling of bearer rejected, failed to enable media [ 575.242145][T12001] fuse: Unknown parameter 'use00000000000000000000' [ 578.087431][T12045] 9pnet_fd: Insufficient options for proto=fd [ 578.224793][T12047] fuse: Unknown parameter 'user_i00000000000000000000' [ 579.854105][T12085] fuse: Unknown parameter 'user_i00000000000000000000' [ 582.884108][T12136] fuse: Unknown parameter 'user_i00000000000000000000' [ 585.888892][T12172] fuse: Unknown parameter 'user_id00000000000000000000' [ 589.888432][T12225] fuse: Unknown parameter 'user_id00000000000000000000' [ 594.196927][T12268] fuse: Unknown parameter 'user_id00000000000000000000' [ 594.634654][T12274] 9pnet_fd: Insufficient options for proto=fd [ 597.732740][T12313] fuse: Bad value for 'fd' [ 600.771585][T12352] fuse: Bad value for 'fd' [ 608.688055][T12419] fuse: Unknown parameter '0x0000000000000003' [ 608.831021][T12426] tipc: Enabling of bearer rejected, failed to enable media [ 612.018041][T12461] fuse: Unknown parameter '0x0000000000000003' [ 612.102602][T12463] 9pnet_fd: Insufficient options for proto=fd [ 612.785142][T12474] tipc: Enabling of bearer rejected, failed to enable media [ 615.349127][T12496] fuse: Unknown parameter '0x0000000000000003' [ 620.159133][T12548] 9pnet_fd: Insufficient options for proto=fd [ 623.307638][T12585] tipc: Enabling of bearer rejected, failed to enable media [ 628.999229][T12647] 9pnet_fd: Insufficient options for proto=fd [ 630.156605][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.166549][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.174816][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.201776][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.209432][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 630.217986][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.913907][T12655] chnl_net:caif_netlink_parms(): no params data found [ 631.183008][T12655] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.219435][T12655] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.257446][T12655] device bridge_slave_0 entered promiscuous mode [ 631.302110][T12655] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.451702][T12655] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.481201][T12655] device bridge_slave_1 entered promiscuous mode [ 631.588551][T12655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.628210][T12655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.732124][T12655] team0: Port device team_slave_0 added [ 631.763420][T12655] team0: Port device team_slave_1 added [ 631.841489][T12655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.866592][T12655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.937119][T12655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.986139][T12655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.011466][T12655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.088043][T12655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.271247][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 632.349399][T12655] device hsr_slave_0 entered promiscuous mode [ 632.365901][T12655] device hsr_slave_1 entered promiscuous mode [ 632.390091][T12655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.403884][T12655] Cannot create hsr debugfs directory [ 633.793696][T12701] tipc: Enabling of bearer rejected, failed to enable media [ 634.307394][T12655] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 634.374849][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 634.394376][T12655] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 634.434075][T12655] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 634.507673][T12655] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 634.842536][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.849136][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.129272][T12655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.341887][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 635.359166][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 635.398644][T12655] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.528038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 635.558461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.595894][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.603160][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.664368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 635.696526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.716039][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.723343][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.886741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 635.904267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.940208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 636.011922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 636.061535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 636.091815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 636.173949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 636.219089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 636.501650][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 636.502789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.530695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.560706][T12655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.604278][T12655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 636.630272][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 636.648577][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.832546][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.864937][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.890538][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.927748][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.649962][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 638.710957][T12777] 9pnet_fd: Insufficient options for proto=fd [ 639.292421][ T6682] bond1 (unregistering): Released all slaves [ 640.711568][ T6682] team0 (unregistering): Port device team_slave_1 removed [ 640.870986][ T6682] team0 (unregistering): Port device team_slave_0 removed [ 641.027706][ T6682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.155390][ T6682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.474683][ T6682] bond0 (unregistering): Released all slaves [ 642.801625][T12816] netlink: 'syz.1.2549': attribute type 72 has an invalid length. [ 643.082793][T12820] tipc: Enabling of bearer rejected, failed to enable media [ 643.785392][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 643.793013][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 643.881534][T12655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.225636][T12846] trusted_key: encrypted_key: master key parameter '' is invalid [ 645.386062][T12869] netlink: 'syz.5.2562': attribute type 72 has an invalid length. [ 646.322980][T12893] tipc: Enabling of bearer rejected, failed to enable media [ 646.392861][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 646.450694][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 646.532723][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 646.566418][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.661283][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.695744][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.736397][T12655] device veth0_vlan entered promiscuous mode [ 646.780812][T12655] device veth1_vlan entered promiscuous mode [ 646.895681][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 646.930827][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 646.953344][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 647.005491][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 647.036219][T12655] device veth0_macvtap entered promiscuous mode [ 647.065234][T12655] device veth1_macvtap entered promiscuous mode [ 647.154390][T12655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.162156][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 647.179241][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 647.205006][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 647.235646][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 647.341082][T12655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.386443][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 647.413170][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 647.426892][T12655] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.446334][T12655] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.466300][T12655] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.494389][T12655] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.739906][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.762949][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.793366][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 647.819772][ T6501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.848967][ T6501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.866610][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 648.774216][T12936] device syzkaller0 entered promiscuous mode [ 652.453239][T13001] tipc: Enabling of bearer rejected, failed to enable media [ 655.911136][T13048] Console: switching to colour VGA+ 80x25 [ 656.533227][T13058] tipc: Enabling of bearer rejected, failed to enable media [ 658.948488][T13124] Console: switching to colour frame buffer device 128x48 [ 659.003890][T13124] loop6: detected capacity change from 0 to 512 [ 659.031122][T13124] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 659.057487][T13124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 659.067932][T13124] EXT4-fs (loop6): orphan cleanup on readonly fs [ 659.074351][T13124] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.2624: bad orphan inode 267 [ 659.103692][T13124] EXT4-fs (loop6): Remounting filesystem read-only [ 659.110368][T13124] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 659.120437][T13124] EXT4-fs (loop6): unmounting filesystem. [ 663.452560][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2663'. [ 665.708401][T13268] tipc: Enabling of bearer rejected, failed to enable media [ 666.105199][T13278] 9pnet_fd: Insufficient options for proto=fd [ 666.413527][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'. [ 666.508567][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 668.182198][T13330] tipc: Enabling of bearer rejected, failed to enable media [ 669.508509][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2695'. [ 669.699097][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 669.763111][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 669.943599][T13360] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2695'. [ 670.102796][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 672.324560][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 672.934827][T13405] netlink: 'syz.4.2710': attribute type 1 has an invalid length. [ 677.070189][T13461] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2723'. [ 677.099649][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2723'. [ 677.130072][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2723'. [ 677.165333][T13461] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2723'. [ 677.176768][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2723'. [ 677.232486][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2723'. [ 678.360815][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2727'. [ 680.188720][T13511] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2736'. [ 680.244528][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2736'. [ 684.314834][T13587] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2752'. [ 686.316928][T13634] device syzkaller0 entered promiscuous mode [ 686.985627][T13643] xt_hashlimit: max too large, truncated to 1048576 [ 688.547286][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2774'. [ 688.577502][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2774'. [ 688.603884][T13669] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2774'. [ 688.753829][T13671] device syzkaller0 entered promiscuous mode [ 694.164368][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 694.179929][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 694.189000][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 694.234072][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 694.257852][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 694.265479][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 696.221518][T13746] chnl_net:caif_netlink_parms(): no params data found [ 696.238711][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 697.463970][T13746] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.471972][T13746] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.517461][T13746] device bridge_slave_0 entered promiscuous mode [ 697.527195][T13746] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.534636][T13746] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.542979][T13746] device bridge_slave_1 entered promiscuous mode [ 697.671508][T13746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.780438][T13746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.907702][T13746] team0: Port device team_slave_0 added [ 697.994294][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 698.000665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.087787][T13746] team0: Port device team_slave_1 added [ 698.318750][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 698.530737][T13746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.554322][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.580364][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.708352][T13746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.890796][T13746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.905608][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.987765][T13746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.014289][T13843] dummy0 speed is unknown, defaulting to 1000 [ 699.230585][T13843] dummy0 speed is unknown, defaulting to 1000 [ 699.471250][T13843] dummy0 speed is unknown, defaulting to 1000 [ 699.579872][T13746] device hsr_slave_0 entered promiscuous mode [ 699.652580][T13746] device hsr_slave_1 entered promiscuous mode [ 699.691246][T13746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.713722][T13746] Cannot create hsr debugfs directory [ 700.224895][T13843] infiniband syz0: set active [ 700.266044][T13843] infiniband syz0: added dummy0 [ 700.271786][ T5393] dummy0 speed is unknown, defaulting to 1000 [ 700.303794][T13843] rdma_rxe: unable to create cq [ 700.323900][T13843] infiniband syz0: Couldn't create ib_mad CQ [ 700.348514][T13843] infiniband syz0: Couldn't open port 1 [ 700.479784][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 700.522041][T13843] RDS/IB: syz0: added [ 700.526844][T13843] smc: adding ib device syz0 with port count 1 [ 700.536678][T13843] smc: ib device syz0 port 1 has pnetid [ 700.904497][ T5988] bond1 (unregistering): Released all slaves [ 703.019464][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 704.887686][ T5988] bond0 (unregistering): Released all slaves [ 705.796666][ T4321] dummy0 speed is unknown, defaulting to 1000 [ 705.805830][T13843] dummy0 speed is unknown, defaulting to 1000 [ 706.217620][T13942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2854'. [ 706.239449][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 706.258017][T13843] dummy0 speed is unknown, defaulting to 1000 [ 706.264700][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 706.277217][T13942] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2854'. [ 706.303136][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 706.341330][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 707.110329][T13954] netlink: 'syz.1.2856': attribute type 29 has an invalid length. [ 707.274031][T13954] netlink: 'syz.1.2856': attribute type 29 has an invalid length. [ 707.300321][T13954] netlink: 'syz.1.2856': attribute type 29 has an invalid length. [ 707.347013][T13843] dummy0 speed is unknown, defaulting to 1000 [ 708.488262][T13843] dummy0 speed is unknown, defaulting to 1000 [ 708.762304][T13843] dummy0 speed is unknown, defaulting to 1000 [ 708.919040][T13843] dummy0 speed is unknown, defaulting to 1000 [ 709.166486][T13843] dummy0 speed is unknown, defaulting to 1000 [ 709.505117][T13920] hsr0 speed is unknown, defaulting to 1000 [ 709.525988][T13920] hsr0 speed is unknown, defaulting to 1000 [ 709.576308][T13920] hsr0 speed is unknown, defaulting to 1000 [ 709.647714][T13920] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 710.493446][T13920] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 711.092428][T13920] hsr0 speed is unknown, defaulting to 1000 [ 711.107963][T13920] hsr0 speed is unknown, defaulting to 1000 [ 711.136995][T13920] hsr0 speed is unknown, defaulting to 1000 [ 711.143930][T13920] hsr0 speed is unknown, defaulting to 1000 [ 711.208101][T13920] hsr0 speed is unknown, defaulting to 1000 [ 711.250205][T13920] hsr0 speed is unknown, defaulting to 1000 [ 711.322420][T13920] hsr0 speed is unknown, defaulting to 1000 [ 711.723194][T13746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 711.818011][T13746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 711.892710][T13746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 711.967774][T13746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 713.372463][T13746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.418879][T13746] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.437017][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.465752][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.661897][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.673764][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.765633][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.772899][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.519704][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 714.552973][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 714.592390][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.599636][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.628163][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 714.637913][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 714.654540][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 714.671304][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 714.715537][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 714.730473][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 714.749760][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 714.776594][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 714.803971][T14027] dummy0 speed is unknown, defaulting to 1000 [ 714.908069][T14027] hsr0 speed is unknown, defaulting to 1000 [ 717.361173][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 717.426118][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 717.492034][T13746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.513655][T13746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 717.568849][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 717.587960][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 718.723831][T14103] dummy0 speed is unknown, defaulting to 1000 [ 719.246875][T14103] hsr0 speed is unknown, defaulting to 1000 [ 719.676625][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 720.084929][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 720.117973][T14107] dummy0 speed is unknown, defaulting to 1000 [ 720.124741][T13746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.216243][T14107] hsr0 speed is unknown, defaulting to 1000 [ 720.266938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 720.290622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 720.355522][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 720.388652][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 720.424769][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 720.454866][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 720.497907][T13746] device veth0_vlan entered promiscuous mode [ 720.528710][T13746] device veth1_vlan entered promiscuous mode [ 720.598067][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 720.609967][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 720.627902][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 720.658436][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 720.681383][T13746] device veth0_macvtap entered promiscuous mode [ 720.849051][T13746] device veth1_macvtap entered promiscuous mode [ 720.887645][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.920723][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.945769][T13746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.953579][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 721.570659][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 722.176329][T13746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.188174][T13746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.201216][T13746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.208695][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 722.218419][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 722.230480][T13746] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.248287][T13746] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.259670][T13746] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.274573][T13746] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.666692][ T5215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.684165][ T5215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.719083][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 722.818396][ T5215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.844678][ T5215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.887426][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 722.944632][T14161] device syzkaller0 entered promiscuous mode [ 724.085511][T14178] dummy0 speed is unknown, defaulting to 1000 [ 724.668971][T14178] hsr0 speed is unknown, defaulting to 1000 [ 725.773553][T10446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 725.785211][T10446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 725.793584][T10446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 725.802878][T10446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 725.813296][T10446] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 725.820837][T10446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.006512][T14189] dummy0 speed is unknown, defaulting to 1000 [ 726.095166][T14199] device syzkaller0 entered promiscuous mode [ 728.093029][T10446] Bluetooth: hci2: command 0x0409 tx timeout [ 730.411954][T10446] Bluetooth: hci2: command 0x041b tx timeout [ 731.250260][T14259] tipc: Failed to remove unknown binding: 66,0,0/0:1936146871/1936146872 [ 731.287271][T14259] tipc: Failed to remove unknown binding: 66,0,0/0:1936146871/1936146872 [ 731.885137][T14189] hsr0 speed is unknown, defaulting to 1000 [ 731.912851][T14260] tipc: Enabling of bearer rejected, failed to enable media [ 732.599008][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 732.736983][T14189] chnl_net:caif_netlink_parms(): no params data found [ 733.339917][T14189] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.355696][T14189] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.373659][T14189] device bridge_slave_0 entered promiscuous mode [ 733.397739][T14189] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.409456][T14189] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.423120][T14189] device bridge_slave_1 entered promiscuous mode [ 733.471531][T14293] device syzkaller0 entered promiscuous mode [ 733.582063][T14189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.616904][T14189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.971056][T14189] team0: Port device team_slave_0 added [ 733.989442][T14189] team0: Port device team_slave_1 added [ 734.115285][T14189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.129962][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.165840][T14189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.196513][T14189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.207787][T14189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.241353][T14189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.255557][T14310] rdma_rxe: rxe_register_device failed with error -23 [ 734.286711][T14310] rdma_rxe: failed to add team_slave_0 [ 734.406636][T14189] device hsr_slave_0 entered promiscuous mode [ 734.415464][T14189] device hsr_slave_1 entered promiscuous mode [ 734.434358][T14189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.448265][T14189] Cannot create hsr debugfs directory [ 734.671797][T14315] netlink: 'syz.0.2956': attribute type 29 has an invalid length. [ 734.700342][T14315] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2956'. [ 734.859127][T10446] Bluetooth: hci2: command 0x0419 tx timeout [ 734.874827][ T5988] tipc: Left network mode [ 736.691776][T14343] team0: Device wg1 is of different type [ 736.756525][T14343] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 736.898657][T14189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 736.977467][T14343] netlink: 'syz.0.2963': attribute type 1 has an invalid length. [ 737.068037][T14189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 737.086524][T14189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 737.203303][T14344] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1048579) [ 737.344743][T14347] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1048579) [ 737.623410][T14189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 737.927770][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2963'. [ 737.958060][T14343] device bridge1 entered promiscuous mode [ 738.102044][ T5988] IPVS: stopping backup sync thread 9112 ... [ 738.697650][T14189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.804463][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 738.822229][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 738.855700][T14189] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.911745][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 738.958494][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 738.998088][T11108] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.005310][T11108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.047974][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 739.067288][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 739.082415][T14393] loop6: detected capacity change from 0 to 512 [ 739.105317][T11108] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.112534][T11108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.156189][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.187820][T14262] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 739.204355][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.269812][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.329061][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.049305][T14417] loop6: detected capacity change from 0 to 2048 [ 740.252595][T14417] Alternate GPT is invalid, using primary GPT. [ 740.259033][T14417] loop6: p1 p2 p3 [ 740.262791][T14417] loop6: partition table partially beyond EOD, truncated [ 741.678402][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 741.750095][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 741.800836][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.869093][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.248140][ T5988] bond0 (unregistering): Released all slaves [ 742.458220][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.466233][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 742.475158][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.490546][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.504525][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.514483][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 742.557018][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 742.612922][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.649203][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 742.689212][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.870700][T14454] device bridge1 entered promiscuous mode [ 743.730847][T14189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.745302][T14450] netlink: 'syz.5.2990': attribute type 1 has an invalid length. [ 743.777006][T14458] dummy0 speed is unknown, defaulting to 1000 [ 743.831585][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 743.874197][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.928738][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 745.953718][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 745.994433][T14189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.865534][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 748.997257][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 749.033134][T14556] dummy0 speed is unknown, defaulting to 1000 [ 749.082046][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 749.132683][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 749.166483][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 749.175842][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 749.191710][T14189] device veth0_vlan entered promiscuous mode [ 749.260683][T14189] device veth1_vlan entered promiscuous mode [ 749.335326][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 749.354306][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 749.362874][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 749.378520][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 749.400956][T14189] device veth0_macvtap entered promiscuous mode [ 749.477750][T14189] device veth1_macvtap entered promiscuous mode [ 749.554777][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.023830][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.072763][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.190579][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.334618][T14189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.391179][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.422950][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.432925][T14189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.443438][T14189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.456002][T14189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.469756][T14577] dummy0 speed is unknown, defaulting to 1000 [ 750.764030][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 750.774976][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 750.828222][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 750.837254][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 750.868087][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 750.878245][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 750.899036][T14189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.935104][T14189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.958792][T14189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.967792][T14189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.161883][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.175437][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.197174][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 751.279144][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.307916][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.341957][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 751.851644][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'. [ 751.927143][T14626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3047'. [ 752.026217][T14626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3047'. [ 752.265584][T14627] device syzkaller0 entered promiscuous mode [ 755.550891][T14675] loop6: detected capacity change from 0 to 128 [ 755.574644][T14675] FAT-fs (loop6): Directory bread(block 414) failed [ 755.581576][T14675] FAT-fs (loop6): Directory bread(block 415) failed [ 755.588606][T14675] FAT-fs (loop6): Directory bread(block 416) failed [ 755.595433][T14675] FAT-fs (loop6): Directory bread(block 417) failed [ 755.602366][T14675] FAT-fs (loop6): Directory bread(block 418) failed [ 755.609041][T14675] FAT-fs (loop6): Directory bread(block 419) failed [ 755.615942][T14675] FAT-fs (loop6): Directory bread(block 420) failed [ 755.622690][T14675] FAT-fs (loop6): Directory bread(block 421) failed [ 757.603194][T14706] tipc: Enabling of bearer rejected, failed to enable media [ 759.044021][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.065882][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.076881][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.085427][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.093445][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 759.100968][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.278959][T14726] dummy0 speed is unknown, defaulting to 1000 [ 759.727847][T14743] loop6: detected capacity change from 0 to 512 [ 759.795057][T14262] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 760.529074][T10446] Bluetooth: hci5: command 0x0406 tx timeout [ 761.073100][T14756] loop6: detected capacity change from 0 to 2048 [ 761.096746][T14756] Alternate GPT is invalid, using primary GPT. [ 761.103086][T14756] loop6: p1 p2 p3 [ 761.103950][T10446] Bluetooth: hci1: command 0x0409 tx timeout [ 761.107548][T14756] loop6: partition table partially beyond EOD, truncated [ 761.947901][T14726] chnl_net:caif_netlink_parms(): no params data found [ 762.888899][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.901692][T14726] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.939357][T14726] device bridge_slave_0 entered promiscuous mode [ 763.033491][T14726] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.050740][T14726] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.066976][T14726] device bridge_slave_1 entered promiscuous mode [ 763.193839][T10446] Bluetooth: hci1: command 0x041b tx timeout [ 763.992938][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 763.999595][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.280683][T14726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.445028][T14726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.208845][T14830] loop0: detected capacity change from 0 to 512 [ 765.233065][T10446] Bluetooth: hci1: command 0x040f tx timeout [ 765.233106][T14830] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 765.310680][T14830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 765.449486][T14830] EXT4-fs (loop0): orphan cleanup on readonly fs [ 765.457001][T14830] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.3098: bad orphan inode 267 [ 765.468591][T14830] EXT4-fs (loop0): Remounting filesystem read-only [ 765.475274][T14830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 765.486183][T14830] EXT4-fs (loop0): unmounting filesystem. [ 765.583509][T14726] team0: Port device team_slave_0 added [ 765.760622][T14726] team0: Port device team_slave_1 added [ 766.321197][T11108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.467924][T11108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.519775][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.561206][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.314574][T10446] Bluetooth: hci1: command 0x0419 tx timeout [ 767.821193][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 767.857387][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 768.481455][T14860] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 769.668746][T11108] team0 (unregistering): Port device team_slave_1 removed [ 769.751227][T11108] team0 (unregistering): Port device team_slave_0 removed [ 769.832919][T11108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.891948][T11108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.247217][T11108] bond0 (unregistering): Released all slaves [ 770.443455][T14726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.450738][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.486798][T14726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.502803][T14726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.515315][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.542974][T14726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.581727][T14862] dummy0 speed is unknown, defaulting to 1000 [ 770.632684][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 770.696886][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3109'. [ 770.778576][T14868] device hsr_slave_1 left promiscuous mode [ 771.812202][T14726] device hsr_slave_0 entered promiscuous mode [ 771.831774][T14726] device hsr_slave_1 entered promiscuous mode [ 772.742328][T14905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3115'. [ 774.001229][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 775.537400][T14939] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3122'. [ 777.222100][T14726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 777.320214][T14726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 777.358846][T14726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 777.643298][T14726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 777.889613][T14726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.061932][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 778.111732][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 778.265054][T14726] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.485967][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 778.515482][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 778.535973][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.543195][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.640788][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 778.676524][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 778.717422][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.724658][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.780796][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 778.851729][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 778.891985][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 778.930981][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 779.007762][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.044576][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 779.067185][T15001] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3138'. [ 779.078682][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.148386][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 779.172456][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 779.230233][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 779.251661][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 779.290544][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 779.342760][T14726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 780.561811][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 780.581138][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 780.633348][T14726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.748277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 780.773860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 780.854668][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 780.898671][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 780.936109][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 780.987290][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.047946][T14726] device veth0_vlan entered promiscuous mode [ 781.094749][T15038] netlink: 'syz.6.3148': attribute type 39 has an invalid length. [ 781.260846][T15045] loop4: detected capacity change from 0 to 128 [ 781.300572][T15045] FAT-fs (loop4): Directory bread(block 414) failed [ 781.307718][T15045] FAT-fs (loop4): Directory bread(block 415) failed [ 781.314653][T15045] FAT-fs (loop4): Directory bread(block 416) failed [ 781.321405][T15045] FAT-fs (loop4): Directory bread(block 417) failed [ 781.328191][T15045] FAT-fs (loop4): Directory bread(block 418) failed [ 781.334971][T15045] FAT-fs (loop4): Directory bread(block 419) failed [ 781.341714][T15045] FAT-fs (loop4): Directory bread(block 420) failed [ 781.348493][T15045] FAT-fs (loop4): Directory bread(block 421) failed [ 782.091228][T14726] device veth1_vlan entered promiscuous mode [ 782.121341][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 782.225393][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 782.235151][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 782.271204][T14726] device veth0_macvtap entered promiscuous mode [ 782.307778][T14726] device veth1_macvtap entered promiscuous mode [ 782.379924][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.436276][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.521773][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.540075][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.576064][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.630717][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.678608][T14726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.710238][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 782.737068][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 782.770307][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 782.851375][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 782.909474][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.940223][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.986755][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.034088][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.069552][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.103814][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.169454][T14726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.197577][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 783.216769][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 783.265161][T14726] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.297276][T14726] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.358040][T14726] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.366807][T14726] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.520891][T15066] dummy0 speed is unknown, defaulting to 1000 [ 783.638602][ T5946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.659999][ T5946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.667649][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 783.805656][T14579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.862191][T14579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.908386][T14579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 784.899890][T15102] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3167'. [ 785.018987][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.026434][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.048773][T15108] loop1: detected capacity change from 0 to 128 [ 785.106986][T15103] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3167'. [ 785.116208][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.123434][T15103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.131792][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.138968][T15103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.147799][T15108] EXT4-fs (loop1): Test dummy encryption mode enabled [ 785.191267][T15108] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 785.428162][T15103] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3167'. [ 785.457699][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.465023][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.927624][T15125] tipc: Started in network mode [ 785.968634][T15125] tipc: Node identity 8aec73b5f4b2, cluster identity 4711 [ 786.024848][T15125] tipc: Enabled bearer , priority 0 [ 786.074031][T15128] device syzkaller0 entered promiscuous mode [ 786.129280][T15125] tipc: Resetting bearer [ 786.190867][T15122] tipc: Resetting bearer [ 786.323273][T15122] tipc: Disabling bearer [ 786.583061][T15132] loop4: detected capacity change from 0 to 128 [ 786.598415][T15132] FAT-fs (loop4): Directory bread(block 414) failed [ 786.605386][T15132] FAT-fs (loop4): Directory bread(block 415) failed [ 786.612140][T15132] FAT-fs (loop4): Directory bread(block 416) failed [ 786.618837][T15132] FAT-fs (loop4): Directory bread(block 417) failed [ 786.625547][T15132] FAT-fs (loop4): Directory bread(block 418) failed [ 786.632296][T15132] FAT-fs (loop4): Directory bread(block 419) failed [ 786.638987][T15132] FAT-fs (loop4): Directory bread(block 420) failed [ 786.645702][T15132] FAT-fs (loop4): Directory bread(block 421) failed [ 788.042788][T15170] netlink: 'syz.4.3189': attribute type 12 has an invalid length. [ 788.114933][T15170] netlink: 'syz.4.3189': attribute type 29 has an invalid length. [ 788.343819][T15170] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3189'. [ 788.675251][T15170] netlink: 'syz.4.3189': attribute type 1 has an invalid length. [ 788.886779][T15170] netlink: 'syz.4.3189': attribute type 1 has an invalid length. [ 791.187745][T15224] loop0: detected capacity change from 0 to 128 [ 791.208210][T15224] FAT-fs (loop0): Directory bread(block 414) failed [ 791.215192][T15224] FAT-fs (loop0): Directory bread(block 415) failed [ 791.222019][T15224] FAT-fs (loop0): Directory bread(block 416) failed [ 791.228737][T15224] FAT-fs (loop0): Directory bread(block 417) failed [ 791.235576][T15224] FAT-fs (loop0): Directory bread(block 418) failed [ 791.242310][T15224] FAT-fs (loop0): Directory bread(block 419) failed [ 791.249230][T15224] FAT-fs (loop0): Directory bread(block 420) failed [ 791.256693][T15224] FAT-fs (loop0): Directory bread(block 421) failed [ 792.135092][T15240] device syzkaller0 entered promiscuous mode [ 792.747145][T15262] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 793.086512][T15271] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3217'. [ 793.478903][T15274] device syzkaller0 entered promiscuous mode [ 794.032137][T15283] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3219'. [ 794.768153][T15310] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3230'. [ 794.808984][T15306] device syzkaller0 entered promiscuous mode [ 795.293314][T15319] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3233'. [ 796.110721][T15331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3236'. [ 796.497515][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3243'. [ 796.527687][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3243'. [ 796.602064][T15353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3243'. [ 796.685039][T15347] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 796.950526][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3243'. [ 798.187689][T15347] device hsr_slave_1 left promiscuous mode [ 798.412322][T15386] netlink: 'syz.5.3253': attribute type 4 has an invalid length. [ 798.498061][T15393] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3255'. [ 798.783058][T15397] tipc: Started in network mode [ 798.795895][T15397] tipc: Node identity ac14140f, cluster identity 4711 [ 798.942994][T15397] tipc: New replicast peer: 255.255.255.255 [ 798.961873][T15397] tipc: Enabled bearer , priority 10 [ 799.035137][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3257'. [ 800.064631][T13999] tipc: Node number set to 2886997007 [ 800.203079][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3265'. [ 800.754496][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3271'. [ 802.377166][T15459] tipc: Started in network mode [ 802.390813][T15459] tipc: Node identity 6eb16cfbd756, cluster identity 4711 [ 802.398101][T15459] tipc: Enabled bearer , priority 0 [ 802.472424][T15463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3276'. [ 802.512002][T15459] tipc: Resetting bearer [ 802.593313][T15458] tipc: Disabling bearer [ 802.641593][T15465] Bluetooth: MGMT ver 1.22 [ 804.758056][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3295'. [ 804.941743][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.954159][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.962720][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.978222][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.986346][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 804.996269][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.254259][T15503] dummy0 speed is unknown, defaulting to 1000 [ 805.809790][T15521] Console: switching to colour VGA+ 80x25 [ 805.889475][T15522] loop6: detected capacity change from 0 to 512 [ 805.990001][T15521] Console: switching to colour frame buffer device 128x48 [ 806.069732][T15522] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 806.245141][T15522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 806.254518][T15522] EXT4-fs (loop6): orphan cleanup on readonly fs [ 806.260936][T15522] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.3300: bad orphan inode 267 [ 806.277744][T15522] EXT4-fs (loop6): Remounting filesystem read-only [ 806.284681][T15522] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 806.294366][T15522] EXT4-fs (loop6): unmounting filesystem. [ 807.297900][T10446] Bluetooth: hci0: command 0x0409 tx timeout [ 807.835641][ T5988] tipc: Disabling bearer [ 807.859662][ T5988] tipc: Left network mode [ 808.053718][T15541] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3307'. [ 808.242494][T15547] Console: switching to colour VGA+ 80x25 [ 809.115932][T15503] chnl_net:caif_netlink_parms(): no params data found [ 809.506018][T10446] Bluetooth: hci0: command 0x041b tx timeout [ 810.613799][T15503] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.667820][T15503] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.730539][T15503] device bridge_slave_0 entered promiscuous mode [ 810.892425][T15503] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.899622][T15503] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.964021][T15503] device bridge_slave_1 entered promiscuous mode [ 811.759080][T10446] Bluetooth: hci0: command 0x040f tx timeout [ 811.937375][T15503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.061431][T15609] tipc: Enabled bearer , priority 0 [ 812.341829][T15503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.379804][T15602] tipc: Disabling bearer [ 812.679740][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3328'. [ 812.704842][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 812.728356][T15503] team0: Port device team_slave_0 added [ 812.744683][T15503] team0: Port device team_slave_1 added [ 812.755193][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 812.796728][T15625] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3328'. [ 812.848822][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3328'. [ 812.868393][T15503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.880433][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3328'. [ 812.893239][T15503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.025971][T15503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.085826][T15503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.239489][T15503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.818633][T15503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.011585][T10446] Bluetooth: hci0: command 0x0419 tx timeout [ 814.584744][T15503] device hsr_slave_0 entered promiscuous mode [ 814.841905][T15503] device hsr_slave_1 entered promiscuous mode [ 815.144523][T15503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.218940][T15503] Cannot create hsr debugfs directory [ 815.406451][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.420279][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.494912][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.608212][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.559092][ T5988] bond1 (unregistering): Released all slaves [ 817.255471][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 817.328839][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 817.380678][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.439475][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.977938][ T5988] bond0 (unregistering): Released all slaves [ 818.383819][T15689] tipc: Started in network mode [ 818.396878][T15689] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 818.427231][T15689] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 818.441520][T15689] tipc: Enabled bearer , priority 10 [ 818.826416][T15703] Bluetooth: MGMT ver 1.22 [ 818.831029][T15703] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 819.569099][T15718] device syzkaller0 entered promiscuous mode [ 819.760449][ T5393] tipc: Node number set to 1 [ 819.768381][T15723] tipc: Enabled bearer , priority 0 [ 819.807814][T15717] tipc: Resetting bearer [ 819.945325][T15717] tipc: Disabling bearer [ 820.102022][T15503] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 820.136393][T15503] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 820.187067][T15503] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 820.243099][T15503] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 820.398382][T15743] device syzkaller0 entered promiscuous mode [ 821.300555][T15503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.436008][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 821.457362][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 821.489517][T15503] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.513866][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 821.556211][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 821.572893][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.580083][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.585056][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3369'. [ 821.619385][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 821.670226][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 821.683252][T15760] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3369'. [ 821.708511][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3369'. [ 821.773998][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3369'. [ 821.799735][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 821.819629][T15767] device syzkaller0 entered promiscuous mode [ 821.892990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 821.933691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 821.977444][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.984636][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.126669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 822.143440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 822.187204][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 822.220891][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 822.262043][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 822.329800][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 822.361016][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 822.405039][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 822.427003][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 822.471934][T15503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.501805][T15503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 822.532631][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 822.558662][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.852664][T15812] device syzkaller0 entered promiscuous mode [ 824.237120][T15827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3389'. [ 824.549815][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 824.571507][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 824.605979][T15503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.623494][T15840] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3394'. [ 824.767910][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 824.842837][T15851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3397'. [ 825.428833][T15869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3402'. [ 825.909175][T15878] device syzkaller0 entered promiscuous mode [ 826.373338][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 826.396368][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.460375][T15503] device veth0_vlan entered promiscuous mode [ 826.473910][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 826.529164][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 826.539176][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 826.588012][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 826.602153][T15503] device veth1_vlan entered promiscuous mode [ 826.716331][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 826.739915][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 826.763957][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 826.805138][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 826.849716][T15503] device veth0_macvtap entered promiscuous mode [ 826.882094][T15503] device veth1_macvtap entered promiscuous mode [ 826.960729][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.998354][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.041272][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.084759][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.166285][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.188494][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.225075][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.264153][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.300642][T15503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.332490][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 827.347645][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 827.369351][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 827.387178][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 827.502124][T15933] device syzkaller0 entered promiscuous mode [ 827.531702][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.536250][T15920] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 827.566891][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.595232][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.613232][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.630706][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.657182][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.687005][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.689288][T15939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3423'. [ 827.727035][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.759592][T15503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.786230][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 827.803157][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 828.052164][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 828.058574][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 830.720945][T15503] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.730974][T15503] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.741896][T15503] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.750995][T15503] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.953654][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.961519][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.050099][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 831.133779][T11108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.152352][T11108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.174487][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 832.729966][T16007] device syzkaller0 entered promiscuous mode [ 833.512089][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3451'. [ 833.548628][T16034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.581912][T16034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.665434][T16034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.711278][T16034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.754161][T16035] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3452'. [ 835.608074][T16093] device syzkaller0 entered promiscuous mode [ 835.765545][T16100] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3463'. [ 836.074920][T16111] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3467'. [ 836.099402][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3468'. [ 836.333647][T16117] device syzkaller0 entered promiscuous mode [ 836.495166][T16122] dummy0 speed is unknown, defaulting to 1000 [ 836.522499][T16125] device syzkaller0 entered promiscuous mode [ 836.847220][T16135] [ 836.849623][T16135] ====================================================== [ 836.856685][T16135] WARNING: possible circular locking dependency detected [ 836.857863][T16134] device syzkaller0 entered promiscuous mode [ 836.863709][T16135] syzkaller #0 Not tainted [ 836.863722][T16135] ------------------------------------------------------ [ 836.863729][T16135] syz.6.3476/16135 is trying to acquire lock: [ 836.863739][T16135] ffff888057514428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 836.896488][T16135] [ 836.896488][T16135] but task is already holding lock: [ 836.903892][T16135] ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 836.912966][T16135] [ 836.912966][T16135] which lock already depends on the new lock. [ 836.912966][T16135] [ 836.923375][T16135] [ 836.923375][T16135] the existing dependency chain (in reverse order) is: [ 836.932476][T16135] [ 836.932476][T16135] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 836.939961][T16135] __mutex_lock+0x12d/0xae0 [ 836.945041][T16135] rfcomm_security_cfm+0x95/0x780 [ 836.950620][T16135] hci_encrypt_cfm+0x363/0x4d0 [ 836.955926][T16135] hci_encrypt_change_evt+0x961/0xd30 [ 836.961825][T16135] hci_event_packet+0x806/0x1290 [ 836.967288][T16135] hci_rx_work+0x3eb/0xd40 [ 836.972301][T16135] process_one_work+0x8ab/0x1160 [ 836.977798][T16135] worker_thread+0xaf5/0x12a0 [ 836.983002][T16135] kthread+0x29d/0x330 [ 836.987709][T16135] ret_from_fork+0x1f/0x30 [ 836.992691][T16135] [ 836.992691][T16135] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 837.000433][T16135] __mutex_lock+0x12d/0xae0 [ 837.005469][T16135] hci_remote_features_evt+0x464/0xa10 [ 837.011464][T16135] hci_event_packet+0x806/0x1290 [ 837.016926][T16135] hci_rx_work+0x3eb/0xd40 [ 837.021957][T16135] process_one_work+0x8ab/0x1160 [ 837.027419][T16135] worker_thread+0xaf5/0x12a0 [ 837.032632][T16135] kthread+0x29d/0x330 [ 837.037310][T16135] ret_from_fork+0x1f/0x30 [ 837.042266][T16135] [ 837.042266][T16135] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 837.049657][T16135] __lock_acquire+0x2d18/0x7c40 [ 837.055082][T16135] lock_acquire+0x1bb/0x4a0 [ 837.060116][T16135] __mutex_lock+0x12d/0xae0 [ 837.065149][T16135] l2cap_chan_connect+0xfb/0xe20 [ 837.070618][T16135] l2cap_sock_connect+0x576/0x750 [ 837.076167][T16135] kernel_connect+0x13e/0x1c0 [ 837.081414][T16135] rfcomm_dlc_open+0x600/0x10c0 [ 837.086900][T16135] rfcomm_sock_connect+0x2e9/0x600 [ 837.092540][T16135] __sys_connect+0x3cb/0x450 [ 837.097649][T16135] __x64_sys_connect+0x76/0x80 [ 837.102935][T16135] do_syscall_64+0x4c/0xa0 [ 837.107894][T16135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.114356][T16135] [ 837.114356][T16135] other info that might help us debug this: [ 837.114356][T16135] [ 837.124606][T16135] Chain exists of: [ 837.124606][T16135] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 837.124606][T16135] [ 837.137150][T16135] Possible unsafe locking scenario: [ 837.137150][T16135] [ 837.144604][T16135] CPU0 CPU1 [ 837.149975][T16135] ---- ---- [ 837.155342][T16135] lock(rfcomm_mutex); [ 837.159505][T16135] lock(hci_cb_list_lock); [ 837.166531][T16135] lock(rfcomm_mutex); [ 837.173209][T16135] lock(&hdev->lock); [ 837.177280][T16135] [ 837.177280][T16135] *** DEADLOCK *** [ 837.177280][T16135] [ 837.185424][T16135] 1 lock held by syz.6.3476/16135: [ 837.190539][T16135] #0: ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 837.199950][T16135] [ 837.199950][T16135] stack backtrace: [ 837.205930][T16135] CPU: 0 PID: 16135 Comm: syz.6.3476 Not tainted syzkaller #0 [ 837.213405][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.223484][T16135] Call Trace: [ 837.226772][T16135] [ 837.229709][T16135] dump_stack_lvl+0x188/0x24e [ 837.234396][T16135] ? load_image+0x410/0x410 [ 837.238932][T16135] ? show_regs_print_info+0x12/0x12 [ 837.244146][T16135] ? print_circular_bug+0x12b/0x1a0 [ 837.249441][T16135] check_noncircular+0x296/0x330 [ 837.254388][T16135] ? add_chain_block+0x9b0/0x9b0 [ 837.259337][T16135] ? lockdep_lock+0xf1/0x1f0 [ 837.263937][T16135] ? _find_first_zero_bit+0xd2/0x100 [ 837.269371][T16135] __lock_acquire+0x2d18/0x7c40 [ 837.274257][T16135] ? verify_lock_unused+0x140/0x140 [ 837.279468][T16135] ? verify_lock_unused+0x140/0x140 [ 837.284683][T16135] lock_acquire+0x1bb/0x4a0 [ 837.289195][T16135] ? l2cap_chan_connect+0xfb/0xe20 [ 837.294316][T16135] ? __might_sleep+0xd0/0xd0 [ 837.299606][T16135] ? read_lock_is_recursive+0x10/0x10 [ 837.304987][T16135] ? __lock_acquire+0x7c40/0x7c40 [ 837.310019][T16135] ? __lock_acquire+0x1465/0x7c40 [ 837.315052][T16135] __mutex_lock+0x12d/0xae0 [ 837.319558][T16135] ? l2cap_chan_connect+0xfb/0xe20 [ 837.324701][T16135] ? do_raw_read_unlock+0x39/0x70 [ 837.329751][T16135] ? _raw_read_unlock+0x24/0x40 [ 837.334611][T16135] ? hci_get_route+0x3a1/0x4d0 [ 837.339376][T16135] ? l2cap_chan_connect+0xfb/0xe20 [ 837.344495][T16135] ? mutex_lock_nested+0x10/0x10 [ 837.349436][T16135] ? print_unlock_imbalance_bug+0x160/0x160 [ 837.355342][T16135] ? mark_lock+0x94/0x320 [ 837.359680][T16135] l2cap_chan_connect+0xfb/0xe20 [ 837.364621][T16135] ? lock_chain_count+0x20/0x20 [ 837.369485][T16135] ? l2cap_sock_connect+0x13e/0x750 [ 837.374692][T16135] ? l2cap_chan_le_send_credits+0x590/0x590 [ 837.380588][T16135] ? __local_bh_enable_ip+0x136/0x1c0 [ 837.385979][T16135] ? _local_bh_enable+0xa0/0xa0 [ 837.390847][T16135] l2cap_sock_connect+0x576/0x750 [ 837.395907][T16135] ? l2cap_sock_bind+0x870/0x870 [ 837.400958][T16135] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 837.406981][T16135] ? memset+0x1e/0x40 [ 837.411063][T16135] ? kernel_connect+0xee/0x1c0 [ 837.415932][T16135] kernel_connect+0x13e/0x1c0 [ 837.420713][T16135] ? kernel_accept+0x420/0x420 [ 837.425490][T16135] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 837.430531][T16135] rfcomm_dlc_open+0x600/0x10c0 [ 837.435395][T16135] ? lock_chain_count+0x20/0x20 [ 837.440277][T16135] ? rfcomm_sock_connect+0x2c2/0x600 [ 837.445571][T16135] ? rfcomm_dlc_free+0x40/0x40 [ 837.450337][T16135] ? __local_bh_enable_ip+0x136/0x1c0 [ 837.455711][T16135] ? lockdep_hardirqs_on+0x94/0x140 [ 837.460942][T16135] ? __local_bh_enable_ip+0x136/0x1c0 [ 837.466335][T16135] ? _local_bh_enable+0xa0/0xa0 [ 837.471197][T16135] ? do_raw_spin_unlock+0x11d/0x230 [ 837.476412][T16135] rfcomm_sock_connect+0x2e9/0x600 [ 837.481535][T16135] ? rfcomm_sock_bind+0x550/0x550 [ 837.486568][T16135] __sys_connect+0x3cb/0x450 [ 837.491249][T16135] ? __sys_connect_file+0x170/0x170 [ 837.496455][T16135] __x64_sys_connect+0x76/0x80 [ 837.501218][T16135] do_syscall_64+0x4c/0xa0 [ 837.505643][T16135] ? clear_bhb_loop+0x60/0xb0 [ 837.510338][T16135] ? clear_bhb_loop+0x60/0xb0 [ 837.515019][T16135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.520932][T16135] RIP: 0033:0x7fb16199e159 [ 837.525361][T16135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.544981][T16135] RSP: 002b:00007fb15fbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 837.553492][T16135] RAX: ffffffffffffffda RBX: 00007fb161c26090 RCX: 00007fb16199e159 [ 837.561469][T16135] RDX: 000000000000000a RSI: 0000200000005dc0 RDI: 0000000000000007 [ 837.569444][T16135] RBP: 00007fb161a3506b R08: 0000000000000000 R09: 0000000000000000 [ 837.577422][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.585414][T16135] R13: 00007fb161c26128 R14: 00007fb161c26090 R15: 00007ffd60932148 [ 837.593504][T16135] [ 838.934764][ T4340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.992381][ T4340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.068993][ T4340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.112855][ T4340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.198270][ T4340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.266020][ T4340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.309407][ T4340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.375698][ T4340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.488774][ T4340] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.536557][ T4340] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.601887][ T4340] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.655273][ T4340] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.763640][ T4340] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.817364][ T4340] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.860676][ T4340] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.895493][ T4340] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.000724][ T4340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.087791][ T4340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.131836][ T4340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.189620][ T4340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.337999][ T4340] tipc: Left network mode [ 840.344333][ T4340] tipc: Left network mode [ 840.350039][ T4340] tipc: Disabling bearer [ 840.357211][ T4340] tipc: Left network mode [ 842.129256][ T4340] device hsr_slave_0 left promiscuous mode [ 842.135863][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.144172][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.151898][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.160212][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.168084][ T4340] device bridge_slave_1 left promiscuous mode [ 842.174549][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.182648][ T4340] device bridge_slave_0 left promiscuous mode [ 842.189155][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.199811][ T4340] device hsr_slave_0 left promiscuous mode [ 842.206250][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.213972][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.222018][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.229670][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.237293][ T4340] device bridge_slave_1 left promiscuous mode [ 842.243927][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.252563][ T4340] device bridge_slave_0 left promiscuous mode [ 842.258782][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.270450][ T4340] device hsr_slave_0 left promiscuous mode [ 842.276959][ T4340] device hsr_slave_1 left promiscuous mode [ 842.283598][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.291037][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.299087][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.306945][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.314698][ T4340] device bridge_slave_1 left promiscuous mode [ 842.324346][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.333640][ T4340] device bridge_slave_0 left promiscuous mode [ 842.339966][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.350338][ T4340] device hsr_slave_0 left promiscuous mode [ 842.356463][ T4340] device hsr_slave_1 left promiscuous mode [ 842.362729][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.370166][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.377808][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.385290][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.392948][ T4340] device bridge_slave_1 left promiscuous mode [ 842.399105][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.407571][ T4340] device bridge_slave_0 left promiscuous mode [ 842.413821][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.426808][ T4340] device hsr_slave_0 left promiscuous mode [ 842.433060][ T4340] device hsr_slave_1 left promiscuous mode [ 842.439505][ T4340] device bridge_slave_1 left promiscuous mode [ 842.445791][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.453732][ T4340] device bridge_slave_0 left promiscuous mode [ 842.460243][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.472291][ T4340] device veth1_macvtap left promiscuous mode [ 842.478394][ T4340] device veth0_macvtap left promiscuous mode [ 842.484433][ T4340] device veth1_vlan left promiscuous mode [ 842.490319][ T4340] device veth0_vlan left promiscuous mode [ 842.496706][ T4340] device veth1_macvtap left promiscuous mode [ 842.502779][ T4340] device veth0_macvtap left promiscuous mode [ 842.508822][ T4340] device veth1_vlan left promiscuous mode [ 842.514807][ T4340] device veth0_vlan left promiscuous mode [ 842.521720][ T4340] device veth1_macvtap left promiscuous mode [ 842.527763][ T4340] device veth0_macvtap left promiscuous mode [ 842.534020][ T4340] device veth1_vlan left promiscuous mode [ 842.539757][ T4340] device veth0_vlan left promiscuous mode [ 842.546166][ T4340] device veth1_macvtap left promiscuous mode [ 842.552162][ T4340] device veth0_macvtap left promiscuous mode [ 842.558471][ T4340] device veth1_vlan left promiscuous mode [ 842.564304][ T4340] device veth0_vlan left promiscuous mode [ 842.570620][ T4340] device veth1_macvtap left promiscuous mode [ 842.576876][ T4340] device veth0_macvtap left promiscuous mode [ 842.582935][ T4340] device veth1_vlan left promiscuous mode [ 842.589016][ T4340] device veth0_vlan left promiscuous mode [ 842.697147][ T4340] infiniband syz0: set down [ 842.860420][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 842.884521][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 842.907911][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.934525][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.977526][ T4340] bond0 (unregistering): Released all slaves [ 843.044772][ T4340] bond1 (unregistering): Released all slaves [ 843.102279][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 843.129954][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 843.154596][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.179563][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.241932][ T4340] bond0 (unregistering): Released all slaves [ 843.348265][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 843.373342][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 843.397830][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.423278][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.454634][ T6662] smc: removing ib device syz0 [ 843.468533][ T4340] bond0 (unregistering): Released all slaves [ 843.560558][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 843.586432][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 843.599929][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.612066][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.653359][ T4340] bond0 (unregistering): Released all slaves [ 843.760448][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 843.770721][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 843.782025][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.793821][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.835636][ T4340] bond0 (unregistering): Released all slaves [ 843.912379][ T27] dummy0 speed is unknown, defaulting to 1000 [ 843.918800][T13999] infiniband syz0: ib_query_port failed (-19)