last executing test programs: 11m20.299362088s ago: executing program 0 (id=88): prlimit64(0x0, 0xe, &(0x7f0000002280)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 11m17.266516935s ago: executing program 0 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) 11m9.550571631s ago: executing program 0 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0xf, &(0x7f00000003c0)=@raw=[@generic={0x77, 0xe, 0x3, 0xff, 0x201e9016}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @call={0x85, 0x0, 0x0, 0xc1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff0000", 0xa) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2) 11m7.862961864s ago: executing program 0 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(0x0, 0x80) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 11m6.097524455s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 11m3.465806278s ago: executing program 0 (id=104): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) unshare(0x42000000) 10m47.30993455s ago: executing program 32 (id=104): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) unshare(0x42000000) 9m58.294228322s ago: executing program 3 (id=160): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 9m53.757523699s ago: executing program 3 (id=165): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 9m49.889019919s ago: executing program 3 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x2, 0x0) setsockopt(r4, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000500000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) 9m46.186394621s ago: executing program 3 (id=172): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 9m41.817293329s ago: executing program 3 (id=175): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885f", 0x2}], 0x1}}], 0x1, 0x24008001) 9m40.148404687s ago: executing program 3 (id=176): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) add_key(0x0, 0x0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendto$packet(r0, 0x0, 0x0, 0x8c4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x1042, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000080)) 9m24.298679788s ago: executing program 33 (id=176): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) add_key(0x0, 0x0, &(0x7f00000008c0), 0x0, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendto$packet(r0, 0x0, 0x0, 0x8c4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x1042, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000080)) 6m17.107877313s ago: executing program 5 (id=319): ioperm(0x0, 0x62ee, 0x2000000000000006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x5}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, 0x0) shmat(0x0, &(0x7f0000252000/0x1000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) 6m14.2584659s ago: executing program 5 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/max_block_size\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/unlock_filesystem\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/unlock_ip\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/pool_stats\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/reply_cache_stats\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/nodirthreads\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/nfsv4leasetime\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/nfsv4gracetime\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/nfsv4recoverydir\x00', 0x0, 0x0) 6m7.840825499s ago: executing program 5 (id=333): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getegid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r3}, 0x38) 6m6.638894937s ago: executing program 5 (id=336): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m6.489166991s ago: executing program 1 (id=337): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m4.713631861s ago: executing program 1 (id=339): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 6m4.378126558s ago: executing program 5 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) socket$inet(0x2, 0x1, 0x7) 6m4.249064868s ago: executing program 1 (id=341): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x8, 0x1, 0xfffe}, 0x20) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 6m2.80657938s ago: executing program 5 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00008c1000/0x2000)=nil) fsmount(0xffffffffffffffff, 0x0, 0xa) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffff, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) 6m2.298587158s ago: executing program 1 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 5m56.714476665s ago: executing program 1 (id=346): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xffffbffd, 0x200, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(r1, &(0x7f0000001dc0)="b1f264442c20e880641c8add8df51412366fa632ba129f0c14f3b17b76120ccd15ac9d86833ec337851135e264356b207c630a393cf4dde514692d04c97c61061a537b5fe8c08686ec067f18f1a6f617a82b51901e87e4db417d7446f7dbd626b3ec83b246e4cbc3300976ea7371e2ecac2ed18ff26b43e19957c047e2eab85177ca3e71d6271c5afe2208a0bcdb1ab8dfcddf11505165c686cf778c163a81c2f617f6a63a7716b44746c5c5269b5ec28b3991e1deef1854883c088a9e7b6a5df764c9b4ea162790575e8d4843616c90d8f6aa985e11ac84457fdb3a99895f9c8f8a4ffa05eb290d472e925f67f14f0ce315f6a174c64b7dfafd1e26aa8b5a74a5d7a1628e4376b7d92a21e3e7fe2cf00f14cf032ae879d21e62f0d3dec662ebb2f41cbe14ecfad93657d5b41490e373022c3f3092640660b5c8fb5d07534317140855739070faf14a15943922ebc04b3df2dd86e0f54e17088c34cf3ddfe972194d51880355cc714304ba354f8a041bcec90b4ef05723cb46fde6f2f38875583093a87f22e38a861cbdf6819d2c25a50fdf9171708006e108ded35f17f05e8ea3784d097b85e6fe2244bf6d4bb39faad94f07916682633636049e528a6a13a9ace9f7c3dbeb7b9130f8ef3b524759d17705a828698f315cdff5a49eb8cc2f5e1cafcf096241d00c26d43b5090972b4f0c6e42625587e8cfa3708a232462f19516a01c56c8e8ca665f4fab2d11c41fc3e0270599260315eef064cd07d03231a47e8bf0c496aac68f2806aa3ba73b355904fc1db82cc7065dcae0afaceb532c559aaf651eaccc588881dbb2aa0d63ff353d7f1b38bc7561f647c3634f035558713da1370aa6c875b334936ac1c452f220e1c0800c9ba262e064f48031485b571ac86c508e8db48ea9dd7be04b285fa8f2bb3acce474ffc89fef4ac2c0fdff3340f88b3e7931f606f3e888f6c5060e0707baf5096c915f61277c978ab64921da53975d014d753245933facef11c36c57c0d77d78ea2e1fcd14e9f03fd2250b99d09cb5777f5085e9307ee7956079d3850f2bfbc1205bc80756dc9d61528b1159226703147cd96c3c30166936b0bf82257ccea782fa45e13d52a367da49a87b221727a9dcf0af4d946c4c7dad11683cc20a9b29234fd5422f0b0e044144c506d8c5e354f623a456d44e8c5d3f179e3b60106a9050d9e5f84a53859f015c3667d8a50cdfe1a97c332c3a2169a74a4e2f4568860da561f2209b941524664887273da514fe7f94f8957b98383aa894c12bcf5a46089ce2f394154371d8d8e89e6b76bcfa11ad5d546ef112b48483e4abbe4a7032d6111f6f800e0f7f1c5734a5ef8021550b7d0cc15ed0a42c37ccda404d3da91da3abf2a599fe8c91269fe29a39c587537ffc9acdb9a5e9d2e072dcfe4bb0a8af2d27e7ff5767f20e5247ac51d761298879053ca541c62a9a9b0bac062bbc33716f947bff3da27335b4bbc01bd22bd165c66b5de5c0726d4b92a32c91014d991dcfd2457fe1aa7362f11b65dd989adfba6a328690a64e55e04a55d2dbf156e43326b64cab8d2578bf1781637a8fd176b186e619c2af5eaaa330cc1221562ab8cc127908ad91211c9fef71777d80d4c4f376d23b0cb8afc49bc0600d84bd8042a231b6ac5cfff34679e7e694e8ee80690aac2749af4c1c961e2482e64b9ea0b43c16496ad2b66438d617d4873a042f88126ae0b7e7e53343a2eade1b86971061e2d51718af233f3599ac681535986806156d3139a73342db087171c741422b81c22064709a9559943394a070dc328ba934eea658dd054a4f7a05174dba59df1b1e91e5979c066943c2255255cee07e549073bd09ae45d1e21f24c67f2d7292024edeb09a7db3d45b5e8a65c9382ad2e94f944f23cb6912285bf852943862a7c6db7b8a8d4f98fc2bf3419ce0e43513bde848a390b8e7be3ce1f5c840e69f0ba01e33802cfaff0201127d7a758e436d5162a903285642fe6e9a4c00d9b33f8a6fed17c6a87d3bc4bec8dd0426145c83649698545b02304d7fa4b9ff85d048feeafa5b850c41f99fa1361f80b84d2343ad931ec0c59dfff186a27d6222b7806cb596b7ccd3d8837a496709336643c43c245f626a0fae2abc776f41412a4005f3ae0eb25024cdbc76b3b3e1591032b8ff26926f7db9df8ba70d18b7794b2e27a3be7f450e16d9ec14ca6cd139bc3d3b7b34279c9ea7f56daa957a8fff93a30b899bf73c6562a2acd16208be0660b8f2fae6824b797d54239da73bd0666414e8d38216767c4e7a325c207aa3a5a36c9a8c303fe1b730cf16c397c7feeda20ba168852d7dc3a2cd5b5af3f19cb6e313127071668a9166ec6d6d4d94b5aa0b77dbdd8b2134ee830a00b6605fb6b2dd724e1f44da209e574ecc91a4081eb0df186b41b68b4de500e928a80d97251d7914a1bfb071e17547bca0a342d20332a20e77dc10c00d266d57be1c917513f4dfa28c44602c68f2d88b88471609c816b724c407de56160ec60fa171365f56d62918c06ffe5b35fbff70e95394d736c7a5afd36c3b3cdbda506f44c47d25ed3eb3505dafb52860fdf5fb0c2fb6b44bedc0544d9c5e0a3eb54dcb34a24342e3a4352c0b129f0928750c95e587d9d47a8548a2e473bc06e6bc1413adb8d03bdc4042969f920771bdcf5a53c482d62692f060fd4cb6aac225785336395986bc1a54bc838af5f9f8ea8671e79f3d7a17b71ce356a515be5017240f19c1c8cbd8fa7ee23649c52c207058b9ec1c291259b14aeb401a14fabf65aeedef4af884e5a4fe94142b2829ff2ede9ee7a7648a035f6503182042dde4f10d6f47bfa2b5c04c78c1e57cc93fb9c3367cb0552db6de75eda81f2cfc3177f210701450460ff30eef2b14a7289d77ab7210f65d2015ef5edba77217ab6959e0423df8108a89b458ef14c9f2800059fca1785061ca67fa870ff633bc13466df433d579755597bfe8b130859171fbc0744e637888ac1285830de43a1fba2051594d42c80c983bba2e8ab801a20b062c84a09ba0babbd188b4286e69395e124d7fd3a846678fefa85f4f2d9b7980de4660cc6ec1e1cfd315bcadf7c80c26ec355e4c291eb90146381e17d4d6508c9809ca957832b668049c3f5e93cb0accdca29cbed2ec483da4b5fe55b786cc4a54db77957e03b3e2bf83d3470a357db156a6c2d1acf9429a5526b94378168892a9687558f9dcb50d376a6a58f09dc208ea74a847407d66b68c6c90535ff63e71d65215495f3da5f44e2ea4ed0796555eb3eb5dab5b389f6ab83a0cd7ef4931c71c4ace27fedd9c525c8ce7fafe8ca503400d806af8376cf2407aef67b182781d3faf60cdbf5ec08c5f5fd6a0d5f48c70c811ce3a5e04eabe0b685cad25a5a91d15564c59be2b1ba1707282d33a8b6ede48e206d40fdf6538e0bec76878cc19ef87734a75cfb4751e443a9520a37b37d78a1dfbae97a2632511b6b9f2d902daac2f15aa6ae20ea692d5c1be67bab94a0d927fc6dea826ea87a4e0dd82f4335d113d9971f712976f1f6336a55e53033c770c7953cbccb75d399fd9d790ca942b76aa402d34b84b36bcb10d439d9a1e2c47e2c08c8571bba581e531e94d8e3962ef285bcc62335da6780f3eb77c94790b38313c000339aa3529daf32c390233bf7f5de2cafb92029d296d17a010ef0f8b0fac0e573e6fbd7f5112a905a8e07b56e5bd0443fd1a4e6423d0b6689786de7eaa9432c0d0e10fa4d07f6d4f01b47d1d2ae87383df31bb25ffad6944031f3d511377f5988951ceb6a555c861979c2c0c6f3845837e2471aacc3368cdbd9c35e0605c7ca620ee450a0cde2cecc6a534ed3397ff6c5e271f4e75ab95c49e2df9bcfafd8963ed33eea7e24d044c77685dc45039161f617e63e1bb1058084ceb2e91705fbc6d193d79265ec7c385d3facc841abd6d46c18cae87314f5b87ce58d7ba18ab088d5753714d7df5cf251774ebaac451ac5505b72824aa1d248f7c1899063e91c41a9e4f7c9a4b2d0e936f0261c46013a8d27e06ed8cf5acae3b376f7fe4152620b376f4d59df350275b192778a134772166511b24cab6bc7d01f546a3834159654b847a8104f190610ac88ec45055fcaa7c1f0e8604f3fe245b56980adcd115451edf18d125dd3aba40334c51056e5d461d9767ee2113313dc3602442304d7db8af7cb59163ea4723cf7f401452200fbc49667eaed1696cb4ccc2bb31a5b544663aca6311dd59de0742e944d716d2514ae221194f8f1754d0d78603d73b0c3240eb2f41e39bc279d7c08118051d19e3a9313cceb3986a995de3294f31a40f37b91bde64efd499e8094e60d13283ea2e56726f66f904233eb437dfd1bef83d43178bfe2ba2b0c88bfaa684af76ab43d803bc2c35be9cfe82d36de7733ed9d0d967749e3664262bce843e05cb9af58e5554556cc12b924e0093c4f53853bf84f404a7d80dc1a5b0e7a6ca902fa892ab9c25c77fe221f9142f48dd9f4199fc8191fcadb5c943b0dfe72b5d5d89578a3ab3df40b1e1b5fb92f5dbca3043d861b17cb5858c54e63f33bc37e6a4db7a27ed51c1b5caca1ab534a1afba565ebfbee652d08d2b75237f51d7bbb6813fd85b8d28c8456b8588118bc3220b612795ea8ec7ead434efcff4e5e0b56774b30f467351b5be10a0ebafcf2a47955cb6f9667a958ac92082d8bf76968523895e3c643c0ea31842fdb3657f2eaca77b598e2d80739143a65e0ddb52278a2c9f3c950e3154627809610d5ec021944692b241e60a00461df9a65c1d64c108a767b3f759973d2029004dbd957587565396dd86b3a097e3aca8de0fa9871e25ab38e0e31710314a0a5e01316cc3d47722e22935e72370b7c317fc7c6c2722c3b7df0106f9102a637bb4a356395d8e2362ccdd6e6cb05b675635877fa94bb950f5f1a8e50cd9d3e306a0b11f9dfcb1be2c2c475ebb80529d45304bce0b4595ab77481aae14ba91cfef9cb27a177d7532124e8b1caa71d247a75e3daa654c45035658b32c0348d4e5813b2210e32623a4168bb7e35cc32c013274a203d6f6f2fac6d57008197537dff048cf53422c2b6347dfba03f1a9a2486e7b54db0d44877096eb5370607ecb55b35cf6ee252f22fe112f7678a141713f91b9edfdcfd898e1165f98d05acab33282ecad3ec6b6c1a531f6985706915059fe8df021567d7ed5b624c96071e1f70a5312a2e332e73c55057cf7d9205b28bc493600b2f9f7bd7afbd259d579c0272ce3f9d5987beefb8faa2a1edad6d3779e02b118c98107e1cc282e66d2fdc205b0d3186019cea9df7e452d44686a01dd7abc146256cf85a27b4f5bd5d90a58a61a1c275145e33a8e724bb9e2172fa6b73e85b9e0625affa8d2909ba615565d5113f98913383d5a2710339a3014dd7ffd5971d6226244a05e0948f105dfd0ae84e2cbfc8e573777a6ad5025942fef6c45c50a666c4ea519e7e2e487b816911a71e8b4f3036567d06792d2bd813dff28699f8aa22cebd406e58a73c43fbdecf3f7305031a59ccdfa1f2d3ecc58fe4aef547d5205c46db55d3ce52e9032fd941535699cfc4156a08529265110b3f6e1e4723ab0b1207e35597268f54211050a75bea1c6ab435e731a8c040cad133fdf790644268955f3fc3cf6a2f75e22787114f3a19e506eae3f085e356306b4197394a5b159b12709a0eccf8bb726105c799b4ce8d8be45ce19a4fcc55e7991bdfd7a0f693118a4be6d05fe45514cbfdb275a0a32f3280f19bfe8220a9f6d0a12c6b1c4a7488008bd84f7ab1c02dc7f3dedb06304fa22f5bf5ef65e8a368f50c160224bca1217cb9a9ccd231df56ad3a9e9813b3561bce183cb1a4cf9306fa3628863611946f29e69b2add3bdea86e98486d40deadbacb30f11f7abfb152aa79c8019f429a5f2357b93bff4e602afd5727481ce45c621580799e0c083c4e99424a6375ea3e4f1d74e9a28f6bf12a4811375ac3a2697a6a046ae585784986cbab3467cb54f5ab3a813360bfca263a57e6d0a93ac8930d3c71ba9bee128998fb62909c26ef22f8e71c52bbede14592c6726fb6a9ef8c4fc9459f1dd42d407aeff31b8a158951ed9703fc6d71ef897b74e0a7d25a7f36207b11fad6895a9706f2696af9ff80de30cf19021a1b44b39054007d5cc6297c0a899d6666475f04a4744ea3fcb2a1f185c79c5450171aee60c695a1a063d67f2645daed42a3f6ed7d782034fa0c0c0ef411f3b8274eddd95d685fabfda765aa25a2adbc4d9bd07571b9ac704842d7ec0fd0ef8b06f01f3ed1a09774a05fbbf2534496df2396c440b97dec5deba47d9ab3270fe2181c2a40a7c00253e181f1397e7563f1e01bac97d93e2803bde4cc4c9c392744d94e2ca48d729a7a63ead05810050750d56393b6fbca3c85d5e10fe8ef5407d79e5a310b8cb8d4a3f3f2b0aee70e4124b55e42f250d23480a6ea54faae57acab26445381619b40aa676421f406238e45a53db2ba6abf72d838469cd7cb8faae5ca30a8c0793e797aba241975d52ba31997fd61851ed1fb49c7b7ebb49e7b23ac335ef2d175ba3bd868bb403de5e2b936941c6d02777c966d52a706f809623cab4d37091ba96b3aa5d5ad2b3e8fe5adf23a47f8c4b9fe94cab8482bedaab17afd26ff6bfe4d7588877678828a1b6bd6def0ffa38833ddc6a9a96cf0ed7f0cee63a165762afdf40c84619efa8968db53c186e7bf314aede8888a0316605355109ecf2bea54f6617695448c827717dd3a36cf88ff7f5ef73a9c09a6752f8b77be335023d3beb452e174a2ca4d620e7fdda5d396968f94cf034819de30ffbc6be7f3a4115f6d4a62099f545943cf64b2c29220ae8dea4d1cdfb875cc69dd2e9766ff057f53fd0241901c02f0d9aa144d4a46c3dcca31cbdbcf15919957025ce18e5ef77933045b8131b1e3b7342b8dd40a417060af7db168c5c5ede21d2dd4f9df26a88395e887681478b7c1dd37632b6d032497ce100e12d624a5567b6bfda8f7c81d8efb8928ba7bf180d1c426774827e134860410629c29754a287a1851b7c026f61bde044ec98f670d8fec173359ea3117a842e3932e2906906dadfeab5c837b0064b10ca9aa89e62fffad4c1301015e2aafa16c1ea2e1bed82c78925807583136dec7c12ff67beaebc5a8c8742256e1da24748d3ca0a0dd292064f0891e51e5b20de74e4f9712e4ca1b17af75205dd80f40b928ab7265c77420a5d0088bf79bd05d430b5cd7874393461489d225f83c6299265fb74ed7760d12e9c90e1c14d890f4d846fa908fb31842483e00ae0633bd3a7b93d69011e89c48b1e2832a7f2085d3e21118f2033d2a1fe62351533f84546b3df0a7fa305cbf549998b71e012743dd68374e879d8058bedc409790b28fb58f040a6b23f443a96c965291aae45b40375779caae6482308a665ffb0aee5433531e5580d536d20e0477e5896ff5376820b3fc5eddc3feb3cbac2dd4595ebdc309396b0b4e65323e5bdd580d9e0e384d96adeee1972a58375aa6940e2ee64920ea66fbaef6901557eca327d552860847504f72714925126c23a9cdcbecdfe8cd614f222c382face7e08b6af485bf1cf3f9a5af9a1207ba540697cdad42c2c724cfdca202977390fa0875a001906958603657eaa2a8c37a304a84f838ebb1f86f37747d15fdd8a98149420499e8a1aa550ca7c5f5e02f6641d008169545bcafcf13be2f2df8ba78f983ed04cab85244f3b85840423816435d990ebde5f154c5040e1f34130dad3f19afb1393215ffaa08f8835f9bacd5e7faed981436abec54bbffb518d2807452745da83b49da2196d7d94b95bda55dfe93eb3bdb10f66329df2630c20f24f269552f2799d6cc116c3cbe925215873ff61402725490257f42ce41a7107b0b1c6480b173084bce45dc550efea5c52e6dad953403e671cf83ada09a33e290aa5fb5801a12552a5f67e04d8e7de8cca62e5f9c953c9e7bf5d3e9cca565b4427bd0dfd6dca8ffc5057409a5ec910c987e826f56a2d0e9c25872437cd4c3948b5375ecaa954b1e069ac173f65675c40428e2a2b498e8b734e7b0a0fb0e3543386bb7a396f7b010a29cd18d0d121f0b06b53c4dcf1e1dbf3ab2f4b4de2a081f8f19ae235647521cca0ad9f5b9ec4509c4a2c0b58161ddb1d73859bce4848c69ffad956220bcc01b4eb5cc7228ae00ce1ae5cd9e625a71099e896e860215d9e39fedf20d533d83f2f9122da6f7376d7f49aca54b18217fcf3a895bc6eb40c8fd8619dad952ba6503ff7470cf7a25bb71ceef8d5ceee7117e033a12893f73547f8b0bf06bb21d299d5676f6ebce548692b054a903812c37e6ae790d2ae976e9892731e86cab79ed3a2c7a3e21806a94475b6cd4183a8d60a71eab5ea4f40ce84ff33893da5c09caa63c4850c993cc4744ddb065e200446316fae6739ed53578920c23c5ca933003dd4cf404b4aaa0bdcf6530160bba2eb55d537563f65cd9c421a28a56264644be1f4f941b54fb3604bab84293ee7ddb4f9af88bf3492d3e595b07ad4c51fec36667aa88e2beb98c4a725a1f13d74238c36560fb559b85e6dd3eb6c56ec7225f6f3bb1f0ce523e5a661c2bb6315fa661eb69f44dd731b5066b808cf6dbcefad95aa1e53a3364bf7ea0549a5c01c5b6face9bafebd93cbf2f3e9e023341f1aa97226b5834d0fa627b190214d8fa9446fdf83a93c990c6120f1695b7b2ce0e32a8c61eb2cfe549e98bd90f0057280c6f1dce8d5fabccfc73377b0f5277d154c9ad85bc656477b3a3e2a2ad6e50d6391e5ff04c75cff5f153d7bee7ef2d75e5fc12a98d6652c6c11d532e45483a73625fcfce8fd320ddc16a0054f04b360fecd8532e7a52d77f09e2fdd66c9024e9bcc9273e7067c1e79839beca900e3e2f3e73c8e95625c9fff99f93026d83ea5ff0eae78a9b5f6b29edcceedf72de01b2aacef2597602428852bda4e1e3f3f3033dd5301e99feb6b5ac7c4679e525c9e987a7087eb564ce33911dfa1030234dac6d20d89b31ea4ee717e93be890023fce327287160d417c5e01eacffd5983cfc1b45c2b90b0e4b6cad3103c6eb8e016e64dd1cae0e14cb170880d8f8e60425d0de62fa277f0981e86c08aa2795f18db308ab6c421ce01d07b37223ea939fedfc4c04beb2b98e687fda726f8522da96ecc884637fd46b36cabb455ea6a7f3c8830f70234095806737db037f6dc558730972edc4cf9fb0a11426e3bfe57b06d1f5e4a7a490a3d25b17c6306cb3dd995340f35b693dd6ac8b88b7b5470f3a84064203f82e6dfe43c9958d53f08251e9159b4e320feb4d78f542fd48e7abe34a2e41d6cd9745faceb6638e53c81c6946e4a295972934f5e3e0a0ba0e280f13237c9a85762e6937741680750df775517ed6f9fab20973035caccfda0a423be32af1607106b45ec7708a717d3e8b7feb41ef286f403bb6752a1b308f92d76588a6f11768cafbd34d52f23e3259e69000b571e2bf8bf8a445d3acb73463f3b0713bb2aa0e785856fd1b9db1d2a6650dcab6d30d17f576e4673ddb7825022400a7706940313863e6281004432cdb36c7012320a8663afc842bc17ebcd673c10f5ecbcaf3d063caaca49a6c71dc595a6fdaa383e7427f7fff57fa19d652055b968ac2a7b6d1d95a6d0432abeb9df531358e2c5b65a1c522c644637036a66286d5d6d5914bc14a2ff8e97f86d2589d4e36b097ab2d0f5cff7feb2746a601bd312ee66c947f6f280a103b7201592356fad10ff6066f82c105c3cb931416196f3e1e4e9023d508a82bb329fa0e4aaba9f73968c4461c0d612c4cbfeb99109d578da9be2b722206c2412455609575f853fa76b8e5458a91d852e72a9a362b5011faea92358f37b5cd15acc2e9c11e35c7217cb0943895d236e9b92b14e07dcf7ea63aa507b3ee53d9af82f3b3a988aa29c80f8ea8dece1d4ee671fbf3270dc304d31ccb27f3fe0b60617c8eadaaeac4819b5701ec7ed39f3ca6e78dc2a120e3ff44ee0fc89fd0eb0031398ebf79f448c28a7e7121af703a34582fd93afd6730fc9bd92957af6bd6c505b747ab9b4c3a26d04b2d49de0338851acfa88a94adb51783ca3d818c90d5b3eda351463e0dd76e700ec739ac88dbd865e1bdc7fab90f6b66355516380a67b02f03079528a2690af18f07632b72081893782c1e3c0c939355da8497051de9a5a6261a764f27646574f6efa2cd08ba2ff737083601508420620d9a347fca01c042895b401bac3848874c68692e8aeabe4018086fb89c28780205a7a2f5a99c8795b12ab6865dbc5bfe917c9430222e8e8f25ac0ee4391b818f51b680bf4699192134c4ed325966aa95d4d13d09b38a0404a64f3b64de4eb8310c92b3978d4bf793a3022a7373c6480c0ea4e2d6b7c662e5997669389ff76dc232eedb61e0a89d1b803fdd7e294367c49dfc49ff16a5d3493179c56871c0fb362e16f83daf670332bf6914fb700610875d6dc169cf0f54b2449d6b1c91123204fbd16ff07e623546691468b398ae41a1f461b17bdacf8a77736777cccf04f0e0c86498aeedbd38107df7b3f194aae1c9057130c5147ae824914d601c51e495935a6284223c30c44033a90a9024a67ff27204a1a3028c07830d1c7056351b7666d5dd8c3f373216726a1217ba64451fb16bc9eebe020bc8d3559dc3c723b54904bcbceeb736e56fb3e5854284dc8c15f84736fb0b511feb004ccffa19836b619427096175be809fb1c78f11599aa67034e2a1cb4869c334b0beb7e2a843f26c83b11657d1299075e4d84c20f2e2c9c07c51dbcca97e2f8e0f177466eb422e16838fc5f0480b760650d8de23b02cf25b52381a95cbdceb0deabf810a34de6f4bfe96260c9154cf418e4003166065539db0751c80df2ab3ba651fa411d0e3954a1aca4b111c52a0d442be1f03c306f6d53b0d12439ce773d707b8078c60a7ac2dab0686fec09ac7678b76d88c6ef4bf55a35b940f0dfd1595a6fefaa4c3a0900cb448883dab0bb3bb0b8ba34512c0400c066e3808ff474fc68e9e894f244df79afa3603ce0ba8a8b2eeeecbedea2b89293ff45f8af77166dda7bb1c879308fdef22937cb6c50c1161745c8ceaa651ccf2adfd9138eb607dc1b8ba3648ae8112a975dc859674e5f159e6db743e40649ef0fe0046467a00b7209b90e630590e64581132d29a13439751c3d305a7c051ecc3eb55cdcfa4d30f7baca0134302fee52468e5ecb22216d47fb0eceaf47efb277b5aa279fcc457b7b4da04aa3cb657d215cf9f507d6187c8cf3ba4fc223b134a59e817144b27c225ea06bb83877583012c04520550f203eba59671cd03fc67b7338b19c8f0cdd0ef7aab29e1f41d8027c45074ca848e6f335bffba67ad3d72e1310115f904177a952a2f72026f1417b120d56b07e7f6bc80604386517ae4ce2fc19f6c67c8e38690cc443c4fe73fcfc01d84a27981c62736a71050c5acab3987ef61273420b85214956f91cce320c1c833c88b8ad0701d76ef2bcbd2f0acf3a1c4143fca439980adc5ae849e3b61f5aea3adbbeefd7d5f706b0521d36b0de6235ca0472dddec332e989d92ce1e2a2cb381ebf4b7438e2472c1423c", 0x2000, &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m47.073443688s ago: executing program 34 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$eJzs3c1vHGcdB/DvrNeuXarGaRNaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGxelLgorRC4gOCExKF/QEHyjQNC4h4ULlzCrVcfOFRC4hJxiHpZNLOz61171y/xWyo+n2g8z8zzMr/5zZt3ndUG+L915WyaD1Pkytm3HpTLa6tzrbXVuRfq6laSstxImp1ZittJ8SiZL+uLdCqKun0xajsfL11+59Mna591lpr1VLUf26rfEEPartRTZurxZob2HN/pJlbq8PJSkqv1fNDETscaaFgm7Uw9hyPXHtRIe2U33Xdz3QLPme7Tqeg8NzeZTl5MMln/HpD67tA4vAj31de7hV3d5QAAAOAL6vGdo44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvniq7/+f6i02OquSmRTd7/+f6K6ry8+h+R23fHigcQAAAAAAAADA4fja0zzNg7xclseTtIvqb/6nq8oT+bydfCnv534Wcy/n8iALWc5y7uVCkum+gSYeLCwv37vQ61ka3vPi0J7l2mrTAAAAAAAAAMAz+GWmOn//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA50WRjHVm1XSinmc6jWbW67KS/DPJxFHHuwvFsJUPDz8OAAAA2JPJZ+hz7Gme5kFe7i63i+o1/5er18uTeT+3s5ylLKeVxVyrX0OXr/oba6tzrbXVuVvlVC4Pjvv9/+wqjIl6hLFqadiWX69aTOV6lqo153K1CuZaGp1tn+m9GdGJqY6rz0dlTMX3ajuMrFmntdzY70e9i7AvBt+KaGzRcmo9uKSXkdk6trLn8U4GiuqNmjIjgwNsPDqbNtYcWJqumoz3tnQhjV6yT3RzvY85f7Gel/vzmwPN+VbG6nl/LnqZaKTKxMXu2VdeM1tnIvnGX//07o3W7Zs3rt8/u75L4we9H3szNmL9xnNiri8Trz1bJp4TzV22n60ycbK3fCU/yk9yNjN5O/eylJ9mIctZTLuuX6jP5/Ln9NaZmh9Yenu7SCbq49I5ZjuJaSY/rEoLOV31fTlLKXIn17KYN6t/F3Mh386lXMrlviN8cmTc1b5VV31j41XfPdJ/Gxr8mW/WhfLu9tv1u9z8Vns86uzcL517f5nX43157Zz1T3qtjvddB7N9WXqlm53h1/jme+P294LmV+pCuY1fbfOcOFzTdSbKC6j7lOhG92onE83e03mw6x/a1a63brfbNxbujhh/ZcPyG/W8PK1Wv9pde3dE666hKS627rNb5fnySibrO8ng2VHWvdq7y/TVtdfP5U7d4BO37HeyqiuK7pX649ypToDNV+pE/Tvc5pEuVnWvbag7Vd/Dy7rX++oGft/KnbRybZ9yBMB++8e7veJ0XpyY+vfU46lPpn49dWPqrckfvPCdF05NZPzv499tzo690ThV/CWf5Ofrr/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBnd/+DD28utIokVaG1eO9+t3CsbrK+ZnRhalP3jG78r8fJxqqi/jaeYb1u1t9SsH0Yz09hMsnAmup7jg47jLGBozy0TfsXSVWY2MXh3mth6239riw0d3S45wfW/HnzgB9tH89YNpyH22TsgAuNHMjI7WMbTshuoTxHhvU6zLsQcBTOL9+6e/7+Bx9+a+nWwnuL7y3eHr906fLs5Utvzp2/vtRanO38POoogYOw/tA/6kgAAAAAAAAAAACAnRr2UYHTL434qMDoQiMbPtJTrvA/CwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9cOVsmg9T5MLsudlyeW11rlVO3fJ6y2aSRiMpfpYUj5L5dKZM9w1X5I+P0h6ynY+XLr/z6ZO1z9bHanbaJ416PtrWtUlW6ikzScbq+R4MjHd1z+MV/+3uQ5mwz9vt9vze4oP98b8AAAD//2dx3rE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00008c1000/0x2000)=nil) fsmount(0xffffffffffffffff, 0x0, 0xa) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffff, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) 5m47.060026471s ago: executing program 1 (id=352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) 5m29.251987237s ago: executing program 35 (id=352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) 3m59.366356931s ago: executing program 6 (id=351): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) 3m56.629573762s ago: executing program 6 (id=441): syz_usb_connect(0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) setns(0xc9, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78) 3m52.324074105s ago: executing program 6 (id=446): io_uring_enter(0xffffffffffffffff, 0x1ae4, 0x1c7b, 0x2, &(0x7f0000000240)={[0x4]}, 0x8) read$midi(0xffffffffffffffff, 0x0, 0x3b) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 3m46.637062386s ago: executing program 6 (id=448): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) memfd_create(0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009967, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) 3m31.547129975s ago: executing program 36 (id=448): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) memfd_create(0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009967, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) 28.361933031s ago: executing program 8 (id=590): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003dc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 28.071771398s ago: executing program 4 (id=591): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getegid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r3}, 0x38) 26.898577518s ago: executing program 7 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 23.405029384s ago: executing program 7 (id=594): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xbfd}, 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user:'}, 0x1b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 20.988073431s ago: executing program 8 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r4, r3, 0x0, 0x40001) 20.877333267s ago: executing program 4 (id=597): socket$inet6_udp(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0xe) 18.662567987s ago: executing program 4 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 15.972275308s ago: executing program 4 (id=601): r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r4, 0x0, 0x0) 12.513838615s ago: executing program 8 (id=603): syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') socket$l2tp6(0xa, 0x2, 0x73) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 12.507445956s ago: executing program 2 (id=611): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x1002000ff) 7.638934959s ago: executing program 2 (id=604): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) 7.63758199s ago: executing program 7 (id=613): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.060028012s ago: executing program 7 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r4 = socket$inet(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 6.342740528s ago: executing program 2 (id=606): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getegid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r1}, 0x38) 6.20541876s ago: executing program 8 (id=607): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, 0x14) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r5, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000100)=0x1) 5.863889888s ago: executing program 2 (id=608): syz_usb_connect(0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) setns(0xc9, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78) 4.611861457s ago: executing program 7 (id=609): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') close(0x3) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x20008000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x44}, @multicast2}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 2.408388505s ago: executing program 7 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.408219305s ago: executing program 2 (id=612): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xc2}, 0x1c) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.408103465s ago: executing program 8 (id=614): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c801}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000003c0)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 2.404074006s ago: executing program 4 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) socket$inet(0x2, 0x1, 0x7) 610.583129ms ago: executing program 8 (id=615): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 286.081644ms ago: executing program 2 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r0, 0x0, 0x0) 0s ago: executing program 4 (id=617): syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') socket$l2tp6(0xa, 0x2, 0x73) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.710963][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.732355][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. syzkaller login: [ 79.836664][ T5764] cgroup: Unknown subsys name 'net' [ 79.978376][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.674813][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.431284][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.440438][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.448293][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.456487][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.469815][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.488549][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.492617][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.500100][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.510620][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.512235][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.520254][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.527791][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.534214][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.543250][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.548587][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.557118][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.562501][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.574716][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.583195][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.591947][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.601217][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.608656][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.616868][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.624383][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.149325][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.163909][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 84.286405][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.306734][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 84.360620][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.368625][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.376358][ T5776] bridge_slave_0: entered allmulticast mode [ 84.384113][ T5776] bridge_slave_0: entered promiscuous mode [ 84.451370][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.458617][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.466135][ T5776] bridge_slave_1: entered allmulticast mode [ 84.473693][ T5776] bridge_slave_1: entered promiscuous mode [ 84.498708][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.505942][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.514293][ T5780] bridge_slave_0: entered allmulticast mode [ 84.521819][ T5780] bridge_slave_0: entered promiscuous mode [ 84.531017][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.538204][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.545524][ T5780] bridge_slave_1: entered allmulticast mode [ 84.553092][ T5780] bridge_slave_1: entered promiscuous mode [ 84.637660][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.662201][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.687321][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.723474][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.766740][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.774783][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.782593][ T5779] bridge_slave_0: entered allmulticast mode [ 84.790353][ T5779] bridge_slave_0: entered promiscuous mode [ 84.808633][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.815960][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.823525][ T5779] bridge_slave_1: entered allmulticast mode [ 84.832665][ T5779] bridge_slave_1: entered promiscuous mode [ 84.841259][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.848401][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.856035][ T5777] bridge_slave_0: entered allmulticast mode [ 84.864061][ T5777] bridge_slave_0: entered promiscuous mode [ 84.875307][ T5780] team0: Port device team_slave_0 added [ 84.885579][ T5776] team0: Port device team_slave_0 added [ 84.904450][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.913272][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.920598][ T5777] bridge_slave_1: entered allmulticast mode [ 84.927860][ T5777] bridge_slave_1: entered promiscuous mode [ 84.937541][ T5780] team0: Port device team_slave_1 added [ 84.957345][ T5776] team0: Port device team_slave_1 added [ 85.038617][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.057855][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.081010][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.088021][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.116178][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.134705][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.147389][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.176288][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.190114][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.197119][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.223636][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.257801][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.267791][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.277851][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.304105][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.345282][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.365864][ T5779] team0: Port device team_slave_0 added [ 85.407252][ T5777] team0: Port device team_slave_0 added [ 85.427761][ T5779] team0: Port device team_slave_1 added [ 85.448247][ T5777] team0: Port device team_slave_1 added [ 85.504440][ T5780] hsr_slave_0: entered promiscuous mode [ 85.511388][ T5780] hsr_slave_1: entered promiscuous mode [ 85.524157][ T5776] hsr_slave_0: entered promiscuous mode [ 85.531952][ T5776] hsr_slave_1: entered promiscuous mode [ 85.538442][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.546422][ T5776] Cannot create hsr debugfs directory [ 85.566008][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.573222][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.603635][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.630072][ T5793] Bluetooth: hci3: command tx timeout [ 85.630091][ T5087] Bluetooth: hci2: command tx timeout [ 85.632037][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.649514][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.675937][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.688006][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.695363][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.721572][ T5793] Bluetooth: hci0: command tx timeout [ 85.721596][ T5087] Bluetooth: hci1: command tx timeout [ 85.732941][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.762807][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.770033][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.796434][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.942110][ T5779] hsr_slave_0: entered promiscuous mode [ 85.949816][ T5779] hsr_slave_1: entered promiscuous mode [ 85.956036][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.964324][ T5779] Cannot create hsr debugfs directory [ 86.059601][ T5777] hsr_slave_0: entered promiscuous mode [ 86.066335][ T5777] hsr_slave_1: entered promiscuous mode [ 86.073233][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.081042][ T5777] Cannot create hsr debugfs directory [ 86.400304][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.420594][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.431427][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.451262][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.505963][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.532580][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.543313][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.570906][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.638717][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.653481][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.675726][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.688155][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.784997][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.818047][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.829690][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.841941][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.896827][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.974237][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.005913][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.013383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.057598][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.067474][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.074757][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.106441][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.176545][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.214262][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.241482][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.248663][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.297406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.304685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.331112][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.338300][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.348399][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.355662][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.467769][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.555480][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.587854][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.658502][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.665786][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.717373][ T5793] Bluetooth: hci3: command tx timeout [ 87.717400][ T5087] Bluetooth: hci2: command tx timeout [ 87.792704][ T5793] Bluetooth: hci0: command tx timeout [ 87.792715][ T5087] Bluetooth: hci1: command tx timeout [ 87.809456][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.816690][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.240951][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.263736][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.300786][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.436942][ T5779] veth0_vlan: entered promiscuous mode [ 88.474572][ T5776] veth0_vlan: entered promiscuous mode [ 88.498209][ T5776] veth1_vlan: entered promiscuous mode [ 88.546414][ T5779] veth1_vlan: entered promiscuous mode [ 88.591233][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.607897][ T5780] veth0_vlan: entered promiscuous mode [ 88.623755][ T5776] veth0_macvtap: entered promiscuous mode [ 88.654493][ T5776] veth1_macvtap: entered promiscuous mode [ 88.664406][ T5779] veth0_macvtap: entered promiscuous mode [ 88.683237][ T5780] veth1_vlan: entered promiscuous mode [ 88.707769][ T5779] veth1_macvtap: entered promiscuous mode [ 88.758353][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.791795][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.799401][ T5777] veth0_vlan: entered promiscuous mode [ 88.809808][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.822099][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.836118][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.860412][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.870087][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.878838][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.888668][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.904016][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.915004][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.927413][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.939455][ T5780] veth0_macvtap: entered promiscuous mode [ 88.964598][ T5777] veth1_vlan: entered promiscuous mode [ 88.982634][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.992149][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.001494][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.011296][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.025622][ T5780] veth1_macvtap: entered promiscuous mode [ 89.094857][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.106195][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.116671][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.127722][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.141915][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.215484][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.227615][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.240512][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.251071][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.264389][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.314711][ T5777] veth0_macvtap: entered promiscuous mode [ 89.330203][ T5777] veth1_macvtap: entered promiscuous mode [ 89.334285][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.348324][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.365335][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.378096][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.387300][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.397273][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.440115][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.452585][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.463364][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.476661][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.487057][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.497666][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.510282][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.541598][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.554731][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.566988][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.581880][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.592303][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.602967][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.612872][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.623765][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.635852][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.701622][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.711197][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.720953][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.729878][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.749820][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.757728][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.789215][ T5087] Bluetooth: hci2: command tx timeout [ 89.794895][ T5793] Bluetooth: hci3: command tx timeout [ 89.857635][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.870594][ T5087] Bluetooth: hci1: command tx timeout [ 89.876286][ T5793] Bluetooth: hci0: command tx timeout [ 89.900809][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.932258][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.940254][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.105922][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.157188][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.166969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.197264][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.266510][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.285321][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.417095][ T5793] Bluetooth: hci3: command tx timeout [ 93.422718][ T5087] Bluetooth: hci2: command tx timeout [ 93.428168][ T5087] Bluetooth: hci0: command tx timeout [ 93.434949][ T51] Bluetooth: hci1: command tx timeout [ 93.436964][ T8] cfg80211: failed to load regulatory.db [ 93.571448][ T5855] syzkaller0: entered promiscuous mode [ 93.587398][ T5855] syzkaller0: entered allmulticast mode [ 96.449636][ T5872] syz.3.11[5872]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.513855][ T5872] loop3: detected capacity change from 0 to 1024 [ 96.678667][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.703146][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.760555][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.767934][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.795203][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.805919][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.824078][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.832781][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.853224][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.866283][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.893046][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.906480][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.930886][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.938415][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.955782][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.964934][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 96.982364][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.017862][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.059649][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.067035][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.115730][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.139592][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.179245][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.186630][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.236525][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.265188][ T5872] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.297621][ T5873] hfsplus: request for non-existent node 33423360 in B*Tree [ 97.319245][ T5873] hfsplus: request for non-existent node 33423360 in B*Tree [ 98.976739][ T5862] Zero length message leads to an empty skb [ 101.319498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.729035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 101.999285][ T5882] null_blk: disk rnullb0 created [ 102.049769][ T5892] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 102.153239][ T5892] loop1: detected capacity change from 0 to 1024 [ 102.180578][ T5892] EXT4-fs: Ignoring removed bh option [ 102.413218][ T5892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.535525][ T5892] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.879765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.289071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 105.998276][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.898474][ T28] audit: type=1800 audit(1790317617.468:2): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.23" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 108.686885][ T5931] loop1: detected capacity change from 0 to 1024 [ 109.530410][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 109.584424][ T5934] wg1: entered promiscuous mode [ 109.611310][ T5934] wg1: entered allmulticast mode [ 109.660122][ T5937] smc: net device team0 applied user defined pnetid SYZ2 [ 109.917246][ T5937] smc: removing net device team0 with user defined pnetid SYZ2 [ 109.985245][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 113.257042][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 114.288537][ T5960] ipvlan2: entered allmulticast mode [ 114.294225][ T5960] macvlan1: entered allmulticast mode [ 114.300256][ T5960] veth1_vlan: entered allmulticast mode [ 114.317121][ T5960] batman_adv: batadv0: Adding interface: ipvlan2 [ 114.416435][ T5960] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.443845][ T5960] batman_adv: batadv0: Interface activated: ipvlan2 [ 114.679533][ T5963] netlink: 'syz.1.34': attribute type 4 has an invalid length. [ 115.556889][ T5969] tmpfs: Bad value for 'nr_inodes' [ 116.689913][ T5971] loop3: detected capacity change from 0 to 512 [ 116.819215][ T5961] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.860116][ T5973] loop1: detected capacity change from 0 to 1024 [ 116.983360][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.044195][ T5985] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.556781][ T5989] syzkaller0: entered promiscuous mode [ 118.562743][ T5989] syzkaller0: entered allmulticast mode [ 118.673620][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.059059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.445307][ T6006] sctp: [Deprecated]: syz.2.45 (pid 6006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.445307][ T6006] Use struct sctp_sack_info instead [ 122.853734][ T6012] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 11 (only 8 groups) [ 124.359424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 130.759134][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 133.642068][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.669025][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.076278][ T6058] loop2: detected capacity change from 0 to 512 [ 134.097354][ T6058] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.735658][ T6057] nvmet_tcp: address family 255 not supported [ 134.743486][ T28] audit: type=1800 audit(1790317645.318:3): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="addr_trtype" dev="configfs" ino=7843 res=0 errno=0 [ 134.843385][ T6058] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 134.985402][ T28] audit: type=1800 audit(1790317645.328:4): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="addr_traddr" dev="configfs" ino=7844 res=0 errno=0 [ 135.121396][ T6058] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2974: inode #15: comm syz.2.56: corrupted xattr block 252: invalid header [ 135.136586][ T6058] EXT4-fs (loop2): Remounting filesystem read-only [ 135.143260][ T6058] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 135.152853][ T6058] EXT4-fs (loop2): 1 orphan inode deleted [ 135.161377][ T6058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.188009][ T6061] loop3: detected capacity change from 0 to 256 [ 135.218057][ T6061] FAT-fs (loop3): Unrecognized mount option "ufi_xlate=0" or missing value [ 135.783414][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.406473][ T6074] loop3: detected capacity change from 0 to 1024 [ 137.503095][ T6074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.538293][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 138.572140][ T6081] vlan2: entered allmulticast mode [ 138.577352][ T6081] veth1_macvtap: entered allmulticast mode [ 138.587243][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.641501][ T6081] bridge_slave_0: left allmulticast mode [ 138.649224][ T6081] bridge_slave_0: left promiscuous mode [ 138.656293][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.791052][ T6081] bridge_slave_1: left allmulticast mode [ 138.831723][ T6081] bridge_slave_1: left promiscuous mode [ 138.856541][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.760403][ T6081] bond0: (slave bond_slave_0): Releasing backup interface [ 139.988540][ T6081] bond0: (slave bond_slave_1): Releasing backup interface [ 140.128993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 140.489604][ T6098] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6098] [ 142.061881][ T6081] team0: Port device team_slave_0 removed [ 142.140655][ T6105] loop3: detected capacity change from 0 to 128 [ 142.148449][ T6105] EXT4-fs: Ignoring removed bh option [ 142.200287][ T6081] team0: Port device team_slave_1 removed [ 142.212007][ T6105] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 142.241840][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.258688][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.286601][ T6105] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.309223][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.330129][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.389636][ T6109] loop1: detected capacity change from 0 to 2048 [ 142.441198][ T6109] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.500232][ T6109] NILFS (loop1): mounting unchecked fs [ 142.529312][ T6067] udevd[6067]: incorrect nilfs2 checksum on /dev/loop1 [ 142.624546][ T6109] NILFS (loop1): recovery complete [ 142.666710][ T6113] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.839552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 145.341358][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.741611][ T6124] process 'syz.0.70' launched '/dev/fd/3' with NULL argv: empty string added [ 145.899916][ T5766] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 146.569057][ T5766] usb 2-1: Using ep0 maxpacket: 8 [ 146.604306][ T5766] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 146.619610][ T5766] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 146.627682][ T5766] usb 2-1: Product: syz [ 147.391419][ T5766] usb 2-1: Manufacturer: syz [ 147.809004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 149.070053][ T5766] usb 2-1: SerialNumber: syz [ 149.130265][ T5766] usb 2-1: config 0 descriptor?? [ 149.253504][ T5766] usb 2-1: can't set config #0, error -71 [ 150.369037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 150.980298][ T5766] usb 2-1: USB disconnect, device number 2 [ 152.832808][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 152.869085][ T6146] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 152.876183][ T6146] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 153.259726][ T6149] netlink: 'syz.2.80': attribute type 12 has an invalid length. [ 155.430329][ T6167] atomic_op ffff8880798e9998 conn xmit_atomic 0000000000000000 [ 159.921697][ T6186] Cannot find del_set index 0 as target [ 163.617206][ C0] hrtimer: interrupt took 1174005 ns [ 176.795472][ T6250] loop1: detected capacity change from 0 to 256 [ 176.940921][ T6250] FAT-fs (loop1): Directory bread(block 64) failed [ 176.978205][ T6250] FAT-fs (loop1): Directory bread(block 65) failed [ 177.026160][ T6250] FAT-fs (loop1): Directory bread(block 66) failed [ 177.044729][ T6250] FAT-fs (loop1): Directory bread(block 67) failed [ 177.059478][ T6250] FAT-fs (loop1): Directory bread(block 68) failed [ 177.079035][ T6250] FAT-fs (loop1): Directory bread(block 69) failed [ 177.087066][ T6250] FAT-fs (loop1): Directory bread(block 70) failed [ 177.157363][ T6250] FAT-fs (loop1): Directory bread(block 71) failed [ 177.192933][ T6253] loop3: detected capacity change from 0 to 512 [ 177.202952][ T6250] FAT-fs (loop1): Directory bread(block 72) failed [ 177.235741][ T6253] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.260271][ T6250] FAT-fs (loop1): Directory bread(block 73) failed [ 177.279316][ T6253] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.345194][ T6253] EXT4-fs (loop3): 1 truncate cleaned up [ 177.411853][ T6253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.658485][ T6250] Bluetooth: MGMT ver 1.22 [ 178.619029][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.407682][ T6281] loop2: detected capacity change from 0 to 1024 [ 185.477909][ T6280] sched: RT throttling activated [ 186.445916][ T6281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.121596][ T6301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.433707][ T6289] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 193.271334][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.289418][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.909745][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.917972][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.932328][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.940310][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.456149][ T6319] loop3: detected capacity change from 0 to 4096 [ 194.464570][ T6319] ======================================================= [ 194.464570][ T6319] WARNING: The mand mount option has been deprecated and [ 194.464570][ T6319] and is ignored by this kernel. Remove the mand [ 194.464570][ T6319] option from the mount to silence this warning. [ 194.464570][ T6319] ======================================================= [ 194.536801][ T6320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.679456][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.685902][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.495369][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.967377][ T6314] chnl_net:caif_netlink_parms(): no params data found [ 196.036837][ T5793] Bluetooth: hci4: command tx timeout [ 197.577218][ T6339] binder: BINDER_SET_CONTEXT_MGR already set [ 197.586759][ T6339] binder: 6338:6339 ioctl 4018620d 200000004a80 returned -16 [ 197.671920][ T6275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.774841][ T6343] loop2: detected capacity change from 0 to 128 [ 197.867541][ T6343] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 198.110940][ T5793] Bluetooth: hci4: command tx timeout [ 198.140693][ T6343] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.157085][ T6343] ext2 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.389464][ T6350] Cannot find add_set index 0 as target [ 198.695596][ T6275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.083927][ T6343] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.123: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 199.116391][ T6275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.221862][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.266918][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.299395][ T6314] bridge_slave_0: entered allmulticast mode [ 199.336793][ T6314] bridge_slave_0: entered promiscuous mode [ 199.382454][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.403062][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.432873][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.454815][ T6314] bridge_slave_1: entered allmulticast mode [ 199.479376][ T6314] bridge_slave_1: entered promiscuous mode [ 199.556886][ T6275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.696370][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.866900][ T6358] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 200.003834][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.167733][ T6360] loop2: detected capacity change from 0 to 8 [ 200.192072][ T5793] Bluetooth: hci4: command tx timeout [ 200.273713][ T6314] team0: Port device team_slave_0 added [ 200.338054][ T6314] team0: Port device team_slave_1 added [ 201.413418][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.468432][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.687235][ T6370] Cannot find add_set index 0 as target [ 201.893877][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.269435][ T5793] Bluetooth: hci4: command tx timeout [ 205.663005][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.708960][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.824660][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.989071][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 207.286852][ T6314] hsr_slave_0: entered promiscuous mode [ 207.370095][ T6314] hsr_slave_1: entered promiscuous mode [ 207.618531][ T6314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.626399][ T6314] Cannot create hsr debugfs directory [ 207.669434][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 207.675568][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 207.740471][ T6387] jffs2: notice: (6387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 212.445778][ T6404] loop2: detected capacity change from 0 to 512 [ 212.929546][ T6406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.102961][ T6408] bond1: (slave geneve2): making interface the new active one [ 213.186850][ T6408] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 213.206312][ T6404] EXT4-fs (loop2): Test dummy encryption mode enabled [ 213.290329][ T6404] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.136: inode has both inline data and extents flags [ 213.439102][ T6404] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.136: couldn't read orphan inode 15 (err -117) [ 213.491031][ T6404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.669672][ T6400] netlink: 6 bytes leftover after parsing attributes in process `syz.2.136'. [ 213.872851][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.462593][ T6428] syzkaller0: entered promiscuous mode [ 214.533271][ T6428] syzkaller0: entered allmulticast mode [ 215.072347][ T6422] tipc: Started in network mode [ 215.077360][ T6422] tipc: Node identity 1af777c03519, cluster identity 4711 [ 215.367754][ T6422] tipc: Enabled bearer , priority 0 [ 215.385817][ T6424] tipc: Resetting bearer [ 217.140396][ T6420] tipc: Resetting bearer [ 217.380657][ T6420] tipc: Disabling bearer [ 217.535717][ T5821] tipc: Node number set to 804157376 [ 217.565792][ T6314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.603448][ T6314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.657375][ T6438] tipc: Started in network mode [ 217.662864][ T6438] tipc: Node identity ac1414aa, cluster identity 4711 [ 217.701691][ T6438] tipc: New replicast peer: 172.20.20.187 [ 217.729084][ T6438] tipc: Enabled bearer , priority 10 [ 217.816879][ T6314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.847788][ T6314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.510932][ T5821] tipc: Node number set to 2886997162 [ 223.724752][ T6448] loop3: detected capacity change from 0 to 512 [ 223.760249][ T6448] EXT4-fs (loop3): bad s_min_extra_isize: 544 [ 224.609104][ T6275] hsr_slave_0: left promiscuous mode [ 224.850122][ T6275] hsr_slave_1: left promiscuous mode [ 225.459552][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.479227][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.512618][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.559729][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.637197][ T6275] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 225.709121][ T6275] batman_adv: batadv0: Removing interface: ipvlan2 [ 225.792328][ T6275] bridge_slave_1: left allmulticast mode [ 225.819749][ T6275] bridge_slave_1: left promiscuous mode [ 225.829186][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.891785][ T6275] bridge_slave_0: left allmulticast mode [ 225.898763][ T6275] bridge_slave_0: left promiscuous mode [ 225.933074][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.077903][ T6275] veth1_macvtap: left promiscuous mode [ 226.089696][ T6275] veth0_macvtap: left promiscuous mode [ 226.096461][ T6275] veth1_vlan: left allmulticast mode [ 226.131087][ T6275] veth1_vlan: left promiscuous mode [ 226.137904][ T6275] veth0_vlan: left promiscuous mode [ 228.041366][ T6484] capability: warning: `syz.2.149' uses 32-bit capabilities (legacy support in use) [ 228.412897][ T6488] loop2: detected capacity change from 0 to 512 [ 228.574624][ T6488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.736097][ T6488] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.674455][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.060715][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 233.261262][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 233.419420][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.607538][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.107459][ T6511] 0x000000000000-0x000000020000 : "" [ 234.297229][ T6511] ftl_cs: FTL header not found. [ 235.278731][ T6275] bond0 (unregistering): Released all slaves [ 235.904831][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.081164][ T6314] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.152342][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.160701][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.904019][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.911357][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.990882][ T27] hid-generic 0005:0008:0009.0001: item fetching failed at offset 0/1 [ 237.055902][ T27] hid-generic: probe of 0005:0008:0009.0001 failed with error -22 [ 240.344088][ T6537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.791917][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.150355][ T6561] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 242.796551][ T6314] veth0_vlan: entered promiscuous mode [ 242.874442][ T6567] loop2: detected capacity change from 0 to 512 [ 242.893532][ T6314] veth1_vlan: entered promiscuous mode [ 243.053022][ T6567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 243.304502][ T6567] System zones: 1-12 [ 243.378634][ T6567] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.163: missing EA_INODE flag [ 243.395295][ T6314] veth0_macvtap: entered promiscuous mode [ 244.056149][ T6314] veth1_macvtap: entered promiscuous mode [ 244.071829][ T6567] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.163: error while reading EA inode 12 err=-117 [ 244.130377][ T6567] EXT4-fs (loop2): 1 orphan inode deleted [ 244.165567][ T6567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.214849][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.279183][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.328985][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.368965][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.417526][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.583940][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.670902][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.068280][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.479073][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.533454][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.596503][ T6314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.829168][ T6314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.837972][ T6314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.959617][ T6314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.042275][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.876962][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.924614][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.551091][ T6616] bridge0: port 3(netdevsim0) entered blocking state [ 252.605127][ T6616] bridge0: port 3(netdevsim0) entered disabled state [ 255.119271][ T6616] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 255.209074][ T6616] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 255.236145][ T6616] bridge0: port 3(netdevsim0) entered blocking state [ 255.243632][ T6616] bridge0: port 3(netdevsim0) entered forwarding state [ 255.403278][ T6619] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 255.519916][ T6619] bridge0: port 3(netdevsim0) entered disabled state [ 255.526954][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.535920][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.872371][ T6619] bridge0: port 3(netdevsim0) entered blocking state [ 255.880440][ T6619] bridge0: port 3(netdevsim0) entered forwarding state [ 255.887860][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.895166][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.902774][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.910118][ T6619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.133658][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.141425][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.252767][ T6619] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.323094][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.333762][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.344252][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.386805][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.399745][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.407296][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.104681][ T1145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.519205][ T51] Bluetooth: hci3: command tx timeout [ 258.636736][ T1145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.422561][ T1145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.430493][ T1145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.600391][ T51] Bluetooth: hci3: command tx timeout [ 264.119296][ T51] Bluetooth: hci3: command tx timeout [ 266.189210][ T51] Bluetooth: hci3: command tx timeout [ 268.963200][ T6629] chnl_net:caif_netlink_parms(): no params data found [ 270.765717][ T6683] syzkaller0: entered promiscuous mode [ 270.829084][ T6683] syzkaller0: entered allmulticast mode [ 275.655650][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.667193][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.679484][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.699361][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.727903][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.744092][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.789178][ T51] Bluetooth: hci4: command tx timeout [ 277.916634][ T3560] IPVS: starting estimator thread 0... [ 278.044905][ T6721] IPVS: using max 26 ests per chain, 62400 per kthread [ 279.869401][ T51] Bluetooth: hci4: command tx timeout [ 279.928827][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.978631][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.009360][ T6629] bridge_slave_0: entered allmulticast mode [ 280.017580][ T6629] bridge_slave_0: entered promiscuous mode [ 280.230207][ T6729] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 280.274043][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.729174][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.737342][ T6629] bridge_slave_1: entered allmulticast mode [ 281.840734][ T6629] bridge_slave_1: entered promiscuous mode [ 282.049104][ T51] Bluetooth: hci4: command tx timeout [ 282.787309][ T6723] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 282.931082][ T6723] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 282.989734][ T6724] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 283.033436][ T6726] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 285.199044][ T51] Bluetooth: hci4: command tx timeout [ 285.247947][ T6728] bridge1: entered promiscuous mode [ 285.460175][ T6730] bridge1: entered promiscuous mode [ 285.570319][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.068515][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.630922][ T6629] team0: Port device team_slave_0 added [ 289.749537][ T28] audit: type=1326 audit(1790317800.348:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce4b59e159 code=0x0 [ 289.827211][ T6629] team0: Port device team_slave_1 added [ 290.092457][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.152660][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.243643][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.266907][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.282285][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.313082][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.394722][ T6826] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 291.866897][ T6629] hsr_slave_0: entered promiscuous mode [ 291.930201][ T6629] hsr_slave_1: entered promiscuous mode [ 291.955601][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.987123][ T6629] Cannot create hsr debugfs directory [ 292.347742][ T6827] loop1: detected capacity change from 0 to 8192 [ 293.120967][ T6827] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.654274][ T6837] hub 8-0:1.0: USB hub found [ 294.670234][ T6837] hub 8-0:1.0: 1 port detected [ 296.259191][ T1145] hsr_slave_0: left promiscuous mode [ 296.270014][ T1145] hsr_slave_1: left promiscuous mode [ 296.281579][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.319029][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.365545][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.398984][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.432946][ T1145] bridge_slave_1: left allmulticast mode [ 296.438681][ T1145] bridge_slave_1: left promiscuous mode [ 296.470457][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.542266][ T1145] bridge_slave_0: left allmulticast mode [ 296.549423][ T1145] bridge_slave_0: left promiscuous mode [ 296.556324][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.701832][ T1145] veth1_macvtap: left promiscuous mode [ 296.707468][ T1145] veth0_macvtap: left promiscuous mode [ 296.724896][ T1145] veth1_vlan: left promiscuous mode [ 296.739416][ T1145] veth0_vlan: left promiscuous mode [ 298.532937][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 298.601728][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 298.658753][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.727719][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.615208][ T1145] bond0 (unregistering): Released all slaves [ 300.559489][ T6709] chnl_net:caif_netlink_parms(): no params data found [ 301.294495][ T6872] loop2: detected capacity change from 0 to 128 [ 304.098014][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.134024][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.144965][ T6709] bridge_slave_0: entered allmulticast mode [ 304.155766][ T6709] bridge_slave_0: entered promiscuous mode [ 304.178682][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.186660][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.195504][ T6709] bridge_slave_1: entered allmulticast mode [ 305.179224][ T6709] bridge_slave_1: entered promiscuous mode [ 305.388540][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.434882][ T6800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.569160][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.856262][ T6800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.946068][ T6709] team0: Port device team_slave_0 added [ 310.083033][ T6800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.144074][ T6709] team0: Port device team_slave_1 added [ 310.303554][ T6800] bridge0: port 3(netdevsim0) entered disabled state [ 310.362985][ T6800] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 310.374478][ T6800] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 310.422812][ T6800] bridge0: port 3(netdevsim0) entered disabled state [ 310.483546][ T6800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.814795][ T6629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.870814][ T6629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.470907][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.477937][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.594079][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.621081][ T6629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.657075][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.677341][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.793214][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.844083][ T6629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.541486][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.553911][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.564144][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.576799][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.588281][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 314.602602][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.042900][ T6709] hsr_slave_0: entered promiscuous mode [ 316.105223][ T6709] hsr_slave_1: entered promiscuous mode [ 316.187700][ T6709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.201263][ T6709] Cannot create hsr debugfs directory [ 316.670755][ T5087] Bluetooth: hci1: command tx timeout [ 316.935475][ T5087] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 317.559565][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.036861][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.749154][ T5087] Bluetooth: hci1: command tx timeout [ 320.627045][ T6940] chnl_net:caif_netlink_parms(): no params data found [ 320.839387][ T5087] Bluetooth: hci1: command tx timeout [ 321.208035][ T6709] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.362286][ T6709] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.541428][ T6709] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.688693][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.704302][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.728763][ T6940] bridge_slave_0: entered allmulticast mode [ 321.737177][ T6940] bridge_slave_0: entered promiscuous mode [ 321.761530][ T6709] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.806860][ T6800] hsr_slave_0: left promiscuous mode [ 321.824195][ T6800] hsr_slave_1: left promiscuous mode [ 321.845625][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.859095][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.880755][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.888267][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.928502][ T6800] bridge_slave_1: left allmulticast mode [ 321.948159][ T6800] bridge_slave_1: left promiscuous mode [ 321.958564][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.980118][ T6800] bridge_slave_0: left allmulticast mode [ 321.985856][ T6800] bridge_slave_0: left promiscuous mode [ 321.995321][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.052455][ T6800] veth1_macvtap: left promiscuous mode [ 322.058184][ T6800] veth0_macvtap: left promiscuous mode [ 322.064837][ T6800] veth1_vlan: left promiscuous mode [ 322.070424][ T6800] veth0_vlan: left promiscuous mode [ 322.911176][ T5087] Bluetooth: hci1: command tx timeout [ 322.975673][ T6964] FAULT_INJECTION: forcing a failure. [ 322.975673][ T6964] name fail_futex, interval 1, probability 0, space 0, times 1 [ 322.994226][ T6964] CPU: 0 PID: 6964 Comm: syz.2.213 Not tainted syzkaller #0 [ 323.001598][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.011737][ T6964] Call Trace: [ 323.015061][ T6964] [ 323.018026][ T6964] dump_stack_lvl+0x18c/0x250 [ 323.022756][ T6964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.028953][ T6964] ? show_regs_print_info+0x20/0x20 [ 323.034191][ T6964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.040410][ T6964] should_fail_ex+0x394/0x4c0 [ 323.045117][ T6964] get_futex_key+0x136/0x1030 [ 323.049827][ T6964] ? futex_setup_timer+0xc0/0xc0 [ 323.054836][ T6964] futex_wake+0x127/0x4f0 [ 323.059228][ T6964] ? futex_wake_mark+0x150/0x150 [ 323.064259][ T6964] do_futex+0x35d/0x3e0 [ 323.068463][ T6964] ? __might_fault+0xaa/0x120 [ 323.073181][ T6964] ? __ia32_sys_get_robust_list+0x110/0x110 [ 323.079097][ T6964] ? __might_fault+0xc6/0x120 [ 323.083792][ T6964] mm_release+0x184/0x3a0 [ 323.088154][ T6964] ? exit_mm_release+0x30/0x30 [ 323.092958][ T6964] ? lockdep_hardirqs_on+0x98/0x150 [ 323.098189][ T6964] exit_mm+0xa4/0x340 [ 323.102225][ T6964] ? sysctl_delayacct+0x220/0x220 [ 323.107321][ T6964] ? do_exit+0x2530/0x2530 [ 323.111815][ T6964] do_exit+0x909/0x2530 [ 323.116047][ T6964] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.122092][ T6964] ? put_task_struct+0xc0/0xc0 [ 323.126927][ T6964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.133151][ T6964] ? lockdep_hardirqs_on+0x98/0x150 [ 323.138374][ T6964] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.144579][ T6964] do_group_exit+0x22d/0x2f0 [ 323.149220][ T6964] ? _raw_spin_unlock_irq+0x29/0x50 [ 323.154471][ T6964] get_signal+0x12a6/0x1390 [ 323.159065][ T6964] arch_do_signal_or_restart+0xc2/0x7b0 [ 323.164674][ T6964] ? get_sigframe_size+0x20/0x20 [ 323.169653][ T6964] ? __sys_bind+0x32f/0x3f0 [ 323.174205][ T6964] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.180215][ T6964] ? exit_to_user_mode_loop+0x3b/0x110 [ 323.185699][ T6964] exit_to_user_mode_loop+0x70/0x110 [ 323.191028][ T6964] exit_to_user_mode_prepare+0xee/0x180 [ 323.196616][ T6964] syscall_exit_to_user_mode+0x1a/0x50 [ 323.202103][ T6964] do_syscall_64+0x61/0xb0 [ 323.206570][ T6964] ? clear_bhb_loop+0x40/0x90 [ 323.211295][ T6964] ? clear_bhb_loop+0x40/0x90 [ 323.216034][ T6964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.222001][ T6964] RIP: 0033:0x7f1c1319e159 [ 323.226455][ T6964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.246079][ T6964] RSP: 002b:00007f1c1400a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 323.254535][ T6964] RAX: fffffffffffffe00 RBX: 00007f1c13425fa0 RCX: 00007f1c1319e159 [ 323.262558][ T6964] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 323.270570][ T6964] RBP: 00007f1c1323506b R08: 0000000000000000 R09: 0000000000000000 [ 323.278568][ T6964] R10: 0000000000044095 R11: 0000000000000246 R12: 0000000000000000 [ 323.286552][ T6964] R13: 00007f1c13426038 R14: 00007f1c13425fa0 R15: 00007fff49dbd4d8 [ 323.294564][ T6964] [ 323.341079][ T6800] team0 (unregistering): Port device team_slave_1 removed [ 323.395060][ T6800] team0 (unregistering): Port device team_slave_0 removed [ 323.537077][ T6800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.647256][ T6800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.008699][ T6800] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 325.018095][ T6800] bond0 (unregistering): Released all slaves [ 325.185625][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.197636][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.207873][ T6940] bridge_slave_1: entered allmulticast mode [ 325.226381][ T6940] bridge_slave_1: entered promiscuous mode [ 325.329526][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.798577][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.760965][ T6940] team0: Port device team_slave_0 added [ 328.787904][ T6940] team0: Port device team_slave_1 added [ 328.938074][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.005393][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.088011][ T6940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.139293][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.146316][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.198156][ T6940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.483637][ T6940] hsr_slave_0: entered promiscuous mode [ 329.510005][ T6940] hsr_slave_1: entered promiscuous mode [ 329.790308][ T7020] md/raid10:md0: not clean -- starting background reconstruction [ 329.809518][ T7020] md/raid10:md0: active with 1 out of 2 devices [ 329.822061][ T7020] md0: detected capacity change from 0 to 2048 [ 330.005205][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.030911][ T7021] md: could not open device unknown-block(0,0). [ 330.039587][ T7021] md: error, md_import_device() returned -6 [ 330.069559][ T7027] md: resync of RAID array md0 [ 330.124420][ T7027] md/raid10:md0: resync fails [ 330.130349][ T7027] md: md0: resync done. [ 330.387347][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.729346][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.736642][ T6800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.815983][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.823268][ T6800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.405214][ T7042] loop2: detected capacity change from 0 to 512 [ 333.569240][ T7042] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 334.244300][ T7055] __vm_enough_memory: pid: 7055, comm: syz.2.224, not enough memory for the allocation [ 335.819430][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.004618][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.195168][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.586712][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.598099][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.611201][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.622337][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.635156][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.642750][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.737342][ T7079] loop2: detected capacity change from 0 to 128 [ 337.849245][ T7079] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 339.710376][ T51] Bluetooth: hci3: command tx timeout [ 340.240241][ T6940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.290741][ T6940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.369458][ T6940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.491984][ T6940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.669212][ T6809] hsr_slave_0: left promiscuous mode [ 340.721256][ T6809] hsr_slave_1: left promiscuous mode [ 340.759289][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.781149][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.972032][ T6809] bridge_slave_1: left allmulticast mode [ 341.022180][ T6809] bridge_slave_1: left promiscuous mode [ 341.028069][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.037525][ T6809] bridge_slave_0: left allmulticast mode [ 341.043296][ T6809] bridge_slave_0: left promiscuous mode [ 341.049280][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.606053][ T7107] netlink: 'syz.1.233': attribute type 3 has an invalid length. [ 341.809282][ T51] Bluetooth: hci3: command tx timeout [ 342.226492][ T7116] loop1: detected capacity change from 0 to 512 [ 342.280286][ T7116] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.460463][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.530687][ T7116] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.375296][ T6809] team0 (unregistering): Port device team_slave_1 removed [ 343.549682][ T6809] team0 (unregistering): Port device team_slave_0 removed [ 343.873273][ T51] Bluetooth: hci3: command tx timeout [ 343.946410][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.982733][ T6809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.244451][ T6809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.756234][ T6809] bond0 (unregistering): Released all slaves [ 345.394943][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.462565][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 345.593186][ T6940] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.802799][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.810114][ T6812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.860508][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.869095][ T6812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.949677][ T51] Bluetooth: hci3: command tx timeout [ 348.813280][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.833459][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.869159][ T7076] bridge_slave_0: entered allmulticast mode [ 348.887216][ T7076] bridge_slave_0: entered promiscuous mode [ 348.911871][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.933539][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.954090][ T7076] bridge_slave_1: entered allmulticast mode [ 348.980636][ T7076] bridge_slave_1: entered promiscuous mode [ 349.210385][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.389063][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.576831][ T7167] loop2: detected capacity change from 0 to 256 [ 350.658101][ T7076] team0: Port device team_slave_0 added [ 350.700736][ T7076] team0: Port device team_slave_1 added [ 350.890316][ T7167] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.072455][ T28] audit: type=1800 audit(1790317861.678:6): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.241" name="file1" dev="loop2" ino=1048607 res=0 errno=0 [ 351.530926][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.554765][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.590690][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.607432][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.615832][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.646694][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.044253][ T7076] hsr_slave_0: entered promiscuous mode [ 352.101427][ T7076] hsr_slave_1: entered promiscuous mode [ 352.148941][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.169027][ T7076] Cannot create hsr debugfs directory [ 352.346491][ T28] audit: type=1800 audit(1790317862.948:7): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="addr_trtype" dev="configfs" ino=13138 res=0 errno=0 [ 352.758152][ T28] audit: type=1800 audit(1790317863.268:8): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="addr_trsvcid" dev="configfs" ino=13140 res=0 errno=0 [ 352.977082][ T7179] nvmet_tcp: address family 255 not supported [ 356.476714][ T6940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.886178][ T7186] input: syz0 as /devices/virtual/input/input6 [ 367.878655][ T6940] veth0_vlan: entered promiscuous mode [ 370.672919][ T7235] netlink: 2 bytes leftover after parsing attributes in process `syz.2.252'. [ 370.958401][ T6940] veth1_vlan: entered promiscuous mode [ 371.184518][ T7240] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 371.458962][ T6809] hsr_slave_0: left promiscuous mode [ 371.513991][ T6809] hsr_slave_1: left promiscuous mode [ 371.529374][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.550944][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.573908][ T6809] bridge_slave_1: left allmulticast mode [ 371.589085][ T6809] bridge_slave_1: left promiscuous mode [ 371.615296][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.695434][ T6809] bridge_slave_0: left allmulticast mode [ 371.763583][ T6809] bridge_slave_0: left promiscuous mode [ 371.802769][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.727005][ T6809] team0 (unregistering): Port device team_slave_1 removed [ 373.837428][ T6809] team0 (unregistering): Port device team_slave_0 removed [ 373.950017][ T6809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.980118][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.991920][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.000717][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.017445][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.037075][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 374.063259][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.123369][ T6809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.211198][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802da65c00: rx timeout, send abort [ 374.224294][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802da67000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 374.499940][ T6809] bond0 (unregistering): Released all slaves [ 374.651222][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 374.766897][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 374.776446][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.905932][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.039133][ T7076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 375.076883][ T7076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 375.200127][ T7076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 375.306449][ T7270] unsupported nlmsg_type 40 [ 375.335526][ T7076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 375.537086][ T7272] loop2: detected capacity change from 0 to 128 [ 376.307951][ T5087] Bluetooth: hci4: command tx timeout [ 379.305638][ T51] Bluetooth: hci4: command tx timeout [ 379.312862][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.326353][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.526733][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.707949][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 379.778505][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.057876][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.065174][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.086424][ T7299] loop1: detected capacity change from 0 to 2048 [ 380.104303][ T7299] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 380.343840][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.351126][ T6795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.782137][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.823242][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.871624][ T7266] bridge_slave_0: entered allmulticast mode [ 380.891933][ T7266] bridge_slave_0: entered promiscuous mode [ 380.921750][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.950276][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.957609][ T7266] bridge_slave_1: entered allmulticast mode [ 381.043227][ T7266] bridge_slave_1: entered promiscuous mode [ 381.390262][ T51] Bluetooth: hci4: command tx timeout [ 381.411442][ T7311] gadgetfs: bound to dummy_udc driver [ 381.502704][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.119108][ T5828] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 382.138619][ C1] gadgetfs: connected [ 382.145183][ T5828] gadgetfs: disconnected [ 382.153161][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.339190][ C1] gadgetfs: connected [ 382.350686][ T5828] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 382.388215][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 382.415168][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.486203][ C1] gadgetfs: configuration #1 [ 382.489697][ T7309] gadgetfs: suspended from state 3 [ 382.497127][ T5828] usb 1-1: can't set config #1, error -71 [ 382.511591][ T5828] usb 1-1: USB disconnect, device number 2 [ 382.544517][ T7309] gadgetfs: disconnected [ 382.665855][ T7266] team0: Port device team_slave_0 added [ 382.694886][ T7266] team0: Port device team_slave_1 added [ 382.824482][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.841100][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.938719][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.957006][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.965295][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.994684][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.591134][ T51] Bluetooth: hci4: command tx timeout [ 385.996951][ T7266] hsr_slave_0: entered promiscuous mode [ 386.083417][ T7266] hsr_slave_1: entered promiscuous mode [ 386.104603][ T7266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.117744][ T28] audit: type=1800 audit(1790317896.716:9): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.264" name="bus" dev="ramfs" ino=15591 res=0 errno=0 [ 386.126906][ T7266] Cannot create hsr debugfs directory [ 386.903861][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.913096][ T6809] hsr_slave_0: left promiscuous mode [ 387.969610][ T6809] hsr_slave_1: left promiscuous mode [ 388.039307][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.062991][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.092439][ T6809] bridge_slave_1: left allmulticast mode [ 388.098205][ T6809] bridge_slave_1: left promiscuous mode [ 388.122810][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.156668][ T6809] bridge_slave_0: left allmulticast mode [ 388.177193][ T6809] bridge_slave_0: left promiscuous mode [ 388.207635][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.317978][ T6809] veth1_vlan: left promiscuous mode [ 388.365963][ T6809] veth0_vlan: left promiscuous mode [ 388.592894][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.266'. [ 397.167506][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.190933][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.209316][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.248077][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.291336][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 397.300632][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.783521][ T6809] team0 (unregistering): Port device team_slave_1 removed [ 397.947915][ T6809] team0 (unregistering): Port device team_slave_0 removed [ 398.133671][ T6809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.312657][ T6809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.389041][ T51] Bluetooth: hci1: command tx timeout [ 400.235872][ T6809] bond0 (unregistering): Released all slaves [ 400.835153][ T7427] syzkaller0: entered promiscuous mode [ 400.865753][ T7427] syzkaller0: entered allmulticast mode [ 401.479037][ T51] Bluetooth: hci1: command tx timeout [ 401.881183][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 402.117458][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.130649][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 402.140689][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.149844][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.199718][ T7454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.246520][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 402.599298][ T27] usb 2-1: USB disconnect, device number 3 [ 403.551835][ T51] Bluetooth: hci1: command tx timeout [ 405.628997][ T51] Bluetooth: hci1: command tx timeout [ 408.969123][ T7266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.036124][ T7266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.149363][ T7266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.230603][ T7266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.674477][ T7480] random: crng reseeded on system resumption [ 412.390680][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 413.320506][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.327720][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.360272][ T7400] bridge_slave_0: entered allmulticast mode [ 413.390049][ T7400] bridge_slave_0: entered promiscuous mode [ 413.410757][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.417954][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.454528][ T7400] bridge_slave_1: entered allmulticast mode [ 413.476925][ T7400] bridge_slave_1: entered promiscuous mode [ 413.662312][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.786064][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.173195][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.217401][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.428508][ T7514] loop1: detected capacity change from 0 to 1024 [ 415.450276][ T7514] EXT4-fs: Ignoring removed bh option [ 415.512723][ T7400] team0: Port device team_slave_0 added [ 415.548543][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.555831][ T6800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.598620][ T7514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.620532][ T7514] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.795239][ T7514] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.281: lblock 3 mapped to illegal pblock 3 (length 3) [ 415.871981][ T7514] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 415.908974][ T7514] EXT4-fs (loop1): This should not happen!! Data will be lost [ 415.908974][ T7514] [ 415.962969][ T7400] team0: Port device team_slave_1 added [ 416.018290][ T7521] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.281: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 416.133285][ T7521] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem [ 416.304244][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.311511][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.351267][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.358358][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.463981][ T6816] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:25: lblock 0 mapped to illegal pblock 0 (length 1) [ 416.469376][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.518999][ T6816] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 416.543338][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.561822][ T6816] EXT4-fs (loop1): This should not happen!! Data will be lost [ 416.561822][ T6816] [ 416.579466][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.635316][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 416.685594][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.052446][ T7527] md: couldn't update array info. -22 [ 417.090794][ T7527] md: could not open device unknown-block(1,1). [ 417.097922][ T7527] md: md_import_device returned -16 [ 417.264728][ T7400] hsr_slave_0: entered promiscuous mode [ 417.299399][ T7400] hsr_slave_1: entered promiscuous mode [ 417.403225][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 421.921731][ T7534] syz.2.283 (7534): drop_caches: 2 [ 421.946722][ T6809] hsr_slave_0: left promiscuous mode [ 421.988508][ T6809] hsr_slave_1: left promiscuous mode [ 422.015761][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.056628][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.065284][ T6809] bridge_slave_1: left allmulticast mode [ 422.077283][ T6809] bridge_slave_1: left promiscuous mode [ 422.084323][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.234077][ T6809] bridge_slave_0: left allmulticast mode [ 422.546402][ T6809] bridge_slave_0: left promiscuous mode [ 423.070287][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.722017][ T7006] IPVS: starting estimator thread 0... [ 426.909919][ T7549] IPVS: using max 17 ests per chain, 40800 per kthread [ 427.060069][ T7551] loop2: detected capacity change from 0 to 8 [ 427.106358][ T7551] squashfs: Unknown parameter 't' [ 427.170969][ T7544] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.390804][ T7551] loop2: detected capacity change from 0 to 4096 [ 427.419928][ T7551] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.432904][ T7551] EXT4-fs (loop2): Test dummy encryption mode enabled [ 427.549003][ T7551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.067193][ T6809] team0 (unregistering): Port device team_slave_1 removed [ 428.244373][ T6809] team0 (unregistering): Port device team_slave_0 removed [ 428.279359][ T7551] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 428.400038][ T6809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.949590][ T6809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.312018][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.345939][ T7569] loop1: detected capacity change from 0 to 164 [ 430.856059][ T7571] md: couldn't update array info. -22 [ 431.365902][ T7573] rock: directory entry would overflow storage [ 431.373862][ T7573] rock: sig=0x4f50, size=4, remaining=3 [ 431.380506][ T7573] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 431.469951][ T7571] md: could not open device unknown-block(1,1). [ 431.487699][ T7571] md: md_import_device returned -16 [ 431.645840][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 431.670773][ T6809] bond0 (unregistering): Released all slaves [ 433.778415][ T7587] Config c/1 of g1 needs at least one function. [ 434.369605][ T7587] udc dummy_udc.0: failed to start g1: -22 [ 434.396161][ T7587] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 434.459832][ T7587] UDC core: g1: couldn't find an available UDC or it's busy [ 435.201866][ T7597] loop2: detected capacity change from 0 to 512 [ 435.222943][ T7266] syz-executor (7266) used greatest stack depth: 20072 bytes left [ 435.272860][ T7597] EXT4-fs: Ignoring removed i_version option [ 435.332588][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.346094][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.366177][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.380535][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.395578][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 435.404436][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.443764][ T7597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.501171][ T7597] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.631413][ T7400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 435.659719][ T7400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 435.755359][ T7400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 435.789764][ T7400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 435.992166][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.227074][ T7607] loop2: detected capacity change from 0 to 1024 [ 437.479354][ T51] Bluetooth: hci3: command tx timeout [ 437.587415][ T7599] chnl_net:caif_netlink_parms(): no params data found [ 437.628024][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.374487][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.535565][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.542873][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.911151][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.918372][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.430266][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.734713][ T51] Bluetooth: hci3: command tx timeout [ 439.763991][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.789377][ T7599] bridge_slave_0: entered allmulticast mode [ 439.797002][ T7599] bridge_slave_0: entered promiscuous mode [ 440.628481][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.636362][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.682528][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.745892][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.999186][ T7599] bridge_slave_1: entered allmulticast mode [ 441.008673][ T7599] bridge_slave_1: entered promiscuous mode [ 441.077337][ T7638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.307'. [ 441.236399][ T7641] netlink: 'syz.2.307': attribute type 11 has an invalid length. [ 441.374952][ T7643] loop1: detected capacity change from 0 to 2048 [ 441.432768][ T7643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.524586][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.738563][ T7400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.789324][ T51] Bluetooth: hci3: command tx timeout [ 441.837924][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.941185][ T6793] hsr_slave_0: left promiscuous mode [ 441.970947][ T6793] hsr_slave_1: left promiscuous mode [ 442.002120][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.067424][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.123613][ T6793] bridge_slave_1: left allmulticast mode [ 442.139334][ T6793] bridge_slave_1: left promiscuous mode [ 442.146407][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.207552][ T6793] bridge_slave_0: left allmulticast mode [ 442.227088][ T7649] loop1: detected capacity change from 0 to 1024 [ 442.234050][ T6793] bridge_slave_0: left promiscuous mode [ 442.247267][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.135153][ T51] Bluetooth: hci3: command tx timeout [ 447.320501][ T6793] team0 (unregistering): Port device team_slave_1 removed [ 447.516715][ T6793] team0 (unregistering): Port device team_slave_0 removed [ 447.815654][ T6793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.543553][ T6793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.719081][ T7006] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 451.843246][ T6793] bond0 (unregistering): Released all slaves [ 451.945361][ T7006] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 451.978059][ T7006] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 451.989804][ T7006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.999949][ T7006] usb 2-1: Product: syz [ 452.005290][ T7006] usb 2-1: Manufacturer: syz [ 452.033757][ T7006] usb 2-1: SerialNumber: syz [ 452.130029][ T7599] team0: Port device team_slave_0 added [ 452.139971][ T7599] team0: Port device team_slave_1 added [ 452.271609][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.278652][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.351681][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.391592][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.429214][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.497863][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.666331][ T7599] hsr_slave_0: entered promiscuous mode [ 452.691403][ T7599] hsr_slave_1: entered promiscuous mode [ 452.702634][ T7599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.710859][ T7599] Cannot create hsr debugfs directory [ 452.758400][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.654880][ T7006] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 453.698162][ T7006] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 453.736154][ T7006] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 453.766690][ T7006] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 453.849921][ T7006] usb 2-1: USB disconnect, device number 4 [ 453.874078][ T7599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.897131][ T7599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.944502][ T7599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.969914][ T7599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 454.047354][ T7544] udevd[7544]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.097331][ T7400] veth0_vlan: entered promiscuous mode [ 454.158214][ T7400] veth1_vlan: entered promiscuous mode [ 454.279166][ T7400] veth0_macvtap: entered promiscuous mode [ 454.301331][ T7400] veth1_macvtap: entered promiscuous mode [ 454.361031][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.380504][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.392990][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.407497][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.433173][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.462222][ T7400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.485014][ T7400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.515136][ T7400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.544050][ T7400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.616657][ T7599] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.693037][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.700325][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.725586][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.732903][ T6793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.890423][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.898325][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.976852][ T6821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.991876][ T6821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.364299][ T7692] md: couldn't update array info. -22 [ 455.394633][ T7692] md: loop0 has zero or unknown size, marking faulty! [ 455.415070][ T7692] md: md_import_device returned -22 [ 456.133772][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.000601][ T7599] veth0_vlan: entered promiscuous mode [ 458.053615][ T7599] veth1_vlan: entered promiscuous mode [ 458.377871][ T7599] veth0_macvtap: entered promiscuous mode [ 458.925394][ T7599] veth1_macvtap: entered promiscuous mode [ 459.076819][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.145704][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.203473][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.268833][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.323415][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.432966][ T7599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.531221][ T7599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.593094][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.650992][ T7599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.699032][ T7599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.747485][ T7599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.769989][ T7599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.163374][ T6814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.204749][ T6814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.367803][ T6814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.405522][ T6814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.775638][ T7740] loop2: detected capacity change from 0 to 1024 [ 461.030870][ T7730] syz.5.316 (7730): drop_caches: 2 [ 467.530701][ T7757] md: md0: raid1 would not accept array [ 468.899730][ T7783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.329'. [ 468.936343][ T7784] Trying to write to read-only block-device nullb0 [ 469.019734][ T7783] netlink: 'syz.4.329': attribute type 11 has an invalid length. [ 469.879496][ T7793] FAULT_INJECTION: forcing a failure. [ 469.879496][ T7793] name failslab, interval 1, probability 0, space 0, times 1 [ 469.924718][ T7793] CPU: 1 PID: 7793 Comm: syz.4.331 Not tainted syzkaller #0 [ 469.932117][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.942230][ T7793] Call Trace: [ 469.945551][ T7793] [ 469.948526][ T7793] dump_stack_lvl+0x18c/0x250 [ 469.953386][ T7793] ? show_regs_print_info+0x20/0x20 [ 469.958651][ T7793] ? load_image+0x420/0x420 [ 469.963259][ T7793] ? __might_sleep+0xe0/0xe0 [ 469.967974][ T7793] ? __lock_acquire+0x7d80/0x7d80 [ 469.973084][ T7793] ? rcu_is_watching+0x15/0xb0 [ 469.977915][ T7793] should_fail_ex+0x394/0x4c0 [ 469.982709][ T7793] should_failslab+0x9/0x20 [ 469.987307][ T7793] slab_pre_alloc_hook+0x59/0x300 [ 469.992418][ T7793] ? snd_timer_open+0x50/0x10b0 [ 469.997462][ T7793] ? snd_hrtimer_open+0x51/0xf0 [ 470.002383][ T7793] __kmem_cache_alloc_node+0x53/0x250 [ 470.007826][ T7793] ? snd_hrtimer_open+0x51/0xf0 [ 470.012738][ T7793] kmalloc_trace+0x2a/0xe0 [ 470.017221][ T7793] snd_hrtimer_open+0x51/0xf0 [ 470.021977][ T7793] snd_timer_open+0xc13/0x10b0 [ 470.026811][ T7793] ? kstrdup+0x65/0x80 [ 470.030951][ T7793] snd_seq_timer_open+0x2db/0x610 [ 470.036130][ T7793] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 470.041550][ T7793] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 470.047651][ T7793] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 470.053598][ T7793] ? _raw_spin_unlock+0x40/0x40 [ 470.058512][ T7793] ? snd_seq_timer_defaults+0x35/0x530 [ 470.064031][ T7793] snd_seq_queue_alloc+0x3b7/0x740 [ 470.069221][ T7793] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 470.074918][ T7793] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 470.081221][ T7793] snd_seq_oss_open+0x658/0xf10 [ 470.086223][ T7793] ? snd_seq_oss_delete_client+0x50/0x50 [ 470.091958][ T7793] ? trace_raw_output_contention_end+0xd0/0xd0 [ 470.098189][ T7793] ? soundcore_open+0x274/0x4c0 [ 470.103195][ T7793] ? odev_open+0x5c/0xa0 [ 470.107518][ T7793] ? __lock_acquire+0x7d80/0x7d80 [ 470.112605][ T7793] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 470.118643][ T7793] ? async_call_lookup_ports+0x20/0x20 [ 470.124163][ T7793] ? do_raw_spin_unlock+0x121/0x230 [ 470.129471][ T7793] ? soundcore_open+0x310/0x4c0 [ 470.134383][ T7793] odev_open+0x67/0xa0 [ 470.138519][ T7793] chrdev_open+0x58c/0x600 [ 470.143003][ T7793] ? cd_forget+0x160/0x160 [ 470.147483][ T7793] ? fsnotify_perm+0x3ed/0x5e0 [ 470.152352][ T7793] do_dentry_open+0x880/0x14b0 [ 470.157181][ T7793] ? cd_forget+0x160/0x160 [ 470.161661][ T7793] path_openat+0x284f/0x3270 [ 470.166332][ T7793] ? do_sys_openat2+0xda/0x1d0 [ 470.171153][ T7793] ? __x64_sys_openat+0x139/0x160 [ 470.176235][ T7793] ? verify_lock_unused+0x140/0x140 [ 470.181497][ T7793] ? do_filp_open+0x430/0x430 [ 470.186296][ T7793] do_filp_open+0x1f2/0x430 [ 470.190863][ T7793] ? vfs_tmpfile+0x620/0x620 [ 470.195527][ T7793] ? _raw_spin_unlock+0x28/0x40 [ 470.200434][ T7793] ? alloc_fd+0x590/0x640 [ 470.204863][ T7793] do_sys_openat2+0x134/0x1d0 [ 470.209603][ T7793] ? do_sys_open+0xe0/0xe0 [ 470.214074][ T7793] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 470.220118][ T7793] ? lock_chain_count+0x20/0x20 [ 470.225026][ T7793] __x64_sys_openat+0x139/0x160 [ 470.229952][ T7793] do_syscall_64+0x55/0xb0 [ 470.234424][ T7793] ? clear_bhb_loop+0x40/0x90 [ 470.239280][ T7793] ? clear_bhb_loop+0x40/0x90 [ 470.244011][ T7793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.249957][ T7793] RIP: 0033:0x7f3f46b9e159 [ 470.254422][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.274095][ T7793] RSP: 002b:00007f3f47b56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.282570][ T7793] RAX: ffffffffffffffda RBX: 00007f3f46e25fa0 RCX: 00007f3f46b9e159 [ 470.290601][ T7793] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 470.298633][ T7793] RBP: 00007f3f46c3506b R08: 0000000000000000 R09: 0000000000000000 [ 470.306651][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.314670][ T7793] R13: 00007f3f46e26038 R14: 00007f3f46e25fa0 R15: 00007ffe6b2fd238 [ 470.322702][ T7793] [ 472.935096][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 472.946927][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.337'. [ 486.586952][ T7881] loop5: detected capacity change from 0 to 1024 [ 496.488077][ T7922] netlink: 'syz.4.355': attribute type 3 has an invalid length. [ 502.993104][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.009147][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.138251][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 503.193854][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 503.222161][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 503.241490][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 503.251181][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 503.269842][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 504.317176][ T7954] loop2: detected capacity change from 0 to 128 [ 504.479865][ T7954] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 504.494589][ T7954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.654857][ T28] audit: type=1800 audit(1790318015.256:10): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.361" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 505.389748][ T51] Bluetooth: hci4: command tx timeout [ 508.946263][ T51] Bluetooth: hci4: command tx timeout [ 509.100986][ T1145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.042126][ T1145] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.721473][ T7988] zram0: detected capacity change from 0 to 8 [ 510.760915][ T1145] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.827362][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 510.839860][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 510.848364][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 510.861078][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 510.869451][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 510.877566][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.988996][ T7995] Bluetooth: hci4: command tx timeout [ 511.191762][ T1145] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.563890][ T7946] chnl_net:caif_netlink_parms(): no params data found [ 511.987647][ T8003] loop4: detected capacity change from 0 to 512 [ 512.020260][ T8003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.069207][ T8003] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 512.221691][ T8003] EXT4-fs (loop4): 1 truncate cleaned up [ 512.275629][ T8003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.392139][ T8003] capability: warning: `syz.4.366' uses deprecated v2 capabilities in a way that may be insecure [ 512.600750][ T8003] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.789243][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.846161][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.989070][ T7995] Bluetooth: hci1: command tx timeout [ 513.169323][ T7946] bridge_slave_0: entered allmulticast mode [ 513.177169][ T7995] Bluetooth: hci4: command tx timeout [ 515.819123][ T7946] bridge_slave_0: entered promiscuous mode [ 516.265787][ T7995] Bluetooth: hci1: command tx timeout [ 516.841604][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.895785][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.911622][ T7946] bridge_slave_1: entered allmulticast mode [ 516.930963][ T7946] bridge_slave_1: entered promiscuous mode [ 517.177587][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.223390][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.405131][ T7992] chnl_net:caif_netlink_parms(): no params data found [ 518.145424][ T7946] team0: Port device team_slave_0 added [ 518.347733][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.369'. [ 518.358481][ T7995] Bluetooth: hci1: command tx timeout [ 518.566830][ T7946] team0: Port device team_slave_1 added [ 518.767010][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.014157][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.057065][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.138919][ T7946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.364453][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.387836][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.518838][ T7946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.525255][ T8047] overlayfs: missing 'lowerdir' [ 520.539414][ T7995] Bluetooth: hci1: command tx timeout [ 520.644003][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.666302][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.684694][ T7992] bridge_slave_0: entered allmulticast mode [ 520.706585][ T7992] bridge_slave_0: entered promiscuous mode [ 520.799519][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.827303][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.857871][ T7992] bridge_slave_1: entered allmulticast mode [ 520.897168][ T7992] bridge_slave_1: entered promiscuous mode [ 521.143206][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.185383][ T7946] hsr_slave_0: entered promiscuous mode [ 521.267998][ T7946] hsr_slave_1: entered promiscuous mode [ 521.309125][ T7946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.316790][ T7946] Cannot create hsr debugfs directory [ 521.661682][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.539125][ T1145] hsr_slave_0: left promiscuous mode [ 522.547446][ T1145] hsr_slave_1: left promiscuous mode [ 522.555350][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.562971][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.574116][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.582246][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.591691][ T1145] bridge_slave_1: left allmulticast mode [ 522.598178][ T1145] bridge_slave_1: left promiscuous mode [ 522.604408][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.628319][ T1145] bridge_slave_0: left allmulticast mode [ 522.659198][ T1145] bridge_slave_0: left promiscuous mode [ 522.753007][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.856334][ T1145] veth1_macvtap: left promiscuous mode [ 522.863136][ T1145] veth0_macvtap: left promiscuous mode [ 522.889475][ T1145] veth1_vlan: left promiscuous mode [ 522.905211][ T1145] veth0_vlan: left promiscuous mode [ 526.524060][ T8080] netlink: 'syz.4.376': attribute type 3 has an invalid length. [ 527.362206][ T8083] loop4: detected capacity change from 0 to 256 [ 528.437132][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 528.504758][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 528.572710][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.647977][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.161862][ T1145] bond0 (unregistering): Released all slaves [ 529.745678][ T8085] team0 (unregistering): Port device team_slave_0 removed [ 529.788112][ T8085] team0 (unregistering): Port device team_slave_1 removed [ 529.864827][ T7992] team0: Port device team_slave_0 added [ 529.931129][ T7992] team0: Port device team_slave_1 added [ 530.126114][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.171387][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.308936][ T7992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.352043][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.365895][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.406279][ T7992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.705994][ T7992] hsr_slave_0: entered promiscuous mode [ 530.725620][ T7992] hsr_slave_1: entered promiscuous mode [ 532.297646][ T7946] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 532.459988][ T7946] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 532.500948][ T7946] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 532.562728][ T8109] mmap: syz.2.379 (8109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 536.458833][ T28] audit: type=1326 audit(1790318045.446:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.2.379" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c1319e159 code=0x0 [ 536.622805][ T1145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.741012][ T7946] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.891349][ T1145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.242301][ T1145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.538641][ T1145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.860156][ T7992] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 537.893246][ T7992] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 537.950699][ T7992] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 538.014837][ T7992] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 538.162373][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.232121][ T7946] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.273822][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.281062][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.338536][ T1145] tipc: Left network mode [ 539.381986][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.390660][ T6821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.057927][ T8147] kvm: kvm [8146]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffffffff00000000 [ 540.107745][ T8147] kvm: kvm [8146]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000000080 [ 540.243558][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.294117][ T7946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.330622][ T7946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.595552][ T7992] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.748223][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.755501][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.838349][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.845665][ T6795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.014552][ T8168] netlink: 'syz.2.388': attribute type 3 has an invalid length. [ 542.870997][ T1145] hsr_slave_0: left promiscuous mode [ 542.883517][ T1145] hsr_slave_1: left promiscuous mode [ 542.939044][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.963832][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.995032][ T1145] bridge_slave_1: left allmulticast mode [ 543.014216][ T1145] bridge_slave_1: left promiscuous mode [ 543.079056][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.167374][ T1145] bridge_slave_0: left allmulticast mode [ 543.178842][ T1145] bridge_slave_0: left promiscuous mode [ 543.184718][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.577412][ T8183] loop2: detected capacity change from 0 to 2048 [ 544.692955][ T1145] veth1_macvtap: left promiscuous mode [ 544.704583][ T1145] veth0_macvtap: left promiscuous mode [ 544.810238][ T1145] veth1_vlan: left promiscuous mode [ 544.955449][ T8183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.059964][ T1145] veth0_vlan: left promiscuous mode [ 545.924993][ T1145] bond1 (unregistering): (slave geneve2): Releasing active interface [ 546.988253][ T1145] bond1 (unregistering): Released all slaves [ 547.953048][ T8199] xt_policy: output policy not valid in PREROUTING and INPUT [ 549.429213][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.537100][ T8202] netlink: 'syz.4.395': attribute type 3 has an invalid length. [ 549.566865][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.729035][ T3560] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 550.858379][ T1145] bond0 (unregistering): Released all slaves [ 550.939127][ T3560] usb 5-1: Using ep0 maxpacket: 32 [ 550.953528][ T3560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.976775][ T3560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.999237][ T3560] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.008481][ T3560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.030893][ T3560] usb 5-1: config 0 descriptor?? [ 551.050143][ T3560] hub 5-1:0.0: USB hub found [ 551.180594][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.361651][ T8210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.466404][ T8210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.561034][ T3560] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 551.664253][ T3560] usbhid 5-1:0.0: can't add hid device: -71 [ 551.699002][ T3560] usbhid: probe of 5-1:0.0 failed with error -71 [ 551.816712][ T3560] usb 5-1: USB disconnect, device number 2 [ 552.576321][ T1145] IPVS: stop unused estimator thread 0... [ 552.647899][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.775180][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.781804][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.787973][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.794140][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.800277][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.806400][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.812592][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.818761][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.824902][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.831062][ T8231] tc action pedit 'at' offset 5 out of bounds [ 552.837191][ T8231] 0: reclassify loop, rule prio 0, protocol 800 [ 553.936152][ T7994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.947948][ T7994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.957356][ T7994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.966296][ T7994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.974918][ T7994] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 554.002650][ T7994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.815820][ T8258] netlink: 'syz.2.403': attribute type 3 has an invalid length. [ 555.098555][ T7992] veth0_vlan: entered promiscuous mode [ 555.276436][ T7992] veth1_vlan: entered promiscuous mode [ 557.647776][ T7994] Bluetooth: hci2: command tx timeout [ 557.857721][ T7992] veth0_macvtap: entered promiscuous mode [ 558.115914][ T7992] veth1_macvtap: entered promiscuous mode [ 558.180543][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 558.318706][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.358966][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.412819][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.768275][ T7992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.780457][ T7992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.794542][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.048632][ T7992] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.084782][ T7992] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.118880][ T7992] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.127690][ T7992] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.311933][ T8284] loop4: detected capacity change from 0 to 2048 [ 559.427157][ T8284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.470622][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.477846][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.499223][ T8284] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.538289][ T8249] bridge_slave_0: entered allmulticast mode [ 559.576157][ T8249] bridge_slave_0: entered promiscuous mode [ 559.809120][ T7994] Bluetooth: hci2: command tx timeout [ 560.271918][ T7994] Bluetooth: hci3: command 0x0406 tx timeout [ 560.491402][ T7599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.531811][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.579125][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.587000][ T8249] bridge_slave_1: entered allmulticast mode [ 560.683669][ T8249] bridge_slave_1: entered promiscuous mode [ 561.226850][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.273262][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.540598][ T6812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.548510][ T6812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.623601][ T8249] team0: Port device team_slave_0 added [ 561.736087][ T8249] team0: Port device team_slave_1 added [ 561.838135][ T6821] hsr_slave_0: left promiscuous mode [ 561.844653][ T6821] hsr_slave_1: left promiscuous mode [ 561.861139][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.869377][ T7995] Bluetooth: hci2: command tx timeout [ 561.899693][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.930486][ T6821] bridge_slave_1: left allmulticast mode [ 561.936221][ T6821] bridge_slave_1: left promiscuous mode [ 561.994565][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.018616][ T6821] bridge_slave_0: left allmulticast mode [ 562.032182][ T6821] bridge_slave_0: left promiscuous mode [ 562.052359][ T8318] loop4: detected capacity change from 0 to 16 [ 562.066117][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.089963][ T8318] erofs: (device loop4): mounted with root inode @ nid 36. [ 563.077217][ T8321] erofs: (device loop4): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 563.089591][ T8321] syz.4.409: attempt to access beyond end of device [ 563.089591][ T8321] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 563.119072][ T8321] erofs: (device loop4): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 563.128604][ T8321] syz.4.409: attempt to access beyond end of device [ 563.128604][ T8321] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 563.151165][ T8321] syz.4.409: attempt to access beyond end of device [ 563.151165][ T8321] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 563.229386][ T28] audit: type=1800 audit(1790318073.766:12): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.409" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 563.316581][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.323329][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.405073][ T8319] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 16 of nid 89 [ 563.418801][ T8319] erofs: (device loop4): z_erofs_readahead: readahead error at folio 17 @ nid 89 [ 563.427998][ T8319] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 16 of nid 89 [ 563.438897][ T8319] erofs: (device loop4): z_erofs_readahead: readahead error at folio 16 @ nid 89 [ 563.448684][ T8319] syz.4.409: attempt to access beyond end of device [ 563.448684][ T8319] loop4: rw=524288, sector=56, nr_sectors = 32 limit=16 [ 563.463791][ T8319] syz.4.409: attempt to access beyond end of device [ 563.463791][ T8319] loop4: rw=524288, sector=96, nr_sectors = 24 limit=16 [ 563.478305][ T8319] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 4 of nid 89 [ 563.487434][ T8319] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 4 of nid 89 [ 563.498887][ T8319] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 4 of nid 89 [ 563.507628][ T8319] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 4 of nid 89 [ 563.638350][ T8321] syz.4.409 (8321) used greatest stack depth: 19888 bytes left [ 563.949026][ T7995] Bluetooth: hci2: command tx timeout [ 564.305618][ T6821] team0 (unregistering): Port device team_slave_1 removed [ 564.507484][ T8324] netlink: 'syz.4.410': attribute type 3 has an invalid length. [ 564.522555][ T6821] team0 (unregistering): Port device team_slave_0 removed [ 564.647533][ T6821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.658541][ T8326] loop2: detected capacity change from 0 to 512 [ 564.700793][ T8326] EXT4-fs (loop2): 1 truncate cleaned up [ 564.732952][ T8326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.881495][ T6821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.961739][ T8328] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 565.995986][ T6821] bond0 (unregistering): Released all slaves [ 566.337259][ T6816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.358489][ T6816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.464110][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.501738][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.584139][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.669195][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.737712][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.763187][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.830928][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.132063][ T8249] hsr_slave_0: entered promiscuous mode [ 567.284794][ T8249] hsr_slave_1: entered promiscuous mode [ 567.392099][ T8249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.485069][ T8249] Cannot create hsr debugfs directory [ 579.122750][ T8249] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 579.300818][ T8249] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 579.474767][ T8249] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 579.620167][ T8249] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 580.174969][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.377612][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.431205][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.438473][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.585802][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.593108][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.779281][ T8406] netlink: 'syz.4.418': attribute type 3 has an invalid length. [ 580.975144][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'. [ 584.027642][ T8427] loop2: detected capacity change from 0 to 256 [ 586.486623][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.212776][ T8439] zram: Cannot change disksize for initialized device [ 591.415656][ T28] audit: type=1326 audit(1790318102.016:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.4.432" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f46b9e159 code=0x0 [ 593.594779][ T8249] veth0_vlan: entered promiscuous mode [ 594.405182][ T8468] netlink: 'syz.2.430': attribute type 3 has an invalid length. [ 594.479022][ T8249] veth1_vlan: entered promiscuous mode [ 594.805150][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.431'. [ 594.961004][ T8249] veth0_macvtap: entered promiscuous mode [ 595.007183][ T8249] veth1_macvtap: entered promiscuous mode [ 595.085108][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.125128][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.408841][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.442198][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.515437][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.330666][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.359615][ T5828] IPVS: starting estimator thread 0... [ 596.607279][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.618845][ T8485] IPVS: using max 15 ests per chain, 36000 per kthread [ 596.682385][ T8249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.744395][ T8249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.793871][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.868488][ T8249] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.884059][ T8487] zram: Cannot change disksize for initialized device [ 596.901158][ T8249] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.948952][ T8249] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.982545][ T8249] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.450045][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.508399][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.808278][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.857935][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.476426][ T8502] overlayfs: missing 'lowerdir' [ 602.358357][ T8519] netlink: 'syz.7.442': attribute type 3 has an invalid length. [ 604.182373][ T8525] loop7: detected capacity change from 0 to 164 [ 605.671060][ T8528] rock: directory entry would overflow storage [ 605.678103][ T8528] rock: sig=0x4f50, size=4, remaining=3 [ 605.684717][ T8528] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 607.079171][ T28] audit: type=1326 audit(1790318117.286:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1319e159 code=0x7ffc0000 [ 607.279611][ T28] audit: type=1326 audit(1790318117.286:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1319e159 code=0x7ffc0000 [ 607.387384][ T28] audit: type=1326 audit(1790318117.276:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1319e159 code=0x7ffc0000 [ 607.521246][ T28] audit: type=1326 audit(1790318117.316:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1319e159 code=0x7ffc0000 [ 607.649435][ T28] audit: type=1326 audit(1790318117.336:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c1319dec2 code=0x7ffc0000 [ 607.843666][ T28] audit: type=1326 audit(1790318117.336:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c1319dec2 code=0x7ffc0000 [ 607.941041][ T28] audit: type=1326 audit(1790318117.366:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1319e159 code=0x7ffc0000 [ 608.147100][ T28] audit: type=1326 audit(1790318117.366:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c1319dec2 code=0x7ffc0000 [ 610.558877][ T28] audit: type=1326 audit(1790318117.366:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1c1319df57 code=0x7ffc0000 [ 610.626861][ T28] audit: type=1326 audit(1790318117.366:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.2.444" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1c1315ae51 code=0x7ffc0000 [ 615.414743][ T8565] loop7: detected capacity change from 0 to 256 [ 624.763190][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.763324][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.642434][ T7994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 633.663472][ T7994] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 633.694538][ T7994] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 633.716196][ T7994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.725729][ T7994] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 633.749367][ T7994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 636.474588][ T1145] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.022498][ T7994] Bluetooth: hci4: command tx timeout [ 637.079472][ T7994] Bluetooth: hci1: command 0x0406 tx timeout [ 638.081324][ T1145] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.069322][ T7995] Bluetooth: hci4: command tx timeout [ 643.295901][ T7995] Bluetooth: hci4: command tx timeout [ 647.048852][ T7994] Bluetooth: hci4: command tx timeout [ 647.224815][ T1145] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.397580][ T8625] chnl_net:caif_netlink_parms(): no params data found [ 650.101315][ T1145] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.650994][ T8687] netlink: 'syz.7.467': attribute type 3 has an invalid length. [ 651.488436][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.546896][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.567328][ T8625] bridge_slave_0: entered allmulticast mode [ 651.663438][ T8625] bridge_slave_0: entered promiscuous mode [ 651.830504][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.882535][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.935724][ T8625] bridge_slave_1: entered allmulticast mode [ 651.986376][ T8625] bridge_slave_1: entered promiscuous mode [ 652.657584][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.780837][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.203731][ T8625] team0: Port device team_slave_0 added [ 653.257277][ T8625] team0: Port device team_slave_1 added [ 653.542843][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.586988][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.704274][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.787384][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.824438][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.959136][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.414291][ T8625] hsr_slave_0: entered promiscuous mode [ 654.434234][ T8625] hsr_slave_1: entered promiscuous mode [ 654.461097][ T8625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.481199][ T8625] Cannot create hsr debugfs directory [ 662.614697][ T8625] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 662.734099][ T1145] hsr_slave_0: left promiscuous mode [ 662.765184][ T1145] hsr_slave_1: left promiscuous mode [ 662.778802][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.798904][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.821107][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.865904][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.917841][ T1145] bridge_slave_1: left allmulticast mode [ 662.933767][ T1145] bridge_slave_1: left promiscuous mode [ 662.975501][ T8737] loop7: detected capacity change from 0 to 2048 [ 662.984285][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.021858][ T1145] bridge_slave_0: left allmulticast mode [ 663.027596][ T1145] bridge_slave_0: left promiscuous mode [ 663.039167][ T8737] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 663.069241][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.297941][ T1145] veth1_macvtap: left promiscuous mode [ 663.324734][ T1145] veth0_macvtap: left promiscuous mode [ 663.345094][ T1145] veth1_vlan: left promiscuous mode [ 663.363292][ T1145] veth0_vlan: left promiscuous mode [ 664.651177][ T8746] loop2: detected capacity change from 0 to 32768 [ 664.727067][ T8746] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.477 (8746) [ 664.934621][ T8746] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 664.987074][ T8746] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 665.011525][ T8746] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 665.064654][ T8746] BTRFS info (device loop2): use zstd compression, level 3 [ 665.106025][ T8746] BTRFS info (device loop2): using free space tree [ 665.570289][ T8746] BTRFS info (device loop2): enabling ssd optimizations [ 665.577400][ T8746] BTRFS info (device loop2): auto enabling async discard [ 666.907229][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 667.122253][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 667.137308][ T5776] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 667.370847][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.620166][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.087485][ T1145] bond0 (unregistering): Released all slaves [ 669.327579][ T8625] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 669.378056][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.7.476'. [ 669.469116][ T8625] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 669.557901][ T8625] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 670.198368][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.368062][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.460708][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.467972][ T6816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.664306][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.671701][ T6816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.902391][ T8806] loop7: detected capacity change from 0 to 512 [ 672.205668][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.377053][ T8831] syzkaller0: entered promiscuous mode [ 673.414667][ T8831] syzkaller0: entered allmulticast mode [ 673.477674][ T8836] tipc: Started in network mode [ 673.510655][ T8836] tipc: Node identity 46049a8fbb6a, cluster identity 4711 [ 673.594098][ T8836] tipc: Enabled bearer , priority 0 [ 673.735769][ T8831] tipc: Resetting bearer [ 673.875470][ T8830] tipc: Resetting bearer [ 674.025805][ T8830] tipc: Disabling bearer [ 674.187082][ T8625] veth0_vlan: entered promiscuous mode [ 674.243191][ T8625] veth1_vlan: entered promiscuous mode [ 674.434078][ T8625] veth0_macvtap: entered promiscuous mode [ 674.465267][ T8625] veth1_macvtap: entered promiscuous mode [ 674.545745][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.570588][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.585714][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.597121][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.635864][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.677518][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.713559][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.744669][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.787378][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.815348][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.846529][ T8625] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.864417][ T8625] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.873849][ T8625] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.905329][ T8625] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.153034][ T6793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.189317][ T6793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.369435][ T6793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.377900][ T6793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.934340][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 675.934358][ T28] audit: type=1326 audit(1790318186.536:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.8.456" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dd739e159 code=0x0 [ 686.208900][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.216524][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.046714][ T9646] netlink: 'syz.8.494': attribute type 1 has an invalid length. [ 729.155521][ T28] audit: type=1800 audit(1790318239.756:83): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.491" name="idProduct" dev="configfs" ino=25617 res=0 errno=0 [ 729.233797][ T28] audit: type=1800 audit(1790318239.796:84): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.491" name="max_speed" dev="configfs" ino=25618 res=0 errno=0 [ 729.665553][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.673103][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.680013][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.686827][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.693718][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.701140][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.707947][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.716003][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.722874][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.729855][ T9664] tc action pedit offset must be on 32 bit boundaries [ 729.736769][ T9664] 0: reclassify loop, rule prio 0, protocol 800 [ 730.037399][ T9668] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 732.815407][ T9674] warning: `syz.4.502' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 736.367515][ T9693] netlink: set zone limit has 8 unknown bytes [ 742.809171][ T9722] FAULT_INJECTION: forcing a failure. [ 742.809171][ T9722] name failslab, interval 1, probability 0, space 0, times 0 [ 743.361317][ T9722] CPU: 1 PID: 9722 Comm: syz.2.512 Not tainted syzkaller #0 [ 743.368752][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.378871][ T9722] Call Trace: [ 743.382226][ T9722] [ 743.385205][ T9722] dump_stack_lvl+0x18c/0x250 [ 743.389960][ T9722] ? show_regs_print_info+0x20/0x20 [ 743.395221][ T9722] ? load_image+0x420/0x420 [ 743.399799][ T9722] ? __might_sleep+0xe0/0xe0 [ 743.404444][ T9722] ? __lock_acquire+0x7d80/0x7d80 [ 743.409526][ T9722] should_fail_ex+0x394/0x4c0 [ 743.414279][ T9722] should_failslab+0x9/0x20 [ 743.418874][ T9722] slab_pre_alloc_hook+0x59/0x300 [ 743.423983][ T9722] kmem_cache_alloc+0x5a/0x2c0 [ 743.428819][ T9722] ? mempool_init_node+0x1e9/0x480 [ 743.433996][ T9722] ? mempool_free+0x320/0x320 [ 743.438734][ T9722] mempool_init_node+0x1e9/0x480 [ 743.443732][ T9722] ? mempool_alloc_slab+0x60/0x60 [ 743.448814][ T9722] ? mempool_free+0x320/0x320 [ 743.453547][ T9722] mempool_create+0x81/0xc0 [ 743.458117][ T9722] ceph_osdc_init+0x4ee/0x8c0 [ 743.463028][ T9722] ceph_create_client+0x246/0x300 [ 743.468212][ T9722] ceph_get_tree+0x1ca/0x1800 [ 743.472999][ T9722] ? bpf_lsm_capable+0x9/0x10 [ 743.477768][ T9722] ? security_capable+0x89/0xb0 [ 743.482770][ T9722] vfs_get_tree+0x8c/0x280 [ 743.487256][ T9722] vfs_cmd_create+0xe3/0x230 [ 743.491913][ T9722] __se_sys_fsconfig+0x70a/0x850 [ 743.496915][ T9722] ? __x64_sys_fsconfig+0xc0/0xc0 [ 743.502017][ T9722] ? lockdep_hardirqs_on+0x98/0x150 [ 743.507354][ T9722] ? __x64_sys_fsconfig+0x20/0xc0 [ 743.512447][ T9722] do_syscall_64+0x55/0xb0 [ 743.516921][ T9722] ? clear_bhb_loop+0x40/0x90 [ 743.521667][ T9722] ? clear_bhb_loop+0x40/0x90 [ 743.526431][ T9722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.532396][ T9722] RIP: 0033:0x7f1c1319e159 [ 743.536870][ T9722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.556549][ T9722] RSP: 002b:00007f1c1400a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 743.565041][ T9722] RAX: ffffffffffffffda RBX: 00007f1c13425fa0 RCX: 00007f1c1319e159 [ 743.573078][ T9722] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 743.581100][ T9722] RBP: 00007f1c1323506b R08: 0000000000000000 R09: 0000000000000000 [ 743.589121][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.597134][ T9722] R13: 00007f1c13426038 R14: 00007f1c13425fa0 R15: 00007fff49dbd4d8 [ 743.605169][ T9722] [ 744.151191][ T9731] loop4: detected capacity change from 0 to 1024 [ 744.183335][ T9731] EXT4-fs: Ignoring removed bh option [ 744.317293][ T9731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.504829][ T9736] xt_CONNSECMARK: invalid mode: 0 [ 745.041769][ T9738] loop2: detected capacity change from 0 to 164 [ 745.908284][ T9742] rock: directory entry would overflow storage [ 745.915383][ T9742] rock: sig=0x4f50, size=4, remaining=3 [ 745.921154][ T9742] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 746.473203][ T9748] binder: 9747:9748 ioctl c0306201 200000000080 returned -14 [ 746.570984][ T9748] binder: 9747:9748 ioctl c0306201 2000000003c0 returned -14 [ 746.631832][ T9748] binder_alloc: 9747: binder_alloc_buf size -240 failed, no address space [ 746.709186][ T9748] binder_alloc: allocated: 4160 (num: 1 largest: 4160), free: 8128 (num: 1 largest: 8128) [ 747.700669][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.707330][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.167700][ T9761] loop8: detected capacity change from 0 to 2048 [ 749.305445][ T9761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.274781][ T7599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.560803][ T9770] syzkaller0: entered promiscuous mode [ 751.579033][ T9770] syzkaller0: entered allmulticast mode [ 751.623406][ T9770] tipc: Enabled bearer , priority 0 [ 751.674044][ T9770] tipc: Resetting bearer [ 751.743308][ T9769] tipc: Resetting bearer [ 751.857804][ T9769] tipc: Disabling bearer [ 752.331185][ T9778] Console: switching to colour VGA+ 80x25 [ 752.660623][ T9780] loop7: detected capacity change from 0 to 64 [ 754.415394][ T9787] syzkaller0: entered promiscuous mode [ 754.423442][ T9787] syzkaller0: entered allmulticast mode [ 754.445529][ T9787] tipc: Enabled bearer , priority 0 [ 754.479116][ T9787] tipc: Resetting bearer [ 755.217974][ T9786] tipc: Resetting bearer [ 757.928476][ T9786] tipc: Disabling bearer [ 758.059819][ T5821] tipc: Node number set to 4251884175 [ 758.068346][ T9798] syz_tun: entered allmulticast mode [ 758.162170][ T9788] syz_tun: left allmulticast mode [ 758.265568][ T9797] syzkaller0: entered promiscuous mode [ 758.314929][ T9797] syzkaller0: entered allmulticast mode [ 760.539104][ T7994] Bluetooth: hci4: command 0x0406 tx timeout [ 761.706604][ T9819] kvm: kvm [9818]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 762.070986][ T9819] kvm: kvm [9818]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffffffff00000000 [ 766.348271][ T9857] random: crng reseeded on system resumption [ 769.131531][ T9865] xt_policy: too many policy elements [ 769.876130][ T9872] Console: switching to colour frame buffer device 128x48 [ 771.065826][ T9877] bridge_slave_0: left allmulticast mode [ 771.100653][ T9877] bridge_slave_0: left promiscuous mode [ 771.127018][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.222511][ T9877] bridge_slave_1: left allmulticast mode [ 771.228295][ T9877] bridge_slave_1: left promiscuous mode [ 771.387723][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.584446][ T9877] bond0: (slave bond_slave_0): Releasing backup interface [ 772.718481][ T9877] bond0: (slave bond_slave_1): Releasing backup interface [ 772.775713][ T9877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.800547][ T9877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.820905][ T9877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.830212][ T9877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.987483][ T9883] tipc: Enabling of bearer rejected, failed to enable media [ 773.626464][ T9893] syz.2.550: attempt to access beyond end of device [ 773.626464][ T9893] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 773.663560][ T9893] syz.2.550: attempt to access beyond end of device [ 773.663560][ T9893] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 773.680137][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 773.716348][ T9893] syz.2.550: attempt to access beyond end of device [ 773.716348][ T9893] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 773.748507][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 773.845945][ T9893] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 773.862919][ T9893] UDF-fs: Scanning with blocksize 512 failed [ 774.030814][ T9893] syz.2.550: attempt to access beyond end of device [ 774.030814][ T9893] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 774.202987][ T9893] syz.2.550: attempt to access beyond end of device [ 774.202987][ T9893] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 774.236883][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 774.247117][ T9893] syz.2.550: attempt to access beyond end of device [ 774.247117][ T9893] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 774.260338][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 774.270653][ T9893] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 774.278380][ T9893] UDF-fs: Scanning with blocksize 1024 failed [ 774.285580][ T9893] syz.2.550: attempt to access beyond end of device [ 774.285580][ T9893] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 774.299646][ T9893] syz.2.550: attempt to access beyond end of device [ 774.299646][ T9893] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 774.312821][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 774.349138][ T9893] syz.2.550: attempt to access beyond end of device [ 774.349138][ T9893] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 774.362662][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 774.373456][ T9893] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 774.406129][ T28] audit: type=1326 audit(1790318285.006:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.7.549" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb5719e159 code=0x0 [ 774.433810][ T9893] UDF-fs: Scanning with blocksize 2048 failed [ 774.435062][ T9893] syz.2.550: attempt to access beyond end of device [ 774.435062][ T9893] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 774.454250][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 774.479889][ T9893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 774.518883][ T9893] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 774.539878][ T9893] UDF-fs: Scanning with blocksize 4096 failed [ 774.546067][ T9893] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 775.608827][ T5828] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 776.131623][ T5828] usb 8-1: device descriptor read/all, error -71 [ 778.608822][ T7490] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 781.518859][ T7490] usb 3-1: device descriptor read/all, error -71 [ 782.982773][ T969] Process accounting resumed [ 792.910708][ T9971] md: couldn't update array info. -22 [ 792.948587][ T9971] md: loop0 has zero or unknown size, marking faulty! [ 792.975170][ T9971] md: md_import_device returned -22 [ 795.614571][ T9978] loop8: detected capacity change from 0 to 64 [ 795.847241][ T9985] loop4: detected capacity change from 0 to 2048 [ 797.760753][ T9985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.663014][ T9996] syzkaller0: entered promiscuous mode [ 799.757869][ T9996] syzkaller0: entered allmulticast mode [ 800.016208][ T9996] tipc: Started in network mode [ 800.188588][ T9996] tipc: Node identity aa209cc76f52, cluster identity 4711 [ 800.196869][ T9996] tipc: Enabled bearer , priority 0 [ 800.370936][T10003] syzkaller0: entered promiscuous mode [ 800.397062][T10003] syzkaller0: entered allmulticast mode [ 800.452456][T10006] tipc: Resetting bearer [ 800.518850][ T9994] tipc: Resetting bearer [ 800.666972][ T9994] tipc: Disabling bearer [ 800.727447][T10001] tipc: Enabled bearer , priority 0 [ 800.805072][T10009] tipc: Resetting bearer [ 800.854741][ T9997] tipc: Resetting bearer [ 801.043380][ T9997] tipc: Disabling bearer [ 802.592529][T10022] loop2: detected capacity change from 0 to 512 [ 802.629850][T10022] EXT4-fs: Ignoring removed i_version option [ 802.724214][T10024] md: couldn't update array info. -22 [ 802.734461][T10022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.763315][T10024] md: loop0 has zero or unknown size, marking faulty! [ 802.801367][T10024] md: md_import_device returned -22 [ 802.823483][T10022] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.590102][ T7995] Bluetooth: hci4: command 0x0406 tx timeout [ 804.651452][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.728273][T10039] loop4: detected capacity change from 0 to 64 [ 805.000599][T10045] loop2: detected capacity change from 0 to 2048 [ 806.477665][T10045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 810.007965][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.020219][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.233347][T10062] netlink: 48 bytes leftover after parsing attributes in process `syz.7.598'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.