last executing test programs: 7m28.483945701s ago: executing program 0 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) r3 = socket(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x3, @mcast2, 0x4}, 0x1c) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000c4c000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(0x0) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_setup(0x1195, 0x0) 7m27.468551596s ago: executing program 0 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='./bus\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 7m26.353028593s ago: executing program 0 (id=462): pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 7m25.223273331s ago: executing program 0 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x80, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_pages(0x0, 0x55, 0xffffffffffffffff, 0x0, 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x24, 0x26, 0x505, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x440c1}, 0x2400c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r4, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000400)={@remote, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) unshare(0x22020400) pipe2(&(0x7f0000000040), 0x0) 7m24.214505835s ago: executing program 0 (id=465): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000950000000000000000dbefe005177d77893fd7efffe0946197045dc11afa229fe77de06ed8"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r5, 0x100, 0x1) getdents64(r5, 0x0, 0x4f) 7m23.940190632s ago: executing program 0 (id=466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)="952bb3"}) ioctl$EVIOCGABS0(r3, 0x80184540, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x3, @win={{0x9, 0x2, 0x7, 0x8}, 0x0, 0x1, &(0x7f0000000040)={{0x3, 0x1, 0x4, 0x7}, &(0x7f0000000000)={{0x1a6, 0x1eb, 0x200, 0x10001}}}, 0x3, 0x0, 0x10}}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev}}}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0xde) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x401eb94) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0xf, 0x1f}}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000340)) 7m23.218710699s ago: executing program 32 (id=466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000200)="952bb3"}) ioctl$EVIOCGABS0(r3, 0x80184540, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x3, @win={{0x9, 0x2, 0x7, 0x8}, 0x0, 0x1, &(0x7f0000000040)={{0x3, 0x1, 0x4, 0x7}, &(0x7f0000000000)={{0x1a6, 0x1eb, 0x200, 0x10001}}}, 0x3, 0x0, 0x10}}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev}}}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0xde) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x401eb94) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0xf, 0x1f}}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000340)) 15.964952999s ago: executing program 1 (id=1341): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) close(r4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000dc0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfshat={'smackfshat', 0x3d, 'e{\x9b\xff\xd0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve\x0e\xc8\xbb\xf3\xa6\x87\xa7x\x13\xd3P\xfb.y0\x00'}}, {@uid_lt}, {@subj_user={'subj_user', 0x3d, '[@/\'+]'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x30, 0x64, 0x33, 0x62, 0x37, 0x4], 0x2d, [0x39, 0x61, 0x30, 0x65], 0x2d, [0x39, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x39, 0x33, 0x36], 0x2d, [0x65, 0x35, 0x63, 0x37, 0x38, 0x31, 0x0, 0x34]}}}, {@flag='mand'}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000e430ee98d6528f7d4231e6cdf6d35b67d8f2fe9282cfb1b2dc51934a9fc2143d52448bbab48d3cf07cdc461b1644843570aebfb3c8c84ea1cf8026612b268cc833e54fd72fbbc951a1bc3dbd", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) 14.656443122s ago: executing program 5 (id=1355): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000010000000000000010000000000000001001000000"], 0x28}, 0x0) sendmsg(r0, 0x0, 0x0) 14.415739807s ago: executing program 1 (id=1348): pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r4, &(0x7f0000000300)='1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 14.382775698s ago: executing program 5 (id=1349): pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r4, &(0x7f0000000300)='1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 11.984196127s ago: executing program 5 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='./bus\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 11.576944697s ago: executing program 1 (id=1353): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='./bus\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 11.566961617s ago: executing program 3 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='./bus\x00') r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 10.838250455s ago: executing program 4 (id=1357): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 10.529146703s ago: executing program 3 (id=1358): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$rds(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x15, 0x81, 0x2e}, {@private=0xa010100, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d56}}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 9.289467322s ago: executing program 2 (id=1359): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000000000001400000000000000000001000100000001000000000000005000000000000000000000000700000000070fbdac1414bb00000000e0000001442c1cd30a01010200000008ac1414aa0000000aac1e0101ffffe000ac1e01010000000dffffffff8000000094040800e022483e99"], 0x80}, 0x44000) socket$inet6_udp(0xa, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x8, 0x2003) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) sendmsg$inet(r0, 0x0, 0x34004000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/ubi/version\x00', 0x0, 0x0) 9.289228082s ago: executing program 3 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x10000, 0x2) flock(r3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f00008ab000/0x4000)=nil, 0x4000, 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) listen(r5, 0x5) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000010000000000000010000000000000001001000000"], 0x28}, 0x0) 9.288996282s ago: executing program 4 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x100) setxattr$trusted_overlay_opaque(&(0x7f0000000dc0)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2b, 0x1, 0x0) io_uring_setup(0x664b, &(0x7f0000001240)) syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./file1\x00', 0x0, &(0x7f0000001340), 0x1, 0x50f, &(0x7f0000001380)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001a80), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) keyctl$instantiate(0xc, 0x0, &(0x7f00000011c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0xa) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000d40)={0x3, [0x7, 0xd, 0x7]}, &(0x7f0000000d80)=0xa) sendmmsg$unix(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@file={0x1, './file1/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xa4}], 0x2, 0x20000080) 7.610791614s ago: executing program 3 (id=1362): pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r4, &(0x7f0000000300)='1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 7.607464014s ago: executing program 4 (id=1363): pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r4, &(0x7f0000000300)='1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 6.439561562s ago: executing program 4 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x10000, 0x2) flock(r3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f00008ab000/0x4000)=nil, 0x4000, 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000010000000000000010000000000000001001000000"], 0x28}, 0x0) sendmsg(r5, 0x0, 0x0) 6.332266205s ago: executing program 2 (id=1365): pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r4, &(0x7f0000000300)='1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 5.557379034s ago: executing program 5 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x10000, 0x2) flock(r3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) listen(r5, 0x5) 5.206645762s ago: executing program 4 (id=1367): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fc) unshare(0x64020600) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x80000001, @remote, 0x1}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x1) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xc8}, 0x0, 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x3, 0x0, 0x0}}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) wait4(r8, 0x0, 0x8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, 0x0, 0x24000840) syz_open_procfs(0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) 4.969706628s ago: executing program 2 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='./bus\x00') r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 4.170716738s ago: executing program 5 (id=1369): syz_open_dev$loop(0x0, 0xffffffffffff415a, 0x14080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x26) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) inotify_init1(0x0) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x0, 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x8112) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) prctl$PR_GET_IO_FLUSHER(0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff004) close_range(r0, r3, 0x2) 4.166440218s ago: executing program 1 (id=1370): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, r0, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, r2) signalfd(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.08037042s ago: executing program 3 (id=1371): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x2, &(0x7f0000000040), &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10, &(0x7f0000000540)=0x5, 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) accept4$unix(r6, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) fcntl$setstatus(r6, 0x4, 0x400) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 3.970116103s ago: executing program 2 (id=1372): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008a}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x9070) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @remote}}) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2.181864216s ago: executing program 5 (id=1373): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, 0x0, 0x40814) sendmsg$nl_route(r1, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x2) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.180314266s ago: executing program 3 (id=1374): unshare(0x22020600) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000080)='dctcp', 0x1000, &(0x7f00000001c0)={@align=0xe21, {0xfc, 0x40, 0x7, 0x7fffffff}}, 0xa948, &(0x7f0000000200), &(0x7f0000000240)=0x39fb}, {[0x152, 0x8, 0xffffffff, 0x4]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x40100) read(r2, &(0x7f0000000040)=""/21, 0x15) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff03, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2.175237076s ago: executing program 2 (id=1375): pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r4, &(0x7f0000000300)='1', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 2.01595131s ago: executing program 4 (id=1376): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x5, 0x6}) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x45032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x121082, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x149}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0xf, 0x60200) close(0xffffffffffffffff) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000640)={{0xe, 0x2, 0xd, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0xb, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x402, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x100000001, 0x2, 0x2, 0x8001, 0x1, 0x3, 0x8, 0x15, 0x8001, 0x8, 0x3, 0x1, 0x1, 0x4, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x8000000000007ff, 0x4, 0x81, 0x50a, 0xfffffffffffffffc, 0x6, 0x802, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x5, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) listen(r0, 0xfffd) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 1.725750757s ago: executing program 1 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x10000, 0x2) flock(r3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f00008ab000/0x4000)=nil, 0x4000, 0xe) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000010000000000000010000000000000001001000000"], 0x28}, 0x0) sendmsg(r5, 0x0, 0x0) 949.144316ms ago: executing program 2 (id=1378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xd1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {0x4}, {0x20}, {}, {}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {0x0, 0x1a, 0x40}]}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000040)=0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r9, 0x1, 0xfffffffe, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r11, 0x5b03, 0x0) 0s ago: executing program 1 (id=1379): r0 = socket$inet6(0xa, 0x3, 0x7) syz_open_dev$video4linux(0x0, 0x5, 0x123040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_uring_setup(0x12ec, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0xffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x840, 0x4) kernel console output (not intermixed with test programs): [ T4279] device veth1_macvtap entered promiscuous mode [ 91.348971][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.369509][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.378593][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.388062][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.406751][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.418357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.433330][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.460073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.499490][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.524724][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.546642][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.572910][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.594886][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.620625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.634548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.665950][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.698412][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.708412][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.719374][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.744934][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.771445][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.791187][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.817723][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.828120][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.840623][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.851555][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.924033][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.928329][ T14] cfg80211: failed to load regulatory.db [ 91.936006][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.957988][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.973805][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.994215][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.041617][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.056188][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.129152][ T4414] Cannot find set identified by id 0 to match [ 92.234555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.755610][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.894122][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.911703][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.922217][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.052169][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.061298][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.081592][ T4273] device veth0_vlan entered promiscuous mode [ 93.098725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.116442][ T4418] loop2: detected capacity change from 0 to 128 [ 93.133732][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.141662][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.161503][ T4273] device veth1_vlan entered promiscuous mode [ 93.168048][ T4418] ======================================================= [ 93.168048][ T4418] WARNING: The mand mount option has been deprecated and [ 93.168048][ T4418] and is ignored by this kernel. Remove the mand [ 93.168048][ T4418] option from the mount to silence this warning. [ 93.168048][ T4418] ======================================================= [ 93.228327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.229794][ T4418] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.249228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.270457][ T4418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.274943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.303734][ T4418] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.385679][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.397782][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.562251][ T4422] syz.1.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.642067][ T4285] device veth0_vlan entered promiscuous mode [ 93.673441][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.686457][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.748536][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.219047][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.256001][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.292342][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.321950][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.497640][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 94.510694][ T4285] device veth1_vlan entered promiscuous mode [ 94.545882][ T4273] device veth0_macvtap entered promiscuous mode [ 94.614467][ T4273] device veth1_macvtap entered promiscuous mode [ 94.664766][ T4422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.692648][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.712616][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.754014][ T4285] device veth0_macvtap entered promiscuous mode [ 94.804588][ T4432] loop2: detected capacity change from 0 to 512 [ 94.882064][ T4432] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 94.997939][ T4285] device veth1_macvtap entered promiscuous mode [ 95.015818][ T4432] EXT4-fs (loop2): 1 truncate cleaned up [ 95.021692][ T4432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.535745][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.556022][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.765633][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.806325][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.818774][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.829737][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.840066][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.977234][ T27] audit: type=1800 audit(1791990743.883:2): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 96.139759][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.152526][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.193424][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.210238][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.220791][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.240116][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.252284][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.271031][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.281520][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.300291][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.319710][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.330413][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.349756][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.368881][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.381365][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.398487][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.411306][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.430595][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.455578][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.471801][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.489977][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.500086][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.648437][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.677312][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 96.687027][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.728131][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.744609][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.760048][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.772422][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.797810][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.816071][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.828777][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.845530][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.858133][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.876513][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.908813][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.921319][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.940254][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.817741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.833506][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.920240][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.939789][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957257][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.985648][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.000600][ T4455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 98.007471][ T4455] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.052890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 98.122966][ T4454] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 98.129590][ T4454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.179330][ T4455] vhci_hcd vhci_hcd.0: Device attached [ 98.191424][ T4454] vhci_hcd vhci_hcd.0: Device attached [ 98.212997][ T4459] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 98.219615][ T4459] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.275830][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.296280][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.315040][ T4463] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(5) [ 98.321665][ T4463] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.330580][ T4454] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(8) [ 98.337270][ T4454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.345688][ T4463] vhci_hcd vhci_hcd.0: Device attached [ 98.359199][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.389659][ T4459] vhci_hcd vhci_hcd.0: Device attached [ 98.433042][ T14] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 98.572892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.582869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 98.592877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 98.602865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 98.612872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 98.622882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 98.632870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 98.642880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 98.652861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 100.164473][ T4454] vhci_hcd vhci_hcd.0: Device attached [ 100.376440][ T4351] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.406455][ T4455] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 100.413193][ T4455] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.453064][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.455784][ T4454] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(11) [ 100.468483][ T4454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.475483][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.503371][ T4455] vhci_hcd vhci_hcd.0: Device attached [ 100.529585][ T4454] vhci_hcd vhci_hcd.0: Device attached [ 100.587732][ T4459] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 100.749895][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.793611][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.906905][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.005117][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.373150][ T4472] vhci_hcd: connection closed [ 101.375484][ T29] vhci_hcd: stop threads [ 101.390391][ T4474] vhci_hcd: connection closed [ 101.390728][ T4465] vhci_hcd: connection closed [ 101.409093][ T29] vhci_hcd: release socket [ 101.424375][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.433158][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.453148][ T4456] vhci_hcd: connection reset by peer [ 101.458879][ T4457] vhci_hcd: connection closed [ 101.459099][ T4461] vhci_hcd: connection closed [ 101.464155][ T4464] vhci_hcd: connection closed [ 101.500189][ T29] vhci_hcd: disconnect device [ 101.554070][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.572417][ T29] vhci_hcd: stop threads [ 101.620282][ T29] vhci_hcd: release socket [ 101.643163][ T29] vhci_hcd: disconnect device [ 101.662941][ T29] vhci_hcd: stop threads [ 101.667250][ T29] vhci_hcd: release socket [ 101.849497][ T29] vhci_hcd: disconnect device [ 101.875687][ T29] vhci_hcd: stop threads [ 101.914121][ T29] vhci_hcd: release socket [ 101.949470][ T29] vhci_hcd: disconnect device [ 102.533043][ T4486] xt_CT: No such helper "pptp" [ 102.553480][ T29] vhci_hcd: stop threads [ 102.593540][ T29] vhci_hcd: release socket [ 102.628761][ T29] vhci_hcd: disconnect device [ 103.962865][ C1] sched: RT throttling activated [ 104.252892][ T4458] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 104.253709][ T29] vhci_hcd: stop threads [ 104.391669][ T29] vhci_hcd: release socket [ 104.415939][ T29] vhci_hcd: disconnect device [ 104.421887][ T29] vhci_hcd: stop threads [ 104.458703][ T29] vhci_hcd: release socket [ 104.503055][ T29] vhci_hcd: disconnect device [ 104.584951][ T14] vhci_hcd: vhci_device speed not set [ 106.251741][ T4528] loop3: detected capacity change from 0 to 512 [ 106.280862][ T4529] loop2: detected capacity change from 0 to 512 [ 106.320628][ T4528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.520209][ T4534] sctp: [Deprecated]: syz.1.23 (pid 4534) Use of int in max_burst socket option. [ 106.520209][ T4534] Use struct sctp_assoc_value instead [ 106.683443][ T4528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.753966][ T4529] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 106.883786][ T4528] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.051490][ T4529] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.22: invalid indirect mapped block 256 (level 1) [ 107.613391][ T4529] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.22: invalid indirect mapped block 2683928664 (level 1) [ 107.677105][ T4529] EXT4-fs (loop2): 1 truncate cleaned up [ 107.704371][ T4529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.965849][ T4544] ip_tables: iptables: counters copy to user failed while replacing table [ 109.145108][ T27] audit: type=1800 audit(1791990757.053:3): pid=4543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 109.184749][ T4544] ip_tables: iptables: counters copy to user failed while replacing table [ 109.431542][ T4551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15'. [ 109.441563][ T4551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15'. [ 109.547573][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 109.581794][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 109.990670][ T27] audit: type=1800 audit(1791990757.053:4): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 110.302261][ T4557] loop2: detected capacity change from 0 to 128 [ 110.409879][ T4557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.354863][ T4557] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.470632][ T4573] batman_adv: batadv0: Adding interface: dummy0 [ 113.523064][ T4573] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.551104][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 113.553930][ T4573] batman_adv: batadv0: Interface activated: dummy0 [ 113.801441][ T4582] batadv0: mtu less than device minimum [ 113.813844][ T4573] Set syz0 is full, maxelem 0 reached [ 113.817609][ T4582] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.831646][ T4582] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.843534][ T4582] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.855502][ T4582] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.867291][ T4582] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.879068][ T4582] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.979470][ T4599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 116.793156][ T4599] device veth0_to_bond entered promiscuous mode [ 117.201755][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 117.214685][ T4599] syz.0.35 (4599) used greatest stack depth: 20400 bytes left [ 117.222718][ T4291] CPU: 1 PID: 4291 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 117.230344][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.240464][ T4291] Workqueue: hci1 hci_rx_work [ 117.245385][ T4291] Call Trace: [ 117.248936][ T4291] [ 117.253857][ T4291] dump_stack_lvl+0x188/0x24e [ 117.258637][ T4291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 117.264436][ T4291] ? show_regs_print_info+0x12/0x12 [ 117.269704][ T4291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 117.275438][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 117.280613][ T4291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 117.286297][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 117.291036][ T4291] ? kobject_add_internal+0x602/0xca0 [ 117.296482][ T4291] kobject_add_internal+0x617/0xca0 [ 117.301772][ T4291] kobject_add+0x160/0x230 [ 117.306254][ T4291] ? kobject_init+0x1c0/0x1c0 [ 117.311028][ T4291] ? __raw_spin_lock_init+0x41/0x100 [ 117.317060][ T4291] ? klist_children_get+0x50/0x50 [ 117.322222][ T4291] ? get_device_parent+0x121/0x3e0 [ 117.327396][ T4291] device_add+0x470/0x1050 [ 117.331906][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 117.336907][ T4291] le_conn_complete_evt+0xf93/0x15c0 [ 117.342340][ T4291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 117.348079][ T4291] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 117.354413][ T4291] ? __kasan_check_write+0x2/0x10 [ 117.359526][ T4291] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 117.365222][ T4291] ? mutex_unlock+0x10/0x10 [ 117.369782][ T4291] ? skb_pull_data+0xec/0x1f0 [ 117.374523][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 117.380138][ T4291] ? hci_remote_host_features_evt+0x230/0x230 [ 117.386291][ T4291] hci_event_packet+0x7b3/0x1290 [ 117.391398][ T4291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 117.397110][ T4291] ? bis_list+0x280/0x280 [ 117.401530][ T4291] ? kcov_remote_start+0x1b3/0x810 [ 117.406763][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 117.412038][ T4291] hci_rx_work+0x3eb/0xd40 [ 117.416523][ T4291] ? process_one_work+0x7b4/0x1160 [ 117.421690][ T4291] process_one_work+0x8ab/0x1160 [ 117.426701][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 117.432396][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.437473][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 117.443064][ T4291] ? wq_worker_running+0x97/0x190 [ 117.448141][ T4291] worker_thread+0xaf5/0x12a0 [ 117.452895][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.458850][ T4291] kthread+0x29d/0x330 [ 117.462973][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 117.468083][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 117.472739][ T4291] ret_from_fork+0x1f/0x30 [ 117.477243][ T4291] [ 117.543049][ T4291] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.625531][ T4291] Bluetooth: hci1: failed to register connection device [ 117.946860][ T4619] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 119.202115][ T4629] loop4: detected capacity change from 0 to 128 [ 119.866668][ T4635] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 119.895528][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.200592][ T4637] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4637] [ 123.868081][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 124.843440][ T4657] comedi comedi3: board detection failed [ 124.980615][ T4666] loop3: detected capacity change from 0 to 164 [ 125.027756][ T4666] nfs4: Unexpected value for 'acl' [ 125.053506][ T4666] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 125.403391][ T4663] bridge0: port 3(netdevsim0) entered blocking state [ 125.410519][ T4663] bridge0: port 3(netdevsim0) entered disabled state [ 125.419090][ T4663] device netdevsim0 entered promiscuous mode [ 125.426462][ T4663] bridge0: port 3(netdevsim0) entered blocking state [ 125.433573][ T4663] bridge0: port 3(netdevsim0) entered forwarding state [ 126.135290][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 126.154228][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 126.165426][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 126.176686][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 126.187016][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 126.982584][ T4681] Zero length message leads to an empty skb [ 127.671734][ T4701] tmpfs: Unknown parameter 'quota' [ 128.628436][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.693362][ T4686] net_ratelimit: 13 callbacks suppressed [ 128.693381][ T4686] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 128.799556][ T4706] device syzkaller0 entered promiscuous mode [ 128.879063][ T4706] tipc: Started in network mode [ 128.902994][ T4706] tipc: Node identity beda975c2962, cluster identity 4711 [ 128.912072][ T4706] tipc: Enabled bearer , priority 0 [ 129.055032][ T4706] tipc: Resetting bearer [ 129.093953][ T4705] tipc: Resetting bearer [ 129.235802][ T4705] tipc: Disabling bearer [ 129.341951][ T4710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'. [ 130.881721][ T4729] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 131.779825][ T4733] using random self ethernet address [ 131.803118][ T4733] using random host ethernet address [ 131.854385][ T4738] loop4: detected capacity change from 0 to 1024 [ 131.909152][ T4733] using random self ethernet address [ 131.941763][ T4733] using random host ethernet address [ 131.980223][ T4738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.889384][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.897850][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.195679][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 134.307065][ T4759] loop3: detected capacity change from 0 to 4096 [ 134.475262][ T4766] netlink: 76 bytes leftover after parsing attributes in process `syz.4.66'. [ 135.593302][ T4773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.242315][ T4772] loop4: detected capacity change from 0 to 128 [ 136.326484][ T4772] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.952208][ T4812] Process accounting resumed [ 143.863590][ T4834] loop3: detected capacity change from 0 to 2048 [ 144.072315][ T4837] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 144.188694][ T4834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.405235][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 145.690970][ T27] audit: type=1800 audit(1791990793.593:5): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.88" name="idProduct" dev="configfs" ino=35322 res=0 errno=0 [ 147.415636][ T27] audit: type=1800 audit(1791990795.323:6): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.88" name="UDC" dev="configfs" ino=35325 res=0 errno=0 [ 149.051295][ T4856] Config c/1 of g1 needs at least one function. [ 149.533208][ T4856] udc dummy_udc.0: failed to start g1: -22 [ 149.912952][ T4856] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 149.920927][ T4866] batman_adv: batadv0: Adding interface: ip6gretap1 [ 149.935565][ T4872] using random self ethernet address [ 149.941116][ T4872] using random host ethernet address [ 149.953143][ T4866] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.008361][ T4872] netlink: 'syz.3.90': attribute type 11 has an invalid length. [ 150.113526][ T4856] UDC core: g1: couldn't find an available UDC or it's busy [ 150.244685][ T4866] batman_adv: batadv0: Interface activated: ip6gretap1 [ 151.489166][ T4885] xt_policy: output policy not valid in PREROUTING and INPUT [ 151.958299][ T4877] device wlan0 entered promiscuous mode [ 152.990348][ T4898] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4898] [ 154.066437][ T4914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 155.049479][ T4919] capability: warning: `syz.0.93' uses deprecated v2 capabilities in a way that may be insecure [ 155.465389][ T4901] sctp: failed to load transform for md5: -2 [ 156.877728][ T4931] futex_wake_op: syz.3.99 tries to shift op by 144; fix this program [ 157.334264][ T4933] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 157.362504][ T4933] CIFS: Attempting to mount \\127.0.0.1\share [ 157.386435][ T4933] CIFS: VFS: Error connecting to socket. Aborting operation. [ 157.396122][ T4933] CIFS: VFS: cifs_mount failed w/return code = -111 [ 158.054094][ T4943] atomic_op ffff88807898f998 conn xmit_atomic 0000000000000000 [ 161.776695][ T4977] loop3: detected capacity change from 0 to 4096 [ 161.882325][ T4977] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.946925][ T4980] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 161.990951][ T4966] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222. [ 163.011881][ T4990] mmap: syz.3.109 (4990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.095272][ T4285] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 168.076424][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 168.255086][ T5036] Bluetooth: MGMT ver 1.22 [ 168.309872][ T5039] tipc: Started in network mode [ 168.314981][ T5039] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 168.322560][ T5039] tipc: Enabled bearer , priority 0 [ 169.345578][ T4351] tipc: Node number set to 43690 [ 172.168379][ T5087] loop4: detected capacity change from 0 to 128 [ 175.561262][ T5113] loop3: detected capacity change from 0 to 1024 [ 175.578978][ T5113] ext4: Unknown parameter 'subj_role' [ 179.612739][ T5139] loop4: detected capacity change from 0 to 32768 [ 179.660907][ T5139] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.140 (5139) [ 179.704559][ T5139] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 179.715505][ T5139] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 179.724676][ T5139] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 179.734679][ T5139] BTRFS info (device loop4): use zstd compression, level 3 [ 179.741943][ T5139] BTRFS info (device loop4): force clearing of disk cache [ 179.750115][ T5139] BTRFS info (device loop4): enabling disk space caching [ 179.757275][ T5139] BTRFS info (device loop4): disk space caching is enabled [ 179.830489][ T5143] loop3: detected capacity change from 0 to 2048 [ 180.659413][ T5156] x_tables: eb_tables: snat target: used from hooks OUTPUT, but only usable from POSTROUTING [ 181.641116][ T5143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.338934][ T5139] BTRFS info (device loop4): enabling ssd optimizations [ 182.421181][ T5139] BTRFS info (device loop4): rebuilding free space tree [ 182.464370][ T5139] BTRFS info (device loop4): disabling free space tree [ 182.471505][ T5139] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.481648][ T5139] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.605375][ T4273] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 182.819597][ T5114] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop4 scanned by udevd (5114) [ 183.993567][ T5177] process 'syz.3.147' launched '/dev/fd/5' with NULL argv: empty string added [ 185.312605][ T5191] netlink: 'syz.0.148': attribute type 2 has an invalid length. [ 185.320843][ T5191] netlink: 'syz.0.148': attribute type 2 has an invalid length. [ 185.329999][ T5191] netlink: 'syz.0.148': attribute type 2 has an invalid length. [ 185.337731][ T5191] netlink: 'syz.0.148': attribute type 2 has an invalid length. [ 188.312064][ T5233] loop4: detected capacity change from 0 to 256 [ 189.443110][ T5257] Illegal XDP return value 411812348 on prog (id 17) dev syz_tun, expect packet loss! [ 190.258164][ T5261] TCP: TCP_TX_DELAY enabled [ 193.791677][ T5279] kernel profiling enabled (shift: 23) [ 194.221285][ T5300] netlink: 64 bytes leftover after parsing attributes in process `syz.1.167'. [ 194.328254][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335927][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.755203][ T5321] loop3: detected capacity change from 0 to 1024 [ 197.503159][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.513164][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.520671][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.221689][ T4290] Bluetooth: hci1: command 0x040a tx timeout [ 201.575778][ T4359] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 205.472940][ T4359] usb 1-1: device descriptor read/all, error -71 [ 205.484701][ T5388] loop3: detected capacity change from 0 to 1024 [ 205.512571][ T5388] hfsplus: unable to parse mount options [ 206.643700][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 206.650425][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 206.656605][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 206.662658][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 206.669207][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 207.936128][ T5418] tipc: Started in network mode [ 207.941237][ T5418] tipc: Node identity ac14140f, cluster identity 4711 [ 207.951162][ T5418] tipc: New replicast peer: 255.255.255.255 [ 207.960057][ T5418] tipc: Enabled bearer , priority 10 [ 208.074337][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 209.022921][ T4350] tipc: Node number set to 2886997007 [ 215.444402][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 218.143724][ T5498] loop4: detected capacity change from 0 to 8192 [ 218.208384][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 218.229448][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.239623][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.247350][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.258029][ T5511] device bridge_slave_0 left promiscuous mode [ 218.290136][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.290199][ T5498] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.498141][ T5498] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 219.185458][ T5498] REISERFS (device loop4): using journaled data mode [ 219.265205][ T5498] reiserfs: using flush barriers [ 219.300738][ T5511] device bridge_slave_1 left promiscuous mode [ 219.330263][ T5498] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.456831][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.488475][ T5498] REISERFS (device loop4): checking transaction log (loop4) [ 219.547910][ T5498] REISERFS (device loop4): Using tea hash to sort names [ 219.587172][ T5511] bond0: (slave bond_slave_0): Releasing backup interface [ 219.598711][ T5498] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 219.656701][ T5498] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 219.728393][ T5511] bond0: (slave bond_slave_1): Releasing backup interface [ 220.106011][ T5511] team0: Port device team_slave_0 removed [ 220.137755][ T5511] team0: Port device team_slave_1 removed [ 220.154556][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.164274][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.186642][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.203980][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.220928][ T5539] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 220.227514][ T5539] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.237863][ T5539] vhci_hcd vhci_hcd.0: Device attached [ 220.250062][ T5539] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 220.256647][ T5539] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.267101][ T5511] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 220.274527][ T5511] batman_adv: batadv0: Removing interface: ip6gretap1 [ 220.281846][ T5539] vhci_hcd vhci_hcd.0: Device attached [ 221.243864][ T5550] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 221.250565][ T5550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.303443][ T5539] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 221.310032][ T5539] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.342808][ T5550] vhci_hcd vhci_hcd.0: Device attached [ 221.589670][ T3653] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 221.815175][ T5539] vhci_hcd vhci_hcd.0: Device attached [ 221.906575][ T5556] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(9) [ 221.913211][ T5556] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.974124][ T5556] vhci_hcd vhci_hcd.0: Device attached [ 221.983233][ T5539] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 221.989909][ T5539] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.018816][ T5539] vhci_hcd vhci_hcd.0: Device attached [ 222.065935][ T5550] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(17) [ 222.072622][ T5550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.771400][ T5571] loop3: detected capacity change from 0 to 2048 [ 222.824448][ T5571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.849170][ T5539] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 222.874756][ T5550] vhci_hcd vhci_hcd.0: Device attached [ 223.015868][ T5565] vhci_hcd: connection closed [ 223.016313][ T4405] vhci_hcd: stop threads [ 223.029374][ T4405] vhci_hcd: release socket [ 223.038703][ T4405] vhci_hcd: disconnect device [ 223.046090][ T5559] vhci_hcd: connection closed [ 223.046322][ T5557] vhci_hcd: connection closed [ 223.073034][ T5546] vhci_hcd: connection closed [ 223.113151][ T5551] vhci_hcd: connection closed [ 223.119461][ T5543] vhci_hcd: connection closed [ 223.126455][ T5540] vhci_hcd: connection reset by peer [ 223.143045][ T4405] vhci_hcd: stop threads [ 223.147353][ T4405] vhci_hcd: release socket [ 223.174428][ T4405] vhci_hcd: disconnect device [ 223.238436][ T4405] vhci_hcd: stop threads [ 223.443356][ T4405] vhci_hcd: release socket [ 223.963303][ T4405] vhci_hcd: disconnect device [ 223.979004][ T4405] vhci_hcd: stop threads [ 223.991086][ T4405] vhci_hcd: release socket [ 224.014587][ T4405] vhci_hcd: disconnect device [ 224.179409][ T4405] vhci_hcd: stop threads [ 224.276448][ T4405] vhci_hcd: release socket [ 224.379285][ T4405] vhci_hcd: disconnect device [ 224.490299][ T4405] vhci_hcd: stop threads [ 224.594732][ T4405] vhci_hcd: release socket [ 224.688338][ T4405] vhci_hcd: disconnect device [ 224.791232][ T4405] vhci_hcd: stop threads [ 225.011180][ T4405] vhci_hcd: release socket [ 225.110406][ T4405] vhci_hcd: disconnect device [ 225.679741][ T5593] loop3: detected capacity change from 0 to 1024 [ 225.868524][ T5593] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 225.902291][ T5593] EXT4-fs (loop3): barriers disabled [ 225.907760][ T5593] JBD2: no valid journal superblock found [ 225.953852][ T5593] EXT4-fs (loop3): error loading journal [ 225.962277][ T5583] Process accounting resumed [ 226.117396][ T4350] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 226.386169][ T4350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.432550][ T4350] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 226.964906][ T3653] vhci_hcd: vhci_device speed not set [ 227.089563][ T4350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 227.100954][ T4350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64 [ 227.112012][ T4350] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.168826][ T4350] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 227.208841][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.252580][ T5621] loop3: detected capacity change from 0 to 128 [ 227.262625][ T4350] usb 5-1: Product: syz [ 227.279534][ T4350] usb 5-1: Manufacturer: syz [ 227.299877][ T4350] usb 5-1: SerialNumber: syz [ 227.337550][ T5621] EXT4-fs (loop3): Test dummy encryption mode enabled [ 227.433672][ T5621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.443730][ T4350] usb 5-1: config 0 descriptor?? [ 227.453321][ T5595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.461056][ T5595] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.506183][ T4351] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 227.524757][ T5621] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.541722][ T4350] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 227.693454][ T4351] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 227.716129][ T4351] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 227.752903][ T4351] usb 2-1: can't read configurations, error -61 [ 227.804307][ T5595] netlink: 168 bytes leftover after parsing attributes in process `syz.4.224'. [ 227.845278][ T5595] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 227.911134][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.923130][ T4351] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 227.947011][ T5595] bond0: (slave team0): Enslaving as an active interface with an up link [ 228.066215][ T5185] usb 5-1: USB disconnect, device number 2 [ 228.114317][ T4351] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 228.135211][ T4351] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 228.163936][ T4351] usb 2-1: can't read configurations, error -61 [ 228.180665][ T4351] usb usb2-port1: attempt power cycle [ 228.304177][ T5617] 9pnet_fd: Insufficient options for proto=fd [ 228.499453][ T5621] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 228.613966][ T4351] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 228.684198][ T4351] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 228.721071][ T4351] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 228.760090][ T4351] usb 2-1: can't read configurations, error -61 [ 230.012691][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 230.022830][ T4351] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 230.189900][ T4351] usb 2-1: device descriptor read/8, error -71 [ 230.549762][ T4351] usb usb2-port1: unable to enumerate USB device [ 233.681275][ T5680] Bluetooth: ISO socket layer initialized [ 233.687312][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 235.096445][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'. [ 235.301430][ T5669] Process accounting resumed [ 239.442866][ T4288] Bluetooth: hci4: command 0x0405 tx timeout [ 241.827146][ T5739] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 242.105012][ T5743] loop4: detected capacity change from 0 to 2048 [ 242.159591][ T5743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.809498][ T4552] tipc: Resetting bearer [ 243.919292][ T4552] tipc: Disabling bearer [ 244.371625][ T5744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 244.519368][ T47] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.189506][ T47] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.778318][ T47] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.918749][ T47] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.065649][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.081984][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.090711][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.110823][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.130223][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.137817][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.309222][ T5795] loop3: detected capacity change from 0 to 1024 [ 246.336421][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.453369][ T47] tipc: Left network mode [ 246.685795][ T5795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 248.303081][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 248.349058][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 248.668274][ T5820] sctp: [Deprecated]: syz.3.274 (pid 5820) Use of int in max_burst socket option. [ 248.668274][ T5820] Use struct sctp_assoc_value instead [ 249.158400][ T5820] device wlan0 left promiscuous mode [ 250.512987][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 251.206940][ T5840] comedi comedi3: board detection failed [ 251.279717][ T47] IPVS: stopping master sync thread 4980 ... [ 251.296723][ T5841] bridge0: port 3(netdevsim0) entered blocking state [ 251.303841][ T5841] bridge0: port 3(netdevsim0) entered disabled state [ 251.320404][ T5841] device netdevsim0 entered promiscuous mode [ 251.330691][ T5841] bridge0: port 3(netdevsim0) entered blocking state [ 251.337616][ T5841] bridge0: port 3(netdevsim0) entered forwarding state [ 251.474716][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 252.562870][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 252.707573][ T5860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.643839][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 254.844823][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.852036][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.917534][ T5790] device bridge_slave_0 entered promiscuous mode [ 254.957605][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.978429][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.053997][ T5790] device bridge_slave_1 entered promiscuous mode [ 255.779367][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789086][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.455757][ T47] device hsr_slave_0 left promiscuous mode [ 256.923654][ T5889] CIFS: Attempting to mount \\127.0.0.1\share [ 256.931790][ T47] device hsr_slave_1 left promiscuous mode [ 256.938905][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.952607][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.967641][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.975617][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.984825][ T47] device bridge_slave_1 left promiscuous mode [ 256.998343][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.079118][ T5889] CIFS: VFS: Error connecting to socket. Aborting operation. [ 257.086706][ T5889] CIFS: VFS: cifs_mount failed w/return code = -4 [ 257.203994][ T47] device bridge_slave_0 left promiscuous mode [ 257.210377][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.282887][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 257.311339][ T47] device veth1_macvtap left promiscuous mode [ 257.338937][ T47] device veth0_macvtap left promiscuous mode [ 257.362585][ T47] device veth1_vlan left promiscuous mode [ 257.376572][ T47] device veth0_vlan left promiscuous mode [ 258.234904][ T47] team0 (unregistering): Port device team_slave_1 removed [ 258.288260][ T47] team0 (unregistering): Port device team_slave_0 removed [ 258.335085][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.381595][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.670871][ T47] bond0 (unregistering): (slave team0): Releasing backup interface [ 258.705949][ T47] bond0 (unregistering): Released all slaves [ 258.760920][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.781546][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.877480][ T5790] team0: Port device team_slave_0 added [ 258.923450][ T5790] team0: Port device team_slave_1 added [ 258.998962][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.014658][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.059508][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.131192][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.157278][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.348109][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.593402][ T4350] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 259.925617][ T4350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.052197][ T5790] device hsr_slave_0 entered promiscuous mode [ 260.089449][ T4350] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 260.102840][ T4350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 260.114191][ T4350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64 [ 260.125267][ T4350] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.142593][ T4350] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 260.152538][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.161742][ T4350] usb 3-1: Product: syz [ 260.166324][ T4350] usb 3-1: Manufacturer: syz [ 260.170980][ T4350] usb 3-1: SerialNumber: syz [ 260.177471][ T5790] device hsr_slave_1 entered promiscuous mode [ 260.193532][ T4350] usb 3-1: config 0 descriptor?? [ 260.201167][ T5912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.210883][ T5912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.223332][ T4350] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 260.233037][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.240655][ T5790] Cannot create hsr debugfs directory [ 260.713636][ T5912] netlink: 168 bytes leftover after parsing attributes in process `syz.2.292'. [ 260.862901][ T5912] netlink: 'syz.2.292': attribute type 10 has an invalid length. [ 261.518880][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.601099][ T5912] bond0: (slave team0): Enslaving as an active interface with an up link [ 261.698088][ T3653] usb 3-1: USB disconnect, device number 2 [ 261.865376][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 262.651877][ T5946] loop3: detected capacity change from 0 to 128 [ 263.048692][ T5953] netlink: 'syz.0.298': attribute type 11 has an invalid length. [ 263.837253][ T5954] nfs4: Unexpected value for 'acl' [ 264.408213][ T5962] device wlan0 entered promiscuous mode [ 265.942820][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 265.952847][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 265.960450][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.970580][ T4286] Workqueue: hci4 hci_rx_work [ 265.975337][ T4286] Call Trace: [ 265.978668][ T4286] [ 265.981646][ T4286] dump_stack_lvl+0x188/0x24e [ 265.986396][ T4286] ? show_regs_print_info+0x12/0x12 [ 265.991665][ T4286] ? load_image+0x410/0x410 [ 265.996242][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 266.001419][ T4286] ? __lock_acquire+0x7ea0/0x7ea0 [ 266.006531][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 266.011276][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 266.016537][ T4286] kobject_add_internal+0x617/0xca0 [ 266.022078][ T4286] kobject_add+0x160/0x230 [ 266.026578][ T4286] ? kobject_init+0x1c0/0x1c0 [ 266.031333][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 266.036676][ T4286] ? klist_children_get+0x50/0x50 [ 266.041759][ T4286] ? get_device_parent+0x121/0x3e0 [ 266.046945][ T4286] device_add+0x470/0x1050 [ 266.051428][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 266.056426][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 266.061785][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 266.068213][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 266.073920][ T4286] ? mutex_unlock+0x10/0x10 [ 266.078485][ T4286] ? skb_pull_data+0xec/0x1f0 [ 266.083250][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 266.088875][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 266.095007][ T4286] hci_event_packet+0x7b3/0x1290 [ 266.100009][ T4286] ? lock_chain_count+0x20/0x20 [ 266.104923][ T4286] ? bis_list+0x280/0x280 [ 266.109306][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 266.115347][ T4286] ? kcov_remote_start+0x50f/0x810 [ 266.120532][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 266.125806][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 266.131078][ T4286] hci_rx_work+0x3eb/0xd40 [ 266.135562][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 266.140480][ T4286] ? process_one_work+0x7b4/0x1160 [ 266.145703][ T4286] process_one_work+0x8ab/0x1160 [ 266.150725][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 266.156424][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 266.161504][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 266.167101][ T4286] ? wq_worker_running+0x97/0x190 [ 266.172187][ T4286] worker_thread+0xaf5/0x12a0 [ 266.176972][ T4286] kthread+0x29d/0x330 [ 266.181109][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 266.186217][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 266.190885][ T4286] ret_from_fork+0x1f/0x30 [ 266.195373][ T4286] [ 267.262880][ T4286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 267.277286][ T4286] Bluetooth: hci4: failed to register connection device [ 268.317588][ T5790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.379724][ T5790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.414458][ T5790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.510643][ T5790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.972362][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.749795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.765067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.922322][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.002956][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.726274][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.169337][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.176608][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.326944][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.430379][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.460012][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.702955][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.710177][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.823264][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.864777][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.016835][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.072032][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.106391][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.304361][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.395178][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.459796][ T6054] 9pnet_fd: Insufficient options for proto=fd [ 274.038065][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.065485][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.103220][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.143274][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.173732][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.197793][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.234619][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.863573][ T6090] Cannot find set identified by id 0 to match [ 278.679266][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.699453][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.855383][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.787375][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.797107][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.493418][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.695977][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.841080][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.968884][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.033587][ T5790] device veth0_vlan entered promiscuous mode [ 284.110065][ T5790] device veth1_vlan entered promiscuous mode [ 284.705709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.760484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.888420][ T5790] device veth0_macvtap entered promiscuous mode [ 285.627153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.360793][ T5790] device veth1_macvtap entered promiscuous mode [ 286.432637][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.518260][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.556362][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.582857][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.663821][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.706462][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.742286][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.822117][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.866923][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.171989][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.219376][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.084521][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.606504][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.119640][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.239918][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.251957][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.299084][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.414359][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.016530][ T5790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.028877][ T5790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.037706][ T5790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.046561][ T5790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.574669][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.662931][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.175362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.352861][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.387758][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.408078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.174207][ T6259] openvswitch: netlink: EtherType 0 is less than min 600 [ 294.844772][ T27] audit: type=1800 audit(2000000000.000:7): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.262" name="memory_backed" dev="configfs" ino=40129 res=0 errno=0 [ 295.170339][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 300.608757][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805588cc00: rx timeout, send abort [ 300.640631][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805588cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 304.927518][ T6346] __vm_enough_memory: pid: 6346, comm: syz.1.373, no enough memory for the allocation [ 306.121875][ T6356] futex_wake_op: syz.0.375 tries to shift op by 144; fix this program [ 307.479209][ T6364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 308.870511][ T6377] loop4: detected capacity change from 0 to 2048 [ 310.166908][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 310.219887][ T6377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.862761][ T6383] hub 8-0:1.0: USB hub found [ 310.870810][ T6383] hub 8-0:1.0: 1 port detected [ 311.465361][ T6393] Failed to get privilege flags for destination (handle=0x2:0x0) [ 311.641332][ T6390] __vm_enough_memory: pid: 6390, comm: syz.3.388, no enough memory for the allocation [ 314.113557][ T4405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.312199][ T4405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.489440][ T4405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.678567][ T4405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.659820][ T6418] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 315.837630][ T6420] Cannot find set identified by id 0 to match [ 317.217517][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225031][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.650796][ T6434] loop4: detected capacity change from 0 to 128 [ 317.729838][ T6434] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 317.837228][ T6434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.888530][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.899635][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.907824][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.038136][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.046041][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.053545][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.539810][ T6435] rxe_eth0 speed is unknown, defaulting to 1000 [ 320.160476][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 320.256620][ T6454] block device autoloading is deprecated and will be removed. [ 320.338957][ T6454] syz.0.402: attempt to access beyond end of device [ 320.338957][ T6454] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 322.747819][ T6485] Cannot find set identified by id 0 to match [ 322.796032][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 324.385718][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 324.556491][ T4405] device hsr_slave_0 left promiscuous mode [ 324.593064][ T4405] device hsr_slave_1 left promiscuous mode [ 325.556353][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 325.693218][ T4405] device veth1_macvtap left promiscuous mode [ 325.717353][ T4405] device veth0_macvtap left promiscuous mode [ 325.753402][ T4405] device veth1_vlan left promiscuous mode [ 325.772872][ T4405] device veth0_vlan left promiscuous mode [ 327.603126][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 330.109897][ T4405] bond0 (unregistering): (slave team0): Releasing backup interface [ 330.148248][ T4405] bond0 (unregistering): Released all slaves [ 330.210597][ T6503] netlink: 'syz.1.409': attribute type 4 has an invalid length. [ 330.342833][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 330.591253][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.653580][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.701168][ T6435] device bridge_slave_0 entered promiscuous mode [ 332.123179][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.255168][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.277508][ T6435] device bridge_slave_1 entered promiscuous mode [ 332.533327][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.545741][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.982589][ T6435] team0: Port device team_slave_0 added [ 333.013114][ T6435] team0: Port device team_slave_1 added [ 334.621626][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.821233][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.503808][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.516794][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.526752][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.787265][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.750701][ T6595] Cannot find set identified by id 0 to match [ 337.137831][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 337.595124][ T6435] device hsr_slave_0 entered promiscuous mode [ 338.286724][ T6435] device hsr_slave_1 entered promiscuous mode [ 344.063166][ T6656] WARNING! power/level is deprecated; use power/control instead [ 347.849663][ T6435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.903451][ T6435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.955407][ T6435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.017714][ T6435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.644375][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.761548][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.822324][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.966193][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.253015][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.314905][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.459440][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.466817][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.727378][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.842474][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.129430][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.443355][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.450523][ T4592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.538235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.640583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.744877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.781114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.791836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.923193][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.940388][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.978373][ T6435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.032456][ T6435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.056687][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.087014][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.131801][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.154182][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.199254][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.616131][ T6742] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 356.695072][ T6760] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 357.532271][ T6762] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4285] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ      rr @  @       rr s     & %½p ûÛß% \x07 gF- [ 357.625904][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 357.862839][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 358.070756][ T14] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 358.100537][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.115621][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.144273][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.151883][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.200416][ T14] usb 4-1: Product: syz [ 358.211937][ T14] usb 4-1: Manufacturer: syz [ 358.232212][ T14] usb 4-1: SerialNumber: syz [ 358.258854][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.283137][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.358486][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.397732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.441019][ T6435] device veth0_vlan entered promiscuous mode [ 358.459076][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.477789][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.482576][ T14] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 358.521772][ T6435] device veth1_vlan entered promiscuous mode [ 358.689510][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.698882][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.733745][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.764184][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.795149][ T6435] device veth0_macvtap entered promiscuous mode [ 358.824011][ T6435] device veth1_macvtap entered promiscuous mode [ 358.889159][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.930483][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.951452][ T6776] program syz.3.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.992304][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.028711][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.060844][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.099694][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.124488][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.152079][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.192214][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.217253][ T6762] netlink: 'syz.3.463': attribute type 12 has an invalid length. [ 359.246741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.261429][ T4350] usb 4-1: USB disconnect, device number 2 [ 359.279312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.303695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.343605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.388961][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.421185][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.469719][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.503649][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.539442][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.562976][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.592741][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.603089][ T14] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 359.610980][ T14] ath9k_htc: Failed to initialize the device [ 359.617239][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.660317][ T4350] usb 4-1: ath9k_htc: USB layer deinitialized [ 359.668627][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.712028][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.745412][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.796331][ T6435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.821946][ T6435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.852848][ T6435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.861626][ T6435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.834269][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.983693][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.077718][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.087551][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.096053][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.104437][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.905268][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.918302][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 361.929138][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.099247][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.107353][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.116555][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.255227][ T6801] rxe_eth0 speed is unknown, defaulting to 1000 [ 364.792716][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 366.812827][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 367.722414][ T6801] chnl_net:caif_netlink_parms(): no params data found [ 368.000264][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.029653][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.046845][ T6801] device bridge_slave_0 entered promiscuous mode [ 368.068337][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.080571][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.096958][ T6801] device bridge_slave_1 entered promiscuous mode [ 368.173476][ T6801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.186682][ T6801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.284350][ T6801] team0: Port device team_slave_0 added [ 368.293819][ T6801] team0: Port device team_slave_1 added [ 368.377520][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.424170][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.667015][ T6801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.883065][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 368.981146][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.990384][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.017750][ T6801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.110905][ T6801] device hsr_slave_0 entered promiscuous mode [ 369.138536][ T6801] device hsr_slave_1 entered promiscuous mode [ 369.159789][ T6801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.219403][ T6801] Cannot create hsr debugfs directory [ 370.373542][ T4288] Bluetooth: hci0: command 0x2016 tx timeout [ 370.484068][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 371.112495][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 375.331331][ T4592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.441097][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.448312][ T6912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.473015][ T6801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 375.544115][ T6801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 375.645586][ T4592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.674473][ T6801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 375.703570][ T6801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 375.800381][ T4592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.001934][ T4592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.750668][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.019426][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.032111][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.053811][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.082139][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.143314][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.203239][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.210409][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.299584][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.591526][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.246784][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.767183][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.773593][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.808018][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.815242][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.003126][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 379.030181][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.294437][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.317279][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.819722][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.828550][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.853318][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.870227][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.890715][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.980779][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.998103][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.016039][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.619377][ T6976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.637181][ T6976] overlayfs: failed to clone upperpath [ 382.434180][ T6981] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 383.344523][ T6985] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 384.192135][ T6995] capability: warning: `syz.2.508' uses 32-bit capabilities (legacy support in use) [ 384.287912][ T6995] program syz.2.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.457238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.475346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.513327][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.931108][ T7018] xt_TCPMSS: Only works on TCP SYN packets [ 389.202911][ T7036] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 393.642809][ T7057] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 393.688258][ T7072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.522'. [ 397.468551][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.760398][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.143058][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.197095][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.250522][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.281747][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.329009][ T6801] device veth0_vlan entered promiscuous mode [ 400.748664][ T6801] device veth1_vlan entered promiscuous mode [ 401.040982][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 401.905137][ T7129] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 402.126896][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 402.145988][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.194802][ T6801] device veth0_macvtap entered promiscuous mode [ 402.229887][ T6801] device veth1_macvtap entered promiscuous mode [ 402.333118][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.382802][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.420144][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.452417][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.486052][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.506972][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.534043][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.564960][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.602133][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.632902][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.794901][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.957927][ T4592] device hsr_slave_0 left promiscuous mode [ 403.072113][ T4592] device hsr_slave_1 left promiscuous mode [ 403.250548][ T4592] batman_adv: batadv0: Interface deactivated: dummy0 [ 403.400098][ T4592] batman_adv: batadv0: Removing interface: dummy0 [ 403.479495][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.514816][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.565182][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.588629][ T4592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.618296][ T4592] device bridge_slave_1 left promiscuous mode [ 403.659958][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.759085][ T4592] device bridge_slave_0 left promiscuous mode [ 403.774238][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.001490][ T4592] device veth1_macvtap left promiscuous mode [ 404.080213][ T4592] device veth0_macvtap left promiscuous mode [ 404.149606][ T4592] device veth1_vlan left promiscuous mode [ 404.208971][ T4592] device veth0_vlan left promiscuous mode [ 405.091895][ T4592] bond1 (unregistering): Released all slaves [ 406.668227][ T7189] xt_TCPMSS: Only works on TCP SYN packets [ 409.294206][ T4283] Bluetooth: hci4: Malformed LE Event: 0x1b [ 410.022164][ T4592] team0 (unregistering): Port device team_slave_1 removed [ 411.025623][ T4592] team0 (unregistering): Port device team_slave_0 removed [ 412.556282][ T4592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.680404][ T4592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.011807][ T7227] fuse: Bad value for 'fd' [ 414.456877][ T7235] ubi0: attaching mtd0 [ 414.707570][ T7235] ubi0: scanning is finished [ 414.712460][ T7235] ubi0: empty MTD device detected [ 414.872918][ T7235] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 415.020554][ T4592] bond0 (unregistering): Released all slaves [ 415.091515][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 415.110629][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 415.120146][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.340872][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.409197][ T7247] netlink: 104 bytes leftover after parsing attributes in process `syz.2.562'. [ 415.432821][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.465412][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.520407][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.538285][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.559492][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.763692][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.779182][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.800369][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.830270][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.846279][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.034672][ T6801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.075324][ T6801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.938547][ T6801] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.968502][ T6801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.710498][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.916425][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.978174][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 419.064047][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.081088][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.119958][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 420.128356][ T7292] loop5: detected capacity change from 0 to 128 [ 420.381358][ T7292] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 420.408295][ T7292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.890781][ T7313] tipc: Enabled bearer , priority 0 [ 424.824769][ T7345] input: syz0 as /devices/virtual/input/input7 [ 425.544730][ T7349] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 426.863530][ T7351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.581604][ T7377] loop5: detected capacity change from 0 to 128 [ 428.613469][ T7377] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 428.804214][ T4283] Bluetooth: hci3: link tx timeout [ 428.812541][ T4283] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 430.093383][ T7377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.867177][ T4288] Bluetooth: hci3: link tx timeout [ 430.872409][ T4288] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 430.890817][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 433.331697][ T7405] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 434.489312][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.498135][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.505613][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.928060][ T7426] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 437.897558][ T7441] ipt_REJECT: ECHOREPLY no longer supported. [ 440.094657][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.101039][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.027129][ T7472] Invalid option length (0) for dns_resolver key [ 442.638873][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 443.548298][ T7501] futex_wake_op: syz.1.617 tries to shift op by 144; fix this program [ 445.835954][ T7514] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 449.431595][ T7536] IPVS: dh: FWM 3 0x00000003 - no destination available [ 457.156239][ T27] audit: type=1326 audit(2000000032.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 457.967696][ T27] audit: type=1326 audit(2000000032.170:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 458.513480][ T27] audit: type=1326 audit(2000000032.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 458.676564][ T7632] netlink: 'syz.4.649': attribute type 5 has an invalid length. [ 458.772770][ T27] audit: type=1326 audit(2000000032.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 459.152186][ T27] audit: type=1326 audit(2000000032.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 459.295821][ T7647] netlink: 76 bytes leftover after parsing attributes in process `syz.5.652'. [ 460.028727][ T27] audit: type=1326 audit(2000000032.170:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 460.053006][ T27] audit: type=1326 audit(2000000032.170:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 460.143679][ T27] audit: type=1326 audit(2000000032.170:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 462.305567][ T27] audit: type=1326 audit(2000000032.170:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 462.701430][ T27] audit: type=1326 audit(2000000032.170:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 463.528653][ T27] audit: type=1326 audit(2000000032.180:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 463.633495][ T27] audit: type=1326 audit(2000000032.180:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 463.743628][ T27] audit: type=1326 audit(2000000032.180:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 463.902591][ T27] audit: type=1326 audit(2000000032.180:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 463.988620][ T27] audit: type=1326 audit(2000000032.180:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 464.013738][ T27] audit: type=1326 audit(2000000032.180:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 464.058599][ T27] audit: type=1326 audit(2000000032.180:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 464.528528][ T27] audit: type=1326 audit(2000000032.180:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2617d9e559 code=0x7ffc0000 [ 465.013728][ T4283] Bluetooth: hci1: Malformed LE Event: 0x0d [ 470.136049][ T7747] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6435] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7747] [ 470.158719][ T7747] netlink: 388 bytes leftover after parsing attributes in process `syz.2.672'. [ 470.170829][ T4283] Bluetooth: Wrong link type (-22) [ 473.277545][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 473.277592][ T27] audit: type=1326 audit(2000000048.370:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 473.535188][ T7779] ip_tables: iptables: counters copy to user failed while replacing table [ 473.627830][ T7781] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6801] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7781] [ 474.390840][ T27] audit: type=1326 audit(2000000048.370:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 474.604764][ T27] audit: type=1326 audit(2000000048.370:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a7455ed8e code=0x7ffc0000 [ 474.628953][ T27] audit: type=1326 audit(2000000048.370:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 474.686413][ T27] audit: type=1326 audit(2000000048.370:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 474.796858][ T27] audit: type=1326 audit(2000000048.370:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 474.859001][ T27] audit: type=1326 audit(2000000048.370:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 475.017100][ T27] audit: type=1326 audit(2000000048.370:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 476.100084][ T27] audit: type=1326 audit(2000000048.370:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 477.082990][ T27] audit: type=1326 audit(2000000048.380:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.3.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7459e559 code=0x7ffc0000 [ 478.175483][ T7818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.377732][ T7837] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 480.433835][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'. [ 483.032108][ T7880] ipt_REJECT: ECHOREPLY no longer supported. [ 483.189297][ T7880] block device autoloading is deprecated and will be removed. [ 485.377039][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 486.436177][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 486.458967][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 486.607290][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 486.654677][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 486.806494][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 486.839986][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 490.725175][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.719'. [ 492.327229][ T7941] sctp: failed to load transform for md5: -2 [ 496.723387][ T8003] No such timeout policy "syz1" [ 497.917652][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'. [ 499.505424][ T8038] ip_tables: iptables: counters copy to user failed while replacing table [ 501.691221][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.707215][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.338984][ T8070] 9pnet_fd: Insufficient options for proto=fd [ 507.260265][ T8096] tmpfs: Unknown parameter 'quota' [ 512.739832][ T8144] netlink: 14 bytes leftover after parsing attributes in process `syz.3.765'. [ 519.434601][ T8202] 9pnet_fd: Insufficient options for proto=fd [ 519.716899][ T8205] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 526.090532][ T8262] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.382803][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 532.382821][ T27] audit: type=1326 audit(2000000000.400:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 532.772768][ T27] audit: type=1326 audit(2000000000.400:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 533.603590][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 534.372683][ T27] audit: type=1326 audit(2000000000.400:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 534.484810][ T27] audit: type=1326 audit(2000000000.400:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 534.552242][ T27] audit: type=1326 audit(2000000000.400:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 534.731666][ T27] audit: type=1326 audit(2000000000.410:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 534.820744][ T8341] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 534.829926][ T8341] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 535.292739][ T27] audit: type=1326 audit(2000000000.410:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 535.349741][ T8344] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 535.467387][ T27] audit: type=1326 audit(2000000000.410:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 535.509882][ T27] audit: type=1326 audit(2000000000.410:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 535.598400][ T27] audit: type=1326 audit(2000000000.410:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aff9e559 code=0x7ffc0000 [ 547.310337][ T8473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 549.074276][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'. [ 551.576064][ T8497] overlayfs: failed to clone upperpath [ 555.424413][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 560.847971][ T8579] netlink: 'syz.5.864': attribute type 4 has an invalid length. [ 562.965347][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.971860][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.253948][ T26] libceph: connect (1)127.0.0.1:6789 error -101 [ 567.306734][ T26] libceph: mon0 (1)127.0.0.1:6789 connect error [ 567.634627][ T8642] ceph: No mds server is up or the cluster is laggy [ 568.306037][ T8537] libceph: connect (1)127.0.0.1:6789 error -101 [ 568.321085][ T8537] libceph: mon0 (1)127.0.0.1:6789 connect error [ 569.412768][ T8668] xt_policy: output policy not valid in PREROUTING and INPUT [ 571.632782][ T8678] trusted_key: encrypted_key: keylen parameter is missing [ 577.149043][ T8733] xt_policy: output policy not valid in PREROUTING and INPUT [ 577.596736][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 577.649774][ T8743] syz.5.894 uses obsolete (PF_INET,SOCK_PACKET) [ 577.705049][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 577.915022][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 578.574955][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 578.633615][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 579.780544][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 580.252733][ T8751] ±ÿ)”ëf: renamed from lo [ 580.302919][ T8755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.899'. [ 580.325244][ T8760] netlink: 36 bytes leftover after parsing attributes in process `syz.3.899'. [ 586.778426][ T8824] rxe_eth0 speed is unknown, defaulting to 1000 [ 587.100101][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 587.100118][ T27] audit: type=1326 audit(2000000042.410:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 587.373155][ T27] audit: type=1326 audit(2000000042.500:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 587.436581][ T27] audit: type=1326 audit(2000000042.500:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 587.541002][ T8840] syz_tun: mtu less than device minimum [ 587.997379][ T27] audit: type=1326 audit(2000000042.500:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 588.163095][ T27] audit: type=1326 audit(2000000042.500:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 588.317231][ T27] audit: type=1326 audit(2000000042.500:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 589.339696][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 589.373441][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 589.389864][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 589.398729][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 589.409208][ T27] audit: type=1326 audit(2000000042.500:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 589.435699][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 589.456491][ T8852] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 589.542964][ T27] audit: type=1326 audit(2000000042.500:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 589.662676][ T27] audit: type=1326 audit(2000000042.500:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0899e559 code=0x7ffc0000 [ 589.706542][ T8852] ±ÿ)”ëf: renamed from lo [ 589.752912][ T27] audit: type=1326 audit(2000000042.530:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.4.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc0895ed8e code=0x7ffc0000 [ 589.911558][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 591.436675][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 595.626413][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 595.731811][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 596.072842][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x7ccb instead [ 596.103919][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x63f2 instead [ 596.145164][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 596.145181][ T27] audit: type=1326 audit(2000000000.010:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.928" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62aff9e559 code=0x0 [ 596.183029][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 596.246268][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 596.278543][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 596.326361][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 596.361000][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 596.402931][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 596.443431][ T8905] jffs2: Further such events for this erase block will not be printed [ 596.452168][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 596.528490][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 596.730888][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x7ccb instead [ 596.742558][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x63f2 instead [ 596.753202][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 596.763664][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 596.788660][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 596.804190][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 597.162875][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 597.231277][ T8905] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 597.663394][ T8905] jffs2: Further such events for this erase block will not be printed [ 597.672129][ T8905] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 597.688185][ T8905] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 599.160219][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.939'. [ 600.628658][ T8969] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8969] [ 600.651518][ T8969] netlink: 388 bytes leftover after parsing attributes in process `syz.1.940'. [ 600.662371][ T4288] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 600.893864][ T8971] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 605.527999][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 605.537176][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 605.546178][ T9010] netlink: 'syz.1.951': attribute type 15 has an invalid length. [ 605.554192][ T9010] netlink: 'syz.1.951': attribute type 18 has an invalid length. [ 613.522487][ T9094] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 613.550293][ T9092] rxe_eth0 speed is unknown, defaulting to 1000 [ 616.305391][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 616.352209][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 616.432232][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 616.459500][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 616.572398][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 616.651569][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 616.780698][ T9125] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 616.854278][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.979'. [ 618.852259][ T9153] rxe_eth0 speed is unknown, defaulting to 1000 [ 623.975970][ T4288] Bluetooth: hci2: Malformed LE Event: 0x0d [ 624.405096][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.411592][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.803927][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 624.814659][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 624.826478][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 624.837948][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 624.847855][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 624.857246][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 624.866961][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 628.520504][ T9263] netlink: 'syz.5.1006': attribute type 1 has an invalid length. [ 628.560257][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 654.032278][ T9495] 9pnet_fd: Insufficient options for proto=fd [ 658.239071][ T9529] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 659.546999][ T9542] 9pnet_fd: Insufficient options for proto=fd [ 664.475476][ T9590] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 667.471340][ T9614] 9pnet_fd: Insufficient options for proto=fd [ 672.742805][ T9659] fuse: Unknown parameter '0x0000000000000008' [ 675.277518][ T4288] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 675.286918][ T4288] Bluetooth: hci4: Injecting HCI hardware error event [ 675.298114][ T4288] Bluetooth: hci4: hardware error 0x00 [ 675.727428][ T9677] 9pnet_fd: Insufficient options for proto=fd [ 676.895909][ T9692] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 678.508091][ T9700] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 679.449891][ T4288] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 681.719397][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 681.760544][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 681.770749][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 681.809555][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 682.726013][ T9734] syz.4.1115 (9734) used greatest stack depth: 20112 bytes left [ 682.813511][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 683.003338][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 683.033188][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 683.095433][ T9737] 9pnet_fd: Insufficient options for proto=fd [ 683.520675][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 683.530884][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 683.544965][ T9722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 684.043785][ T7676] rpcbind: server 127.0.0.1 not responding, timed out [ 685.370078][ T9755] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 685.846805][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.853591][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.251908][ T9783] 9pnet_fd: Insufficient options for proto=fd [ 689.633317][ T9778] tc_dump_action: action bad kind [ 694.386727][ T9818] overlayfs: failed to clone upperpath [ 700.942514][ T9901] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 700.951602][ T9894] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1154'. [ 701.586538][ T9909] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4285] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9909] [ 703.112396][ T9921] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9921] [ 707.844007][ T9965] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1173'. [ 708.042753][ T9970] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6435] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9970] [ 708.067391][ T4288] Bluetooth: Wrong link type (-22) [ 711.662955][T10004] netlink: 'syz.5.1185': attribute type 30 has an invalid length. [ 711.670968][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 711.681130][T10004] bond0: option arp_missed_max: invalid value (0) [ 711.688611][T10004] bond0: option arp_missed_max: allowed values 1 - 255 [ 714.646924][T10033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.664979][T10033] fuse: Bad value for 'fd' [ 715.304554][T10017] sctp: failed to load transform for md5: -2 [ 715.591488][T10043] rxe_eth0 speed is unknown, defaulting to 1000 [ 718.519994][T10065] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6801] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10065] [ 723.477239][T10111] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1213'. [ 724.955061][T10126] rxe_eth0 speed is unknown, defaulting to 1000 [ 737.111173][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1237'. [ 738.075452][T10272] rxe_eth0 speed is unknown, defaulting to 1000 [ 738.894179][T10290] virtio-fs: tag not found [ 739.739540][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 740.172212][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.463241][T10302] device bridge_slave_1 left promiscuous mode [ 741.469778][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.826584][T10349] rxe_eth0 speed is unknown, defaulting to 1000 [ 747.286348][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.294063][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.243458][T10413] futex_wake_op: syz.3.1270 tries to shift op by 144; fix this program [ 755.229900][T10425] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10425] [ 755.249383][ T9681] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 756.167790][T10433] rxe_eth0 speed is unknown, defaulting to 1000 [ 767.100076][T10531] rxe_eth0 speed is unknown, defaulting to 1000 [ 768.414865][T10231] rpcbind: server 127.0.0.1 not responding, timed out [ 769.116978][T10552] rxe_eth0 speed is unknown, defaulting to 1000 [ 773.660955][T10599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1308'. [ 775.731729][T10610] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 775.751390][T10610] batman_adv: batadv0: Adding interface: ip6gretap1 [ 775.758298][T10610] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.785105][T10610] batman_adv: batadv0: Interface activated: ip6gretap1 [ 788.047943][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 797.708951][T10829] rxe_eth0 speed is unknown, defaulting to 1000 [ 798.670116][T10841] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 800.244341][T10841] device bond1 entered promiscuous mode [ 800.270212][T10841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.443994][T10847] bond1: (slave bridge2): making interface the new active one [ 800.500928][T10847] device bridge2 entered promiscuous mode [ 800.552223][T10847] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 800.569287][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 802.632828][T10873] [ 802.635239][T10873] ====================================================== [ 802.642283][T10873] WARNING: possible circular locking dependency detected [ 802.649385][T10873] syzkaller #0 Not tainted [ 802.653832][T10873] ------------------------------------------------------ [ 802.660905][T10873] syz.4.1376/10873 is trying to acquire lock: [ 802.666996][T10873] ffff88807799c158 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x109/0xac0 [ 802.678652][T10873] [ 802.678652][T10873] but task is already holding lock: [ 802.686048][T10873] ffff88807799a2f0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 802.695160][T10873] [ 802.695160][T10873] which lock already depends on the new lock. [ 802.695160][T10873] [ 802.705682][T10873] [ 802.705682][T10873] the existing dependency chain (in reverse order) is: [ 802.714759][T10873] [ 802.714759][T10873] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 802.722543][T10873] lock_sock_nested+0x44/0x100 [ 802.727895][T10873] smc_listen_out+0xd4/0x3c0 [ 802.733053][T10873] smc_listen_work+0x57c/0xd60 [ 802.738385][T10873] process_one_work+0x8ab/0x1160 [ 802.743886][T10873] worker_thread+0xaf5/0x12a0 [ 802.749128][T10873] kthread+0x29d/0x330 [ 802.753748][T10873] ret_from_fork+0x1f/0x30 [ 802.758750][T10873] [ 802.758750][T10873] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 802.768966][T10873] __lock_acquire+0x3a03/0x7ea0 [ 802.774444][T10873] lock_acquire+0x1bc/0x4a0 [ 802.779511][T10873] __flush_work+0x122/0xac0 [ 802.784569][T10873] __cancel_work_timer+0x3f4/0x560 [ 802.790240][T10873] smc_clcsock_release+0x5c/0xe0 [ 802.795814][T10873] __smc_release+0x644/0x7b0 [ 802.800997][T10873] smc_close_non_accepted+0xd1/0x1f0 [ 802.806854][T10873] smc_close_active+0xae2/0xea0 [ 802.812266][T10873] __smc_release+0x9c/0x7b0 [ 802.817339][T10873] smc_release+0x2c1/0x520 [ 802.822311][T10873] sock_close+0xbf/0x210 [ 802.827191][T10873] __fput+0x20a/0x8b0 [ 802.831791][T10873] task_work_run+0x1d0/0x260 [ 802.836951][T10873] do_exit+0x9d5/0x2570 [ 802.841777][T10873] __x64_sys_exit+0x3c/0x40 [ 802.846851][T10873] do_syscall_64+0x4c/0xa0 [ 802.851895][T10873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.858668][T10873] [ 802.858668][T10873] other info that might help us debug this: [ 802.858668][T10873] [ 802.868928][T10873] Possible unsafe locking scenario: [ 802.868928][T10873] [ 802.876407][T10873] CPU0 CPU1 [ 802.881804][T10873] ---- ---- [ 802.887199][T10873] lock(sk_lock-AF_SMC/1); [ 802.891781][T10873] lock((work_completion)(&new_smc->smc_listen_work)); [ 802.901277][T10873] lock(sk_lock-AF_SMC/1); [ 802.908377][T10873] lock((work_completion)(&new_smc->smc_listen_work)); [ 802.915360][T10873] [ 802.915360][T10873] *** DEADLOCK *** [ 802.915360][T10873] [ 802.923557][T10873] 2 locks held by syz.4.1376/10873: [ 802.928783][T10873] #0: ffff8880711b2010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 802.939030][T10873] #1: ffff88807799a2f0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 802.948488][T10873] [ 802.948488][T10873] stack backtrace: [ 802.954443][T10873] CPU: 1 PID: 10873 Comm: syz.4.1376 Not tainted syzkaller #0 [ 802.961930][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 802.972031][T10873] Call Trace: [ 802.975410][T10873] [ 802.978445][T10873] dump_stack_lvl+0x188/0x24e [ 802.983228][T10873] ? load_image+0x410/0x410 [ 802.987813][T10873] ? show_regs_print_info+0x12/0x12 [ 802.993060][T10873] ? print_circular_bug+0x12b/0x1a0 [ 802.998331][T10873] check_noncircular+0x2f8/0x400 [ 803.003328][T10873] ? look_up_lock_class+0x75/0x140 [ 803.008503][T10873] ? print_deadlock_bug+0x5d0/0x5d0 [ 803.013748][T10873] ? lockdep_lock+0x15c/0x1f0 [ 803.018475][T10873] ? _find_first_zero_bit+0xd2/0x100 [ 803.023825][T10873] __lock_acquire+0x3a03/0x7ea0 [ 803.028736][T10873] ? verify_lock_unused+0x140/0x140 [ 803.034091][T10873] ? check_path+0x40/0x40 [ 803.038466][T10873] ? mark_lock+0x94/0x320 [ 803.042842][T10873] ? __lock_acquire+0x142d/0x7ea0 [ 803.047928][T10873] lock_acquire+0x1bc/0x4a0 [ 803.052482][T10873] ? __flush_work+0x109/0xac0 [ 803.057211][T10873] ? __lock_acquire+0x142d/0x7ea0 [ 803.062288][T10873] ? read_lock_is_recursive+0x10/0x10 [ 803.067725][T10873] ? __flush_work+0x109/0xac0 [ 803.072458][T10873] __flush_work+0x122/0xac0 [ 803.077004][T10873] ? __flush_work+0x109/0xac0 [ 803.081719][T10873] ? flush_work+0x20/0x20 [ 803.086092][T10873] ? try_to_grab_pending+0xfa/0x890 [ 803.091333][T10873] ? lockdep_hardirqs_off+0x70/0x100 [ 803.096672][T10873] ? mark_lock+0x94/0x320 [ 803.101055][T10873] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 803.107085][T10873] ? mod_delayed_work_on+0x1b0/0x1b0 [ 803.112411][T10873] ? lock_chain_count+0x20/0x20 [ 803.117324][T10873] ? __cancel_work_timer+0x36a/0x560 [ 803.122652][T10873] __cancel_work_timer+0x3f4/0x560 [ 803.127815][T10873] ? cancel_work_sync+0x20/0x20 [ 803.132706][T10873] ? __smc_release+0x63c/0x7b0 [ 803.137509][T10873] ? __local_bh_enable_ip+0x136/0x1c0 [ 803.142920][T10873] ? lockdep_hardirqs_on+0x94/0x140 [ 803.148205][T10873] ? __local_bh_enable_ip+0x136/0x1c0 [ 803.153613][T10873] ? _local_bh_enable+0xa0/0xa0 [ 803.158505][T10873] smc_clcsock_release+0x5c/0xe0 [ 803.163492][T10873] __smc_release+0x644/0x7b0 [ 803.168129][T10873] smc_close_non_accepted+0xd1/0x1f0 [ 803.173483][T10873] smc_close_active+0xae2/0xea0 [ 803.178378][T10873] ? sock_no_sendpage_locked+0x1c0/0x1c0 [ 803.184065][T10873] __smc_release+0x9c/0x7b0 [ 803.188641][T10873] smc_release+0x2c1/0x520 [ 803.193108][T10873] sock_close+0xbf/0x210 [ 803.197392][T10873] ? sock_mmap+0x90/0x90 [ 803.201678][T10873] __fput+0x20a/0x8b0 [ 803.205706][T10873] task_work_run+0x1d0/0x260 [ 803.210345][T10873] ? task_work_cancel+0x220/0x220 [ 803.215421][T10873] ? do_raw_spin_unlock+0x11d/0x230 [ 803.220662][T10873] do_exit+0x9d5/0x2570 [ 803.224926][T10873] ? put_task_struct+0x80/0x80 [ 803.229751][T10873] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 803.235790][T10873] ? lock_chain_count+0x20/0x20 [ 803.240691][T10873] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 803.246816][T10873] ? syscall_enter_from_user_mode+0x21/0x80 [ 803.253119][T10873] __x64_sys_exit+0x3c/0x40 [ 803.257674][T10873] do_syscall_64+0x4c/0xa0 [ 803.262140][T10873] ? clear_bhb_loop+0x60/0xb0 [ 803.266949][T10873] ? clear_bhb_loop+0x60/0xb0 [ 803.271683][T10873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.277639][T10873] RIP: 0033:0x7fbc0899e559 [ 803.282210][T10873] Code: Unable to access opcode bytes at 0x7fbc0899e52f. [ 803.289323][T10873] RSP: 002b:00007fbc097cffd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 803.297888][T10873] RAX: ffffffffffffffda RBX: 00007fbc08c26090 RCX: 00007fbc0899e559 [ 803.305987][T10873] RDX: 00007fbc097d09c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 803.313994][T10873] RBP: 00007fbc08a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 803.322032][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.330040][T10873] R13: 00007fbc08c26128 R14: 00007fbc08c26090 R15: 00007ffe790e4ca8 [ 803.338071][T10873] [ 808.724681][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.731063][ T1280] ieee802154 phy1 wpan1: encryption failed: -22