last executing test programs: 4m8.806051922s ago: executing program 3 (id=133): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xd, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3fd1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x59a}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4m6.012904324s ago: executing program 3 (id=140): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000010c0)={0x0, 0x30b5, 0x1, 0x2, 0x3e8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) io_uring_register$IORING_REGISTER_PBUF_STATUS(r6, 0x1a, &(0x7f0000000040)={0x7}, 0x1) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) write$eventfd(0xffffffffffffffff, &(0x7f0000000340)=0xd, 0x8) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r6, 0x8010aebb, &(0x7f0000000000)={0x2000, 0x211000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) 4m2.430240992s ago: executing program 3 (id=148): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000002180)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYBLOB="b600c6ce936578dd6a6e131ba7b64c2440553095d292166a7523ec77d02c1f9608f1f022be04ff21f1ffe500c6ff34438b147fec586e283738a98dea36b2bbc2c613fec9a9a90e5f70b745ebba1978862177fc5e4b89c24baf64888d1cc9fca2ec143828aaba09b7315708fe38b17c8e1cd64c072d7d29f73f45105dd9cd250ad0f3ce2590117c3ed7f93e1ea91f8a414682cfd8574444c31f9ce99082e299489c190ef0678bac435ce2c6c6c9d45c6ffc237193346e90094b45c8a767f7136cd25a26e3c3580e2874cfa2", @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f00000008c0)="$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") syz_open_procfs(0x0, 0x0) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) getpgrp(0x0) syz_clone(0x80288100, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4m0.719691974s ago: executing program 3 (id=153): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f0000000240), 0x1, 0x240, &(0x7f0000000840)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 4m0.220525862s ago: executing program 3 (id=156): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 3m59.422072939s ago: executing program 3 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000040)='GPL\x00', 0x3, 0x3, &(0x7f0000003300)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) 3m58.229173498s ago: executing program 32 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000040)='GPL\x00', 0x3, 0x3, &(0x7f0000003300)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) 1m33.049548799s ago: executing program 4 (id=571): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000295000/0x400000)=nil, 0x400000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) munlockall() syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000d87000/0x3000)=nil, &(0x7f0000ec8000/0x1000)=nil, 0x3000, 0x2}) ioctl(r1, 0x8992, &(0x7f00000002c0)='veth0:') syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f77010000002aff0083749e921c0b8b9202000bbfbf7a15938590"], 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0x0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x31}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x3ff}}}}, {{@ipv6={@private1, @local, [0x0, 0x0, 0x0, 0xff], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x67, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x4e24, 0x4e21, 0x4e20, 0x4e24, 0x5, 0x9, 0x8, 0x1000, 0xb7a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 1m29.25871995s ago: executing program 4 (id=580): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x24e, &(0x7f00000006c0)="$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") mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000140)={0x10009e, 0x1000f1}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e24, @multicast1}, 0x10) mkdir(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c82000/0x2000)=nil, 0xfffffdb3, &(0x7f0000000080)='\x00 \x92\xc4 6\xc7\xe1Na\x8f\xddt\xea\xaf\x89\xef\x97\x89j\x95<\xc8\xe5\xfc\xb5\xf9[\xc7\xa8kR\xd5\xa1\x18\x91\xb77\x96\xbag\xe8\xa8\xb1\xe2\x05H\bL\xa2\xdeFZ\xbb\x91\xe5;qK\xa5\x7f\xd7\xeb\xaeR\x87\x93\xd9\xeeh\xb6 \x8b0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x6}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 1m24.466939309s ago: executing program 4 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 1m24.307038295s ago: executing program 4 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) timerfd_settime(r0, 0x2, &(0x7f00000015c0)={{0x77359400}, {0x77359400}}, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000180), 0xc000) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 1m9.175618732s ago: executing program 33 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) timerfd_settime(r0, 0x2, &(0x7f00000015c0)={{0x77359400}, {0x77359400}}, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000180), 0xc000) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 50.086566517s ago: executing program 5 (id=657): mkdirat(0xffffffffffffff9c, 0x0, 0x19) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x6, 0xc) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 48.013560545s ago: executing program 5 (id=663): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x0) write$yama_ptrace_scope(r2, &(0x7f0000000000)='1\x00', 0xffffffaf) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) 46.306105135s ago: executing program 5 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a3000000000"], 0x28}}, 0x0) 44.644466239s ago: executing program 5 (id=669): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 42.200242906s ago: executing program 5 (id=674): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x2a1, 0x8}, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, 0x0) 40.673292628s ago: executing program 5 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x18, 0x3e, 0x107, 0x0, 0x5, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8) 39.323792891s ago: executing program 34 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x18, 0x3e, 0x107, 0x0, 0x5, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8) 15.866605828s ago: executing program 1 (id=734): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x14, 0x14, {0xfffffff0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200020000000800030008ac0f"], 0x50}}, 0x0) 15.361968728s ago: executing program 1 (id=736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'lo\x00'}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x20, &(0x7f0000000080)=0x7f000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r1, &(0x7f0000000400)="0100003400063039001500157f0000017f0000017f00000104000001000000700a0000001400"/52, 0x34, 0x0, &(0x7f0000000500)={0x2, 0x2290, @rand_addr=0xe0000051}, 0x10) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000700)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000800)="450000280001400040063ccd7f0000017f00000100153039100000017000000050101000f1820000", 0x28, 0x0, &(0x7f0000000900)={0x2, 0x3039, @loopback}, 0x10) 15.03363056s ago: executing program 1 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x240000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) 13.120682323s ago: executing program 1 (id=739): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 12.95127592s ago: executing program 0 (id=740): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xffff, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[], 0xfd, 0x5532, &(0x7f0000000540)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) syz_emit_ethernet(0x28, &(0x7f0000000240)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @generic={0x201, 0x3, 0x6, 0x1, 0x8, @random="e260136b9fdf", "dd", @multicast, "97"}}}}, &(0x7f0000000280)={0x1, 0x3, [0x2a8, 0x760, 0xf7c, 0x303]}) 10.570168667s ago: executing program 0 (id=748): socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 10.569983607s ago: executing program 1 (id=749): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='BATMAN_V\n\x00', 0x9) close(r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) write(r1, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c) write(r1, &(0x7f0000000280)="2c000000100005000300000000000000000000000000000001000000010000000c0003006261746164763000", 0x2c) r2 = socket(0x11, 0x3, 0x543) write(r2, &(0x7f0000000300)="ffffffffffff0200000000024305030f02000000000200000001000003e8", 0x1e) write(r2, &(0x7f0000000340)="ffffffffffff0200000000024305040f320000000001020000000002000c0098968001010008000003e8000003e8", 0x2e) nanosleep(&(0x7f0000000380)={0x1}, 0x0) 9.267480613s ago: executing program 1 (id=750): timer_create(0x2, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$eJzslc9qFEEQxn8129nJeBDxpggeFN0ckkzGP1c9SR7AB3DZrDE4Qc0ENMHDeMp7iJDX8CC+ggfFSzyI4EGvIiM9XT07kyxI0Pw59Aez9dVX3V1V27s1j4pnRQz8jhhxlxo9zvJRBANcFqfdi5391nd2Qf2vxtk51V+r/aS22Np+PMzz8cZUUg2gq/TYr/ydOJYwz6G2HSupKjjaFDIlVHKsnb6POXAFJXA6ruCQ5Px/PxlFN0R0op0mJ/09t4mYjhL/64ET986riO/1LPvw4+XIkgdAVdn/Jay4R9pr7CR659YkVrto6kd6VM0aO/yscx349Wb96WKxtT2/tj5cHa+OJctu3E5vpumtbPHhWj5O3ae0UkT6g7B2DrAzNWnFZ4DPOmDPcBC+fI1Lsq98j8GVCRfN5/dWSoS3zV6d7dgz7nONWeB5KRPVF07d0jJCD1M7S6aVx/U2WwcWRk/ylR0E0ZXpLobIb9tjpnGyxjGddnfggi3tqvrLanfV7qn17yz/LjJ2BvFFvUEJfV4MNzc3lqzkWK35mp2WnStpXZDN+rPfbe5SPOVWAgICAgICAgJONf4EAAD//xHuT6Q=") 8.198237683s ago: executing program 35 (id=750): timer_create(0x2, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") 8.169305668s ago: executing program 0 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 7.157194888s ago: executing program 2 (id=754): remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) remap_file_pages(&(0x7f0000229000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffff81e, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000940)="480000001400190d09004beafd0d36020a845c000b4e230f00000000a2bc560119d7004f19dfb7f393d73590310300000101ff45c00e030802000000ffff015d3382ff48c91fff25", 0x48}], 0x1) 7.033858778s ago: executing program 0 (id=755): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.999740722s ago: executing program 2 (id=756): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56) 5.929591943s ago: executing program 6 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x400}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="56c355abbfb25656ae8a254adbc339dc171b30490a7ad42beee1cc68f78a8385a4fb8d437f96cb58b8d6a6726c0e7430596065733ec05015e505f57e964a01cab2df588439b0802434212b9f81c24fad954d423a80dda784c4d408490a47e6cfb048f5", 0x63}, {&(0x7f0000000180)="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", 0x14b}], 0x2}}], 0x2, 0x20000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) 4.803046741s ago: executing program 2 (id=758): socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x80, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40000, 0x3, 0x378}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x1, 0x0, 0x2000033d}}], 0x1, 0x0, 0x0) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ") 4.720181694s ago: executing program 6 (id=759): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000322, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x208, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x0, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e4, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x7, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.346051973s ago: executing program 6 (id=760): socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 3.248201067s ago: executing program 6 (id=761): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@norecovery}, {@grpid}, {@norecovery}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1868}}]}, 0xfe, 0x7a9, &(0x7f0000000c00)="$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") modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/181, 0xb5) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000810) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) brk(0x689d80000000) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00000003030588000300800006006d00204801e12f0120010000000000000000000000000002fe80000000000000000000000000002932090000000000000730000000030a0e0800fbffffffffffffff090000000000000000080000000000000000010000000000010100000000000007180000000304ff9aa2010100000000000000000000000000000000000087090000000000000738000000030c09faff000001000000000000010000000000000900000000000000195a000000001000050000000000000001000000000000000710000000020207f0ff9d0b000000000000000000005e0000000000000000010000000000002f0a00000000000005020003050200020401a0040103072000000001060381"], 0x217) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) 3.128018996s ago: executing program 2 (id=762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) 1.759530253s ago: executing program 0 (id=763): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) sendto$inet6(r1, &(0x7f0000000440)="10", 0x1, 0x4044850, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) 1.609965549s ago: executing program 2 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.430644322s ago: executing program 6 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fstatfs(r0, 0x0) 1.320683403s ago: executing program 0 (id=766): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) r1 = socket(0x5, 0x800, 0xa2bc) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x4004550c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@bsdgroups}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000000a80)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x8800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r3, 0xfe53, 0x0, 0x4) 333.390007ms ago: executing program 2 (id=767): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a50c0, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x10000, &(0x7f0000000180)) io_setup(0x4, &(0x7f0000000380)) 0s ago: executing program 6 (id=768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x380000b, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a5a836bdf31295400000000000000000000000000000000000000000000000000000000000000000000eaff000800", 0x0, 0x35) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000040)) kernel console output (not intermixed with test programs): T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.947949][ T11] bridge_slave_0: left allmulticast mode [ 141.953689][ T11] bridge_slave_0: left promiscuous mode [ 141.975454][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.008101][ T6556] loop1: detected capacity change from 0 to 2048 [ 142.097710][ T6556] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 142.160001][ T6556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.248801][ T11] veth1_macvtap: left promiscuous mode [ 142.266335][ T11] veth0_macvtap: left promiscuous mode [ 142.276164][ T11] veth1_vlan: left promiscuous mode [ 142.297791][ T11] veth0_vlan: left promiscuous mode [ 142.396784][ T5787] Bluetooth: hci1: command tx timeout [ 142.471545][ T6551] syz.0.176 (6551) used greatest stack depth: 19480 bytes left [ 142.635114][ T6506] syz.0.176 (6506) used greatest stack depth: 18776 bytes left [ 143.064085][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 143.419895][ T6580] FAULT_INJECTION: forcing a failure. [ 143.419895][ T6580] name failslab, interval 1, probability 0, space 0, times 1 [ 143.441205][ T6580] CPU: 1 PID: 6580 Comm: syz.0.186 Not tainted syzkaller #0 [ 143.448579][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.458713][ T6580] Call Trace: [ 143.462045][ T6580] [ 143.465029][ T6580] dump_stack_lvl+0x18c/0x250 [ 143.469781][ T6580] ? show_regs_print_info+0x20/0x20 [ 143.475047][ T6580] ? load_image+0x420/0x420 [ 143.479617][ T6580] ? __might_sleep+0xe0/0xe0 [ 143.484260][ T6580] ? __lock_acquire+0x7d80/0x7d80 [ 143.489344][ T6580] should_fail_ex+0x394/0x4c0 [ 143.494089][ T6580] should_failslab+0x9/0x20 [ 143.498656][ T6580] slab_pre_alloc_hook+0x59/0x300 [ 143.503744][ T6580] ? memcg_list_lru_alloc+0x335/0xb00 [ 143.509181][ T6580] ? memcg_list_lru_alloc+0x335/0xb00 [ 143.514622][ T6580] __kmem_cache_alloc_node+0x53/0x250 [ 143.520072][ T6580] ? memcg_list_lru_alloc+0x335/0xb00 [ 143.525555][ T6580] __kmalloc+0xa7/0x240 [ 143.529784][ T6580] memcg_list_lru_alloc+0x335/0xb00 [ 143.535051][ T6580] ? memcg_reparent_list_lrus+0x860/0x860 [ 143.540871][ T6580] ? get_obj_cgroup_from_current+0xd4/0x280 [ 143.546831][ T6580] ? get_obj_cgroup_from_current+0xd4/0x280 [ 143.552791][ T6580] slab_pre_alloc_hook+0x2ad/0x300 [ 143.557975][ T6580] ? slab_pre_alloc_hook+0xb1/0x300 [ 143.563333][ T6580] kmem_cache_alloc_lru+0x4d/0x2b0 [ 143.569309][ T6580] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 143.574764][ T6580] hugetlbfs_alloc_inode+0xf3/0x140 [ 143.580052][ T6580] ? hugetlbfs_fill_super+0x900/0x900 [ 143.585492][ T6580] new_inode_pseudo+0x63/0x1d0 [ 143.590364][ T6580] new_inode+0x22/0x1d0 [ 143.594609][ T6580] ? resv_map_alloc+0x1c4/0x2c0 [ 143.599540][ T6580] hugetlbfs_get_inode+0x78/0x500 [ 143.604682][ T6580] hugetlb_file_setup+0x27f/0x610 [ 143.609865][ T6580] newseg+0x416/0xb10 [ 143.613916][ T6580] ? ksys_shmget+0x140/0x140 [ 143.618566][ T6580] ? __lock_acquire+0x7d80/0x7d80 [ 143.623648][ T6580] ? file_end_write+0x159/0x250 [ 143.628571][ T6580] ipcget+0x1d1/0xe10 [ 143.632619][ T6580] ? do_futex+0x35d/0x3e0 [ 143.637015][ T6580] ? __ia32_sys_get_robust_list+0x110/0x110 [ 143.642976][ T6580] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 143.648692][ T6580] __x64_sys_shmget+0x141/0x180 [ 143.653596][ T6580] ? lock_chain_count+0x20/0x20 [ 143.658501][ T6580] ? shm_more_checks+0x80/0x80 [ 143.663307][ T6580] ? lockdep_hardirqs_on+0x98/0x150 [ 143.669147][ T6580] do_syscall_64+0x55/0xb0 [ 143.673600][ T6580] ? clear_bhb_loop+0x40/0x90 [ 143.678359][ T6580] ? clear_bhb_loop+0x40/0x90 [ 143.683078][ T6580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.689026][ T6580] RIP: 0033:0x7f09ae39e159 [ 143.693476][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.713202][ T6580] RSP: 002b:00007f09af1d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 143.721644][ T6580] RAX: ffffffffffffffda RBX: 00007f09ae625fa0 RCX: 00007f09ae39e159 [ 143.729656][ T6580] RDX: 0000000054003f00 RSI: 0000000000800000 RDI: 0000000000000000 [ 143.737662][ T6580] RBP: 00007f09ae43506b R08: 0000000000000000 R09: 0000000000000000 [ 143.745664][ T6580] R10: 0000200000800000 R11: 0000000000000246 R12: 0000000000000000 [ 143.753668][ T6580] R13: 00007f09ae626038 R14: 00007f09ae625fa0 R15: 00007ffd761eb478 [ 143.761682][ T6580] [ 144.314528][ T11] team0 (unregistering): Port device team_slave_1 removed [ 144.423201][ T11] team0 (unregistering): Port device team_slave_0 removed [ 144.481604][ T5787] Bluetooth: hci1: command tx timeout [ 144.522975][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.629202][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.146110][ T11] bond0 (unregistering): Released all slaves [ 145.304663][ T6457] team0: Port device team_slave_0 added [ 145.321923][ T6457] team0: Port device team_slave_1 added [ 145.437384][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.480580][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.573010][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.608559][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.613268][ T28] audit: type=1326 audit(1790718822.703:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 145.627418][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.709208][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.720264][ T28] audit: type=1326 audit(1790718822.713:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 145.780404][ T28] audit: type=1326 audit(1790718822.743:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 145.861798][ T6603] loop0: detected capacity change from 0 to 512 [ 145.879351][ T28] audit: type=1326 audit(1790718822.743:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 145.925813][ T6603] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.008447][ T28] audit: type=1326 audit(1790718822.773:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 146.042650][ T28] audit: type=1326 audit(1790718822.773:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 146.072719][ T6457] hsr_slave_0: entered promiscuous mode [ 146.121186][ T6457] hsr_slave_1: entered promiscuous mode [ 146.140898][ T28] audit: type=1326 audit(1790718822.773:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 146.144646][ T6603] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.194: corrupted in-inode xattr: e_value size too large [ 146.178938][ T28] audit: type=1326 audit(1790718822.773:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 146.216106][ T6457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.225625][ T6603] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.194: couldn't read orphan inode 15 (err -117) [ 146.242498][ T6457] Cannot create hsr debugfs directory [ 146.261080][ T28] audit: type=1326 audit(1790718822.773:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 146.302647][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.347264][ T28] audit: type=1326 audit(1790718822.773:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 146.382625][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 146.416776][ T28] audit: type=1326 audit(1790718822.773:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.1.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a8999e159 code=0x7ffc0000 [ 146.532016][ T11] IPVS: stop unused estimator thread 0... [ 146.679730][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.041880][ T6457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.084710][ T6457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.141889][ T6457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.174344][ T6457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.547726][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.591783][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.632194][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.639449][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.725947][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.733838][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.869627][ T6639] loop2: detected capacity change from 0 to 1024 [ 148.718027][ T6655] mmap: syz.1.201 (6655) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.005517][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.142402][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 150.393608][ T6457] veth0_vlan: entered promiscuous mode [ 150.442700][ T6457] veth1_vlan: entered promiscuous mode [ 150.578915][ T6457] veth0_macvtap: entered promiscuous mode [ 150.606101][ T6457] veth1_macvtap: entered promiscuous mode [ 150.643842][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.659694][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.676644][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.692065][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.704575][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.719607][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.732181][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.760543][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.791142][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.819986][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.831839][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.845341][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.858006][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.874696][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.905546][ T6457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.947067][ T6457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.955857][ T6457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.981691][ T6457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.267102][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.275013][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.364084][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.376878][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.516895][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 151.692994][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 152.615249][ T6733] syzkaller0: entered promiscuous mode [ 152.647920][ T6733] syzkaller0: entered allmulticast mode [ 153.619405][ T6738] geneve2: entered promiscuous mode [ 153.810155][ T6766] loop4: detected capacity change from 0 to 512 [ 153.868729][ T6766] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.912221][ T6766] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 153.946647][ T6766] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 153.976549][ T6766] EXT4-fs (loop4): group descriptors corrupted! [ 154.391520][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 154.391538][ T28] audit: type=1326 audit(1790718831.476:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.4.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb225d9e159 code=0x0 [ 154.628944][ T6776] x86/PAT: syz.2.226:6776 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 158.844318][ T6824] IPv6: sit1: Disabled Multicast RS [ 159.407691][ T6824] sit1: entered allmulticast mode [ 160.864804][ T28] audit: type=1804 audit(1790718837.956:31): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.240" name="file1" dev="ramfs" ino=10702 res=1 errno=0 [ 163.413460][ T6893] loop2: detected capacity change from 0 to 512 [ 163.438268][ T6893] EXT4-fs: Ignoring removed i_version option [ 163.446903][ T6893] EXT4-fs: Ignoring removed oldalloc option [ 163.571071][ T6893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.003994][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.533374][ T6915] loop2: detected capacity change from 0 to 512 [ 164.632282][ T6910] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 164.646585][ T6873] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.974506][ T6913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.125606][ T6913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.205667][ T6913] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 165.264499][ T6913] bond0 (unregistering): Released all slaves [ 165.550495][ T6934] loop4: detected capacity change from 0 to 128 [ 165.626131][ T6934] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 165.725316][ T6934] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.925461][ T6939] loop2: detected capacity change from 0 to 164 [ 166.213641][ T6457] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.135792][ T6967] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 168.736786][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.937209][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 168.958274][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 168.986607][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.004840][ T9] usb 5-1: Product: syz [ 169.015953][ T9] usb 5-1: Manufacturer: syz [ 169.029627][ T9] usb 5-1: SerialNumber: syz [ 169.058268][ T9] usb 5-1: config 0 descriptor?? [ 169.072597][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 169.224059][ T6993] Bluetooth: ISO socket layer initialized [ 169.309979][ T6994] futex_wake_op: syz.1.269 tries to shift op by 144; fix this program [ 171.367674][ T9] gspca_ov534_9: sccb_write failed [ 171.430139][ T7026] loop1: detected capacity change from 0 to 4096 [ 171.496597][ T5820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.505528][ T7026] EXT4-fs (loop1): Test dummy encryption mode enabled [ 171.573903][ T9] gspca_ov534_9: reg_w failed -71 [ 171.741208][ T5820] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 171.750627][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.761451][ T7026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.774072][ T5820] usb 1-1: Product: syz [ 171.785503][ T5820] usb 1-1: Manufacturer: syz [ 171.795877][ T5820] usb 1-1: SerialNumber: syz [ 171.826890][ T5820] ums_eneub6250 1-1:1.0: USB Mass Storage device detected [ 171.879066][ T5820] scsi host1: usb-storage 1-1:1.0 [ 171.906679][ T9] gspca_ov534_9: Unknown sensor 0000 [ 171.906794][ T9] ov534_9: probe of 5-1:0.0 failed with error -22 [ 172.025646][ T9] usb 5-1: USB disconnect, device number 2 [ 172.365007][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.553314][ T5820] ums_eneub6250: probe of 1-1:1.0 failed with error 3 [ 172.861359][ T7052] loop0: detected capacity change from 0 to 1024 [ 172.992995][ T7052] hfsplus: invalid catalog max_key_len 7 [ 173.028908][ T7052] hfsplus: failed to load catalog file [ 173.339715][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 174.266599][ T8] usb 1-1: USB disconnect, device number 4 [ 175.796781][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 175.918208][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 176.990537][ T7098] loop1: detected capacity change from 0 to 8 [ 177.129761][ T7098] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 177.889605][ T7112] FAULT_INJECTION: forcing a failure. [ 177.889605][ T7112] name failslab, interval 1, probability 0, space 0, times 0 [ 177.931256][ T7112] CPU: 0 PID: 7112 Comm: syz.1.288 Not tainted syzkaller #0 [ 177.938640][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.948755][ T7112] Call Trace: [ 177.952068][ T7112] [ 177.955023][ T7112] dump_stack_lvl+0x18c/0x250 [ 177.959759][ T7112] ? show_regs_print_info+0x20/0x20 [ 177.964993][ T7112] ? load_image+0x420/0x420 [ 177.969527][ T7112] ? __might_sleep+0xe0/0xe0 [ 177.974151][ T7112] ? __lock_acquire+0x7d80/0x7d80 [ 177.979215][ T7112] should_fail_ex+0x394/0x4c0 [ 177.983932][ T7112] should_failslab+0x9/0x20 [ 177.988478][ T7112] slab_pre_alloc_hook+0x59/0x300 [ 177.993552][ T7112] ? snprintf+0xe9/0x140 [ 177.997886][ T7112] ? xs_format_common_peer_ports+0x15d/0x320 [ 178.003923][ T7112] ? xs_format_common_peer_ports+0x15d/0x320 [ 178.009960][ T7112] __kmem_cache_alloc_node+0x53/0x250 [ 178.015379][ T7112] ? xs_format_common_peer_ports+0x15d/0x320 [ 178.021405][ T7112] __kmalloc_node_track_caller+0xa4/0x230 [ 178.027172][ T7112] kstrdup+0x3b/0x80 [ 178.031103][ T7112] xs_format_common_peer_ports+0x15d/0x320 [ 178.037235][ T7112] ? xs_read_stream_request+0xd90/0xd90 [ 178.042838][ T7112] ? kstrdup+0x65/0x80 [ 178.046942][ T7112] ? __asan_memcpy+0x40/0x70 [ 178.051580][ T7112] xs_format_peer_addresses+0x443/0x530 [ 178.057166][ T7112] ? xs_dummy_setup_socket+0x10/0x10 [ 178.062503][ T7112] ? init_timer_key+0x161/0x2a0 [ 178.067391][ T7112] xs_setup_tcp+0x752/0x920 [ 178.071967][ T7112] ? xs_create_sock+0x7c0/0x7c0 [ 178.076864][ T7112] ? __rwlock_init+0x150/0x150 [ 178.081711][ T7112] ? do_raw_spin_unlock+0x121/0x230 [ 178.086958][ T7112] xprt_create_transport+0x152/0x5b0 [ 178.092288][ T7112] rpc_create+0x4d3/0x8a0 [ 178.096667][ T7112] ? rpc_cleanup_clids+0x20/0x20 [ 178.101658][ T7112] ? stack_trace_save+0xaa/0x100 [ 178.106657][ T7112] ? print_deadlock_bug+0x5d0/0x5d0 [ 178.111909][ T7112] ? lockdep_unlock+0x146/0x2e0 [ 178.116804][ T7112] ? nfs_init_timeout_values+0x186/0x420 [ 178.122500][ T7112] nfs_mount+0x498/0x7c0 [ 178.126815][ T7112] ? param_get_nfs_timeout+0xd0/0xd0 [ 178.132167][ T7112] ? kasan_set_track+0x4e/0x70 [ 178.136990][ T7112] ? nfs_try_get_tree+0x4ae/0x1060 [ 178.142150][ T7112] nfs_try_get_tree+0x6a1/0x1060 [ 178.147135][ T7112] ? nfs_auth_info_match+0x1a0/0x1a0 [ 178.152463][ T7112] ? __rwlock_init+0x150/0x150 [ 178.157280][ T7112] ? get_nfs_version+0x1eb/0x210 [ 178.162254][ T7112] ? nfs_get_tree+0x11a4/0x1650 [ 178.167164][ T7112] vfs_get_tree+0x8c/0x280 [ 178.171635][ T7112] vfs_cmd_create+0xe3/0x230 [ 178.176368][ T7112] __se_sys_fsconfig+0x70a/0x850 [ 178.181378][ T7112] ? __x64_sys_fsconfig+0xc0/0xc0 [ 178.186461][ T7112] ? lockdep_hardirqs_on+0x98/0x150 [ 178.191709][ T7112] ? __x64_sys_fsconfig+0x20/0xc0 [ 178.196775][ T7112] do_syscall_64+0x55/0xb0 [ 178.201236][ T7112] ? clear_bhb_loop+0x40/0x90 [ 178.205972][ T7112] ? clear_bhb_loop+0x40/0x90 [ 178.210686][ T7112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.216616][ T7112] RIP: 0033:0x7f3a8999e159 [ 178.221060][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.240707][ T7112] RSP: 002b:00007f3a8a7f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 178.249161][ T7112] RAX: ffffffffffffffda RBX: 00007f3a89c25fa0 RCX: 00007f3a8999e159 [ 178.257164][ T7112] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 178.265160][ T7112] RBP: 00007f3a89a3506b R08: 0000000000000000 R09: 0000000000000000 [ 178.273165][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.281165][ T7112] R13: 00007f3a89c26038 R14: 00007f3a89c25fa0 R15: 00007ffea661b138 [ 178.289179][ T7112] [ 178.886604][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.091407][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.107210][ T5820] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.120359][ T5820] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 179.130762][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.152220][ T5820] usb 5-1: config 0 descriptor?? [ 179.408705][ T23] usb 5-1: USB disconnect, device number 3 [ 181.602416][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 181.621821][ T7147] bridge_slave_1: left allmulticast mode [ 181.627681][ T7148] input: syz1 as /devices/virtual/input/input7 [ 181.638566][ T7147] bridge_slave_1: left promiscuous mode [ 181.657153][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.708015][ T7147] bridge_slave_0: left allmulticast mode [ 181.729722][ T7147] bridge_slave_0: left promiscuous mode [ 181.752844][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.781336][ T7150] jffs2: notice: (7150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.780217][ T7166] loop0: detected capacity change from 0 to 32768 [ 182.798084][ T7166] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.303 (7166) [ 182.878245][ T7166] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 182.889755][ T7166] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 182.899708][ T7166] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 182.909697][ T7166] BTRFS info (device loop0): use zstd compression, level 3 [ 182.917049][ T7166] BTRFS info (device loop0): force clearing of disk cache [ 182.924222][ T7166] BTRFS info (device loop0): enabling disk space caching [ 182.931373][ T7166] BTRFS info (device loop0): disk space caching is enabled [ 183.152600][ T7166] BTRFS info (device loop0): enabling ssd optimizations [ 183.160050][ T7166] BTRFS info (device loop0): auto enabling async discard [ 183.177433][ T7166] BTRFS info (device loop0): rebuilding free space tree [ 183.291877][ T7166] BTRFS info (device loop0): disabling free space tree [ 183.300380][ T7166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.311081][ T7166] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.744810][ T7200] loop2: detected capacity change from 0 to 512 [ 183.844208][ T7200] EXT4-fs error (device loop2): ext4_quota_enable:7144: inode #4: comm syz.2.310: casefold flag without casefold feature [ 183.969449][ T7200] EXT4-fs (loop2): Remounting filesystem read-only [ 183.996797][ T7200] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.058535][ T7200] EXT4-fs (loop2): mount failed [ 184.154438][ T32] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 185.289050][ T7220] loop9: detected capacity change from 0 to 7 [ 185.373543][ T7220] Dev loop9: unable to read RDB block 7 [ 185.379701][ T7222] syzkaller0: entered promiscuous mode [ 185.385252][ T7222] syzkaller0: entered allmulticast mode [ 185.426598][ T7220] loop9: unable to read partition table [ 185.437432][ T7222] tipc: Started in network mode [ 185.442372][ T7222] tipc: Node identity 4a1209279eb9, cluster identity 4711 [ 185.466965][ T7220] loop9: partition table beyond EOD, truncated [ 185.484022][ T7222] tipc: Enabled bearer , priority 0 [ 185.514639][ T7220] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 185.514639][ T7220] ) failed (rc=-5) [ 185.545279][ T7216] loop1: detected capacity change from 0 to 512 [ 185.576708][ T7221] tipc: Resetting bearer [ 185.924918][ T7221] tipc: Disabling bearer [ 186.592443][ T7239] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 186.814191][ T7239] bond0: entered promiscuous mode [ 186.836525][ T7239] bond0: entered allmulticast mode [ 186.842119][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.917837][ T7243] bridge0: entered promiscuous mode [ 186.941811][ T32] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 186.960626][ T7243] bridge0: entered allmulticast mode [ 186.984132][ T7243] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 187.057691][ T7239] bridge1: entered promiscuous mode [ 187.063148][ T7239] bridge1: entered allmulticast mode [ 187.101208][ T1147] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 187.112355][ T7239] bond0: (slave bridge1): Enslaving as a backup interface with a down link [ 187.149657][ T7239] bridge2: entered promiscuous mode [ 187.156405][ T7239] bridge2: entered allmulticast mode [ 187.167211][ T7239] bond0: (slave bridge2): Enslaving as a backup interface with a down link [ 187.740732][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 187.751005][ T5790] CPU: 1 PID: 5790 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 187.758621][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.768136][ T9] IPVS: starting estimator thread 0... [ 187.768708][ T5790] Workqueue: hci0 hci_rx_work [ 187.778988][ T5790] Call Trace: [ 187.782361][ T5790] [ 187.785341][ T5790] dump_stack_lvl+0x18c/0x250 [ 187.790088][ T5790] ? show_regs_print_info+0x20/0x20 [ 187.790614][ T7256] IPVS: nq: FWM 3 0x00000003 - no destination available [ 187.795345][ T5790] ? load_image+0x420/0x420 [ 187.806875][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 187.812047][ T5790] ? __lock_acquire+0x7d80/0x7d80 [ 187.817139][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 187.821879][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 187.827121][ T5790] kobject_add_internal+0x617/0xc90 [ 187.832361][ T5790] kobject_add+0x164/0x240 [ 187.836809][ T5790] ? __rwlock_init+0x150/0x150 [ 187.841608][ T5790] ? kobject_init+0x1d0/0x1d0 [ 187.846313][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 187.851203][ T5790] ? get_device_parent+0x366/0x390 [ 187.856354][ T5790] device_add+0x3fa/0xc40 [ 187.860731][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 187.865708][ T5790] hci_sync_conn_complete_evt+0x6d6/0x9a0 [ 187.871465][ T5790] ? hci_remote_ext_features_evt+0xa80/0xa80 [ 187.877486][ T5790] hci_event_packet+0x807/0x1280 [ 187.882459][ T5790] ? __lock_acquire+0x7d80/0x7d80 [ 187.887530][ T5790] ? lock_chain_count+0x20/0x20 [ 187.892412][ T5790] ? bis_list+0x290/0x290 [ 187.896789][ T5790] ? kcov_remote_start+0x513/0x810 [ 187.901933][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 187.907167][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 187.912407][ T5790] hci_rx_work+0x43a/0xd60 [ 187.916869][ T5790] ? process_scheduled_works+0x975/0x1600 [ 187.922623][ T5790] process_scheduled_works+0xa60/0x1600 [ 187.928224][ T5790] ? worker_attach_to_pool+0x370/0x370 [ 187.933725][ T5790] ? assign_work+0x3cc/0x5d0 [ 187.938355][ T5790] worker_thread+0xa5e/0xfe0 [ 187.942988][ T5790] ? _raw_spin_unlock+0x40/0x40 [ 187.947900][ T5790] ? __kthread_parkme+0x71/0x1c0 [ 187.952877][ T5790] kthread+0x2fa/0x390 [ 187.956982][ T5790] ? pr_cont_work+0x550/0x550 [ 187.961721][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 187.966339][ T5790] ret_from_fork+0x48/0x80 [ 187.970805][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 187.975434][ T5790] ret_from_fork_asm+0x11/0x20 [ 187.980243][ T5790] [ 187.983955][ T5790] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.998169][ T5790] Bluetooth: hci0: failed to register connection device [ 188.010785][ T7258] IPVS: Unknown mcast interface: nr0 [ 188.051641][ T7257] IPVS: using max 21 ests per chain, 50400 per kthread [ 188.583254][ T7216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.734395][ T7216] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.911245][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.572947][ T5784] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 189.756737][ T5787] Bluetooth: hci0: command tx timeout [ 191.830305][ T7310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.870969][ T7310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.234698][ T7310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.402024][ T7310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.537666][ T7310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.613433][ T7310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.752496][ T7310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.809213][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 193.253590][ T7310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.322473][ T7310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 193.526410][ T7310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.556713][ T7310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.624656][ T7310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 194.400566][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.314'. [ 194.644041][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.658761][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.716804][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.724762][ T5787] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 194.879103][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 195.356689][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 195.598726][ T5790] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.796842][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.874173][ T5787] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 196.956909][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 197.626609][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 197.676609][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.876577][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.056521][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 199.776641][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.037876][ T7429] input: syz1 as /devices/virtual/input/input8 [ 200.864110][ T7434] Illegal XDP return value 4291375104 on prog (id 64) dev N/A, expect packet loss! [ 200.864890][ T7436] loop2: detected capacity change from 0 to 512 [ 200.917762][ T7436] ext2: Unknown parameter 'fsmagic' [ 200.966838][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.453995][ T28] audit: type=1800 audit(1790718878.546:32): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.351" name="(" dev="sda1" ino=2043 res=0 errno=0 [ 201.509393][ T7443] FAULT_INJECTION: forcing a failure. [ 201.509393][ T7443] name fail_futex, interval 1, probability 0, space 0, times 1 [ 201.557347][ T7443] CPU: 1 PID: 7443 Comm: syz.2.353 Not tainted syzkaller #0 [ 201.564758][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.574882][ T7443] Call Trace: [ 201.578218][ T7443] [ 201.581199][ T7443] dump_stack_lvl+0x18c/0x250 [ 201.585952][ T7443] ? show_regs_print_info+0x20/0x20 [ 201.591219][ T7443] ? load_image+0x420/0x420 [ 201.595806][ T7443] should_fail_ex+0x394/0x4c0 [ 201.600555][ T7443] get_futex_key+0x136/0x1030 [ 201.605299][ T7443] ? futex_setup_timer+0xc0/0xc0 [ 201.610388][ T7443] futex_wait_setup+0xbc/0x270 [ 201.615210][ T7443] ? release_sock+0x2f/0x1c0 [ 201.619871][ T7443] ? futex_wait_multiple+0x920/0x920 [ 201.625225][ T7443] futex_wait+0x1bc/0x5c0 [ 201.629605][ T7443] ? futex_setup_timer+0xc0/0xc0 [ 201.634581][ T7443] ? futex_wait_setup+0x270/0x270 [ 201.639638][ T7443] ? lock_chain_count+0x20/0x20 [ 201.644518][ T7443] ? alg_bind+0x3eb/0x550 [ 201.648891][ T7443] ? _local_bh_enable+0xa0/0xa0 [ 201.653776][ T7443] ? do_raw_spin_unlock+0x121/0x230 [ 201.659014][ T7443] do_futex+0x2ff/0x3e0 [ 201.663196][ T7443] ? alg_bind+0x43c/0x550 [ 201.667558][ T7443] ? __ia32_sys_get_robust_list+0x110/0x110 [ 201.673569][ T7443] ? __sys_bind+0x32f/0x3f0 [ 201.678106][ T7443] __se_sys_futex+0x3a9/0x440 [ 201.682824][ T7443] ? __x64_sys_futex+0xf0/0xf0 [ 201.687623][ T7443] ? __x64_sys_futex+0x21/0xf0 [ 201.692417][ T7443] do_syscall_64+0x55/0xb0 [ 201.696865][ T7443] ? clear_bhb_loop+0x40/0x90 [ 201.701576][ T7443] ? clear_bhb_loop+0x40/0x90 [ 201.706292][ T7443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.712223][ T7443] RIP: 0033:0x7f771319e159 [ 201.716669][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.736316][ T7443] RSP: 002b:00007f771409a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.744766][ T7443] RAX: ffffffffffffffda RBX: 00007f7713425fa8 RCX: 00007f771319e159 [ 201.752795][ T7443] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7713425fa8 [ 201.760797][ T7443] RBP: 00007f7713425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 201.768795][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.776795][ T7443] R13: 00007f7713426038 R14: 00007ffe60c86770 R15: 00007ffe60c86858 [ 201.784813][ T7443] [ 202.502705][ T7462] netlink: 'syz.2.359': attribute type 4 has an invalid length. [ 202.590590][ T7465] netlink: 'syz.2.359': attribute type 4 has an invalid length. [ 202.668956][ T7463] syzkaller0: entered promiscuous mode [ 202.674518][ T7463] syzkaller0: entered allmulticast mode [ 202.710172][ T7460] loop1: detected capacity change from 0 to 512 [ 202.852485][ T7460] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.046704][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.156611][ T7460] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 203.195323][ T7460] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 203.247042][ T7460] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.357: Failed to acquire dquot type 1 [ 203.379663][ T7477] input: syz1 as /devices/virtual/input/input9 [ 203.433545][ T7460] EXT4-fs (loop1): 1 truncate cleaned up [ 203.487469][ T7460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 203.773211][ T7460] EXT4-fs (loop1): shut down requested (0) [ 203.882234][ T7487] EXT4-fs error (device loop1): ext4_lookup:1864: inode #2: comm syz.1.357: deleted inode referenced: 12 [ 204.162969][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 205.452882][ T7498] netlink: 'syz.4.370': attribute type 4 has an invalid length. [ 205.701090][ T7501] netlink: 'syz.4.370': attribute type 4 has an invalid length. [ 206.206890][ T7509] warning: `syz.4.372' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 206.450995][ T7099] syz.0.284 (7099) used greatest stack depth: 18200 bytes left [ 207.630890][ T7520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 207.646810][ T7520] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 207.724381][ T7521] netlink: 'syz.4.375': attribute type 1 has an invalid length. [ 208.599331][ T7523] wireguard0: entered promiscuous mode [ 208.873901][ T7521] wireguard1: entered promiscuous mode [ 209.174331][ T7535] jffs2: notice: (7535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.577744][ T5820] IPVS: starting estimator thread 0... [ 209.707022][ T7543] IPVS: using max 15 ests per chain, 36000 per kthread [ 210.356929][ T7550] futex_wake_op: syz.2.383 tries to shift op by 144; fix this program [ 210.430964][ T7546] team0: Port device team_slave_0 removed [ 210.559610][ T7546] team0: Port device team_slave_1 removed [ 210.584817][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.600820][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.643869][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.673856][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.772845][ T7546] bond0: (slave bridge0): Removing an active aggregator [ 210.795654][ T7546] bond0: (slave bridge0): Releasing backup interface [ 210.820046][ T7546] bond0: (slave bridge0): the permanent HWaddr of slave - 0e:57:cd:41:76:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 210.888176][ T7546] bridge0: left promiscuous mode [ 210.904158][ T7546] bridge0: left allmulticast mode [ 211.114474][ T7546] bond0: (slave bridge1): Releasing backup interface [ 211.233086][ T7546] bridge1: left promiscuous mode [ 211.269575][ T7546] bridge1: left allmulticast mode [ 211.417511][ T7546] bond0: (slave bridge2): Releasing backup interface [ 211.467587][ T7546] bridge2: left promiscuous mode [ 211.502559][ T7546] bridge2: left allmulticast mode [ 211.650796][ T7562] xt_socket: unknown flags 0x4c [ 212.037360][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 212.141552][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 212.225778][ T7547] team0: Mode changed to "activebackup" [ 212.242229][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 212.558119][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.969689][ T7580] FAULT_INJECTION: forcing a failure. [ 212.969689][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 213.085619][ T7580] CPU: 1 PID: 7580 Comm: syz.0.389 Not tainted syzkaller #0 [ 213.093012][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.103123][ T7580] Call Trace: [ 213.106461][ T7580] [ 213.109443][ T7580] dump_stack_lvl+0x18c/0x250 [ 213.114194][ T7580] ? show_regs_print_info+0x20/0x20 [ 213.119461][ T7580] ? load_image+0x420/0x420 [ 213.124027][ T7580] ? __might_sleep+0xe0/0xe0 [ 213.128675][ T7580] ? __lock_acquire+0x7d80/0x7d80 [ 213.133757][ T7580] ? trace_contention_end+0x39/0xe0 [ 213.139016][ T7580] should_fail_ex+0x394/0x4c0 [ 213.143761][ T7580] should_failslab+0x9/0x20 [ 213.148325][ T7580] slab_pre_alloc_hook+0x59/0x300 [ 213.153438][ T7580] ? mutex_unlock+0x10/0x10 [ 213.157998][ T7580] ? iptable_nat_table_init+0x9d/0x2d0 [ 213.163537][ T7580] ? iptable_nat_table_init+0x9d/0x2d0 [ 213.169052][ T7580] __kmem_cache_alloc_node+0x53/0x250 [ 213.174502][ T7580] ? iptable_nat_table_init+0x9d/0x2d0 [ 213.180056][ T7580] __kmalloc_node_track_caller+0xa4/0x230 [ 213.185848][ T7580] kmemdup+0x2b/0x70 [ 213.189821][ T7580] iptable_nat_table_init+0x9d/0x2d0 [ 213.195170][ T7580] xt_find_table_lock+0x304/0x3e0 [ 213.200218][ T7580] xt_request_find_table_lock+0x26/0x100 [ 213.205871][ T7580] do_ipt_get_ctl+0x71a/0x1210 [ 213.210656][ T7580] ? do_ipt_set_ctl+0xe00/0xe00 [ 213.215549][ T7580] ? __lock_acquire+0x7d80/0x7d80 [ 213.220588][ T7580] ? rcu_is_watching+0x15/0xb0 [ 213.225377][ T7580] ? trace_contention_end+0x39/0xe0 [ 213.230603][ T7580] ? __mutex_lock+0x30d/0xc80 [ 213.235343][ T7580] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 213.241020][ T7580] ? mutex_unlock+0x10/0x10 [ 213.245551][ T7580] ? __might_fault+0xaa/0x120 [ 213.250252][ T7580] ? __lock_acquire+0x7d80/0x7d80 [ 213.255309][ T7580] nf_getsockopt+0x262/0x280 [ 213.259921][ T7580] ip_getsockopt+0x19f/0x230 [ 213.264714][ T7580] ? ip_get_mcast_msfilter+0x360/0x360 [ 213.270190][ T7580] ? __might_fault+0xaa/0x120 [ 213.274885][ T7580] ? __might_fault+0xc6/0x120 [ 213.279577][ T7580] ? __might_fault+0xaa/0x120 [ 213.284280][ T7580] ? sctp_getsockopt+0x9b/0xb60 [ 213.289174][ T7580] ? sock_recv_errqueue+0x5e0/0x5e0 [ 213.294388][ T7580] do_sock_getsockopt+0x379/0x450 [ 213.299438][ T7580] ? __ia32_sys_setsockopt+0x200/0x200 [ 213.304942][ T7580] ? warn_bogus_irq_restore+0x20/0x30 [ 213.310363][ T7580] __x64_sys_getsockopt+0x1d6/0x280 [ 213.315588][ T7580] ? warn_bogus_irq_restore+0x20/0x30 [ 213.320980][ T7580] ? warn_bogus_irq_restore+0x20/0x30 [ 213.326385][ T7580] do_syscall_64+0x55/0xb0 [ 213.330825][ T7580] ? clear_bhb_loop+0x40/0x90 [ 213.335542][ T7580] ? clear_bhb_loop+0x40/0x90 [ 213.340264][ T7580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.346176][ T7580] RIP: 0033:0x7f09ae39e159 [ 213.350609][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.370230][ T7580] RSP: 002b:00007f09af1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 213.378663][ T7580] RAX: ffffffffffffffda RBX: 00007f09ae625fa0 RCX: 00007f09ae39e159 [ 213.386664][ T7580] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 213.394665][ T7580] RBP: 00007f09ae43506b R08: 00002000000000c0 R09: 0000000000000000 [ 213.402663][ T7580] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 213.410645][ T7580] R13: 00007f09ae626038 R14: 00007f09ae625fa0 R15: 00007ffd761eb478 [ 213.418652][ T7580] [ 213.451495][ T3491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.887343][ T7593] loop0: detected capacity change from 0 to 1024 [ 214.915670][ T7593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.942196][ T7593] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 215.066680][ T7593] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 215.468484][ T7602] futex_wake_op: syz.0.395 tries to shift op by 144; fix this program [ 215.637474][ T7605] xt_socket: unknown flags 0x4c [ 217.456677][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 217.490374][ T5820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.497174][ T7615] bridge_slave_1: left allmulticast mode [ 217.507355][ T7615] bridge_slave_1: left promiscuous mode [ 217.516748][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.533648][ T7615] bridge_slave_0: left allmulticast mode [ 217.546640][ T7615] bridge_slave_0: left promiscuous mode [ 217.562501][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.929164][ T7618] bridge_slave_0: left allmulticast mode [ 217.999847][ T7618] bridge_slave_0: left promiscuous mode [ 218.005735][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.042475][ T7610] xt_socket: unknown flags 0x4c [ 218.070477][ T7618] bridge_slave_1: left allmulticast mode [ 218.095111][ T7618] bridge_slave_1: left promiscuous mode [ 218.164090][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.317238][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.361513][ T7618] bond0: (slave bond_slave_0): Releasing backup interface [ 218.497524][ T7618] bond0: (slave bond_slave_1): Releasing backup interface [ 218.975968][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.643903][ T7618] team0: Port device team_slave_0 removed [ 220.008701][ T7618] team0: Port device team_slave_1 removed [ 220.094849][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.156609][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.298230][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.305724][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.679707][ T7655] bridge0: port 1(dummy0) entered blocking state [ 222.686388][ T7655] bridge0: port 1(dummy0) entered disabled state [ 222.693286][ T7655] dummy0: entered allmulticast mode [ 222.708689][ T7655] dummy0: entered promiscuous mode [ 223.709471][ T7667] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 223.959085][ T28] audit: type=1326 audit(1790718907.056:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ae39e159 code=0x7ffc0000 [ 224.004659][ T28] audit: type=1326 audit(1790718907.086:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ae39e159 code=0x7ffc0000 [ 224.043743][ T28] audit: type=1326 audit(1790718907.086:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ae39e159 code=0x7ffc0000 [ 224.077290][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.101133][ T28] audit: type=1326 audit(1790718907.086:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ae39e159 code=0x7ffc0000 [ 224.130227][ T28] audit: type=1326 audit(1790718907.086:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f09ae39e159 code=0x7ffc0000 [ 224.161622][ T28] audit: type=1326 audit(1790718907.176:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f09ae35e98e code=0x7ffc0000 [ 224.201582][ T28] audit: type=1326 audit(1790718907.196:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f09ae35e98e code=0x7ffc0000 [ 224.245665][ T28] audit: type=1326 audit(1790718907.196:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f09ae35e98e code=0x7ffc0000 [ 224.291120][ T28] audit: type=1326 audit(1790718907.196:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f09ae35e98e code=0x7ffc0000 [ 224.335474][ T28] audit: type=1326 audit(1790718907.196:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.0.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f09ae35e98e code=0x7ffc0000 [ 224.717047][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.131174][ T7683] "syz.2.417" (7683) uses obsolete ecb(arc4) skcipher [ 225.993390][ T7688] bond0: (slave bond_slave_0): Releasing backup interface [ 226.041795][ T7688] bond0: (slave bond_slave_1): Releasing backup interface [ 226.101843][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.117531][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.153260][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.175119][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.637470][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.852430][ T7707] futex_wake_op: syz.1.423 tries to shift op by 144; fix this program [ 226.960983][ T7711] FAULT_INJECTION: forcing a failure. [ 226.960983][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 227.010791][ T7711] CPU: 1 PID: 7711 Comm: syz.2.425 Not tainted syzkaller #0 [ 227.018182][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.028293][ T7711] Call Trace: [ 227.031622][ T7711] [ 227.034601][ T7711] dump_stack_lvl+0x18c/0x250 [ 227.039359][ T7711] ? show_regs_print_info+0x20/0x20 [ 227.044627][ T7711] ? load_image+0x420/0x420 [ 227.049195][ T7711] ? __lock_acquire+0x7d80/0x7d80 [ 227.054284][ T7711] ? is_dynamic_key+0x260/0x260 [ 227.059214][ T7711] ? mark_lock+0x94/0x320 [ 227.063624][ T7711] should_fail_ex+0x394/0x4c0 [ 227.068357][ T7711] should_failslab+0x9/0x20 [ 227.072902][ T7711] slab_pre_alloc_hook+0x59/0x300 [ 227.077975][ T7711] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 227.083380][ T7711] __kmem_cache_alloc_node+0x53/0x250 [ 227.088804][ T7711] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 227.094206][ T7711] kmalloc_trace+0x2a/0xe0 [ 227.098670][ T7711] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 227.103933][ T7711] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 227.109174][ T7711] ? verify_lock_unused+0x140/0x140 [ 227.114422][ T7711] ? __might_sleep+0xe0/0xe0 [ 227.119069][ T7711] ? mark_lock+0x94/0x320 [ 227.123444][ T7711] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 227.129464][ T7711] ? lock_chain_count+0x20/0x20 [ 227.134356][ T7711] ? tcp_set_state+0x6c0/0x6c0 [ 227.139168][ T7711] tcp_sendmsg+0x2f/0x50 [ 227.143457][ T7711] __sys_sendto+0x4a9/0x6b0 [ 227.147999][ T7711] ? __ia32_sys_getpeername+0x90/0x90 [ 227.153419][ T7711] ? bpf_link_show_fdinfo+0x560/0x560 [ 227.158827][ T7711] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 227.164839][ T7711] ? lock_chain_count+0x20/0x20 [ 227.169722][ T7711] __x64_sys_sendto+0xde/0xf0 [ 227.174432][ T7711] do_syscall_64+0x55/0xb0 [ 227.178883][ T7711] ? clear_bhb_loop+0x40/0x90 [ 227.183599][ T7711] ? clear_bhb_loop+0x40/0x90 [ 227.188586][ T7711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.194542][ T7711] RIP: 0033:0x7f771319e159 [ 227.198993][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.218644][ T7711] RSP: 002b:00007f771409a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 227.227099][ T7711] RAX: ffffffffffffffda RBX: 00007f7713425fa0 RCX: 00007f771319e159 [ 227.235124][ T7711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 227.243125][ T7711] RBP: 00007f771323506b R08: 0000200000e68000 R09: 0000000000000010 [ 227.251166][ T7711] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 227.259183][ T7711] R13: 00007f7713426038 R14: 00007f7713425fa0 R15: 00007ffe60c86858 [ 227.267222][ T7711] [ 229.213143][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.857701][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.001390][ T7736] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 230.019323][ T7736] ref_ctr increment failed for inode: 0x1d2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888024792600 [ 230.061704][ T7736] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 230.084758][ T7736] ref_ctr decrement failed for inode: 0x1d2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888024792600 [ 230.478593][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.062649][ T6664] syz.1.201 (6664) used greatest stack depth: 17464 bytes left [ 232.631073][ T7752] raw_sendmsg: syz.1.437 forgot to set AF_INET. Fix it! [ 233.038444][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.622255][ T7725] bridge_slave_0: left allmulticast mode [ 233.628075][ T7725] bridge_slave_0: left promiscuous mode [ 233.633953][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.644803][ T7725] bridge_slave_1: left allmulticast mode [ 233.650951][ T7725] bridge_slave_1: left promiscuous mode [ 233.661407][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.673515][ T7725] bond0: (slave bond_slave_0): Releasing backup interface [ 233.695035][ T7725] bond0: (slave bond_slave_1): Releasing backup interface [ 233.755178][ T7725] team0: Port device team_slave_0 removed [ 233.807472][ T7725] team0: Port device team_slave_1 removed [ 233.814358][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.827968][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.837679][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.845146][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.876295][ T7726] team0: Mode changed to "activebackup" [ 234.192312][ T7761] loop4: detected capacity change from 0 to 512 [ 234.211522][ T7761] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.271927][ T7761] FAT-fs (loop4): Directory bread(block 1056) failed [ 234.279063][ T7761] FAT-fs (loop4): Directory bread(block 1057) failed [ 234.285990][ T7761] FAT-fs (loop4): Directory bread(block 1058) failed [ 234.293082][ T7761] FAT-fs (loop4): Directory bread(block 1059) failed [ 234.300058][ T7761] FAT-fs (loop4): Directory bread(block 1060) failed [ 234.307066][ T7761] FAT-fs (loop4): Directory bread(block 1061) failed [ 234.313915][ T7761] FAT-fs (loop4): Directory bread(block 1062) failed [ 234.321075][ T7761] FAT-fs (loop4): Directory bread(block 1063) failed [ 234.328023][ T7761] FAT-fs (loop4): Directory bread(block 1064) failed [ 234.334881][ T7761] FAT-fs (loop4): Directory bread(block 1065) failed [ 235.043606][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.313418][ T7762] team0: Unable to change to the same mode the team is in [ 235.651462][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.433373][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.502433][ T7759] tipc: Enabled bearer , priority 0 [ 236.692088][ T7773] xt_HMARK: proto mask must be zero with L3 mode [ 236.801949][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 237.008950][ T5787] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 237.546844][ T7790] smc: net device team0 applied user defined pnetid SYZ2 [ 237.574452][ T7790] tipc: Resetting bearer [ 237.715648][ T7790] tipc: Disabling bearer [ 237.730685][ T7790] smc: removing net device team0 with user defined pnetid SYZ2 [ 238.878584][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.998049][ T7804] team0: Mode changed to "activebackup" [ 240.082769][ T7800] tipc: Enabled bearer , priority 0 [ 240.241048][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 240.305679][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 240.909678][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.199404][ T8] tipc: Node number set to 1255150048 [ 241.997373][ T3491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.000025][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.762823][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 243.851642][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 244.525033][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 244.563821][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.922205][ T7875] smc: net device team0 applied user defined pnetid SYZ2 [ 245.142257][ T7875] smc: removing net device team0 with user defined pnetid SYZ2 [ 245.573330][ T7884] loop2: detected capacity change from 0 to 512 [ 246.891472][ T7895] xt_HMARK: spi-set and port-set can't be combined [ 246.941111][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 246.941127][ T28] audit: type=1326 audit(1790718930.036:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.2.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x0 [ 247.119841][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.340645][ T7909] IPv6: sit1: Disabled Multicast RS [ 247.359053][ T7909] sit1: entered allmulticast mode [ 247.760058][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.773791][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.244014][ T7931] loop0: detected capacity change from 0 to 512 [ 250.333615][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.639788][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 251.704266][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 252.767915][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.836752][ T7958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.503'. [ 252.915038][ T7960] smc: net device team0 applied user defined pnetid SYZ2 [ 252.957789][ T7960] tipc: Resetting bearer [ 253.093826][ T7960] tipc: Disabling bearer [ 253.106933][ T7960] smc: removing net device team0 with user defined pnetid SYZ2 [ 253.517310][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.529206][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.082597][ T7987] loop4: detected capacity change from 0 to 512 [ 255.153816][ T7987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.168209][ T7987] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.527169][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.533642][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.550085][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.881957][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 256.919556][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 257.029003][ T6457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.521140][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 258.049928][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.213268][ T8019] loop2: detected capacity change from 0 to 512 [ 258.249513][ T8019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 258.272801][ T8019] System zones: 1-12 [ 258.293929][ T8019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.512: missing EA_INODE flag [ 258.318803][ T8019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.512: error while reading EA inode 12 err=-117 [ 258.333627][ T8019] EXT4-fs (loop2): 1 orphan inode deleted [ 258.341284][ T8019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.277803][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.289889][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.073718][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 260.123572][ T8054] loop4: detected capacity change from 0 to 512 [ 260.140295][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 260.154064][ T8054] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 260.180742][ T8054] EXT4-fs (loop4): 1 truncate cleaned up [ 260.213642][ T8054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.270209][ T8054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.450409][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.554337][ T8070] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 261.593358][ T8070] kvm: pic: level sensitive irq not supported [ 261.956064][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 262.012849][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 262.481476][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.543098][ T8098] loop1: detected capacity change from 0 to 512 [ 262.561690][ T8098] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.602732][ T8098] FAT-fs (loop1): Directory bread(block 1056) failed [ 262.609953][ T8098] FAT-fs (loop1): Directory bread(block 1057) failed [ 262.616830][ T8098] FAT-fs (loop1): Directory bread(block 1058) failed [ 262.623698][ T8098] FAT-fs (loop1): Directory bread(block 1059) failed [ 262.630635][ T8098] FAT-fs (loop1): Directory bread(block 1060) failed [ 262.638018][ T8098] FAT-fs (loop1): Directory bread(block 1061) failed [ 262.645211][ T8098] FAT-fs (loop1): Directory bread(block 1062) failed [ 262.652194][ T8098] FAT-fs (loop1): Directory bread(block 1063) failed [ 262.659113][ T8098] FAT-fs (loop1): Directory bread(block 1064) failed [ 262.665944][ T8098] FAT-fs (loop1): Directory bread(block 1065) failed [ 263.759440][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.690443][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'. [ 264.877248][ T8110] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 264.902438][ T8110] bond1 (unregistering): Released all slaves [ 264.931490][ T8117] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.046972][ T7305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.058867][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.310649][ T8130] syzkaller0: entered promiscuous mode [ 265.316340][ T8130] syzkaller0: entered allmulticast mode [ 265.417260][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 265.432011][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 265.833871][ T8139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.543'. [ 266.466291][ T8141] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 266.754450][ T8152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.787146][ T8152] loop4: detected capacity change from 0 to 512 [ 266.854330][ T8152] EXT4-fs (loop4): 1 truncate cleaned up [ 266.861673][ T8152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.880473][ T8154] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 266.979902][ T8157] loop0: detected capacity change from 0 to 512 [ 266.996486][ T8157] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.080002][ T8157] FAT-fs (loop0): Directory bread(block 1056) failed [ 267.087050][ T8157] FAT-fs (loop0): Directory bread(block 1057) failed [ 267.094383][ T8157] FAT-fs (loop0): Directory bread(block 1058) failed [ 267.101304][ T8157] FAT-fs (loop0): Directory bread(block 1059) failed [ 267.108216][ T8157] FAT-fs (loop0): Directory bread(block 1060) failed [ 267.115083][ T8157] FAT-fs (loop0): Directory bread(block 1061) failed [ 267.122388][ T8157] FAT-fs (loop0): Directory bread(block 1062) failed [ 267.129512][ T8157] FAT-fs (loop0): Directory bread(block 1063) failed [ 267.136363][ T8157] FAT-fs (loop0): Directory bread(block 1064) failed [ 267.143408][ T8157] FAT-fs (loop0): Directory bread(block 1065) failed [ 267.881590][ T8152] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.546: bg 0: block 465: padding at end of block bitmap is not set [ 268.548457][ T6457] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.718202][ T8165] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 268.877495][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.890586][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.992537][ T8167] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 269.059612][ T8167] bond0 (unregistering): Released all slaves [ 269.108478][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 269.140598][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 269.536681][ T8181] syzkaller0: entered promiscuous mode [ 269.556862][ T8181] syzkaller0: entered allmulticast mode [ 269.718168][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 269.733899][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 269.780869][ T8186] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.790107][ T8186] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.799075][ T8186] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.807961][ T8186] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.832449][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 269.846732][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 269.858141][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 269.891852][ T8184] syzkaller0: left promiscuous mode [ 269.906772][ T8184] syzkaller0: left allmulticast mode [ 269.930239][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 270.103718][ T8195] loop0: detected capacity change from 0 to 512 [ 270.152135][ T8195] ext2: Unknown parameter 'measure' [ 270.365627][ T8197] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 270.401926][ T8197] kvm: pic: level sensitive irq not supported [ 270.807422][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.809236][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.009336][ T8209] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 271.291545][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 271.400928][ T8217] loop2: detected capacity change from 0 to 512 [ 271.414699][ T8217] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.481087][ T8217] FAT-fs (loop2): Directory bread(block 1056) failed [ 271.488195][ T8217] FAT-fs (loop2): Directory bread(block 1057) failed [ 271.495067][ T8217] FAT-fs (loop2): Directory bread(block 1058) failed [ 271.501962][ T8217] FAT-fs (loop2): Directory bread(block 1059) failed [ 271.508845][ T8217] FAT-fs (loop2): Directory bread(block 1060) failed [ 271.515802][ T8217] FAT-fs (loop2): Directory bread(block 1061) failed [ 271.522738][ T8217] FAT-fs (loop2): Directory bread(block 1062) failed [ 271.529666][ T8217] FAT-fs (loop2): Directory bread(block 1063) failed [ 271.536819][ T8217] FAT-fs (loop2): Directory bread(block 1064) failed [ 271.543645][ T8217] FAT-fs (loop2): Directory bread(block 1065) failed [ 272.337287][ T8216] bond2: (slave bridge4): making interface the new active one [ 272.407647][ T8216] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 273.786630][ T8224] syzkaller0: entered promiscuous mode [ 273.792406][ T8224] syzkaller0: entered allmulticast mode [ 273.815294][ T8224] tipc: Enabled bearer , priority 0 [ 274.147178][ T8231] loop0: detected capacity change from 0 to 512 [ 274.158626][ T8231] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.233960][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.349099][ T8231] FAT-fs (loop0): Directory bread(block 1056) failed [ 274.356061][ T8231] FAT-fs (loop0): Directory bread(block 1057) failed [ 274.363045][ T8231] FAT-fs (loop0): Directory bread(block 1058) failed [ 274.370000][ T8231] FAT-fs (loop0): Directory bread(block 1059) failed [ 274.376924][ T8231] FAT-fs (loop0): Directory bread(block 1060) failed [ 274.383796][ T8231] FAT-fs (loop0): Directory bread(block 1061) failed [ 274.390667][ T8231] FAT-fs (loop0): Directory bread(block 1062) failed [ 274.397635][ T8231] FAT-fs (loop0): Directory bread(block 1063) failed [ 274.404502][ T8231] FAT-fs (loop0): Directory bread(block 1064) failed [ 274.411368][ T8231] FAT-fs (loop0): Directory bread(block 1065) failed [ 274.681894][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.965874][ T3070] tipc: Node number set to 3567978791 [ 276.621210][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.676900][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.726012][ T8243] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 276.775969][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.549972][ T8244] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 277.575372][ T8244] bond0 (unregistering): Released all slaves [ 277.615113][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 278.186963][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.581'. [ 279.115225][ T8269] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 279.154336][ T8269] kvm: pic: level sensitive irq not supported [ 279.281339][ T788] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 279.386914][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 279.476602][ T788] usb 5-1: Using ep0 maxpacket: 16 [ 279.560733][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.709146][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.835327][ T788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 279.958246][ T788] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.001849][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.043848][ T788] usb 5-1: config 0 descriptor?? [ 280.551215][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.505813][ T8287] loop2: detected capacity change from 0 to 512 [ 281.514204][ T8287] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.581006][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.642463][ T8287] FAT-fs (loop2): Directory bread(block 1056) failed [ 281.649622][ T8287] FAT-fs (loop2): Directory bread(block 1057) failed [ 281.656630][ T8287] FAT-fs (loop2): Directory bread(block 1058) failed [ 281.663461][ T8287] FAT-fs (loop2): Directory bread(block 1059) failed [ 281.670368][ T8287] FAT-fs (loop2): Directory bread(block 1060) failed [ 281.678110][ T8287] FAT-fs (loop2): Directory bread(block 1061) failed [ 281.684910][ T8287] FAT-fs (loop2): Directory bread(block 1062) failed [ 281.692210][ T8287] FAT-fs (loop2): Directory bread(block 1063) failed [ 281.699153][ T8287] FAT-fs (loop2): Directory bread(block 1064) failed [ 281.705982][ T8287] FAT-fs (loop2): Directory bread(block 1065) failed [ 282.319605][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.330958][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.881057][ T8292] loop4: detected capacity change from 0 to 512 [ 282.981074][ T8291] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 283.559134][ T8293] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 283.633855][ T8293] bond0 (unregistering): Released all slaves [ 283.685278][ T788] usbhid 5-1:0.0: can't add hid device: -71 [ 283.697190][ T788] usbhid: probe of 5-1:0.0 failed with error -71 [ 283.711051][ T788] usb 5-1: USB disconnect, device number 4 [ 284.029692][ T8302] loop0: detected capacity change from 0 to 512 [ 284.541070][ T8312] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 284.791755][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 284.834239][ T8312] bond0: (slave bridge1): making interface the new active one [ 284.877743][ T8312] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 285.085497][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.589'. [ 285.740214][ T8322] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 285.771678][ T8322] kvm: pic: level sensitive irq not supported [ 286.297238][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.601'. [ 286.960954][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.059799][ T8339] FAULT_INJECTION: forcing a failure. [ 287.059799][ T8339] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 287.079295][ T8339] CPU: 0 PID: 8339 Comm: syz.1.593 Not tainted syzkaller #0 [ 287.086686][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.096805][ T8339] Call Trace: [ 287.100139][ T8339] [ 287.103125][ T8339] dump_stack_lvl+0x18c/0x250 [ 287.107880][ T8339] ? show_regs_print_info+0x20/0x20 [ 287.113161][ T8339] ? load_image+0x420/0x420 [ 287.117732][ T8339] ? __lock_acquire+0x7d80/0x7d80 [ 287.122832][ T8339] should_fail_ex+0x394/0x4c0 [ 287.127583][ T8339] prepare_alloc_pages+0x1e1/0x5b0 [ 287.132757][ T8339] __alloc_pages+0x134/0x460 [ 287.137409][ T8339] ? zone_statistics+0x170/0x170 [ 287.142419][ T8339] __pmd_alloc+0x9a/0x8c0 [ 287.146806][ T8339] ? __rwlock_init+0x150/0x150 [ 287.151642][ T8339] ? __pud_alloc+0x200/0x200 [ 287.156286][ T8339] ? hugepage_vma_check+0x471/0x560 [ 287.161551][ T8339] handle_mm_fault+0xb75/0x4a50 [ 287.166457][ T8339] ? handle_mm_fault+0xe6/0x4a50 [ 287.171463][ T8339] ? numa_migrate_prep+0x350/0x350 [ 287.176653][ T8339] __get_user_pages+0x604/0x1580 [ 287.181668][ T8339] ? vma_link+0x2e1/0x530 [ 287.186092][ T8339] ? populate_vma_page_range+0x380/0x380 [ 287.191804][ T8339] get_user_pages_remote+0x39e/0xb90 [ 287.197177][ T8339] ? get_dump_page+0x200/0x200 [ 287.202010][ T8339] ? down_read+0x1ac/0x2e0 [ 287.206488][ T8339] get_arg_page+0x274/0x560 [ 287.211059][ T8339] ? copy_string_kernel+0x220/0x220 [ 287.216319][ T8339] ? up_write+0x1be/0x410 [ 287.220707][ T8339] copy_string_kernel+0x165/0x220 [ 287.225793][ T8339] do_execveat_common+0x35d/0x6b0 [ 287.230891][ T8339] __x64_sys_execveat+0xc4/0xe0 [ 287.235815][ T8339] do_syscall_64+0x55/0xb0 [ 287.240298][ T8339] ? clear_bhb_loop+0x40/0x90 [ 287.245035][ T8339] ? clear_bhb_loop+0x40/0x90 [ 287.249772][ T8339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.255720][ T8339] RIP: 0033:0x7f3a8999e159 [ 287.260189][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.279851][ T8339] RSP: 002b:00007f3a8a7f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 287.288335][ T8339] RAX: ffffffffffffffda RBX: 00007f3a89c25fa0 RCX: 00007f3a8999e159 [ 287.296370][ T8339] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 287.304397][ T8339] RBP: 00007f3a89a3506b R08: 0000000000001000 R09: 0000000000000000 [ 287.312418][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.320440][ T8339] R13: 00007f3a89c26038 R14: 00007f3a89c25fa0 R15: 00007ffea661b138 [ 287.328484][ T8339] [ 287.441253][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.486544][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 287.534729][ T8343] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 287.617588][ T8348] bond2: entered promiscuous mode [ 287.622723][ T8348] bond2: entered allmulticast mode [ 287.656987][ T8348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.672105][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 287.685964][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.716642][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.760985][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.811018][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.861616][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.876570][ T8343] bridge2: entered promiscuous mode [ 287.892357][ T8343] bridge2: entered allmulticast mode [ 287.907545][ T8343] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 287.917405][ T9] usb 1-1: config 0 descriptor?? [ 287.956604][ T59] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 287.973468][ T8348] bridge3: entered promiscuous mode [ 287.984047][ T8348] bridge3: entered allmulticast mode [ 287.994742][ T8348] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 288.062477][ T8348] bridge4: entered promiscuous mode [ 288.078424][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.090783][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.090805][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.112865][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.117390][ T8348] bridge4: entered allmulticast mode [ 288.177591][ T8348] bond2: (slave bridge4): Enslaving as a backup interface with a down link [ 288.920784][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input10 [ 288.952411][ T9] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 289.215854][ T9] usb 1-1: USB disconnect, device number 5 [ 289.549284][ T8359] loop2: detected capacity change from 0 to 512 [ 290.213246][ T8362] loop1: detected capacity change from 0 to 512 [ 290.221185][ T8362] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 290.380167][ T8362] FAT-fs (loop1): Directory bread(block 1056) failed [ 290.387240][ T8362] FAT-fs (loop1): Directory bread(block 1057) failed [ 290.394118][ T8362] FAT-fs (loop1): Directory bread(block 1058) failed [ 290.401499][ T8362] FAT-fs (loop1): Directory bread(block 1059) failed [ 290.408638][ T8362] FAT-fs (loop1): Directory bread(block 1060) failed [ 290.415586][ T8362] FAT-fs (loop1): Directory bread(block 1061) failed [ 290.422553][ T8362] FAT-fs (loop1): Directory bread(block 1062) failed [ 290.429535][ T8362] FAT-fs (loop1): Directory bread(block 1063) failed [ 290.436393][ T8362] FAT-fs (loop1): Directory bread(block 1064) failed [ 290.443382][ T8362] FAT-fs (loop1): Directory bread(block 1065) failed [ 292.617448][ T8368] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 292.922480][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 293.205750][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.876257][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.888002][ T1147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.899494][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.829125][ T8392] loop0: detected capacity change from 0 to 128 [ 296.379391][ T28] audit: type=1326 audit(1790718979.476:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.412327][ T28] audit: type=1326 audit(1790718979.496:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.447064][ T28] audit: type=1326 audit(1790718979.496:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.474277][ T8411] loop1: detected capacity change from 0 to 512 [ 296.474848][ T28] audit: type=1326 audit(1790718979.496:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.510908][ T28] audit: type=1326 audit(1790718979.506:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.545226][ T28] audit: type=1326 audit(1790718979.506:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.577436][ T28] audit: type=1326 audit(1790718979.506:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.639268][ T28] audit: type=1326 audit(1790718979.506:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.664737][ T28] audit: type=1326 audit(1790718979.506:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 296.862299][ T28] audit: type=1326 audit(1790718979.506:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.2.614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771319e159 code=0x7ffc0000 [ 297.240052][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 297.398271][ T8418] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 297.460525][ T8419] bond0: entered promiscuous mode [ 297.465654][ T8419] bond0: entered allmulticast mode [ 297.497681][ T8419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.533456][ T8418] bridge2: entered promiscuous mode [ 297.539291][ T8418] bridge2: entered allmulticast mode [ 297.545498][ T8418] bond0: (slave bridge2): Enslaving as a backup interface with an up link [ 297.574198][ T8420] bridge3: entered promiscuous mode [ 297.582086][ T8420] bridge3: entered allmulticast mode [ 297.589840][ T59] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.612810][ T8420] bond0: (slave bridge3): Enslaving as a backup interface with a down link [ 297.645394][ T8418] bridge4: entered promiscuous mode [ 297.653945][ T8418] bridge4: entered allmulticast mode [ 297.662554][ T8418] bond0: (slave bridge4): Enslaving as a backup interface with a down link [ 297.719410][ T1106] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 298.987039][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.037012][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.519932][ T8438] loop2: detected capacity change from 0 to 128 [ 299.618314][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.667214][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.249969][ T8471] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 303.647904][ T8472] bond3: entered promiscuous mode [ 303.653061][ T8472] bond3: entered allmulticast mode [ 303.718253][ T8472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.899750][ T8474] bridge5: entered promiscuous mode [ 303.905222][ T8474] bridge5: entered allmulticast mode [ 303.986883][ T59] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.047370][ T8474] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 304.176707][ T1114] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.770721][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.782961][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.877488][ T8471] bridge6: entered promiscuous mode [ 304.882944][ T8471] bridge6: entered allmulticast mode [ 304.967969][ T8471] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 304.996164][ T8471] bridge7: entered promiscuous mode [ 305.042944][ T8471] bridge7: entered allmulticast mode [ 305.055498][ T8471] bond3: (slave bridge7): Enslaving as a backup interface with a down link [ 305.123210][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.136319][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.158126][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.188858][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.198339][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.220145][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.359988][ T1106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.372194][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.412260][ T8485] jffs2: notice: (8485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.902017][ T1078] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.111358][ T1078] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.242791][ T1078] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.415728][ T1078] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.577519][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 306.787090][ T1078] tipc: Disabling bearer [ 306.804284][ T1078] tipc: Left network mode [ 306.856601][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.863927][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.873221][ T8481] bridge_slave_0: entered allmulticast mode [ 306.881103][ T8481] bridge_slave_0: entered promiscuous mode [ 306.941584][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.951090][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.958888][ T8481] bridge_slave_1: entered allmulticast mode [ 306.968618][ T8481] bridge_slave_1: entered promiscuous mode [ 307.006058][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.075308][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.222395][ T8481] team0: Port device team_slave_0 added [ 307.250925][ T8481] team0: Port device team_slave_1 added [ 307.283476][ T5790] Bluetooth: hci4: command tx timeout [ 307.363066][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.392402][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.458016][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.570714][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.590428][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.626350][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.812247][ T8481] hsr_slave_0: entered promiscuous mode [ 307.827671][ T8481] hsr_slave_1: entered promiscuous mode [ 307.840557][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.856537][ T8481] Cannot create hsr debugfs directory [ 308.464491][ T1078] dummy0: left allmulticast mode [ 308.483212][ T1078] dummy0: left promiscuous mode [ 308.496720][ T1078] bridge0: port 1(dummy0) entered disabled state [ 308.529977][ T1078] hsr_slave_0: left promiscuous mode [ 308.546841][ T1078] hsr_slave_1: left promiscuous mode [ 308.601007][ T1078] veth1_macvtap: left promiscuous mode [ 308.606867][ T1078] veth0_macvtap: left promiscuous mode [ 308.612792][ T1078] veth1_vlan: left promiscuous mode [ 308.620494][ T1078] veth0_vlan: left promiscuous mode [ 308.892697][ T1078] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 308.946831][ T1078] bond3 (unregistering): Released all slaves [ 308.993543][ T1078] bond2 (unregistering): Released all slaves [ 309.155948][ T1078] bond1 (unregistering): Released all slaves [ 309.356701][ T5790] Bluetooth: hci4: command tx timeout [ 309.611957][ T1078] bond0 (unregistering): Released all slaves [ 309.997217][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.117593][ T1147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.366379][ T8481] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.405836][ T8481] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.436849][ T5790] Bluetooth: hci4: command tx timeout [ 311.460501][ T8481] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.499257][ T8481] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.787607][ T1078] IPVS: stop unused estimator thread 0... [ 311.820723][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.909487][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.934044][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.941348][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.989958][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.997204][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.071154][ T8481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.511422][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.098736][ T8481] veth0_vlan: entered promiscuous mode [ 313.129432][ T8481] veth1_vlan: entered promiscuous mode [ 313.217912][ T8481] veth0_macvtap: entered promiscuous mode [ 313.239961][ T8481] veth1_macvtap: entered promiscuous mode [ 313.302300][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.340822][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.378278][ T8481] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.415465][ T8481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.426063][ T8481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.435195][ T8481] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.534490][ T5790] Bluetooth: hci4: command tx timeout [ 313.671619][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.690605][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.751176][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.775168][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.683321][ T8574] loop2: detected capacity change from 0 to 2048 [ 314.758569][ T8574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.799346][ T8574] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.013489][ T8591] loop5: detected capacity change from 0 to 128 [ 315.373946][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.841329][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.233047][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.522645][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.529118][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.223216][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 320.320587][ T8659] loop2: detected capacity change from 0 to 1024 [ 320.908738][ T8659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.357014][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.542064][ T8687] loop5: detected capacity change from 0 to 128 [ 321.636517][ T8687] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 321.806708][ T8687] sysv_free_block: trying to free block not in datazone [ 322.019034][ T8481] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 322.648826][ T3491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.831396][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.231269][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 327.378225][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.397124][ T3491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.512168][ T8773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.531017][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 328.568427][ T8774] loop5: detected capacity change from 0 to 512 [ 328.689176][ T8774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.774953][ T8774] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.056354][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.669'. [ 329.837309][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 329.896823][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 329.935180][ T8796] syzkaller0: entered promiscuous mode [ 329.939830][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 329.966660][ T8796] syzkaller0: entered allmulticast mode [ 329.974722][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 330.003888][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 330.049650][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 330.092369][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 330.123904][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 330.154877][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 330.171935][ T8800] input: syz1 as /devices/virtual/input/input11 [ 330.204384][ T8481] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 330.480871][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 330.634716][ T8815] loop1: detected capacity change from 0 to 2048 [ 330.697482][ T8815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.734589][ T8815] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.936052][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.249058][ T8481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.399916][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.460833][ T8834] tipc: Failed to obtain node identity [ 331.484552][ T8834] tipc: Enabling of bearer rejected, failed to enable media [ 332.454685][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.631314][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.771157][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.409499][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.889613][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.527013][ T8870] netlink: 180 bytes leftover after parsing attributes in process `syz.0.686'. [ 335.536127][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 337.113006][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.124197][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.135865][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.199726][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.209656][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.217834][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.064818][ T8891] loop1: detected capacity change from 0 to 256 [ 338.192234][ T8891] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 338.970074][ T5787] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 339.093988][ T5820] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 339.209239][ T8919] tipc: New replicast peer: 255.255.255.255 [ 339.229240][ T8919] tipc: Enabled bearer , priority 10 [ 339.275716][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 339.296823][ T5787] Bluetooth: hci1: command tx timeout [ 339.310541][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 339.350948][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.368325][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 339.434792][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.476534][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.524512][ T5820] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.546530][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.622016][ T5820] usb 2-1: config 0 descriptor?? [ 339.652968][ T11] hsr_slave_0: left promiscuous mode [ 339.681198][ T11] hsr_slave_1: left promiscuous mode [ 339.714164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.738875][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.780046][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.800074][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.826317][ T11] bridge_slave_1: left allmulticast mode [ 339.836046][ T11] bridge_slave_1: left promiscuous mode [ 339.846881][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.864921][ T11] bridge_slave_0: left allmulticast mode [ 339.870913][ T11] bridge_slave_0: left promiscuous mode [ 339.877716][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.988643][ T8929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.057729][ T11] veth1_macvtap: left promiscuous mode [ 340.070924][ T11] veth0_macvtap: left promiscuous mode [ 340.087083][ T11] veth1_vlan: left promiscuous mode [ 340.098071][ T11] veth0_vlan: left promiscuous mode [ 340.557572][ T1147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.050722][ T5820] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input12 [ 341.093082][ T5820] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 341.275671][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 341.275688][ T28] audit: type=1326 audit(1790719024.376:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.0.699" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09ae39e159 code=0x0 [ 341.366523][ T5787] Bluetooth: hci1: command tx timeout [ 341.686013][ T11] team0 (unregistering): Port device team_slave_1 removed [ 341.742800][ T11] team0 (unregistering): Port device team_slave_0 removed [ 341.799247][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.858766][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.292119][ T11] bond0 (unregistering): Released all slaves [ 342.613694][ T8] usb 2-1: USB disconnect, device number 3 [ 342.680964][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.718395][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.740581][ T8881] bridge_slave_0: entered allmulticast mode [ 342.764861][ T8881] bridge_slave_0: entered promiscuous mode [ 342.800583][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.823765][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.845899][ T8881] bridge_slave_1: entered allmulticast mode [ 342.864499][ T8881] bridge_slave_1: entered promiscuous mode [ 342.965255][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.995041][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.131106][ T8881] team0: Port device team_slave_0 added [ 343.144915][ T8881] team0: Port device team_slave_1 added [ 343.270172][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.282863][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.317760][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.345677][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.359359][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.392532][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.415508][ T8956] hub 2-0:1.0: USB hub found [ 343.435441][ T8956] hub 2-0:1.0: 1 port detected [ 343.446786][ T5787] Bluetooth: hci1: command tx timeout [ 343.571901][ T8881] hsr_slave_0: entered promiscuous mode [ 343.609635][ T8881] hsr_slave_1: entered promiscuous mode [ 343.621100][ T8881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.629128][ T8881] Cannot create hsr debugfs directory [ 343.761897][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.073837][ T8881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.120098][ T8881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.148345][ T8881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.170160][ T8881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.516477][ T5787] Bluetooth: hci1: command tx timeout [ 345.696148][ T3454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.053467][ T8881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.274645][ T8] IPVS: starting estimator thread 0... [ 346.302374][ T9003] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 346.351701][ T8881] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.386655][ T9001] IPVS: using max 17 ests per chain, 40800 per kthread [ 346.409808][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.417040][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.470679][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.477969][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.488746][ T9006] loop1: detected capacity change from 0 to 2048 [ 346.689444][ T9006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.555484][ T9016] tipc: Started in network mode [ 347.588439][ T9016] tipc: Node identity ac14140f, cluster identity 4711 [ 347.604713][ T9006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.616222][ T9016] tipc: New replicast peer: 255.255.255.255 [ 347.629127][ T9016] tipc: Enabled bearer , priority 10 [ 347.691126][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 348.019644][ T9031] jffs2: notice: (9031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 348.755800][ T9] tipc: Node number set to 2886997007 [ 348.960410][ T8881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.032070][ T9043] tipc: Enabled bearer , priority 0 [ 349.050744][ T9049] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 349.105973][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.366456][ T9051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.395092][ T9051] bond0: (slave bond1): Enslaving as an active interface with a down link [ 349.530558][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.929777][ T9052] gretap1: entered promiscuous mode [ 350.014476][ T9052] bond0: (slave gretap1): making interface the new active one [ 350.088912][ T9052] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 350.216053][ T9067] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 350.571987][ T8881] veth0_vlan: entered promiscuous mode [ 350.615530][ T8881] veth1_vlan: entered promiscuous mode [ 350.658911][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 350.686353][ T8881] veth0_macvtap: entered promiscuous mode [ 350.715525][ T8881] veth1_macvtap: entered promiscuous mode [ 350.789544][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.860695][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.940455][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 351.332152][ T8881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.559294][ T8881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.619209][ T8881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.628074][ T8881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.048352][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.085806][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.259613][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.290078][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.384226][ T9142] tipc: New replicast peer: 255.255.255.255 [ 356.416250][ T9142] tipc: Enabled bearer , priority 10 [ 356.528073][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 356.614759][ T9149] netlink: 'syz.0.735': attribute type 4 has an invalid length. [ 356.784324][ T6480] IPVS: starting estimator thread 0... [ 356.803073][ T9155] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 356.907761][ T9154] IPVS: using max 17 ests per chain, 40800 per kthread [ 358.837085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 359.140714][ T9170] bridge0: port 1(syz_tun) entered blocking state [ 359.165559][ T9170] bridge0: port 1(syz_tun) entered disabled state [ 359.196104][ T9170] syz_tun: entered allmulticast mode [ 359.209297][ T9170] syz_tun: entered promiscuous mode [ 359.244382][ T9170] bridge0: port 1(syz_tun) entered blocking state [ 359.251523][ T9170] bridge0: port 1(syz_tun) entered forwarding state [ 359.523517][ T9179] loop6: detected capacity change from 0 to 2048 [ 359.588849][ T9179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.733060][ T9179] EXT4-fs (loop6): shut down requested (1) [ 360.211240][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.435741][ T9197] bridge0: port 3(vxlan0) entered blocking state [ 360.445786][ T9197] bridge0: port 3(vxlan0) entered disabled state [ 360.459663][ T9197] vxlan0: entered allmulticast mode [ 360.470100][ T9197] vxlan0: entered promiscuous mode [ 360.606040][ T9174] loop0: detected capacity change from 0 to 40427 [ 360.612189][ T9202] loop1: detected capacity change from 0 to 512 [ 360.662549][ T9174] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 360.684817][ T9202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.696707][ T9174] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 360.709373][ T9202] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.721033][ T9174] F2FS-fs (loop0): invalid crc value [ 360.741687][ T9200] tipc: Enabled bearer , priority 0 [ 360.809798][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 361.034266][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.088077][ T9174] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 361.106937][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.119061][ T9174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 361.149026][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.207930][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.257273][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.312746][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.375279][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.449049][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.497333][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 361.541281][ T5786] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 362.267961][ T9216] loop6: detected capacity change from 0 to 40427 [ 362.320121][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.332917][ T9216] F2FS-fs (loop6): heap/no_heap options were deprecated [ 362.485969][ T9216] F2FS-fs (loop6): Found nat_bits in checkpoint [ 362.622655][ T9216] F2FS-fs (loop6): Start checkpoint disabled! [ 362.930743][ T9216] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 363.902852][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.800738][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.435735][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.656818][ T5820] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 366.020184][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 366.040715][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.069432][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.127425][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 366.169868][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.179182][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.192589][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.230626][ T9269] netlink: zone id is out of range [ 366.235947][ T9269] netlink: zone id is out of range [ 366.250095][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.259806][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.267956][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 366.275720][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.289639][ T9269] netlink: zone id is out of range [ 366.382616][ T9269] netlink: zone id is out of range [ 366.390963][ T9269] netlink: zone id is out of range [ 366.420364][ T9269] netlink: zone id is out of range [ 366.446263][ T5820] usb 1-1: Product: syz [ 366.450200][ T9269] netlink: zone id is out of range [ 366.452539][ T5820] usb 1-1: Manufacturer: syz [ 366.460445][ T5820] usb 1-1: SerialNumber: syz [ 366.478406][ T5820] usb 1-1: config 0 descriptor?? [ 366.519632][ T5820] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 366.529148][ T9269] netlink: zone id is out of range [ 366.534312][ T9269] netlink: zone id is out of range [ 366.548807][ T5820] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 366.740022][ T9269] netlink: zone id is out of range [ 367.391556][ T9279] futex_wake_op: syz.2.758 tries to shift op by 144; fix this program [ 367.425434][ T49] tipc: Disabling bearer [ 367.443876][ T49] tipc: Disabling bearer [ 367.494789][ T49] tipc: Left network mode [ 367.512358][ T9283] ªªªªªª: renamed from vlan0 (while UP) [ 367.582429][ T5820] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 367.777469][ T9288] loop2: detected capacity change from 0 to 8192 [ 367.869768][ T9265] chnl_net:caif_netlink_parms(): no params data found [ 367.975727][ T9288] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 367.981493][ T9288] loop2: partition table partially beyond EOD, truncated [ 367.990813][ T9288] loop2: p1 start 100663296 is beyond EOD, truncated [ 367.998588][ T9288] loop2: p2 size 134217732 extends beyond EOD, truncated [ 368.152497][ T5820] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 368.324029][ T9288] loop2: p4 size 14876672 extends beyond EOD, truncated [ 368.333633][ T5790] Bluetooth: hci3: command tx timeout [ 368.423938][ T5820] em28xx 1-1:0.0: board has no eeprom [ 368.684707][ T9288] loop2: p5 size 134217732 extends beyond EOD, truncated [ 368.755815][ T9288] loop2: p6 size 14876672 extends beyond EOD, truncated [ 368.776508][ T5820] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 368.807239][ T5820] em28xx 1-1:0.0: dvb set to bulk mode. [ 368.812947][ T1210] em28xx 1-1:0.0: Binding DVB extension [ 368.922680][ T9304] loop6: detected capacity change from 0 to 2048 [ 368.939658][ T6480] usb 1-1: USB disconnect, device number 6 [ 369.168908][ T9304] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c11c, mo2=0002] [ 369.177394][ T9304] System zones: 0-7 [ 369.195425][ T6480] em28xx 1-1:0.0: Disconnecting em28xx [ 369.203289][ T9304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.509184][ T1210] em28xx 1-1:0.0: Registering input extension [ 370.132489][ T9314] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #2: block 16: comm syz.6.761: lblock 0 mapped to illegal pblock 16 (length 1) [ 370.273036][ T9243] udevd[9243]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 370.371468][ T6480] em28xx 1-1:0.0: Closing input extension [ 370.406478][ T5790] Bluetooth: hci3: command tx timeout [ 370.414084][ T9316] udevd[9316]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 370.423327][ T6480] em28xx 1-1:0.0: Freeing device [ 370.443535][ T9317] udevd[9317]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 370.465751][ T9318] udevd[9318]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 370.505960][ T9322] udevd[9322]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 370.812735][ T8881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.518180][ T9326] loop0: detected capacity change from 0 to 2048 [ 371.626723][ T9326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.686912][ T9326] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.786535][ T9336] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 371.832209][ T9329] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 182 with error 28 [ 371.854330][ T9329] EXT4-fs (loop0): This should not happen!! Data will be lost [ 371.854330][ T9329] [ 371.875709][ T9329] EXT4-fs (loop0): Total free blocks count 0 [ 371.884910][ T9329] EXT4-fs (loop0): Free/Dirty block details [ 371.905276][ T9329] EXT4-fs (loop0): free_blocks=0 [ 371.925619][ T9329] EXT4-fs (loop0): dirty_blocks=192 [ 371.947139][ T9329] EXT4-fs (loop0): Block reservation details [ 371.953809][ T9329] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 372.005455][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.016324][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.547395][ T5790] Bluetooth: hci3: command tx timeout [ 373.063409][ T9265] bridge_slave_0: entered allmulticast mode [ 373.096527][ T9265] bridge_slave_0: entered promiscuous mode [ 373.134106][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.152607][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.181066][ T9265] bridge_slave_1: entered allmulticast mode [ 373.236645][ T9265] bridge_slave_1: entered promiscuous mode [ 373.409518][ T1114] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 198 with max blocks 1 with error 28 [ 373.586051][ T9265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.683799][ T9265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.022880][ T9265] team0: Port device team_slave_0 added [ 374.054489][ T9265] team0: Port device team_slave_1 added [ 374.292431][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.302368][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.347046][ T9265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.367436][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.374599][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.411754][ T9265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.542567][ T9265] hsr_slave_0: entered promiscuous mode [ 374.556223][ T49] IPVS: stopping backup sync thread 9155 ... [ 374.565017][ T5790] Bluetooth: hci3: command tx timeout [ 374.594932][ T9265] hsr_slave_1: entered promiscuous mode [ 374.609693][ T9265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.625354][ T9265] Cannot create hsr debugfs directory [ 374.842881][ T49] ------------[ cut here ]------------ [ 374.849474][ T49] WARNING: CPU: 1 PID: 49 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 374.860760][ T49] Modules linked in: [ 374.864721][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 374.872376][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.883121][ T49] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 374.888033][ T49] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 374.894952][ T49] Code: 7c 2d 00 00 74 08 48 89 df e8 48 3e cc f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 01 14 86 00 e8 0c b2 73 f7 <0f> 0b eb c5 48 c7 c1 2c 66 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 374.915150][ T49] RSP: 0018:ffffc90000b9f568 EFLAGS: 00010293 [ 374.921400][ T49] RAX: ffffffff8a13d944 RBX: ffff88805de31618 RCX: ffff88801d659e00 [ 374.929557][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.937657][ T49] RBP: 0000000000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 374.945782][ T49] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88805de32c88 [ 374.953898][ T49] R13: 1ffff1100bbc62c3 R14: ffff88805de32440 R15: dffffc0000000000 [ 374.962227][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 374.971370][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.978059][ T49] CR2: 000055df45f0b660 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 374.986098][ T49] Call Trace: [ 374.989523][ T49] [ 374.992536][ T49] ? trace_drv_return_void+0x1c0/0x1c0 [ 374.998136][ T49] unregister_netdevice_many_notify+0x1357/0x1910 [ 375.004639][ T49] ? unregister_netdevice_many+0x20/0x20 [ 375.010387][ T49] ? kernfs_remove_by_name_ns+0x117/0x150 [ 375.016463][ T49] ? __lock_acquire+0x7d80/0x7d80 [ 375.021569][ T49] unregister_netdevice_queue+0x2e9/0x330 [ 375.027488][ T49] ? list_netdevice+0x730/0x730 [ 375.032408][ T49] ? kernfs_remove_by_name_ns+0x117/0x150 [ 375.038286][ T49] _cfg80211_unregister_wdev+0x16d/0x580 [ 375.044040][ T49] ieee80211_remove_interfaces+0x4b3/0x690 [ 375.049975][ T49] ? ieee80211_do_stop+0x2000/0x2000 [ 375.055326][ T49] ? rcu_is_watching+0x15/0xb0 [ 375.060235][ T49] ieee80211_unregister_hw+0x5d/0x2a0 [ 375.065683][ T49] mac80211_hwsim_del_radio+0x289/0x480 [ 375.071364][ T49] ? rhashtable_remove_fast+0xc00/0xc00 [ 375.077028][ T49] hwsim_exit_net+0x58d/0x650 [ 375.081786][ T49] ? hwsim_init_net+0x90/0x90 [ 375.086568][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 375.092454][ T49] cleanup_net+0x6f7/0xb00 [ 375.097006][ T49] ? ops_free_list+0x3b0/0x3b0 [ 375.101877][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.107165][ T49] ? process_scheduled_works+0x975/0x1600 [ 375.112943][ T49] ? process_scheduled_works+0x975/0x1600 [ 375.119428][ T49] process_scheduled_works+0xa60/0x1600 [ 375.125082][ T49] ? worker_attach_to_pool+0x370/0x370 [ 375.130755][ T49] ? assign_work+0x3cc/0x5d0 [ 375.135422][ T49] worker_thread+0xa5e/0xfe0 [ 375.140170][ T49] kthread+0x2fa/0x390 [ 375.144304][ T49] ? pr_cont_work+0x550/0x550 [ 375.149097][ T49] ? kthread_blkcg+0xd0/0xd0 [ 375.153749][ T49] ret_from_fork+0x48/0x80 [ 375.158254][ T49] ? kthread_blkcg+0xd0/0xd0 [ 375.162907][ T49] ret_from_fork_asm+0x11/0x20 [ 375.167921][ T49] [ 375.170990][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 375.178342][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 375.185758][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.195863][ T49] Workqueue: netns cleanup_net [ 375.200692][ T49] Call Trace: [ 375.204013][ T49] [ 375.206978][ T49] dump_stack_lvl+0x18c/0x250 [ 375.211713][ T49] ? show_regs_print_info+0x20/0x20 [ 375.216980][ T49] ? load_image+0x420/0x420 [ 375.221558][ T49] panic+0x2ca/0x720 [ 375.225502][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 375.230063][ T49] ? ret_from_fork_asm+0x11/0x20 [ 375.235074][ T49] __warn+0x2e0/0x470 [ 375.239114][ T49] ? ieee80211_link_release_channel+0x154/0x180 [ 375.245422][ T49] ? ieee80211_link_release_channel+0x154/0x180 [ 375.251730][ T49] report_bug+0x2be/0x4f0 [ 375.256118][ T49] ? ieee80211_link_release_channel+0x154/0x180 [ 375.262418][ T49] ? ieee80211_link_release_channel+0x154/0x180 [ 375.268730][ T49] ? ieee80211_link_release_channel+0x156/0x180 [ 375.275026][ T49] handle_bug+0xcf/0x120 [ 375.279323][ T49] exc_invalid_op+0x1a/0x50 [ 375.283880][ T49] asm_exc_invalid_op+0x1a/0x20 [ 375.288798][ T49] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 375.295711][ T49] Code: 7c 2d 00 00 74 08 48 89 df e8 48 3e cc f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 01 14 86 00 e8 0c b2 73 f7 <0f> 0b eb c5 48 c7 c1 2c 66 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 375.315409][ T49] RSP: 0018:ffffc90000b9f568 EFLAGS: 00010293 [ 375.321523][ T49] RAX: ffffffff8a13d944 RBX: ffff88805de31618 RCX: ffff88801d659e00 [ 375.329543][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.337553][ T49] RBP: 0000000000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 375.345568][ T49] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88805de32c88 [ 375.353587][ T49] R13: 1ffff1100bbc62c3 R14: ffff88805de32440 R15: dffffc0000000000 [ 375.361625][ T49] ? ieee80211_link_release_channel+0x154/0x180 [ 375.367941][ T49] ? ieee80211_link_release_channel+0x154/0x180 [ 375.374248][ T49] ? trace_drv_return_void+0x1c0/0x1c0 [ 375.379776][ T49] unregister_netdevice_many_notify+0x1357/0x1910 [ 375.386258][ T49] ? unregister_netdevice_many+0x20/0x20 [ 375.391963][ T49] ? kernfs_remove_by_name_ns+0x117/0x150 [ 375.397790][ T49] ? __lock_acquire+0x7d80/0x7d80 [ 375.402873][ T49] unregister_netdevice_queue+0x2e9/0x330 [ 375.408660][ T49] ? list_netdevice+0x730/0x730 [ 375.413570][ T49] ? kernfs_remove_by_name_ns+0x117/0x150 [ 375.419353][ T49] _cfg80211_unregister_wdev+0x16d/0x580 [ 375.425041][ T49] ieee80211_remove_interfaces+0x4b3/0x690 [ 375.431002][ T49] ? ieee80211_do_stop+0x2000/0x2000 [ 375.436342][ T49] ? rcu_is_watching+0x15/0xb0 [ 375.441169][ T49] ieee80211_unregister_hw+0x5d/0x2a0 [ 375.446603][ T49] mac80211_hwsim_del_radio+0x289/0x480 [ 375.452201][ T49] ? rhashtable_remove_fast+0xc00/0xc00 [ 375.457805][ T49] hwsim_exit_net+0x58d/0x650 [ 375.462539][ T49] ? hwsim_init_net+0x90/0x90 [ 375.467274][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 375.473141][ T49] cleanup_net+0x6f7/0xb00 [ 375.477615][ T49] ? ops_free_list+0x3b0/0x3b0 [ 375.482434][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.487689][ T49] ? process_scheduled_works+0x975/0x1600 [ 375.493458][ T49] ? process_scheduled_works+0x975/0x1600 [ 375.499289][ T49] process_scheduled_works+0xa60/0x1600 [ 375.505010][ T49] ? worker_attach_to_pool+0x370/0x370 [ 375.510517][ T49] ? assign_work+0x3cc/0x5d0 [ 375.515142][ T49] worker_thread+0xa5e/0xfe0 [ 375.519785][ T49] kthread+0x2fa/0x390 [ 375.523885][ T49] ? pr_cont_work+0x550/0x550 [ 375.528612][ T49] ? kthread_blkcg+0xd0/0xd0 [ 375.533233][ T49] ret_from_fork+0x48/0x80 [ 375.537710][ T49] ? kthread_blkcg+0xd0/0xd0 [ 375.542323][ T49] ret_from_fork_asm+0x11/0x20 [ 375.547164][ T49] [ 375.550813][ T49] Kernel Offset: disabled [ 375.555287][ T49] Rebooting in 86400 seconds..