last executing test programs: 4m9.551780655s ago: executing program 0 (id=91): unshare(0x8000280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4055}, 0x4c840) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x18, 0x2000278, 0x0}) 4m6.60975323s ago: executing program 0 (id=93): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = accept(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[], 0x0) 3m57.059778396s ago: executing program 0 (id=102): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m53.677695685s ago: executing program 0 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fc) unshare(0x64020600) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x357, 0x0, 0x0, 0x0, 0x11, 0x0, 0x1, 0x80}) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1_legacy.usb0/fn_play\x00', 0x1, 0x4) write(r2, &(0x7f0000000280)='m', 0x1) 3m46.037039827s ago: executing program 0 (id=110): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl(r4, 0x40186f40, &(0x7f0000000300)) 3m41.610857605s ago: executing program 0 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)=ANY=[@ANYBLOB]) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m24.464433622s ago: executing program 32 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)=ANY=[@ANYBLOB]) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 39.566277314s ago: executing program 2 (id=295): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 37.914820608s ago: executing program 2 (id=299): sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x1, 0x3f00) 31.380638452s ago: executing program 2 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = mq_open(&(0x7f0000000240)='*!-^}%$\x00', 0x0, 0x80, &(0x7f0000000280)={0x6, 0x3, 0xe01, 0x7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) mq_notify(r0, &(0x7f0000000440)={0x0, 0x3d, 0x4, @tid=r1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) 26.450814903s ago: executing program 2 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x40400) geteuid() getuid() socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r3, 0x0, 0x0, 0x80000) 14.151398481s ago: executing program 3 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000500)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000500)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/ieee80211/phy1/netdev:wlan1/stations/08:02:11:00:00:00/agg_status\x00', 0x2, 0x0) write(r3, &(0x7f0000000800)='tx stop 0\x00', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./debug/ieee80211/phy0/netdev:wlan1/stations/08:02:11:00:00:00/agg_status\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='tx stop 0\x00', 0xa) 11.645607437s ago: executing program 1 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d61737100000000040002"], 0xdc}}, 0x0) 11.643288788s ago: executing program 2 (id=325): syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) keyctl$describe(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) 11.56599988s ago: executing program 3 (id=326): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') 8.505807741s ago: executing program 4 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe0000000073130000000000009c000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x3c, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 8.504927511s ago: executing program 1 (id=328): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8c0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 8.446301343s ago: executing program 2 (id=329): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0xb, 0x4) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80789440, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4400, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) write$tun(0xffffffffffffffff, 0x0, 0x342) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x48810, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbfd, 0xf, 0x35, 0xc, 0x6e}) 8.445757653s ago: executing program 3 (id=330): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x10002, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x48854}, 0x24000080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x2, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x9, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0x421, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xffffffef, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x7, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x40000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0xffffffff}) 6.515620111s ago: executing program 4 (id=332): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000800) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x400000, 0x54000000, &(0x7f0000bfd000/0x400000)=nil) r5 = shmat(r4, &(0x7f0000f02000/0x4000)=nil, 0x4000) mremap(&(0x7f0000dd2000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff0000/0x4000)=nil) shmdt(r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) 6.039733303s ago: executing program 1 (id=333): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000b40)={0x2, 0x0, [{0xae8, 0x0, 0x3e}, {0x40000090, 0x0, 0xffff}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x111) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0x401, 0x1}) 5.275588011s ago: executing program 4 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 5.220699333s ago: executing program 3 (id=335): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 4.528692879s ago: executing program 4 (id=336): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) 3.866024075s ago: executing program 1 (id=337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xce, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000100)='./file0\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 3.391288837s ago: executing program 3 (id=338): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 3.372482418s ago: executing program 4 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) creat(0x0, 0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) 1.607860061s ago: executing program 4 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000300a60c6b63851e0f982c"], 0xfce) 1.102106223s ago: executing program 3 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f) pipe(&(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r2, &(0x7f0000000280)='1', 0x1) 1.100436293s ago: executing program 1 (id=349): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 1 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x181c42, 0x81) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 92.474868][ T5769] cgroup: Unknown subsys name 'net' [ 92.619163][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.352678][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.623866][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.638741][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.649605][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.657666][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.666074][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.677862][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.693150][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.700921][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.709605][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.718928][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.727548][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.734947][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.788852][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.797042][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.812817][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.814294][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.829495][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.831978][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.849929][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.857456][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.866242][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.874143][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.878211][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.889406][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.398952][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 97.439041][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 97.539883][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 97.670977][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 97.702654][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.711071][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.719204][ T5781] bridge_slave_0: entered allmulticast mode [ 97.727238][ T5781] bridge_slave_0: entered promiscuous mode [ 97.744914][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.752523][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.759904][ T5781] bridge_slave_1: entered allmulticast mode [ 97.767643][ T5781] bridge_slave_1: entered promiscuous mode [ 97.792517][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.799947][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.812371][ T5780] bridge_slave_0: entered allmulticast mode [ 97.820258][ T5780] bridge_slave_0: entered promiscuous mode [ 97.880275][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.890582][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.897993][ T5780] bridge_slave_1: entered allmulticast mode [ 97.905144][ T5780] bridge_slave_1: entered promiscuous mode [ 97.949869][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.957311][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.965615][ T5782] bridge_slave_0: entered allmulticast mode [ 97.973400][ T5782] bridge_slave_0: entered promiscuous mode [ 97.993053][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.000655][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.008837][ T5782] bridge_slave_1: entered allmulticast mode [ 98.016934][ T5782] bridge_slave_1: entered promiscuous mode [ 98.057988][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.071774][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.097189][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.138655][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.187439][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.214031][ T5781] team0: Port device team_slave_0 added [ 98.224794][ T5781] team0: Port device team_slave_1 added [ 98.231400][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.239091][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.247079][ T5783] bridge_slave_0: entered allmulticast mode [ 98.254252][ T5783] bridge_slave_0: entered promiscuous mode [ 98.264661][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.308213][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.315623][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.322994][ T5783] bridge_slave_1: entered allmulticast mode [ 98.331365][ T5783] bridge_slave_1: entered promiscuous mode [ 98.343515][ T5780] team0: Port device team_slave_0 added [ 98.355725][ T5780] team0: Port device team_slave_1 added [ 98.434555][ T5782] team0: Port device team_slave_0 added [ 98.444482][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.451915][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.478614][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.510111][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.517353][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.543909][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.588534][ T5782] team0: Port device team_slave_1 added [ 98.610440][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.624752][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.635024][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.642547][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.668671][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.682766][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.690030][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.716736][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.797043][ T5783] team0: Port device team_slave_0 added [ 98.804489][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.812205][ T5793] Bluetooth: hci0: command tx timeout [ 98.814927][ T5788] Bluetooth: hci1: command tx timeout [ 98.825087][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.852465][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.884719][ T5783] team0: Port device team_slave_1 added [ 98.893358][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.901679][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.927961][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.954528][ T5781] hsr_slave_0: entered promiscuous mode [ 98.962703][ T5781] hsr_slave_1: entered promiscuous mode [ 98.968671][ T5788] Bluetooth: hci2: command tx timeout [ 98.975790][ T5788] Bluetooth: hci3: command tx timeout [ 99.058488][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.065657][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.092197][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.109448][ T5782] hsr_slave_0: entered promiscuous mode [ 99.119635][ T5782] hsr_slave_1: entered promiscuous mode [ 99.126267][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.134165][ T5782] Cannot create hsr debugfs directory [ 99.158711][ T5780] hsr_slave_0: entered promiscuous mode [ 99.166471][ T5780] hsr_slave_1: entered promiscuous mode [ 99.172862][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.180591][ T5780] Cannot create hsr debugfs directory [ 99.188664][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.197788][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.224183][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.367444][ T5783] hsr_slave_0: entered promiscuous mode [ 99.375611][ T5783] hsr_slave_1: entered promiscuous mode [ 99.382516][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.391611][ T5783] Cannot create hsr debugfs directory [ 99.530922][ T23] cfg80211: failed to load regulatory.db [ 99.856868][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.881138][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.898592][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.911171][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.006379][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.021084][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.032266][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.066753][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.144810][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.185549][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.197043][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.226944][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.370871][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.389049][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.407653][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.434560][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.491194][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.548567][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.562470][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.619705][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.648631][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.656199][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.674493][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.687832][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.703827][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.711164][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.750232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.757584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.768835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.776127][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.788676][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.795917][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.818337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.825602][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.894411][ T5788] Bluetooth: hci1: command tx timeout [ 100.894443][ T5793] Bluetooth: hci0: command tx timeout [ 100.933591][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.976142][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.012260][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.019482][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.032718][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.039986][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.048455][ T5793] Bluetooth: hci3: command tx timeout [ 101.050636][ T5788] Bluetooth: hci2: command tx timeout [ 101.274776][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.669645][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.748951][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.814789][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.857997][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.894620][ T5782] veth0_vlan: entered promiscuous mode [ 101.911778][ T5781] veth0_vlan: entered promiscuous mode [ 101.972663][ T5781] veth1_vlan: entered promiscuous mode [ 102.007865][ T5782] veth1_vlan: entered promiscuous mode [ 102.023956][ T5780] veth0_vlan: entered promiscuous mode [ 102.060773][ T5783] veth0_vlan: entered promiscuous mode [ 102.081988][ T5780] veth1_vlan: entered promiscuous mode [ 102.112235][ T5781] veth0_macvtap: entered promiscuous mode [ 102.122647][ T5783] veth1_vlan: entered promiscuous mode [ 102.142819][ T5781] veth1_macvtap: entered promiscuous mode [ 102.228000][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.242807][ T5782] veth0_macvtap: entered promiscuous mode [ 102.254960][ T5780] veth0_macvtap: entered promiscuous mode [ 102.274481][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.302287][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.311903][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.322302][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.332621][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.344885][ T5782] veth1_macvtap: entered promiscuous mode [ 102.357458][ T5780] veth1_macvtap: entered promiscuous mode [ 102.367252][ T5783] veth0_macvtap: entered promiscuous mode [ 102.449279][ T5783] veth1_macvtap: entered promiscuous mode [ 102.470662][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.482361][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.498064][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.510819][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.521592][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.533877][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.563170][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.574870][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.585122][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.595807][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.612465][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.626354][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.635803][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.644570][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.655077][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.704124][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.716040][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.734769][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.745758][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.760048][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.776422][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.784612][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.846479][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.857283][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.869204][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.880126][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.891311][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.902257][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.917753][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.959477][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.968674][ T5788] Bluetooth: hci1: command tx timeout [ 102.968729][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.983767][ T5788] Bluetooth: hci0: command tx timeout [ 102.992267][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.001651][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.020406][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.031289][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.042485][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.053665][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.063871][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.075798][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.087789][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.125602][ T5788] Bluetooth: hci2: command tx timeout [ 103.125800][ T5793] Bluetooth: hci3: command tx timeout [ 103.151275][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.160111][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.160192][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.175833][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.184607][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.194534][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272416][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.296075][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.418459][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.437567][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.528556][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.552825][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.654068][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.701203][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.745393][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.753337][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.767396][ T5853] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 104.819265][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.827894][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.046097][ T5793] Bluetooth: hci0: command tx timeout [ 105.051697][ T5793] Bluetooth: hci1: command tx timeout [ 106.435328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 107.090824][ T5793] Bluetooth: hci2: command tx timeout [ 107.097338][ T5788] Bluetooth: hci3: command tx timeout [ 108.585365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.597081][ T5891] syzkaller0: entered promiscuous mode [ 111.622538][ T5891] syzkaller0: entered allmulticast mode [ 111.740796][ T5891] tipc: Started in network mode [ 111.767156][ T5891] tipc: Node identity 324aa431744, cluster identity 4711 [ 111.802905][ T5891] tipc: Enabled bearer , priority 0 [ 111.868764][ T5890] tipc: Resetting bearer [ 115.189182][ T5890] tipc: Disabling bearer [ 115.415419][ T9] tipc: Node number set to 1175102513 [ 115.628788][ T5910] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 118.415849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.966662][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 119.091954][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.301419][ T5949] tipc: Started in network mode [ 120.320574][ T5949] tipc: Node identity , cluster identity 4711 [ 120.338911][ T5949] tipc: Failed to obtain node identity [ 120.344585][ T5949] tipc: Enabling of bearer rejected, failed to enable media [ 121.274859][ T5956] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 121.296950][ T5956] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 121.356440][ T5956] i2c-slave-eeprom: probe of 0-0001 failed with error -22 [ 121.383688][ T5956] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 122.296416][ T5965] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 123.635078][ T5965] team0 (unregistering): Port device team_slave_0 removed [ 123.719959][ T5965] team0 (unregistering): Port device team_slave_1 removed [ 127.169097][ T5996] FAULT_INJECTION: forcing a failure. [ 127.169097][ T5996] name failslab, interval 1, probability 0, space 0, times 1 [ 127.182339][ T5996] CPU: 0 PID: 5996 Comm: syz.0.35 Not tainted syzkaller #0 [ 127.189642][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.199761][ T5996] Call Trace: [ 127.203073][ T5996] [ 127.206029][ T5996] dump_stack_lvl+0x18c/0x250 [ 127.210761][ T5996] ? asm_sysvec_call_function_single+0x1a/0x20 [ 127.216962][ T5996] ? show_regs_print_info+0x20/0x20 [ 127.222213][ T5996] ? asm_sysvec_call_function_single+0x1a/0x20 [ 127.228452][ T5996] should_fail_ex+0x394/0x4c0 [ 127.233218][ T5996] should_failslab+0x9/0x20 [ 127.237757][ T5996] slab_pre_alloc_hook+0x59/0x300 [ 127.242831][ T5996] ? io_alloc_hash_table+0x2d/0xb0 [ 127.247982][ T5996] ? io_alloc_hash_table+0x2d/0xb0 [ 127.253119][ T5996] __kmem_cache_alloc_node+0x53/0x250 [ 127.258532][ T5996] ? io_alloc_hash_table+0x2d/0xb0 [ 127.263702][ T5996] __kmalloc+0xa7/0x240 [ 127.267924][ T5996] io_alloc_hash_table+0x2d/0xb0 [ 127.272926][ T5996] io_ring_ctx_alloc+0x160/0xc10 [ 127.277916][ T5996] io_uring_create+0x2df/0x1330 [ 127.282805][ T5996] __se_sys_io_uring_setup+0x29f/0x2b0 [ 127.288318][ T5996] ? __x64_sys_io_uring_setup+0x60/0x60 [ 127.293922][ T5996] ? lockdep_hardirqs_on+0x98/0x150 [ 127.299154][ T5996] do_syscall_64+0x55/0xb0 [ 127.303602][ T5996] ? clear_bhb_loop+0x40/0x90 [ 127.308304][ T5996] ? clear_bhb_loop+0x40/0x90 [ 127.313013][ T5996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.318973][ T5996] RIP: 0033:0x7f858419e159 [ 127.323446][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.325862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.343513][ T5996] RSP: 002b:00007f8584f9cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 127.360188][ T5996] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f858419e159 [ 127.368377][ T5996] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000021 [ 127.376375][ T5996] RBP: 00007f858423506b R08: 0000000000000000 R09: 0000000000000000 [ 127.384370][ T5996] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040 [ 127.392382][ T5996] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffdf5dc84f8 [ 127.400421][ T5996] [ 128.452119][ T5995] bond_slave_0: entered promiscuous mode [ 128.458370][ T5995] bond_slave_1: entered promiscuous mode [ 128.486157][ T5995] vlan2: entered promiscuous mode [ 128.491307][ T5995] bond0: entered promiscuous mode [ 130.140352][ T6015] ip_tables: iptables: counters copy to user failed while replacing table [ 133.477992][ T6028] Cannot find del_set index 0 as target [ 134.185701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 134.944885][ T6031] syz.1.47[6031]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 134.981499][ T6031] loop1: detected capacity change from 0 to 164 [ 135.003568][ T6031] ======================================================= [ 135.003568][ T6031] WARNING: The mand mount option has been deprecated and [ 135.003568][ T6031] and is ignored by this kernel. Remove the mand [ 135.003568][ T6031] option from the mount to silence this warning. [ 135.003568][ T6031] ======================================================= [ 135.432837][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.441659][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.425273][ C0] hrtimer: interrupt took 67236 ns [ 137.247434][ T6058] syzkaller0: entered promiscuous mode [ 137.253032][ T6058] syzkaller0: entered allmulticast mode [ 138.099559][ T6066] loop2: detected capacity change from 0 to 512 [ 139.772115][ T6062] sched: RT throttling activated [ 139.917501][ T6066] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.006035][ T6066] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 140.023965][ T6066] Quota error (device loop2): write_blk: dquota write failed [ 140.032718][ T6066] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 140.042356][ T6066] Quota error (device loop2): write_blk: dquota write failed [ 140.050540][ T6066] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 140.060776][ T6066] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.45: Failed to acquire dquot type 1 [ 140.085520][ T6066] EXT4-fs (loop2): 1 truncate cleaned up [ 140.098563][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.588250][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.853924][ T6076] syzkaller0: entered promiscuous mode [ 140.862941][ T6076] syzkaller0: entered allmulticast mode [ 140.898878][ T6079] loop2: detected capacity change from 0 to 128 [ 142.186552][ T5765] IPVS: starting estimator thread 0... [ 142.325660][ T6086] IPVS: using max 16 ests per chain, 38400 per kthread [ 146.596848][ T6106] netlink: set zone limit has 8 unknown bytes [ 151.451274][ T6119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.62'. [ 151.667124][ T6120] netlink: 'syz.2.62': attribute type 11 has an invalid length. [ 154.316163][ T6143] tipc: Enabled bearer , priority 0 [ 154.344957][ T6137] tipc: Resetting bearer [ 154.380702][ T6136] tipc: Disabling bearer [ 154.588225][ T6151] loop0: detected capacity change from 0 to 16 [ 154.706911][ T6151] erofs: (device loop0): mounted with root inode @ nid 36. [ 155.616913][ T6154] netlink: 'syz.1.69': attribute type 3 has an invalid length. [ 156.625271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 159.455263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 159.515273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 159.555381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 159.785310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 170.543175][ T6199] loop1: detected capacity change from 0 to 512 [ 170.559815][ T6199] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 171.429967][ T6202] loop3: detected capacity change from 0 to 1024 [ 171.439212][ T6202] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.509058][ T6207] __vm_enough_memory: pid: 6207, comm: syz.1.83, not enough memory for the allocation [ 171.582304][ T6202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.864807][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.170850][ T6211] tipc: Started in network mode [ 172.190277][ T6211] tipc: Node identity ac1414aa, cluster identity 4711 [ 172.213891][ T6211] tipc: New replicast peer: 172.20.20.187 [ 172.241096][ T6211] tipc: Enabled bearer , priority 10 [ 172.296910][ T5793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 172.307128][ T5793] CPU: 1 PID: 5793 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 172.314746][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 172.324853][ T5793] Workqueue: hci3 hci_rx_work [ 172.329619][ T5793] Call Trace: [ 172.332940][ T5793] [ 172.335918][ T5793] dump_stack_lvl+0x18c/0x250 [ 172.340674][ T5793] ? show_regs_print_info+0x20/0x20 [ 172.345930][ T5793] ? load_image+0x420/0x420 [ 172.350507][ T5793] sysfs_create_dir_ns+0x26e/0x2a0 [ 172.355677][ T5793] ? __lock_acquire+0x7eb0/0x7eb0 [ 172.360768][ T5793] ? sysfs_warn_dup+0xa0/0xa0 [ 172.365499][ T5793] ? do_raw_spin_unlock+0x121/0x230 [ 172.370770][ T5793] kobject_add_internal+0x617/0xc90 [ 172.376038][ T5793] kobject_add+0x164/0x240 [ 172.380515][ T5793] ? kobject_init+0x1d0/0x1d0 [ 172.385268][ T5793] ? get_device_parent+0x366/0x390 [ 172.390510][ T5793] device_add+0x3fa/0xc40 [ 172.394909][ T5793] hci_conn_add_sysfs+0xd5/0x1e0 [ 172.399902][ T5793] le_conn_complete_evt+0xe9a/0x1480 [ 172.405272][ T5793] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 172.411605][ T5793] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 172.417306][ T5793] ? mutex_unlock+0x10/0x10 [ 172.421867][ T5793] ? skb_pull_data+0xf0/0x1f0 [ 172.426629][ T5793] hci_le_conn_complete_evt+0x187/0x440 [ 172.432252][ T5793] ? hci_remote_host_features_evt+0x150/0x150 [ 172.438394][ T5793] hci_event_packet+0x7b4/0x1280 [ 172.443425][ T5793] ? __lock_acquire+0x7eb0/0x7eb0 [ 172.448506][ T5793] ? lock_chain_count+0x20/0x20 [ 172.453418][ T5793] ? bis_list+0x290/0x290 [ 172.457799][ T5793] ? kcov_remote_start+0x513/0x810 [ 172.462970][ T5793] ? lockdep_hardirqs_on+0x98/0x150 [ 172.468221][ T5793] ? hci_send_to_monitor+0xd7/0x4f0 [ 172.473486][ T5793] hci_rx_work+0x43a/0xd60 [ 172.478003][ T5793] ? process_scheduled_works+0x975/0x1600 [ 172.483786][ T5793] process_scheduled_works+0xa60/0x1600 [ 172.489435][ T5793] ? worker_attach_to_pool+0x370/0x370 [ 172.494970][ T5793] ? assign_work+0x3cc/0x5d0 [ 172.499637][ T5793] worker_thread+0xa5e/0xfe0 [ 172.504339][ T5793] kthread+0x2fa/0x390 [ 172.508470][ T5793] ? pr_cont_work+0x550/0x550 [ 172.513208][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 172.517880][ T5793] ret_from_fork+0x48/0x80 [ 172.522374][ T5793] ? kthread_blkcg+0xd0/0xd0 [ 172.527036][ T5793] ret_from_fork_asm+0x11/0x20 [ 172.531894][ T5793] [ 172.562081][ T5793] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 172.578659][ T5793] Bluetooth: hci3: failed to register connection device [ 172.592388][ T5793] Bluetooth: hci3: link tx timeout [ 172.599435][ T5793] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 172.611414][ T5793] Bluetooth: hci3: link tx timeout [ 172.616797][ T5793] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.785106][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 175.793217][ T5862] tipc: Node number set to 2886997162 [ 176.293163][ T6227] loop3: detected capacity change from 0 to 512 [ 176.817584][ T6227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 177.027315][ T6227] System zones: 1-12 [ 177.058430][ T6227] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.87: missing EA_INODE flag [ 177.118197][ T6227] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.87: error while reading EA inode 12 err=-117 [ 177.159681][ T6227] EXT4-fs (loop3): 1 orphan inode deleted [ 177.177291][ T6227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.006281][ T6232] overlayfs: upper fs does not support tmpfile. [ 178.115618][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 179.972404][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.897927][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 184.258210][ T6254] loop1: detected capacity change from 0 to 512 [ 184.299689][ T6254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.444007][ T6254] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 184.684179][ T6254] EXT4-fs (loop1): 1 truncate cleaned up [ 184.717594][ T6254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.378422][ T6254] capability: warning: `syz.1.99' uses deprecated v2 capabilities in a way that may be insecure [ 185.833958][ T6254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.137515][ T6276] tipc: Started in network mode [ 189.142571][ T6276] tipc: Node identity f28934806018, cluster identity 4711 [ 189.184322][ T6276] tipc: Enabled bearer , priority 0 [ 189.236107][ T6279] syzkaller0: entered promiscuous mode [ 189.242766][ T6279] syzkaller0: entered allmulticast mode [ 189.399939][ T6276] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 189.516683][ T176] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 189.543097][ T6276] tipc: Resetting bearer [ 189.633649][ T6275] tipc: Resetting bearer [ 189.718078][ T6275] tipc: Disabling bearer [ 190.375917][ T6286] loop1: detected capacity change from 0 to 256 [ 191.968982][ T176] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.978608][ T176] usb 1-1: no configurations [ 191.988702][ T176] usb 1-1: can't read configurations, error -22 [ 196.969626][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.011762][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.257533][ T6301] ubi0: attaching mtd0 [ 199.265082][ T6301] ubi0: scanning is finished [ 199.269944][ T6301] ubi0: empty MTD device detected [ 200.667499][ T6301] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 205.455720][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 205.567421][ T6343] loop2: detected capacity change from 0 to 128 [ 208.994536][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 209.007122][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 209.391918][ T6343] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 209.407754][ T6343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.005811][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 220.181455][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 220.187657][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 220.667662][ T6378] serio: Serial port ttyS3 [ 224.505549][ T6401] loop2: detected capacity change from 0 to 512 [ 227.255848][ T5793] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 227.264669][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.276633][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.285549][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.294022][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.332971][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.342655][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.366034][ T6401] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 227.594864][ T6401] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 228.158765][ T6413] loop2: detected capacity change from 0 to 512 [ 228.220832][ T6413] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.360020][ T6413] EXT4-fs (loop2): 1 truncate cleaned up [ 228.378365][ T6413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.455878][ T5793] Bluetooth: hci4: command tx timeout [ 229.544218][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.660730][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 229.962853][ T6430] loop2: detected capacity change from 0 to 1024 [ 230.046173][ T6430] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.136703][ T6430] EXT4-fs (loop2): unsupported descriptor size 30438 [ 230.736443][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.796106][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.859535][ T6400] bridge_slave_0: entered allmulticast mode [ 230.888966][ T6400] bridge_slave_0: entered promiscuous mode [ 230.932869][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.995788][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.004478][ T6400] bridge_slave_1: entered allmulticast mode [ 231.052923][ T6400] bridge_slave_1: entered promiscuous mode [ 231.785599][ T5793] Bluetooth: hci4: command tx timeout [ 231.803169][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.018309][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.346074][ T6447] tmpfs: Bad value for 'nr_inodes' [ 234.776199][ T5793] Bluetooth: hci4: command tx timeout [ 235.041064][ T6400] team0: Port device team_slave_0 added [ 235.121089][ T6400] team0: Port device team_slave_1 added [ 235.400096][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.418146][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.471524][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.516765][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.523829][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.563392][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.718251][ T6400] hsr_slave_0: entered promiscuous mode [ 235.736976][ T6400] hsr_slave_1: entered promiscuous mode [ 235.754827][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.774073][ T6400] Cannot create hsr debugfs directory [ 236.806038][ T5799] Bluetooth: hci4: command tx timeout [ 240.278153][ T6400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.300536][ T6400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.320545][ T6400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.341249][ T6400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.722279][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.879042][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.020822][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.029048][ T6359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.251372][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.258652][ T6359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.515679][ T5799] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 243.714183][ T6490] loop3: detected capacity change from 0 to 512 [ 243.811317][ T6490] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.144: couldn't read orphan inode 26 (err -116) [ 243.906184][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.915086][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.923018][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.931130][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.940325][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.948293][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.956361][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.964511][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.972507][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.980439][ T6488] tc action pedit offset must be on 32 bit boundaries [ 243.981247][ T6490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.990805][ T6488] 0: reclassify loop, rule prio 0, protocol 800 [ 244.022852][ T6490] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.915703][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.184221][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.589730][ T6519] serio: Serial port ttyS3 [ 247.507425][ T6400] veth0_vlan: entered promiscuous mode [ 247.592337][ T6400] veth1_vlan: entered promiscuous mode [ 247.748774][ T6400] veth0_macvtap: entered promiscuous mode [ 247.808221][ T6400] veth1_macvtap: entered promiscuous mode [ 247.890272][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.948467][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.977677][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.012246][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.042281][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.073477][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.105486][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.136984][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.186746][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.241928][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.266997][ T6524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.148'. [ 248.289637][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.302096][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.319081][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.346057][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.357706][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.369750][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.380495][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.405990][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.414676][ T6526] netlink: 'syz.3.148': attribute type 11 has an invalid length. [ 248.431978][ T6400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.442471][ T6400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.453190][ T6400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.464343][ T6400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.534586][ T6529] loop1: detected capacity change from 0 to 512 [ 248.551843][ T6529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 248.602521][ T6529] EXT4-fs (loop1): 1 truncate cleaned up [ 248.639994][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.902240][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.918481][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.028333][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.037982][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.804628][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.335779][ T6539] FAULT_INJECTION: forcing a failure. [ 251.335779][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 251.348668][ T6539] CPU: 1 PID: 6539 Comm: syz.2.158 Not tainted syzkaller #0 [ 251.356017][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.366121][ T6539] Call Trace: [ 251.369480][ T6539] [ 251.372454][ T6539] dump_stack_lvl+0x18c/0x250 [ 251.377254][ T6539] ? show_regs_print_info+0x20/0x20 [ 251.382496][ T6539] ? load_image+0x420/0x420 [ 251.387063][ T6539] ? __might_sleep+0xe0/0xe0 [ 251.391710][ T6539] ? __lock_acquire+0x7eb0/0x7eb0 [ 251.396784][ T6539] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 251.403510][ T6539] should_fail_ex+0x394/0x4c0 [ 251.408245][ T6539] should_failslab+0x9/0x20 [ 251.412793][ T6539] slab_pre_alloc_hook+0x59/0x300 [ 251.417964][ T6539] ? pcpu_alloc+0x11e7/0x1880 [ 251.422688][ T6539] ? percpu_ref_init+0xc3/0x340 [ 251.427595][ T6539] __kmem_cache_alloc_node+0x53/0x250 [ 251.433070][ T6539] ? percpu_ref_init+0xc3/0x340 [ 251.437964][ T6539] ? io_allocate_scq_urings+0x620/0x620 [ 251.443554][ T6539] kmalloc_trace+0x2a/0xe0 [ 251.448034][ T6539] percpu_ref_init+0xc3/0x340 [ 251.452775][ T6539] io_ring_ctx_alloc+0x205/0xc10 [ 251.457768][ T6539] io_uring_create+0x2df/0x1330 [ 251.462666][ T6539] ? __might_fault+0xc6/0x120 [ 251.467407][ T6539] ? __might_fault+0xaa/0x120 [ 251.472133][ T6539] __se_sys_io_uring_setup+0x29f/0x2b0 [ 251.477641][ T6539] ? __x64_sys_io_uring_setup+0x60/0x60 [ 251.483218][ T6539] ? lockdep_hardirqs_on+0x98/0x150 [ 251.488465][ T6539] do_syscall_64+0x55/0xb0 [ 251.492939][ T6539] ? clear_bhb_loop+0x40/0x90 [ 251.497659][ T6539] ? clear_bhb_loop+0x40/0x90 [ 251.502379][ T6539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.508326][ T6539] RIP: 0033:0x7f086359e159 [ 251.512875][ T6539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.532528][ T6539] RSP: 002b:00007f08644fffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 251.541048][ T6539] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f086359e159 [ 251.549068][ T6539] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000021 [ 251.557079][ T6539] RBP: 00007f086363506b R08: 0000000000000000 R09: 0000000000000000 [ 251.565098][ T6539] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040 [ 251.573147][ T6539] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffddcb9be68 [ 251.581184][ T6539] [ 252.708257][ T6538] loop4: detected capacity change from 0 to 256 [ 256.163092][ T6547] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.429838][ T6553] loop4: detected capacity change from 0 to 1024 [ 256.503241][ T6553] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.568477][ T6553] EXT4-fs (loop4): unsupported descriptor size 30438 [ 258.254167][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.261270][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.748200][ T6561] loop1: detected capacity change from 0 to 512 [ 259.037323][ T6565] loop3: detected capacity change from 0 to 512 [ 260.583895][ T6565] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.417437][ T6565] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 261.434633][ T6565] Quota error (device loop3): write_blk: dquota write failed [ 261.443415][ T6565] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 261.454310][ T6565] Quota error (device loop3): write_blk: dquota write failed [ 261.464485][ T6565] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 261.475665][ T6565] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.155: Failed to acquire dquot type 1 [ 261.500925][ T6561] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 261.534332][ T6565] EXT4-fs (loop3): 1 truncate cleaned up [ 261.542166][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.688867][ T6579] fuse: Bad value for 'fd' [ 261.772984][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.251148][ T6587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.160'. [ 262.303379][ T6582] serio: Serial port ttyS3 [ 262.370683][ T6587] netlink: 'syz.1.160': attribute type 11 has an invalid length. [ 262.876396][ T6597] md: loop0 has zero or unknown size, marking faulty! [ 262.911820][ T6597] md: error, md_import_device() returned -22 [ 263.871863][ T6600] loop2: detected capacity change from 0 to 256 [ 267.061204][ T6602] kvm: kvm [6601]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 267.709842][ T6617] ip_tables: iptables: counters copy to user failed while replacing table [ 273.598361][ T6631] loop3: detected capacity change from 0 to 32768 [ 273.872082][ T6631] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.170 (6631) [ 274.086253][ T6631] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 274.099275][ T6631] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 274.110526][ T6631] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 274.122425][ T6631] BTRFS info (device loop3): use zstd compression, level 3 [ 274.131328][ T6631] BTRFS info (device loop3): force clearing of disk cache [ 274.139843][ T6631] BTRFS info (device loop3): enabling disk space caching [ 274.148345][ T6631] BTRFS info (device loop3): disk space caching is enabled [ 274.199862][ T6635] netlink: 'syz.4.172': attribute type 11 has an invalid length. [ 274.373775][ T6631] BTRFS info (device loop3): enabling ssd optimizations [ 274.382198][ T6631] BTRFS info (device loop3): auto enabling async discard [ 274.557248][ T6631] BTRFS info (device loop3): rebuilding free space tree [ 274.706276][ T6631] BTRFS info (device loop3): disabling free space tree [ 274.714645][ T6631] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.726814][ T6631] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 275.959335][ T5782] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 280.855859][ T6628] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.054793][ T6697] loop1: detected capacity change from 0 to 256 [ 285.190843][ T6697] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 285.791434][ T1093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.978916][ T1093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.319533][ T6699] ubi0: attaching mtd0 [ 287.325552][ T6699] ubi0: scanning is finished [ 288.670538][ T6699] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 288.912380][ T1093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.960817][ T6704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.188'. [ 289.065892][ T6704] netlink: 'syz.3.188': attribute type 11 has an invalid length. [ 293.006184][ T1093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.132849][ T6711] syzkaller0: entered promiscuous mode [ 293.164095][ T6711] syzkaller0: entered allmulticast mode [ 296.996890][ T1093] tipc: Disabling bearer [ 297.446281][ T1093] tipc: Left network mode [ 311.738141][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 311.821743][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 311.835054][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 311.903274][ T6787] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.007140][ T6798] netlink: 112 bytes leftover after parsing attributes in process `syz.1.200'. [ 312.020556][ T6787] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 312.209511][ T6796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.310614][ T6796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.374153][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 312.418261][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 312.427373][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 312.435546][ T6796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.491092][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 312.517897][ T6787] wlan0 speed is unknown, defaulting to 1000 [ 312.583433][ T1093] hsr_slave_0: left promiscuous mode [ 312.665028][ T6812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 312.898799][ T1093] hsr_slave_1: left promiscuous mode [ 312.964752][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.064876][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.167437][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.245952][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.506583][ T1093] bridge_slave_1: left allmulticast mode [ 313.512328][ T1093] bridge_slave_1: left promiscuous mode [ 313.577744][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.722343][ T1093] bridge_slave_0: left allmulticast mode [ 313.734224][ T1093] bridge_slave_0: left promiscuous mode [ 313.774802][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.305765][ T1093] veth1_macvtap: left promiscuous mode [ 314.342247][ T1093] veth0_macvtap: left promiscuous mode [ 314.375557][ T1093] veth1_vlan: left promiscuous mode [ 314.881634][ T1093] veth0_vlan: left promiscuous mode [ 318.781943][ T6846] loop1: detected capacity change from 0 to 256 [ 319.698036][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.704634][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.462646][ T6866] loop4: detected capacity change from 0 to 1024 [ 327.529520][ T6866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.609988][ T6400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.760743][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 329.635652][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 329.941522][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.651933][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.764773][ T6895] loop2: detected capacity change from 0 to 16 [ 331.929242][ T6895] erofs: (device loop2): mounted with root inode @ nid 36. [ 332.795378][ T6902] loop1: detected capacity change from 0 to 512 [ 332.829358][ T6902] EXT4-fs: Ignoring removed mblk_io_submit option [ 332.904229][ T6902] EXT4-fs: Ignoring removed bh option [ 332.949240][ T6902] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 334.701009][ T6902] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 336.062230][ T6902] mqueue: Unknown parameter '@(^í\'&' [ 338.700473][ T6942] loop4: detected capacity change from 0 to 256 [ 344.285929][ T1093] bond0 (unregistering): Released all slaves [ 344.523571][ T6973] loop4: detected capacity change from 0 to 512 [ 344.958636][ T6973] EXT4-fs (loop4): Test dummy encryption mode enabled [ 344.995350][ T6973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.268141][ T6973] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.244: bad orphan inode 131083 [ 345.557053][ T6973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.813866][ T6400] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.111015][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.152347][ T5867] wlan1: authenticate with 08:02:11:00:00:00 [ 347.169601][ T5867] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 347.184173][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.226216][ T1106] wlan1: authenticated [ 347.272008][ T7019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.298765][ T23] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 347.325312][ T7020] Zero length message leads to an empty skb [ 347.335934][ T1106] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 347.345049][ T1106] wlan1: associated [ 347.366602][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 353.295603][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 353.839511][ T7077] ip_tables: iptables: counters copy to user failed while replacing table [ 355.617818][ T7095] loop3: detected capacity change from 0 to 256 [ 356.959001][ T7120] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 357.069200][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.077269][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.248674][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.256382][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.266652][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.273916][ T7120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.738541][ T7120] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 358.100570][ T7132] loop3: detected capacity change from 0 to 2048 [ 358.503343][ T7132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.933819][ T7148] ip_tables: iptables: counters copy to user failed while replacing table [ 363.385472][ T7140] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 365.375688][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.642670][ T7228] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 377.527100][ T7236] xt_nfacct: accounting object `syz0' does not exist [ 379.583990][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 379.610639][ T7238] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 381.617226][ T7238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 381.707902][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.714350][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.806977][ T7238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 381.836835][ T7238] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 381.845862][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 381.874302][ T7238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 381.881373][ T7238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 381.888095][ T7238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 382.370652][ T7278] sd 0:0:1:0: PR command failed: 1026 [ 382.376373][ T7278] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 382.383208][ T7278] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 383.845651][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 383.951757][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 383.958107][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 386.554663][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 386.554666][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 389.906000][ T7325] serio: Serial port ttyS3 [ 391.166321][ T7335] netlink: 'syz.3.303': attribute type 10 has an invalid length. [ 391.192596][ T7335] syz_tun: entered promiscuous mode [ 392.919635][ T7335] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 393.038466][ T7338] bond0: (slave bridge0): Releasing backup interface [ 393.094544][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.102219][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.163707][ T7338] bridge_slave_0: left allmulticast mode [ 393.176665][ T7338] bridge_slave_0: left promiscuous mode [ 393.215644][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.284526][ T7338] bridge_slave_1: left allmulticast mode [ 393.297539][ T7338] bridge_slave_1: left promiscuous mode [ 393.303444][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.346800][ T7338] bond0: (slave bond_slave_0): Releasing backup interface [ 393.421573][ T7338] bond0: (slave bond_slave_1): Releasing backup interface [ 393.560405][ T7338] team0: Port device team_slave_0 removed [ 393.618019][ T7338] team0: Port device team_slave_1 removed [ 393.636141][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.643672][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.678742][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.706844][ T7338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.843992][ T7344] team0: Port device xfrm0 added [ 393.860852][ T7346] tipc: Started in network mode [ 393.873118][ T7346] tipc: Node identity b6aeee7ac2e8, cluster identity 4711 [ 393.901474][ T7346] tipc: Enabled bearer , priority 0 [ 395.814795][ T7362] syz.2.302 (7362) used greatest stack depth: 18896 bytes left [ 396.035478][ T5867] tipc: Node number set to 1950805626 [ 397.193147][ T7374] loop4: detected capacity change from 0 to 16 [ 397.218040][ T7374] erofs: (device loop4): mounted with root inode @ nid 36. [ 398.852254][ T7384] kAFS: bad VL server IP address [ 399.552653][ T27] audit: type=1326 audit(1791042496.696:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 400.078297][ T27] audit: type=1326 audit(1791042496.706:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 400.230804][ T27] audit: type=1326 audit(1791042496.706:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 400.267120][ T7398] loop1: detected capacity change from 0 to 1024 [ 400.307889][ T7398] EXT4-fs: Ignoring removed bh option [ 400.373439][ T7398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.426495][ T7398] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 400.456525][ T27] audit: type=1326 audit(1791042496.706:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 400.782969][ T27] audit: type=1326 audit(1791042496.706:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 401.228038][ T27] audit: type=1326 audit(1791042496.706:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 401.388019][ T27] audit: type=1326 audit(1791042496.706:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 401.475298][ T27] audit: type=1326 audit(1791042496.706:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 401.530155][ T27] audit: type=1326 audit(1791042496.706:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 401.610382][ T27] audit: type=1326 audit(1791042496.706:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.4.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c6d9e159 code=0x7ffc0000 [ 401.867737][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.385352][ T7425] mmap: syz.4.316 (7425) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 409.238983][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.394510][ T7465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.495936][ T7465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.535424][ T5862] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 409.752749][ T5862] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 409.765380][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 409.779769][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 409.789768][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 409.805309][ T5862] usb 5-1: Product: syz [ 409.815528][ T5862] usb 5-1: Manufacturer: syz [ 409.820795][ T5862] usb 5-1: SerialNumber: syz [ 409.856046][ T5862] usb 5-1: config 0 descriptor?? [ 409.943978][ T7480] loop1: detected capacity change from 0 to 16 [ 409.995059][ T7480] erofs: (device loop1): mounted with root inode @ nid 36. [ 410.777818][ T5862] usb 5-1: selecting invalid altsetting 0 [ 410.875479][ T5862] usb 5-1: USB disconnect, device number 2 [ 411.163628][ T7494] udevd[7494]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.858169][ T7501] syz.2.325 (7501) used greatest stack depth: 18736 bytes left [ 414.379781][ T7504] loop1: detected capacity change from 0 to 40427 [ 414.449285][ T7504] F2FS-fs (loop1): invalid crc value [ 414.733122][ T7504] F2FS-fs (loop1): Found nat_bits in checkpoint [ 415.002775][ T7504] F2FS-fs (loop1): Start checkpoint disabled! [ 415.051265][ T7504] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 415.142899][ T7504] syz.1.328: attempt to access beyond end of device [ 415.142899][ T7504] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 415.312758][ T7515] netlink: 'syz.3.330': attribute type 4 has an invalid length. [ 415.524704][ T7520] syz.1.328: attempt to access beyond end of device [ 415.524704][ T7520] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 415.542560][ T7520] syz.1.328: attempt to access beyond end of device [ 415.542560][ T7520] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 415.557377][ T7520] syz.1.328: attempt to access beyond end of device [ 415.557377][ T7520] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 415.572468][ T7520] syz.1.328: attempt to access beyond end of device [ 415.572468][ T7520] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 415.587139][ T7520] syz.1.328: attempt to access beyond end of device [ 415.587139][ T7520] loop1: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 415.602387][ T7520] syz.1.328: attempt to access beyond end of device [ 415.602387][ T7520] loop1: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 415.617112][ T7520] syz.1.328: attempt to access beyond end of device [ 415.617112][ T7520] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 415.631450][ T7520] syz.1.328: attempt to access beyond end of device [ 415.631450][ T7520] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 415.645805][ T7520] syz.1.328: attempt to access beyond end of device [ 415.645805][ T7520] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 417.173279][ T6359] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 417.255557][ T6359] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 417.447753][ T7532] syzkaller0: entered promiscuous mode [ 417.453351][ T7532] syzkaller0: entered allmulticast mode [ 418.190617][ T7541] sd 0:0:1:0: PR command failed: 1026 [ 418.196198][ T7541] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 418.203000][ T7541] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 418.401033][ T7547] o2cb: This node has not been configured. [ 418.407932][ T7547] o2cb: Cluster check failed. Fix errors before retrying. [ 418.415345][ T7547] (syz.4.336,7547,1):user_dlm_register:674 ERROR: status = -22 [ 418.423007][ T7547] (syz.4.336,7547,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 419.057733][ T7552] binder: 7550:7552 ioctl c0306201 0 returned -14 [ 422.617693][ T7580] [ 422.620120][ T7580] ====================================================== [ 422.627186][ T7580] WARNING: possible circular locking dependency detected [ 422.634269][ T7580] syzkaller #0 Not tainted [ 422.638713][ T7580] ------------------------------------------------------ [ 422.645767][ T7580] syz.2.329/7580 is trying to acquire lock: [ 422.651732][ T7580] ffff88805be680b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 422.660856][ T7580] [ 422.660856][ T7580] but task is already holding lock: [ 422.668280][ T7580] ffffffff8e5651c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 422.677229][ T7580] [ 422.677229][ T7580] which lock already depends on the new lock. [ 422.677229][ T7580] [ 422.687677][ T7580] [ 422.687677][ T7580] the existing dependency chain (in reverse order) is: [ 422.696731][ T7580] [ 422.696731][ T7580] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 422.704158][ T7580] __mutex_lock+0x135/0xc80 [ 422.709227][ T7580] rfcomm_security_cfm+0x41/0x550 [ 422.714864][ T7580] hci_encrypt_cfm+0x363/0x4d0 [ 422.720195][ T7580] hci_encrypt_change_evt+0x5c3/0xe30 [ 422.726128][ T7580] hci_event_packet+0x807/0x1280 [ 422.731659][ T7580] hci_rx_work+0x43a/0xd60 [ 422.736670][ T7580] process_scheduled_works+0xa60/0x1600 [ 422.742789][ T7580] worker_thread+0xa5e/0xfe0 [ 422.747950][ T7580] kthread+0x2fa/0x390 [ 422.752579][ T7580] ret_from_fork+0x48/0x80 [ 422.757575][ T7580] ret_from_fork_asm+0x11/0x20 [ 422.762904][ T7580] [ 422.762904][ T7580] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 422.770709][ T7580] __mutex_lock+0x135/0xc80 [ 422.775797][ T7580] hci_remote_features_evt+0x535/0x900 [ 422.781790][ T7580] hci_event_packet+0x807/0x1280 [ 422.787254][ T7580] hci_rx_work+0x43a/0xd60 [ 422.792211][ T7580] process_scheduled_works+0xa60/0x1600 [ 422.798317][ T7580] worker_thread+0xa5e/0xfe0 [ 422.803435][ T7580] kthread+0x2fa/0x390 [ 422.808064][ T7580] ret_from_fork+0x48/0x80 [ 422.813021][ T7580] ret_from_fork_asm+0x11/0x20 [ 422.818306][ T7580] [ 422.818306][ T7580] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 422.825610][ T7580] __lock_acquire+0x3a07/0x7eb0 [ 422.831028][ T7580] lock_acquire+0x19e/0x420 [ 422.836091][ T7580] __mutex_lock+0x135/0xc80 [ 422.841236][ T7580] l2cap_chan_connect+0xfc/0xe30 [ 422.846719][ T7580] l2cap_sock_connect+0x586/0x760 [ 422.852286][ T7580] kernel_connect+0x142/0x1c0 [ 422.857518][ T7580] rfcomm_dlc_open+0xa1f/0xec0 [ 422.862813][ T7580] rfcomm_sock_connect+0x2ed/0x600 [ 422.868480][ T7580] __sys_connect+0x3da/0x470 [ 422.873612][ T7580] __x64_sys_connect+0x7a/0x90 [ 422.878909][ T7580] do_syscall_64+0x55/0xb0 [ 422.883879][ T7580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.890377][ T7580] [ 422.890377][ T7580] other info that might help us debug this: [ 422.890377][ T7580] [ 422.900626][ T7580] Chain exists of: [ 422.900626][ T7580] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 422.900626][ T7580] [ 422.913482][ T7580] Possible unsafe locking scenario: [ 422.913482][ T7580] [ 422.921032][ T7580] CPU0 CPU1 [ 422.926421][ T7580] ---- ---- [ 422.931790][ T7580] lock(rfcomm_mutex); [ 422.935961][ T7580] lock(hci_cb_list_lock); [ 422.942994][ T7580] lock(rfcomm_mutex); [ 422.949673][ T7580] lock(&hdev->lock); [ 422.953747][ T7580] [ 422.953747][ T7580] *** DEADLOCK *** [ 422.953747][ T7580] [ 422.961888][ T7580] 1 lock held by syz.2.329/7580: [ 422.966840][ T7580] #0: ffffffff8e5651c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 422.976179][ T7580] [ 422.976179][ T7580] stack backtrace: [ 422.982088][ T7580] CPU: 1 PID: 7580 Comm: syz.2.329 Not tainted syzkaller #0 [ 422.989365][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 422.999482][ T7580] Call Trace: [ 423.002790][ T7580] [ 423.005730][ T7580] dump_stack_lvl+0x18c/0x250 [ 423.010426][ T7580] ? load_image+0x420/0x420 [ 423.014950][ T7580] ? show_regs_print_info+0x20/0x20 [ 423.020164][ T7580] ? print_circular_bug+0x12b/0x1a0 [ 423.025411][ T7580] check_noncircular+0x2fc/0x400 [ 423.030397][ T7580] ? print_deadlock_bug+0x5d0/0x5d0 [ 423.035618][ T7580] ? lockdep_lock+0xf5/0x230 [ 423.040217][ T7580] ? _find_first_zero_bit+0xd6/0x100 [ 423.045515][ T7580] __lock_acquire+0x3a07/0x7eb0 [ 423.050388][ T7580] ? is_bpf_text_address+0x28f/0x2a0 [ 423.055704][ T7580] ? verify_lock_unused+0x140/0x140 [ 423.060941][ T7580] ? __lock_acquire+0x1431/0x7eb0 [ 423.066055][ T7580] ? verify_lock_unused+0x140/0x140 [ 423.071285][ T7580] lock_acquire+0x19e/0x420 [ 423.075800][ T7580] ? l2cap_chan_connect+0xfc/0xe30 [ 423.080924][ T7580] ? __might_sleep+0xe0/0xe0 [ 423.085546][ T7580] ? read_lock_is_recursive+0x20/0x20 [ 423.090958][ T7580] ? hci_get_route+0x3a5/0x4d0 [ 423.095743][ T7580] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.100789][ T7580] __mutex_lock+0x135/0xc80 [ 423.105325][ T7580] ? l2cap_chan_connect+0xfc/0xe30 [ 423.110461][ T7580] ? do_raw_read_unlock+0x3d/0x80 [ 423.115735][ T7580] ? _raw_read_unlock+0x28/0x40 [ 423.120615][ T7580] ? hci_get_route+0x3a5/0x4d0 [ 423.125426][ T7580] ? l2cap_chan_connect+0xfc/0xe30 [ 423.130594][ T7580] ? mutex_lock_nested+0x20/0x20 [ 423.135565][ T7580] ? print_unlock_imbalance_bug+0x160/0x160 [ 423.141503][ T7580] ? mark_lock+0x94/0x320 [ 423.145856][ T7580] l2cap_chan_connect+0xfc/0xe30 [ 423.150840][ T7580] ? lock_chain_count+0x20/0x20 [ 423.155714][ T7580] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 423.161650][ T7580] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.167033][ T7580] ? _local_bh_enable+0xa0/0xa0 [ 423.171892][ T7580] ? bacmp+0xe/0x30 [ 423.175717][ T7580] l2cap_sock_connect+0x586/0x760 [ 423.180845][ T7580] ? l2cap_sock_bind+0x940/0x940 [ 423.185807][ T7580] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 423.191821][ T7580] ? __lock_acquire+0x7eb0/0x7eb0 [ 423.196854][ T7580] ? lock_chain_count+0x20/0x20 [ 423.201713][ T7580] ? kernel_connect+0xf2/0x1c0 [ 423.206518][ T7580] kernel_connect+0x142/0x1c0 [ 423.211220][ T7580] ? kernel_accept+0x350/0x350 [ 423.216008][ T7580] ? rfcomm_dlc_open+0x9e3/0xec0 [ 423.220964][ T7580] rfcomm_dlc_open+0xa1f/0xec0 [ 423.225741][ T7580] ? rfcomm_sock_connect+0x2c6/0x600 [ 423.231043][ T7580] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.236423][ T7580] ? rfcomm_dlc_free+0x50/0x50 [ 423.241212][ T7580] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.246593][ T7580] ? _local_bh_enable+0xa0/0xa0 [ 423.251446][ T7580] ? do_raw_spin_unlock+0x121/0x230 [ 423.256652][ T7580] rfcomm_sock_connect+0x2ed/0x600 [ 423.261771][ T7580] __sys_connect+0x3da/0x470 [ 423.266376][ T7580] ? __sys_connect_file+0x170/0x170 [ 423.271598][ T7580] __x64_sys_connect+0x7a/0x90 [ 423.276382][ T7580] do_syscall_64+0x55/0xb0 [ 423.280822][ T7580] ? clear_bhb_loop+0x40/0x90 [ 423.285515][ T7580] ? clear_bhb_loop+0x40/0x90 [ 423.290201][ T7580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.296111][ T7580] RIP: 0033:0x7f086359e159 [ 423.300543][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.320147][ T7580] RSP: 002b:00007f0864500028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 423.328559][ T7580] RAX: ffffffffffffffda RBX: 00007f0863825fa0 RCX: 00007f086359e159 [ 423.336530][ T7580] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000006 [ 423.344503][ T7580] RBP: 00007f086363506b R08: 0000000000000000 R09: 0000000000000000 [ 423.352493][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.360475][ T7580] R13: 00007f0863826038 R14: 00007f0863825fa0 R15: 00007ffddcb9be68 [ 423.368451][ T7580] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 423.768348][ T6678] bond0: (slave syz_tun): Releasing backup interface [ 424.767065][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.219806][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.350381][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.422278][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.572641][ T1106] tipc: Left network mode [ 426.350276][ T1106] hsr_slave_0: left promiscuous mode [ 426.356921][ T1106] hsr_slave_1: left promiscuous mode [ 426.363547][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.371731][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.381654][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.393103][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.401177][ T1106] bridge_slave_1: left allmulticast mode [ 426.408687][ T1106] bridge_slave_1: left promiscuous mode [ 426.414784][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.423981][ T1106] bridge_slave_0: left allmulticast mode [ 426.431418][ T1106] bridge_slave_0: left promiscuous mode [ 426.437577][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.451246][ T1106] veth1_macvtap: left promiscuous mode [ 426.457665][ T1106] veth0_macvtap: left promiscuous mode [ 426.463322][ T1106] veth1_vlan: left promiscuous mode [ 426.471677][ T1106] veth0_vlan: left promiscuous mode [ 426.861805][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.870760][ T1106] bond_slave_1 (unregistering): left promiscuous mode [ 426.903566][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.913422][ T1106] bond_slave_0 (unregistering): left promiscuous mode [ 426.991934][ T1106] bond0 (unregistering): Released all slaves [ 427.397906][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.454537][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.536686][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.602142][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.724036][ T1106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.772241][ T1106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.823534][ T1106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.882764][ T1106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.070161][ T1106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.103138][ T1106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.180805][ T1106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.246137][ T1106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.385070][ T1106] tipc: Disabling bearer [ 428.402503][ T1106] tipc: Left network mode [ 428.408750][ T1106] tipc: Left network mode [ 428.857743][ T1106] team0: Port device xfrm0 removed [ 429.463304][ T5832] infiniband syz0: ib_query_port failed (-19) [ 429.656784][ T1106] hsr_slave_0: left promiscuous mode [ 429.662940][ T1106] hsr_slave_1: left promiscuous mode [ 429.670369][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.677842][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.687022][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.694453][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.702246][ T1106] bridge_slave_1: left allmulticast mode [ 429.710581][ T1106] bridge_slave_1: left promiscuous mode [ 429.717105][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.727441][ T1106] bridge_slave_0: left allmulticast mode [ 429.733121][ T1106] bridge_slave_0: left promiscuous mode [ 429.739121][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.754641][ T1106] hsr_slave_0: left promiscuous mode [ 429.760904][ T1106] hsr_slave_1: left promiscuous mode [ 429.778880][ T1106] hsr_slave_0: left promiscuous mode [ 429.784773][ T1106] hsr_slave_1: left promiscuous mode [ 429.793544][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.802942][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.812119][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.820360][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.829225][ T1106] bridge_slave_1: left allmulticast mode [ 429.834902][ T1106] bridge_slave_1: left promiscuous mode [ 429.840695][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.850490][ T1106] bridge_slave_0: left allmulticast mode [ 429.857229][ T1106] bridge_slave_0: left promiscuous mode [ 429.863092][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.880152][ T1106] veth1_macvtap: left promiscuous mode [ 429.886987][ T1106] veth0_macvtap: left promiscuous mode [ 429.892619][ T1106] veth1_vlan: left promiscuous mode [ 429.898793][ T1106] veth0_vlan: left promiscuous mode [ 429.907482][ T1106] veth1_macvtap: left promiscuous mode [ 429.913026][ T1106] veth0_macvtap: left promiscuous mode [ 429.920292][ T1106] veth1_vlan: left promiscuous mode [ 429.927625][ T1106] veth0_vlan: left promiscuous mode [ 429.936651][ T1106] veth1_macvtap: left promiscuous mode [ 429.942302][ T1106] veth0_macvtap: left promiscuous mode [ 429.953118][ T1106] veth1_vlan: left promiscuous mode [ 429.958557][ T1106] veth0_vlan: left promiscuous mode [ 430.335587][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 430.364443][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 430.394975][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.424300][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.510754][ T1106] bond0 (unregistering): Released all slaves [ 430.852113][ T1106] bond0 (unregistering): Released all slaves [ 431.041920][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 431.070465][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 431.098254][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.128534][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.205260][ T1106] bond0 (unregistering): Released all slaves [ 431.961104][ T1106] IPVS: stop unused estimator thread 0...