last executing test programs: 4m22.928494837s ago: executing program 2 (id=1097): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="4c00000011000f1400110002aa574100000f0002100000", 0x17) 4m22.401694412s ago: executing program 2 (id=1099): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000780)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 4m22.042406625s ago: executing program 2 (id=1102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xb}, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x800, 0x5}], 0x7) sendto$inet(r0, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 4m21.700817713s ago: executing program 2 (id=1103): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/253, 0xfd, 0x7fffffffffffffff) 4m18.960783807s ago: executing program 2 (id=1106): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m17.197224698s ago: executing program 2 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) llistxattr(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r6}, 0x10) 4m8.37097534s ago: executing program 32 (id=1094): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@barrier}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") 4m1.070180042s ago: executing program 33 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) llistxattr(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x80c019, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x21, 0x3, 0x8000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r6}, 0x10) 3m53.457037752s ago: executing program 1 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x4024004) 3m52.532806157s ago: executing program 1 (id=1186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 3m52.287204132s ago: executing program 1 (id=1189): unshare(0x26020480) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000280)=[{r0, 0x80}], 0x1, 0x0, 0x0, 0x0) 3m52.058601035s ago: executing program 1 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @remote}}]}, 0x30}}, 0x4000) 3m51.806736203s ago: executing program 1 (id=1193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 3m51.458496068s ago: executing program 1 (id=1195): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x3f}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) unshare(0x60000600) removexattr(&(0x7f0000000300)='./file0\x00', 0x0) 3m36.292336851s ago: executing program 34 (id=1195): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x3f}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) unshare(0x60000600) removexattr(&(0x7f0000000300)='./file0\x00', 0x0) 3m18.307343234s ago: executing program 6 (id=1139): getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m16.843220481s ago: executing program 6 (id=1307): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 3m15.337976695s ago: executing program 6 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x7, 0x80800) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000500)={[{@nodelalloc}]}, 0xfc, 0x515, &(0x7f0000000c40)="$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") 3m0.122418617s ago: executing program 35 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x7, 0x80800) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000500)={[{@nodelalloc}]}, 0xfc, 0x515, &(0x7f0000000c40)="$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") 1m26.385629608s ago: executing program 5 (id=1820): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r1, 0x5452, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000c80)={0xc, {"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", 0x1000}}, 0x1006) 1m25.896886025s ago: executing program 5 (id=1826): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) write$UHID_INPUT2(r0, &(0x7f00000000c0)=ANY=[], 0x52) 1m15.001517301s ago: executing program 5 (id=1885): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) 1m14.768341159s ago: executing program 5 (id=1888): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a0560"], 0xd) 1m14.141468127s ago: executing program 5 (id=1891): ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000040)=0x312) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) 1m12.53711175s ago: executing program 5 (id=1898): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@delchain={0x24, 0x11, 0x1, 0x71bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9ec416ce9bffe0c6, 0xf}, {0xfff2, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x40) 57.339334025s ago: executing program 36 (id=1898): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@delchain={0x24, 0x11, 0x1, 0x71bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9ec416ce9bffe0c6, 0xf}, {0xfff2, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x40) 11.965913871s ago: executing program 3 (id=2238): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) openat(0xffffffffffffff9c, 0x0, 0x101940, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 10.080033543s ago: executing program 7 (id=2255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800200000000000080012000307ff0008001100ff070000080010000000020008000f"], 0x54}}, 0x0) 9.593655709s ago: executing program 7 (id=2258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x80000000, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) 9.151215848s ago: executing program 3 (id=2260): r0 = syz_io_uring_setup(0xf, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f00000004c0)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG_ZC={0x30, 0x4, 0x25, r4, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x9, 0x41, 0x1, {0x3, r5}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 8.755845804s ago: executing program 3 (id=2263): r0 = io_uring_setup(0x3eaa, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584c9f2649a50f2dbc43efa8c045942824ffffffffb5191584cdd6fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[], 0x14}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) ptrace(0x10, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x8001, @loopback}}, 0xf}, 0x90) ioctl$FUSE_DEV_IOC_CLONE(r3, 0xe503, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x84, 0x4, 0xfffffffffffffffe, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) pipe2(&(0x7f0000000000), 0x0) fanotify_init(0x2, 0x800) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003d40)=[{0xffffffffffffff5c, 0x0, 0x0}], 0x1) 7.844281507s ago: executing program 8 (id=2266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r3}) 7.691221227s ago: executing program 8 (id=2268): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 7.590385392s ago: executing program 3 (id=2270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 7.442529056s ago: executing program 8 (id=2272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 7.241908786s ago: executing program 3 (id=2274): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='dummy_hcd.0', 0xb) 7.158616347s ago: executing program 8 (id=2276): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 6.819123111s ago: executing program 0 (id=2280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r3}) 6.706446271s ago: executing program 7 (id=2281): socket(0x2d, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f00000000c0), 0x5, 0x4f3, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000480)=0x3d, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.602324994s ago: executing program 9 (id=2282): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) openat(0xffffffffffffff9c, 0x0, 0x101940, 0x0) 6.565532557s ago: executing program 0 (id=2283): socket$inet6(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 6.358328967s ago: executing program 0 (id=2284): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 6.133807982s ago: executing program 3 (id=2285): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x658b, 0x100000002, 0x9, 0xfff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, 0x0, 0xffdd) 5.620495105s ago: executing program 0 (id=2286): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000b00)={[], [{@fowner_eq}, {@euid_lt}]}, 0xfd, 0x4cb, &(0x7f0000000180)="$eJzs3M1vG0UbAPBnHSdp+vEmbykfLYUWCqKASJq0QIU4UAQSB5CQuJRjSEIJTRuUpohWFQQO5Ygqca84IvEXcIILAk5IvZY7qlShXlqKkIzW3nWcxE4c105o/ftJsWfWa8883hl7ZifeALrW/vQmidgeEVcjYrCSXbrD/srdrRsXJv66cWEiiVLpnT+T8n43b1yYyHfNn7ctzyws3V7rzLnzJ8dnZqbmsvzI/KmPRs6cO//c9KnxE1Mnpk6PHT165PDoiy+MPd+48r1rx1dbp5t7Pp3du/uNdy+9NXH80nu/fJfk8S+J4+O1X7Q5++ts68kTT7arlP+IHeXbgfJtUsy3FjavQjQlbZDFrCtdjcHoierBi8F4/YtNrRzQUat/hQ5FRGlRkt3XbgPuYknTvblXv4d7SvZFn0QsTKRz4Nr5fDe4fqwyAUrjvpX9VR4pVmevvdX5bfsVI/pj4fbl4wu3L8fieYi+DhUHABA/HKvc52O/xfFfoVi73yvZ2tBQRPw/InZGxH0RsSsi7o+IByLiwYh4qOY59dZ9llu+SLJy/Fm41lJgTbr+bMTL2drW0vFfde1iqCfL7SjH35u8Pz0zdSgi/hcRB6O3P82PrlLGj69d+SpLrhjXpfEfz8Z/6V9afj4WzOpxrdi/9DmT4/Pjdxp37vrnEXuK9eJPqisB6XHcHRF79rVWxvQz3+5t9Nja8ddRXHZ/B0rfRDxVOf4LsSz+XLL6+uTIlpiZOjSSt4qVfv3t4tuNym8p/jZKj//Wuu2/Gv9QUrtee2b9ZVz8/cuGc8om2/+SfpO2/75kaVf6ZHx+fm40oi95s5zvK39ipdtj5X5ji/un8R88UL//74zFd+LhiEgb8SMR8WhE7Mvq/lhEPB4RB1aJ/+dXn/iw9fg7K41/cu3j/8HT1ePfMJGvba94qOfkT9+XH8kP2dAq8SdR5/gfKacOZlua+fxbtaZzd9KaAQAA4O5TiIjtkRSGq+lCYXi48v/yu2JrYWb2pZGI2bOnJyu/ERiK3kJ+pmuwej40FkazaX1+fnRsWf5wdt74656Bcn54YnZmcrODhy63rUH/T/3Rs9m1AzquDetowF2q1f5fKpU+a3NVgA3m+x+6l/4P3atO/x9Ylu/fqLoAG6um/xfyTM3E/p/F3wkD95pG4/8rG1wPYOOZ/0P30v+he+n/0JWyX8IXo6lfy7eQiOLa+6SfPw336YmIjlSs9aeXSltWXuWgkpg+24GqVhN9bXzB7cuvkjC4vteJwjoLTWrb2JZ1XKNhRSI69PZ2KvF3drHNDSgr7UpzA417U/OJzf5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//+DutIv") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ipv6_route\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 5.460701414s ago: executing program 7 (id=2288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4.95106702s ago: executing program 7 (id=2289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) 4.950692602s ago: executing program 4 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ptrace(0x10, 0x0) socket(0x6, 0x803, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0x3852, &(0x7f0000000640)={0x0, 0xbfffeffb, 0x800, 0x3, 0x2}) 4.091930532s ago: executing program 7 (id=2291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000110000008001b000000000014002b8008000100", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 3.625252111s ago: executing program 0 (id=2292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 2.494336713s ago: executing program 0 (id=2293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x80000000, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) 2.492227351s ago: executing program 4 (id=2294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x405, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x44}}, 0x0) 2.455159886s ago: executing program 9 (id=2295): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r3}) 2.20088088s ago: executing program 8 (id=2296): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.062441637s ago: executing program 4 (id=2297): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c80)="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", 0x1b4}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593b7dc", 0x6}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000380)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed610824c8d5f229e33a3fb2703e02865d049bec0875e912a8e3c258991aeb6ad9f2acae1946a4495103af0d7d41775462593f51df475710215facd39635605811f4af67f99977c1ff7f2df773c81e09e8ffffda9a8312a932b67c528c37a834916de59fb39ededbdb0000e7e40dfa464c83264c6341198f8143ebf6ac64db", 0x94}, {&(0x7f0000000640)="37f00163ee64590eddc69225a76b0c705b43d255bb682c28fc62b9d27da33e7dd1c9f3f87d", 0x25}], 0x4) write(r0, &(0x7f0000001e00)="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", 0x47b) 2.004770015s ago: executing program 9 (id=2298): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.866419272s ago: executing program 8 (id=2299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.795632417s ago: executing program 4 (id=2300): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="00042dbd7000fedbdf250b000000080003", @ANYBLOB="05000800010000000800370000000000450400280009000700fe2c51"], 0x44}, 0x1, 0x0, 0x0, 0x4044820}, 0x20040090) syz_emit_vhci(0x0, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x71) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) 1.755415596s ago: executing program 9 (id=2301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.506337023s ago: executing program 9 (id=2302): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nogrpid}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x200810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 562.471328ms ago: executing program 4 (id=2303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) 13.962618ms ago: executing program 9 (id=2304): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000b00)={[], [{@fowner_eq}, {@euid_lt}]}, 0xfd, 0x4cb, &(0x7f0000000180)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ipv6_route\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 0s ago: executing program 4 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) kernel console output (not intermixed with test programs): over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.117352][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.155365][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.162465][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.188533][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.205896][ T5621] hsr_slave_0: entered promiscuous mode [ 85.213215][ T5621] hsr_slave_1: entered promiscuous mode [ 85.219402][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 85.225397][ T5621] Cannot create hsr debugfs directory [ 85.243284][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.250342][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.276332][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.302836][ T5606] hsr_slave_0: entered promiscuous mode [ 85.309244][ T5606] hsr_slave_1: entered promiscuous mode [ 85.315585][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 85.321310][ T5606] Cannot create hsr debugfs directory [ 85.341738][ T5610] hsr_slave_0: entered promiscuous mode [ 85.349448][ T5610] hsr_slave_1: entered promiscuous mode [ 85.355798][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 85.361557][ T5610] Cannot create hsr debugfs directory [ 85.556827][ T5622] hsr_slave_0: entered promiscuous mode [ 85.563870][ T5622] hsr_slave_1: entered promiscuous mode [ 85.570111][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 85.575888][ T5622] Cannot create hsr debugfs directory [ 85.595861][ T5604] hsr_slave_0: entered promiscuous mode [ 85.602747][ T5604] hsr_slave_1: entered promiscuous mode [ 85.608913][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 85.614995][ T5604] Cannot create hsr debugfs directory [ 86.013403][ T9] cfg80211: failed to load regulatory.db [ 86.260723][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.276206][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.284489][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.296212][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.304842][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.315941][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.324801][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.334883][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.412760][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.428318][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.436685][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.447204][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.455636][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.467714][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.476164][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.486273][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.589794][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.600263][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.608654][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.619792][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.628410][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.639201][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.652530][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.663108][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.776035][ T5610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.786710][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.795201][ T5610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.802831][ T5616] Bluetooth: hci0: command tx timeout [ 86.808755][ T5617] Bluetooth: hci2: command tx timeout [ 86.808841][ T5607] Bluetooth: hci1: command tx timeout [ 86.820862][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.839953][ T5610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.851599][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.871556][ T5610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.882757][ T5617] Bluetooth: hci4: command tx timeout [ 86.883688][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.888779][ T5607] Bluetooth: hci5: command tx timeout [ 86.900926][ T5616] Bluetooth: hci3: command tx timeout [ 86.965866][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.979422][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.042905][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.060204][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.068268][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.078112][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.087523][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.098301][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.106714][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.117633][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.167009][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.191412][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.224109][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.231335][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.241918][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.249043][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.304642][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.311769][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.340309][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.347551][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.365710][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.377734][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.387503][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.397957][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.417256][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.427467][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.449092][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.459495][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.521447][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.613884][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.643784][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.715182][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.722374][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.754335][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.761513][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.781445][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.798689][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.818897][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.826231][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.885330][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.892497][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.960895][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.000876][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.008084][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.057668][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.064815][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.245100][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.391765][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.436927][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.444128][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.540417][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.547653][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.854076][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.885532][ T5617] Bluetooth: hci0: command tx timeout [ 88.890992][ T5616] Bluetooth: hci2: command tx timeout [ 88.896659][ T5607] Bluetooth: hci1: command tx timeout [ 88.915771][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.965082][ T5607] Bluetooth: hci5: command tx timeout [ 88.970564][ T5616] Bluetooth: hci3: command tx timeout [ 88.977152][ T5617] Bluetooth: hci4: command tx timeout [ 89.151798][ T5621] veth0_vlan: entered promiscuous mode [ 89.208649][ T5621] veth1_vlan: entered promiscuous mode [ 89.410326][ T5621] veth0_macvtap: entered promiscuous mode [ 89.461147][ T5621] veth1_macvtap: entered promiscuous mode [ 89.571553][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.608971][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.638528][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.713215][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.770208][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.863313][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.972436][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.023693][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.079335][ T5606] veth0_vlan: entered promiscuous mode [ 90.114587][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.153536][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.181312][ T5606] veth1_vlan: entered promiscuous mode [ 90.194868][ T5605] veth0_vlan: entered promiscuous mode [ 90.203032][ T997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.271484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.297804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.307564][ T5605] veth1_vlan: entered promiscuous mode [ 90.377764][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.396152][ T5606] veth0_macvtap: entered promiscuous mode [ 90.422050][ T5622] veth0_vlan: entered promiscuous mode [ 90.438514][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.456512][ T5606] veth1_macvtap: entered promiscuous mode [ 90.491327][ T5622] veth1_vlan: entered promiscuous mode [ 90.527441][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.588840][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.600946][ T5605] veth0_macvtap: entered promiscuous mode [ 90.639959][ T5605] veth1_macvtap: entered promiscuous mode [ 90.693526][ T82] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.743938][ T5610] veth0_vlan: entered promiscuous mode [ 90.763514][ T5604] veth0_vlan: entered promiscuous mode [ 90.791468][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.813267][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.836522][ T5622] veth0_macvtap: entered promiscuous mode [ 90.850634][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.875173][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.887994][ T5610] veth1_vlan: entered promiscuous mode [ 90.909269][ T5622] veth1_macvtap: entered promiscuous mode [ 90.930615][ T5604] veth1_vlan: entered promiscuous mode [ 90.998673][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.021918][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.036378][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.089510][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.103276][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.118363][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.130702][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.293877][ T5610] veth0_macvtap: entered promiscuous mode [ 91.358768][ T5604] veth0_macvtap: entered promiscuous mode [ 91.414752][ T5610] veth1_macvtap: entered promiscuous mode [ 91.455534][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.466001][ T5604] veth1_macvtap: entered promiscuous mode [ 91.477818][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.522391][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.649383][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.683474][ T5866] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 91.718547][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.721125][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.754337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.764521][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.776757][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.798128][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799617][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.817837][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.831763][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.863132][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.890356][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.990762][ T5802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.998914][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.027634][ T5802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.045613][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.079956][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.132109][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.468308][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.473522][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.490549][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.563730][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.597500][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.792421][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.845701][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.879306][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.905013][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.942524][ T5802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.983729][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.047510][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.085064][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.222752][ T5802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.302858][ T5802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.463236][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.527449][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19'. [ 93.799413][ T5912] loop3: detected capacity change from 0 to 40427 [ 93.823781][ T5912] F2FS-fs (loop3): invalid crc value [ 93.959127][ T5912] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 93.970920][ T5912] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 93.978613][ T5912] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 93.989619][ T5912] F2FS-fs (loop3): Start checkpoint disabled! [ 93.999474][ T5912] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 94.008908][ T5912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 94.500108][ T5931] loop4: detected capacity change from 0 to 512 [ 94.809157][ T5931] EXT4-fs (loop4): filesystem is read-only [ 94.818019][ T5931] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 94.887464][ T5931] EXT4-fs (loop4): failed to initialize system zone (-117) [ 94.898409][ T5931] EXT4-fs (loop4): mount failed [ 95.942434][ T49] kworker/u8:3: attempt to access beyond end of device [ 95.942434][ T49] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.039177][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 96.039208][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.039225][ T49] Workqueue: writeback wb_workfn (flush-7:3) [ 96.039273][ T49] Call Trace: [ 96.039283][ T49] [ 96.039293][ T49] dump_stack_lvl+0xe8/0x150 [ 96.039335][ T49] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 96.039382][ T49] f2fs_write_end_io+0x1215/0x16f0 [ 96.039418][ T49] ? blkg_put+0x22/0x240 [ 96.039475][ T49] __submit_merged_bio+0x258/0x6a0 [ 96.039511][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.039546][ T49] ? rcu_is_watching+0x16/0xb0 [ 96.039581][ T49] __submit_merged_write_cond+0x3c9/0x4e0 [ 96.039633][ T49] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 96.039690][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.039733][ T49] f2fs_write_data_pages+0x2a27/0x36f0 [ 96.039811][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.039857][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.039886][ T49] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 96.039960][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040044][ T49] ? ktime_get+0x1f5/0x220 [ 96.040084][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040113][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040142][ T49] ? clockevents_program_event+0x491/0x630 [ 96.040172][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.040201][ T49] do_writepages+0x338/0x560 [ 96.040250][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040279][ T49] ? reacquire_held_locks+0x104/0x190 [ 96.040306][ T49] ? writeback_sb_inodes+0x450/0x1b00 [ 96.040341][ T49] __writeback_single_inode+0x136/0x1220 [ 96.040373][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040402][ T49] ? do_raw_spin_unlock+0xf5/0x200 [ 96.040440][ T49] writeback_sb_inodes+0x9de/0x1b00 [ 96.040466][ T49] ? __lock_acquire+0x683/0x2cf0 [ 96.040532][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040579][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 96.040666][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040696][ T49] ? rcu_is_watching+0x16/0xb0 [ 96.040722][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.040751][ T49] ? queue_io+0x2d3/0x470 [ 96.040784][ T49] wb_writeback+0x41c/0xad0 [ 96.040815][ T49] ? queue_io+0x2b1/0x470 [ 96.040850][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 96.040873][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.040929][ T49] wb_workfn+0x431/0x10f0 [ 96.040993][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 96.041032][ T49] ? ktime_get+0x1f5/0x220 [ 96.041071][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041109][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041138][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.041182][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041216][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041257][ T49] ? rcu_is_watching+0x16/0xb0 [ 96.041282][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041314][ T49] ? process_scheduled_works+0x97a/0x1630 [ 96.041346][ T49] process_scheduled_works+0xc3d/0x1630 [ 96.041377][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041451][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.041491][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041525][ T49] ? assign_work+0x3cf/0x5d0 [ 96.041564][ T49] worker_thread+0xa47/0xfb0 [ 96.041636][ T49] kthread+0x38b/0x480 [ 96.041675][ T49] ? __pfx_worker_thread+0x10/0x10 [ 96.041704][ T49] ? __pfx_kthread+0x10/0x10 [ 96.041744][ T49] ret_from_fork+0x514/0xb70 [ 96.041787][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 96.041824][ T49] ? srso_alias_return_thunk+0x5/0xfbef5 [ 96.041853][ T49] ? __switch_to+0xc89/0x1420 [ 96.041891][ T49] ? __pfx_kthread+0x10/0x10 [ 96.041931][ T49] ret_from_fork_asm+0x1a/0x30 [ 96.041995][ T49] [ 96.432743][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.657754][ T5742] loop3: lost filesystem error report for type 5 error -108 [ 97.009765][ T5953] netlink: 5 bytes leftover after parsing attributes in process `syz.2.32'. [ 97.498704][ T5964] loop3: detected capacity change from 0 to 8192 [ 97.509704][ T5964] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.227596][ T5970] loop2: detected capacity change from 0 to 4096 [ 98.536484][ T5970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.545116][ T5970] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.757973][ T5970] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 98.766290][ T5970] System zones: 0-5 [ 98.777718][ T5970] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.36: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 98.795019][ T5970] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 98.795993][ T5970] EXT4-fs (loop2): Remounting filesystem read-only [ 98.806454][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 98.806563][ C1] EXT4-fs (loop2): initial error at time 1787663365: ext4_ext_check_inode:521: inode 4 [ 98.806602][ C1] EXT4-fs (loop2): last error at time 1787663365: ext4_ext_check_inode:521: inode 4 [ 98.842766][ T5970] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.862289][ T5970] EXT4-fs (loop2): mount failed [ 100.231029][ T5984] Bluetooth: MGMT ver 1.23 [ 100.976657][ T6004] loop2: detected capacity change from 0 to 8192 [ 100.988789][ T6004] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.069176][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 102.662848][ T6033] loop5: detected capacity change from 0 to 4096 [ 102.921723][ T6033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.931265][ T6033] EXT4-fs (loop5): Test dummy encryption mode enabled [ 103.120354][ T6033] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 103.130585][ T6033] System zones: 0-5 [ 103.166276][ T6033] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.57: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 103.183541][ T6033] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 103.202159][ T6033] EXT4-fs (loop5): Remounting filesystem read-only [ 103.211349][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 103.211375][ C1] EXT4-fs (loop5): initial error at time 1787663370: ext4_ext_check_inode:521: inode 4 [ 103.211413][ C1] EXT4-fs (loop5): last error at time 1787663370: ext4_ext_check_inode:521: inode 4 [ 103.245921][ T6033] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.261109][ T6033] EXT4-fs (loop5): mount failed [ 104.760094][ T6046] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 104.833846][ T6048] syzkaller0: entered promiscuous mode [ 104.845946][ T6048] syzkaller0: entered allmulticast mode [ 107.604451][ T6095] loop5: detected capacity change from 0 to 8192 [ 107.625705][ T6095] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.715906][ T6093] syzkaller0: entered promiscuous mode [ 107.754914][ T6093] syzkaller0: entered allmulticast mode [ 107.999203][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.83'. [ 108.112597][ T6106] syz.5.83 uses obsolete (PF_INET,SOCK_PACKET) [ 108.410172][ T6102] Zero length message leads to an empty skb [ 108.845048][ T6121] netlink: 'syz.1.88': attribute type 3 has an invalid length. [ 110.885753][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.894102][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.678973][ T6149] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 111.717880][ T5974] IPVS: starting estimator thread 0... [ 111.737558][ T6167] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 111.842597][ T6168] IPVS: using max 23 ests per chain, 55200 per kthread [ 114.330347][ T6217] syzkaller0: entered promiscuous mode [ 114.338182][ T6217] syzkaller0: entered allmulticast mode [ 114.573856][ T6238] netlink: 'syz.5.131': attribute type 1 has an invalid length. [ 114.639405][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.5.131'. [ 119.526893][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 120.699957][ T6240] vlan0: entered allmulticast mode [ 120.705242][ T6240] veth0_vlan: entered allmulticast mode [ 121.509562][ T6314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.945655][ T6324] tipc: Started in network mode [ 121.953846][ T6324] tipc: Node identity 1, cluster identity 4711 [ 121.970529][ T6324] tipc: Node number set to 1 [ 121.986276][ T6324] tipc: Enabled bearer , priority 10 [ 124.893047][ T6346] bridge_slave_0: left allmulticast mode [ 124.933207][ T6346] bridge_slave_0: left promiscuous mode [ 124.984832][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.098794][ T6346] bridge_slave_1: left allmulticast mode [ 125.130678][ T6346] bridge_slave_1: left promiscuous mode [ 125.156499][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.215428][ T6346] bond0: (slave bond_slave_0): Releasing backup interface [ 125.286948][ T6346] bond0: (slave bond_slave_1): Releasing backup interface [ 125.383336][ T6346] team0: Port device team_slave_0 removed [ 125.473682][ T6346] team0: Port device team_slave_1 removed [ 125.498036][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.536633][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.610989][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.646496][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.711647][ T6346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.671634][ T6396] ip6gretap0: entered promiscuous mode [ 127.699591][ T6396] macsec1: entered promiscuous mode [ 127.816847][ T6396] ip6gretap0: left promiscuous mode [ 129.458436][ T6409] syzkaller0: entered promiscuous mode [ 129.475710][ T6409] syzkaller0: entered allmulticast mode [ 131.876545][ T6458] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.203'. [ 132.088626][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.096597][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.137301][ T6464] Bluetooth: MGMT ver 1.23 [ 132.148440][ T6464] Bluetooth: hci0: unsupported parameter 5161 [ 132.161812][ T6464] Bluetooth: hci0: unsupported parameter 8192 [ 132.193847][ T6464] Bluetooth: hci0: unsupported parameter 5161 [ 132.206524][ T6464] Bluetooth: hci0: unsupported parameter 8192 [ 132.265808][ T6467] tipc: Started in network mode [ 132.295354][ T6467] tipc: Node identity 1, cluster identity 4711 [ 132.334356][ T6467] tipc: Node number set to 1 [ 132.359924][ T6468] tipc: Enabled bearer , priority 10 [ 133.146661][ T5615] hid-generic 0005:046D:5502.0001: item fetching failed at offset 0/1 [ 133.177725][ T5615] hid-generic 0005:046D:5502.0001: probe with driver hid-generic failed with error -22 [ 135.077134][ T6525] FAULT_INJECTION: forcing a failure. [ 135.077134][ T6525] name failslab, interval 1, probability 0, space 0, times 1 [ 135.089869][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.1.231 Not tainted syzkaller #0 PREEMPT(full) [ 135.089898][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.089913][ T6525] Call Trace: [ 135.089923][ T6525] [ 135.089933][ T6525] dump_stack_lvl+0xe8/0x150 [ 135.089974][ T6525] should_fail_ex+0x410/0x560 [ 135.090008][ T6525] should_failslab+0xa8/0x100 [ 135.090033][ T6525] ? __send_signal_locked+0x22a/0xeb0 [ 135.090075][ T6525] kmem_cache_alloc_noprof+0xa1/0x600 [ 135.090114][ T6525] ? sig_get_ucounts+0x26/0x450 [ 135.090143][ T6525] ? __send_signal_locked+0x22a/0xeb0 [ 135.090184][ T6525] ? sig_get_ucounts+0x3e4/0x450 [ 135.090216][ T6525] __send_signal_locked+0x22a/0xeb0 [ 135.090265][ T6525] send_signal_locked+0x138/0x9e0 [ 135.090309][ T6525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.090342][ T6525] ? __pfx_send_signal_locked+0x10/0x10 [ 135.090386][ T6525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.090416][ T6525] ? rcu_is_watching+0x16/0xb0 [ 135.090443][ T6525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.090483][ T6525] force_sig_info_to_task+0x316/0x4b0 [ 135.090535][ T6525] force_sig_fault+0xf0/0x150 [ 135.090565][ T6525] ? __pfx_force_sig_fault+0x10/0x10 [ 135.090599][ T6525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.090628][ T6525] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 135.090669][ T6525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.090705][ T6525] exc_page_fault+0x6a/0xc0 [ 135.090743][ T6525] asm_exc_page_fault+0x26/0x30 [ 135.090768][ T6525] RIP: 0033:0x7f3bf5f86d9f [ 135.090790][ T6525] Code: 0f 1f 84 00 00 00 00 00 0f 1f 00 48 ff ca 0f 8c 02 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 f9 03 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 68 [ 135.090811][ T6525] RSP: 002b:00007f3bf6eddbd8 EFLAGS: 00010283 [ 135.090833][ T6525] RAX: 0000000000000000 RBX: 00000000000007ff RCX: 0000000000000000 [ 135.090848][ T6525] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f3bf6eddc00 [ 135.090864][ T6525] RBP: 00007f3bf6eddc00 R08: 0000000000000000 R09: 0000000000000000 [ 135.090880][ T6525] R10: 0000000000000000 R11: 0000000000000002 R12: cccccccccccccccd [ 135.090897][ T6525] R13: 00007f3bf6226038 R14: 00007f3bf6225fa0 R15: 00007ffca0015dd8 [ 135.090935][ T6525] [ 136.065448][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.243'. [ 136.690391][ T6572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.073910][ T6582] netlink: 316 bytes leftover after parsing attributes in process `syz.2.255'. [ 137.110434][ T6582] netlink: 316 bytes leftover after parsing attributes in process `syz.2.255'. [ 139.342100][ T6624] netlink: 316 bytes leftover after parsing attributes in process `syz.2.270'. [ 139.372961][ T6624] netlink: 316 bytes leftover after parsing attributes in process `syz.2.270'. [ 139.415518][ T6623] syzkaller0: entered promiscuous mode [ 139.440901][ T6623] syzkaller0: entered allmulticast mode [ 141.114478][ T6663] netlink: 316 bytes leftover after parsing attributes in process `syz.3.285'. [ 141.146152][ T6663] netlink: 316 bytes leftover after parsing attributes in process `syz.3.285'. [ 141.526016][ T6671] syzkaller0: entered promiscuous mode [ 141.561116][ T6671] syzkaller0: entered allmulticast mode [ 142.790031][ T6637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.852997][ T6698] netlink: 316 bytes leftover after parsing attributes in process `syz.2.299'. [ 142.951647][ T6698] netlink: 316 bytes leftover after parsing attributes in process `syz.2.299'. [ 143.508989][ T6711] syzkaller0: entered promiscuous mode [ 143.531303][ T6711] syzkaller0: entered allmulticast mode [ 143.773399][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 144.339046][ T6734] netlink: 316 bytes leftover after parsing attributes in process `syz.2.316'. [ 144.398497][ T6734] netlink: 316 bytes leftover after parsing attributes in process `syz.2.316'. [ 144.652858][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 145.855830][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 145.894737][ T6758] syzkaller0: entered promiscuous mode [ 145.920639][ T6758] syzkaller0: entered allmulticast mode [ 146.543456][ T6776] netlink: 316 bytes leftover after parsing attributes in process `syz.2.333'. [ 146.607402][ T6776] netlink: 316 bytes leftover after parsing attributes in process `syz.2.333'. [ 146.666255][ T6780] lo: entered promiscuous mode [ 146.789163][ T6778] lo: left promiscuous mode [ 147.257483][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 147.424397][ T6796] syzkaller0: entered promiscuous mode [ 147.457107][ T6796] syzkaller0: entered allmulticast mode [ 147.625581][ T6795] loop1: detected capacity change from 0 to 8192 [ 147.729857][ T6795] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.121069][ T6810] netlink: 316 bytes leftover after parsing attributes in process `syz.5.350'. [ 148.170948][ T6810] netlink: 316 bytes leftover after parsing attributes in process `syz.5.350'. [ 148.252349][ T6813] block nbd0: NBD_DISCONNECT [ 148.271251][ T6813] loop0: detected capacity change from 0 to 8 [ 148.284517][ T6813] squashfs: Unknown parameter ' ' [ 149.500426][ T6830] ======================================================= [ 149.500426][ T6830] WARNING: The mand mount option has been deprecated and [ 149.500426][ T6830] and is ignored by this kernel. Remove the mand [ 149.500426][ T6830] option from the mount to silence this warning. [ 149.500426][ T6830] ======================================================= [ 150.699282][ T30] audit: type=1326 audit(1787663417.624:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.4.355" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2caab9e0d9 code=0x0 [ 151.074536][ T6844] loop4: detected capacity change from 0 to 4096 [ 151.475527][ T6844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.484120][ T6844] EXT4-fs (loop4): Test dummy encryption mode enabled [ 151.564123][ T6844] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 151.573667][ T6844] System zones: 0-5 [ 151.586469][ T6844] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.355: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 7(4), depth 0(0) [ 151.603958][ T6844] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 151.612289][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 151.628461][ C1] EXT4-fs (loop4): initial error at time 1787663418: ext4_ext_check_inode:521: inode 4 [ 151.638151][ C1] EXT4-fs (loop4): last error at time 1787663418: ext4_ext_check_inode:521: inode 4 [ 151.880848][ T6844] EXT4-fs (loop4): Remounting filesystem read-only [ 151.888174][ T6844] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.907022][ T6844] EXT4-fs (loop4): mount failed [ 152.902811][ T6851] syzkaller0: entered promiscuous mode [ 152.927449][ T6851] syzkaller0: entered allmulticast mode [ 153.661236][ T6855] loop4: detected capacity change from 0 to 8192 [ 153.703092][ T6855] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.752410][ T6864] netlink: 316 bytes leftover after parsing attributes in process `syz.0.364'. [ 153.812396][ T6864] netlink: 316 bytes leftover after parsing attributes in process `syz.0.364'. [ 153.967920][ T6869] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.126251][ T6877] GUP no longer grows the stack in syz.2.368 (6877): 200000004000-20000000a000 (200000002000) [ 155.136990][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.2.368 Not tainted syzkaller #0 PREEMPT(full) [ 155.137020][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.137035][ T6877] Call Trace: [ 155.137044][ T6877] [ 155.137054][ T6877] dump_stack_lvl+0xe8/0x150 [ 155.137097][ T6877] __get_user_pages+0x23b6/0x2750 [ 155.137144][ T6877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.137195][ T6877] get_user_pages_remote+0x307/0xb10 [ 155.137222][ T6877] ? __pfx_mtree_load+0x10/0x10 [ 155.137269][ T6877] ? __pfx_get_user_pages_remote+0x10/0x10 [ 155.137296][ T6877] ? __access_remote_vm+0xa3/0x6f0 [ 155.137326][ T6877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.137357][ T6877] ? __access_remote_vm+0x42c/0x6f0 [ 155.137394][ T6877] __access_remote_vm+0x222/0x6f0 [ 155.137436][ T6877] ? __pfx___access_remote_vm+0x10/0x10 [ 155.137466][ T6877] ? __kmalloc_cache_noprof+0x14d/0x600 [ 155.137502][ T6877] ? proc_pid_cmdline_read+0x41c/0x900 [ 155.137531][ T6877] ? proc_pid_cmdline_read+0x41c/0x900 [ 155.137564][ T6877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.137599][ T6877] proc_pid_cmdline_read+0x46b/0x900 [ 155.137635][ T6877] ? __asan_memset+0x22/0x50 [ 155.137677][ T6877] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 155.137712][ T6877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.137741][ T6877] ? rw_verify_area+0x24a/0x4c0 [ 155.137777][ T6877] vfs_readv+0x57c/0x850 [ 155.137816][ T6877] ? __pfx_futex_wake+0x10/0x10 [ 155.137850][ T6877] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 155.137887][ T6877] ? __pfx_vfs_readv+0x10/0x10 [ 155.137939][ T6877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.137972][ T6877] ? __fget_files+0x2a/0x420 [ 155.138006][ T6877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.138035][ T6877] ? __fget_files+0x3a2/0x420 [ 155.138062][ T6877] ? __fget_files+0x2a/0x420 [ 155.138095][ T6877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.138130][ T6877] __x64_sys_preadv+0x19c/0x2b0 [ 155.138168][ T6877] ? __pfx___x64_sys_preadv+0x10/0x10 [ 155.138218][ T6877] do_syscall_64+0x166/0x520 [ 155.138254][ T6877] ? trace_irq_disable+0x3b/0x140 [ 155.138292][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.138325][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.138350][ T6877] RIP: 0033:0x7f827419e0d9 [ 155.138373][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.138394][ T6877] RSP: 002b:00007f82750c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 155.138420][ T6877] RAX: ffffffffffffffda RBX: 00007f8274426180 RCX: 00007f827419e0d9 [ 155.138439][ T6877] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 155.138455][ T6877] RBP: 00007f8274235024 R08: 00000000fffffff9 R09: 0000000000000000 [ 155.138471][ T6877] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 155.138487][ T6877] R13: 00007f8274426218 R14: 00007f8274426180 R15: 00007ffdce173928 [ 155.138526][ T6877] [ 156.155072][ T30] audit: type=1326 audit(1787663423.084:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bf5f9e0d9 code=0x0 [ 157.177499][ T6895] tipc: Enabled bearer , priority 0 [ 157.350866][ T6891] tipc: Resetting bearer [ 158.154965][ T6889] tipc: Disabling bearer [ 158.239696][ T6905] syzkaller0: entered promiscuous mode [ 158.280678][ T6905] syzkaller0: entered allmulticast mode [ 158.911951][ T6938] overlayfs: failed to resolve './file0': -2 [ 159.296293][ T6938] loop0: detected capacity change from 0 to 8192 [ 159.314607][ T6938] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.431830][ T30] audit: type=1326 audit(1787663426.364:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.396" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bf5f9e0d9 code=0x0 [ 160.710040][ T6957] syzkaller0: entered promiscuous mode [ 160.755053][ T6957] syzkaller0: entered allmulticast mode [ 162.849464][ T6991] overlayfs: failed to resolve './file0': -2 [ 163.160582][ T6994] loop0: detected capacity change from 0 to 8192 [ 163.211911][ T6994] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.739763][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 163.783256][ T7004] veth1_to_team: entered promiscuous mode [ 163.818381][ T7004] gretap0: entered promiscuous mode [ 163.845882][ T7004] hsr1: entered promiscuous mode [ 163.925685][ T7008] syzkaller0: entered promiscuous mode [ 163.957051][ T7008] syzkaller0: entered allmulticast mode [ 164.928931][ T7033] input: syz0 as /devices/virtual/input/input5 [ 167.000205][ T7043] overlayfs: failed to resolve './file0': -2 [ 168.226906][ T7090] overlayfs: failed to resolve './file0': -2 [ 168.862216][ T7097] syzkaller0: entered promiscuous mode [ 168.896489][ T7097] syzkaller0: entered allmulticast mode [ 169.496405][ T7127] overlayfs: failed to resolve './file0': -2 [ 170.034209][ T7150] syzkaller0: entered promiscuous mode [ 170.048977][ T7150] syzkaller0: entered allmulticast mode [ 170.320775][ T7165] netlink: 'syz.0.483': attribute type 8 has an invalid length. [ 170.328544][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 170.410807][ T7165] bond0: entered promiscuous mode [ 170.423002][ T7165] bond_slave_0: entered promiscuous mode [ 170.429132][ T7165] bond_slave_1: entered promiscuous mode [ 170.440998][ T7165] gretap0: entered promiscuous mode [ 170.448666][ T7165] bond0: left promiscuous mode [ 170.464313][ T7165] bond_slave_0: left promiscuous mode [ 170.478615][ T7165] bond_slave_1: left promiscuous mode [ 170.500294][ T7165] gretap0: left promiscuous mode [ 170.530482][ T7172] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 171.432226][ T7204] syzkaller0: entered promiscuous mode [ 171.438489][ T7204] syzkaller0: entered allmulticast mode [ 172.076335][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.512'. [ 172.369545][ T7230] loop0: detected capacity change from 0 to 8192 [ 172.412203][ T7230] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.537824][ T7243] syzkaller0: entered promiscuous mode [ 172.567292][ T7243] syzkaller0: entered allmulticast mode [ 173.424491][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.532'. [ 173.488326][ T7274] tipc: Resetting bearer [ 173.497743][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 173.698990][ T7282] syzkaller0: entered promiscuous mode [ 173.731334][ T7282] syzkaller0: entered allmulticast mode [ 174.233712][ T7312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 174.321245][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 174.391908][ T7317] bond0: entered promiscuous mode [ 174.415361][ T7317] bond_slave_0: entered promiscuous mode [ 174.446373][ T7317] bond_slave_1: entered promiscuous mode [ 174.471846][ T7317] gretap0: entered promiscuous mode [ 174.479328][ T7317] debugfs: 'hsr1' already exists in 'hsr' [ 174.488289][ T7317] Cannot create hsr debugfs directory [ 174.498348][ T7317] hsr1: entered promiscuous mode [ 174.726122][ T7332] syzkaller0: entered promiscuous mode [ 174.747020][ T7332] syzkaller0: entered allmulticast mode [ 176.338354][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.569'. [ 176.611641][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 176.676361][ T7359] bond0: entered promiscuous mode [ 176.688338][ T7359] bond_slave_0: entered promiscuous mode [ 176.713852][ T7359] bond_slave_1: entered promiscuous mode [ 176.992345][ T7359] bond0: left promiscuous mode [ 177.006433][ T7359] bond_slave_0: left promiscuous mode [ 177.023882][ T7359] bond_slave_1: left promiscuous mode [ 177.089979][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 177.112894][ T7348] netlink: 3 bytes leftover after parsing attributes in process `syz.3.563'. [ 177.133764][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 177.156855][ T7348] netlink: 3 bytes leftover after parsing attributes in process `syz.3.563'. [ 180.478258][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 180.499792][ T7417] bond0: entered promiscuous mode [ 180.505009][ T7417] bond_slave_0: entered promiscuous mode [ 180.602764][ T7417] bond_slave_1: entered promiscuous mode [ 180.610938][ T7417] gretap0: entered promiscuous mode [ 180.617558][ T7417] debugfs: 'hsr1' already exists in 'hsr' [ 180.623357][ T7417] Cannot create hsr debugfs directory [ 180.628761][ T7417] hsr1: entered promiscuous mode [ 183.033882][ T7455] netlink: 28 bytes leftover after parsing attributes in process `syz.5.608'. [ 183.480639][ T7455] tipc: Resetting bearer [ 183.622828][ T30] audit: type=1800 audit(1787663450.564:5): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.601" name="/newroot/109/file7" dev="tmpfs" ino=585 res=0 errno=0 [ 183.882995][ T7467] netlink: 'syz.5.611': attribute type 8 has an invalid length. [ 183.903592][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 186.883356][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.623'. [ 186.949721][ T7493] veth1_to_team: entered promiscuous mode [ 186.980363][ T7493] gretap0: entered promiscuous mode [ 187.015675][ T7493] debugfs: 'hsr1' already exists in 'hsr' [ 187.034017][ T7493] Cannot create hsr debugfs directory [ 187.061950][ T7493] hsr1: entered promiscuous mode [ 188.445220][ T7537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.462643][ T7576] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.936074][ T7595] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.932781][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.939149][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.810085][ T7662] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 202.658893][ T5616] Bluetooth: hci5: link tx timeout [ 202.665531][ T5616] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.676100][ T5616] Bluetooth: hci5: link tx timeout [ 202.681220][ T5616] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.990512][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.708'. [ 203.747669][ T5616] Bluetooth: hci5: link tx timeout [ 203.753112][ T5616] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 203.761677][ T5616] Bluetooth: hci5: link tx timeout [ 203.777339][ T5616] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.724197][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 205.365038][ T5750] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 205.402600][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 205.495737][ T5750] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.692391][ T7768] netlink: 44 bytes leftover after parsing attributes in process `syz.5.726'. [ 205.848881][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 205.852885][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 205.855150][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 205.860959][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 205.867144][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 205.880184][ T7768] tc_dump_action: action bad kind [ 206.188196][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 207.842441][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 208.182642][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 211.731195][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.787'. [ 211.804549][ T7918] bond0: entered promiscuous mode [ 211.924800][ T7918] bond0: left promiscuous mode [ 212.273758][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.797'. [ 213.976796][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.810'. [ 214.062854][ T7976] bond0: entered promiscuous mode [ 214.086287][ T7976] bond_slave_0: entered promiscuous mode [ 214.098335][ T7976] bond_slave_1: entered promiscuous mode [ 214.129540][ T7976] gretap0: entered promiscuous mode [ 214.174071][ T7976] debugfs: 'hsr1' already exists in 'hsr' [ 214.195933][ T7976] Cannot create hsr debugfs directory [ 214.220789][ T7976] hsr1: entered promiscuous mode [ 214.493554][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.817'. [ 217.689942][ T8033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 217.809305][ T8033] bond0: entered promiscuous mode [ 217.873174][ T8033] bond_slave_0: entered promiscuous mode [ 217.910691][ T8033] bond_slave_1: entered promiscuous mode [ 217.977131][ T8033] gretap0: entered promiscuous mode [ 218.016656][ T8033] debugfs: 'hsr1' already exists in 'hsr' [ 218.035196][ T8033] Cannot create hsr debugfs directory [ 218.048648][ T8033] hsr1: entered promiscuous mode [ 218.133417][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.839'. [ 218.388920][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 219.178490][ T8059] overlayfs: failed to clone lowerpath [ 221.048968][ T8118] fuse: Bad value for 'fd' [ 221.140434][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 221.293098][ T8122] warning: `syz.0.868' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.426822][ T8127] input: syz0 as /devices/virtual/input/input6 [ 221.484311][ T8127] ip_tables: iptables: counters copy to user failed while replacing table [ 225.464092][ T8177] overlayfs: overlapping lowerdir path [ 226.740915][ T8194] input: syz0 as /devices/virtual/input/input7 [ 233.437440][ T8230] configfs-gadget.g1 gadget.0: HOST MAC 06:cb:d1:35:64:f4 [ 233.472573][ T8230] configfs-gadget.g1 gadget.0: MAC 62:60:0b:8a:21:3a [ 233.785541][ T8240] input: syz0 as /devices/virtual/input/input8 [ 233.973248][ T8243] ip_tables: iptables: counters copy to user failed while replacing table [ 236.513521][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 236.933987][ T29] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 236.956412][ T29] usb 1-1: Dual-Role OTG device on HNP port [ 236.968922][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.466983][ T29] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 06:cb:d1:35:64:f4 [ 240.961226][ T8315] input: syz0 as /devices/virtual/input/input9 [ 241.165372][ T8318] ip_tables: iptables: counters copy to user failed while replacing table [ 241.546203][ T8316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 246.266124][ T8369] ip_tables: iptables: counters copy to user failed while replacing table [ 251.103501][ T8445] overlayfs: failed to clone lowerpath [ 252.028805][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.965'. [ 253.628526][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 254.844174][ T8520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 254.964660][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.971081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.748557][ T8564] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 257.878981][ T8564] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 261.862205][ T8631] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1019'. [ 261.913871][ T8636] tc_dump_action: action bad kind [ 263.368909][ T8669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1036'. [ 264.346964][ T8670] usb usb2: usbfs: process 8670 (syz.0.1035) did not claim interface 0 before use [ 264.359987][ T8687] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 264.369646][ T8687] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 265.492512][ T8704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1049'. [ 265.569158][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 266.045675][ T8727] fuse: fd is not a fuse device [ 266.194905][ T8729] tc_dump_action: action bad kind [ 266.996559][ T8750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1066'. [ 268.675823][ T8779] tc_dump_action: action bad kind [ 269.556457][ T8776] usb usb2: usbfs: process 8776 (syz.0.1072) did not claim interface 0 before use [ 270.114965][ T8796] ip_tables: iptables: counters copy to user failed while replacing table [ 271.109438][ T8803] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1081'. [ 273.400639][ T8843] process 'syz.2.1093' launched './file0' with NULL argv: empty string added [ 273.918778][ T8857] Bluetooth: hci0: unsupported parameter 5135 [ 273.950038][ T8857] Bluetooth: hci0: unsupported parameter 65 [ 273.985474][ T8857] Bluetooth: hci0: unsupported parameter 5135 [ 274.030181][ T8857] Bluetooth: hci0: unsupported parameter 65 [ 274.736332][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1101'. [ 275.662821][ T8878] input: syz0 as /devices/virtual/input/input10 [ 277.312630][ T8876] ip_tables: iptables: counters copy to user failed while replacing table [ 284.687048][ T8957] input: syz0 as /devices/virtual/input/input11 [ 284.800234][ T8957] ip_tables: iptables: counters copy to user failed while replacing table [ 288.772364][ T9012] input: syz0 as /devices/virtual/input/input12 [ 288.905047][ T9012] ip_tables: iptables: counters copy to user failed while replacing table [ 290.986256][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.000087][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.009042][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.021463][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.032782][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.271486][ T5617] Bluetooth: hci6: command tx timeout [ 293.527333][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1156'. [ 294.681318][ T9074] input: syz0 as /devices/virtual/input/input13 [ 294.826215][ T9074] ip_tables: iptables: counters copy to user failed while replacing table [ 295.282656][ T5620] Bluetooth: hci6: command tx timeout [ 296.257084][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.268812][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.278977][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.292160][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.302184][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.759258][ T9096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.362379][ T5617] Bluetooth: hci6: command tx timeout [ 298.015660][ T5975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.854596][ T5617] Bluetooth: hci2: command tx timeout [ 299.219723][ T5975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.443036][ T5617] Bluetooth: hci6: command tx timeout [ 299.933592][ T9141] input: syz0 as /devices/virtual/input/input14 [ 300.932410][ T5617] Bluetooth: hci2: command tx timeout [ 301.985335][ T5975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.816566][ T5975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.129474][ T5617] Bluetooth: hci2: command tx timeout [ 304.181195][ T9023] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.213543][ T9023] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.239288][ T9023] bridge_slave_0: entered allmulticast mode [ 304.266160][ T9023] bridge_slave_0: entered promiscuous mode [ 304.302414][ T9023] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.326443][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.344121][ T9023] bridge_slave_1: entered allmulticast mode [ 304.358649][ T9023] bridge_slave_1: entered promiscuous mode [ 304.438089][ T9023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.469228][ T9023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.709388][ T9023] team0: Port device team_slave_0 added [ 304.735216][ T9023] team0: Port device team_slave_1 added [ 304.967886][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.998510][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.037453][ T9023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.087161][ T9023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.110684][ T9023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.177834][ T9023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.212426][ T5617] Bluetooth: hci2: command tx timeout [ 305.529062][ T5975] bridge_slave_1: left allmulticast mode [ 305.535765][ T5975] bridge_slave_1: left promiscuous mode [ 306.505149][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.536998][ T5975] bridge_slave_0: left allmulticast mode [ 306.552318][ T5975] bridge_slave_0: left promiscuous mode [ 306.705361][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.286111][ T9201] input: syz0 as /devices/virtual/input/input15 [ 309.084298][ T5975] gretap0 (unregistering): left promiscuous mode [ 309.163908][ T5975] bond0 (unregistering): left promiscuous mode [ 309.170213][ T5975] bond_slave_0: left promiscuous mode [ 309.182399][ T5975] bond_slave_1: left promiscuous mode [ 309.200198][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.219381][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.233143][ T5975] bond0 (unregistering): Released all slaves [ 310.211268][ T9206] infiniband syz2: set down [ 310.216037][ T9206] infiniband syz2: added ipvlan0 [ 310.226564][ T9206] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 310.231746][ T9206] infiniband syz2: Couldn't open port 1 [ 310.246357][ T9206] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 310.261537][ T9206] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 310.278749][ T9206] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 310.338515][ T9206] RDS/IB: syz2: added [ 310.343152][ T9206] smc: adding ib device syz2 with port count 1 [ 310.349500][ T9206] smc: ib device syz2 port 1 has no pnetid [ 314.024944][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.046005][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.070044][ T9084] bridge_slave_0: entered allmulticast mode [ 314.102211][ T9084] bridge_slave_0: entered promiscuous mode [ 314.131555][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.156312][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.185163][ T9084] bridge_slave_1: entered allmulticast mode [ 314.220395][ T9084] bridge_slave_1: entered promiscuous mode [ 314.368626][ T9023] hsr_slave_0: entered promiscuous mode [ 314.375593][ T9023] hsr_slave_1: entered promiscuous mode [ 314.383007][ T9023] debugfs: 'hsr0' already exists in 'hsr' [ 314.388871][ T9023] Cannot create hsr debugfs directory [ 314.410134][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.439166][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.606632][ T9084] team0: Port device team_slave_0 added [ 314.663735][ T9084] team0: Port device team_slave_1 added [ 315.007952][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.015146][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.052352][ T9084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.076778][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.102336][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.140145][ T9084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.258528][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 315.844999][ T9084] hsr_slave_0: entered promiscuous mode [ 315.851697][ T9084] hsr_slave_1: entered promiscuous mode [ 315.858445][ T9084] debugfs: 'hsr0' already exists in 'hsr' [ 315.864321][ T9084] Cannot create hsr debugfs directory [ 316.406463][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.438603][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.517235][ T9298] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 316.702760][ T9023] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.986483][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.085320][ T9023] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 317.399530][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.471324][ T9023] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 317.697782][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.731441][ T9023] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 317.781335][ T9023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.317781][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 318.708079][ T5617] Bluetooth: hci1: unexpected event for opcode 0x080e [ 318.944801][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.046902][ T9023] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.109604][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.116863][ T9143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.217497][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.224819][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.264116][ T9084] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 319.493786][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.527838][ T9084] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 319.938570][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.100618][ T9084] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 320.160759][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.194481][ T9084] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 320.258830][ T9084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.616265][ T5975] hsr_slave_0: left promiscuous mode [ 321.637302][ T5975] hsr_slave_1: left promiscuous mode [ 321.659826][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.675776][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.757858][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.770607][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.781549][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.789914][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.383104][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.398812][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.406613][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.436123][ T5975] veth1_macvtap: left promiscuous mode [ 322.446690][ T5975] veth0_macvtap: left promiscuous mode [ 322.456885][ T5975] veth1_vlan: left promiscuous mode [ 322.466412][ T5975] veth0_vlan: left promiscuous mode [ 323.062743][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 323.107872][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 323.922595][ T5620] Bluetooth: hci0: command tx timeout [ 323.958059][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 324.257957][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 325.209473][ T9084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.316567][ T9084] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.514945][ T5975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.658792][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.665993][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.014630][ T5620] Bluetooth: hci0: command tx timeout [ 326.169001][ T5975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.280719][ T9465] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 326.736548][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.743763][ T5802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.048702][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 327.229932][ T5975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.647599][ T9023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.088392][ T5620] Bluetooth: hci0: command tx timeout [ 328.125589][ T5975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.217990][ T5975] bridge_slave_1: left allmulticast mode [ 329.232549][ T5975] bridge_slave_1: left promiscuous mode [ 329.246553][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.274189][ T5975] bridge_slave_0: left allmulticast mode [ 329.288243][ T5975] bridge_slave_0: left promiscuous mode [ 329.294486][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.636370][ T5975] gretap0 (unregistering): left promiscuous mode [ 329.737655][ T5975] bond0 (unregistering): left promiscuous mode [ 329.757516][ T5975] bond_slave_0: left promiscuous mode [ 329.766975][ T5975] bond_slave_1: left promiscuous mode [ 329.798597][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.827323][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.851012][ T5975] bond0 (unregistering): Released all slaves [ 330.173041][ T5620] Bluetooth: hci0: command tx timeout [ 330.316504][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.356542][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.366090][ T9377] bridge_slave_0: entered allmulticast mode [ 330.377693][ T5620] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 330.389052][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.389087][ T5620] Tainted: [L]=SOFTLOCKUP [ 330.389096][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 330.389112][ T5620] Workqueue: hci1 hci_rx_work [ 330.389152][ T5620] Call Trace: [ 330.389162][ T5620] [ 330.389171][ T5620] dump_stack_lvl+0xe8/0x150 [ 330.389212][ T5620] sysfs_create_dir_ns+0x271/0x2a0 [ 330.389248][ T5620] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 330.389283][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.389314][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 330.389351][ T5620] kobject_add_internal+0x622/0xcd0 [ 330.389388][ T5620] kobject_add+0x163/0x240 [ 330.389410][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.389448][ T5620] ? __pfx_kobject_add+0x10/0x10 [ 330.389470][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.389502][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.389536][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.389565][ T5620] ? get_device_parent+0x366/0x3a0 [ 330.389609][ T5620] device_add+0x3fa/0xb80 [ 330.389650][ T5620] hci_conn_add_sysfs+0xd5/0x210 [ 330.389687][ T5620] le_conn_complete_evt+0xfb7/0x1690 [ 330.389724][ T5620] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 330.389750][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.389779][ T5620] ? __mutex_unlock_slowpath+0x731/0x900 [ 330.389821][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.389850][ T5620] ? skb_pull_data+0xf0/0x200 [ 330.389889][ T5620] hci_le_conn_complete_evt+0x187/0x470 [ 330.389943][ T5620] hci_event_packet+0x67a/0xf10 [ 330.389975][ T5620] ? trace_irq_disable+0x3b/0x140 [ 330.390021][ T5620] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 330.390058][ T5620] ? __pfx_hci_event_packet+0x10/0x10 [ 330.390104][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.390133][ T5620] ? hci_send_to_monitor+0xe2/0x590 [ 330.390165][ T5620] hci_rx_work+0x3ee/0x1020 [ 330.390208][ T5620] ? process_scheduled_works+0x97a/0x1630 [ 330.390239][ T5620] process_scheduled_works+0xc3d/0x1630 [ 330.390269][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.390334][ T5620] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.390371][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.390399][ T5620] ? assign_work+0x3cf/0x5d0 [ 330.390435][ T5620] worker_thread+0xa47/0xfb0 [ 330.390499][ T5620] kthread+0x38b/0x480 [ 330.390537][ T5620] ? __pfx_worker_thread+0x10/0x10 [ 330.390566][ T5620] ? __pfx_kthread+0x10/0x10 [ 330.390605][ T5620] ret_from_fork+0x514/0xb70 [ 330.390646][ T5620] ? __pfx_ret_from_fork+0x10/0x10 [ 330.390682][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 330.390711][ T5620] ? __switch_to+0xc89/0x1420 [ 330.390747][ T5620] ? __pfx_kthread+0x10/0x10 [ 330.390787][ T5620] ret_from_fork_asm+0x1a/0x30 [ 330.390847][ T5620] [ 330.390929][ T5620] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 330.408187][ T9377] bridge_slave_0: entered promiscuous mode [ 330.422473][ T5620] Bluetooth: hci1: failed to register connection device [ 330.984975][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.017538][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.046460][ T9377] bridge_slave_1: entered allmulticast mode [ 331.060944][ T9377] bridge_slave_1: entered promiscuous mode [ 331.298016][ T9377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.464078][ T9377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.844924][ T9377] team0: Port device team_slave_0 added [ 331.880335][ T9377] team0: Port device team_slave_1 added [ 331.929156][ T9023] veth0_vlan: entered promiscuous mode [ 332.074834][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.212520][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.242033][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.355425][ T9377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.512152][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 332.536960][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.563547][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.668129][ T9377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.741840][ T5975] hsr_slave_0: left promiscuous mode [ 332.755286][ T5975] hsr_slave_1: left promiscuous mode [ 332.761709][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.775518][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.795867][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.811065][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.851157][ T5975] veth1_macvtap: left promiscuous mode [ 332.857840][ T5975] veth0_macvtap: left promiscuous mode [ 332.869388][ T5975] veth1_vlan: left promiscuous mode [ 332.882669][ T5975] veth0_vlan: left promiscuous mode [ 333.557416][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 333.604817][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 333.968003][ T9023] veth1_vlan: entered promiscuous mode [ 334.303442][ T9023] veth0_macvtap: entered promiscuous mode [ 334.315497][ T9023] veth1_macvtap: entered promiscuous mode [ 334.342554][ T9377] hsr_slave_0: entered promiscuous mode [ 334.370776][ T9377] hsr_slave_1: entered promiscuous mode [ 334.397120][ T9377] debugfs: 'hsr0' already exists in 'hsr' [ 334.408287][ T9377] Cannot create hsr debugfs directory [ 335.020054][ T9084] veth0_vlan: entered promiscuous mode [ 335.040372][ T9084] veth1_vlan: entered promiscuous mode [ 335.605838][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.702603][ T9084] veth0_macvtap: entered promiscuous mode [ 335.913409][ T9023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.941469][ T9084] veth1_macvtap: entered promiscuous mode [ 336.105511][ T5975] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.187051][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.231044][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.264290][ T6163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.655116][ T5802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.681857][ T5802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.824461][ T5975] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.847379][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 336.901483][ T5802] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.954399][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.965510][ T5802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.028037][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.830872][ T30] audit: type=1326 audit(1787663604.064:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.4.1297" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2caab9e0d9 code=0x0 [ 337.973992][ T997] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.134357][ T5802] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.158023][ T5802] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.830571][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 338.956117][ T9377] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 338.977145][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.985733][ T9377] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 338.998926][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.008352][ T9377] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 339.155386][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.174604][ T5802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.214447][ T5802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.259227][ T9377] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 339.325297][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.524864][ T5802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.557435][ T5802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.774432][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1305'. [ 339.952402][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.058545][ T9377] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.178949][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.186213][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.322585][ T9745] 9p: Bad value for 'wfdno' [ 342.111489][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.118711][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.535621][ T9377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.816555][ T9757] loop6: detected capacity change from 0 to 512 [ 344.053842][ T9757] EXT4-fs (loop6): filesystem is read-only [ 344.119146][ T9757] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 344.217824][ T9757] EXT4-fs (loop6): failed to initialize system zone (-117) [ 344.255602][ T9757] EXT4-fs (loop6): mount failed [ 344.457060][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1319'. [ 344.976116][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 345.220665][ T9809] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 345.400848][ T9815] 9p: Bad value for 'rfdno' [ 345.887683][ T9377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.723477][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1333'. [ 347.098816][ T9377] veth0_vlan: entered promiscuous mode [ 347.282223][ T9377] veth1_vlan: entered promiscuous mode [ 347.986156][ T9377] veth0_macvtap: entered promiscuous mode [ 348.225892][ T9377] veth1_macvtap: entered promiscuous mode [ 348.962186][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.988757][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.176763][ T5974] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.245667][ T5932] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.330765][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 349.410819][ T1002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.506589][ T1002] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.624826][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.673720][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.772039][ T9874] 9p: Bad value for 'rfdno' [ 349.958679][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.983900][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.171801][ T9882] loop7: detected capacity change from 0 to 256 [ 350.438715][ T9889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'. [ 352.557349][ T9907] loop8: detected capacity change from 0 to 4096 [ 352.620464][ T9919] 9p: Bad value for 'rfdno' [ 352.692000][ T9907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.738178][ T9907] EXT4-fs (loop8): Test dummy encryption mode enabled [ 353.755941][ T9907] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 353.846210][ T9907] System zones: 0-5 [ 353.968490][ T9907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.277052][ T9377] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.726883][ T9960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1362'. [ 355.891604][ T9962] syzkaller0: entered promiscuous mode [ 355.937459][ T9962] syzkaller0: entered allmulticast mode [ 356.096931][ T9962] tipc: Started in network mode [ 356.120756][ T9962] tipc: Node identity f2c47f65a1bf, cluster identity 4711 [ 356.173214][ T9962] tipc: Enabled bearer , priority 0 [ 356.526698][ T9961] tipc: Resetting bearer [ 357.237689][ T9961] tipc: Disabling bearer [ 357.538320][ T5620] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 357.545380][ T5620] Bluetooth: hci3: unexpected event for opcode 0x200b [ 357.871186][T10003] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1378'. [ 357.934705][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.946905][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.955344][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.968658][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.976960][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.278663][ T5620] Bluetooth: hci5: command tx timeout [ 361.418454][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1393'. [ 361.618615][ T82] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.324633][ T5620] Bluetooth: hci5: command tx timeout [ 363.006657][ T82] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.403051][ T5620] Bluetooth: hci5: command tx timeout [ 365.255380][ T82] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.652735][ T82] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.214996][ T30] audit: type=1326 audit(1787663633.144:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10118 comm="syz.4.1411" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2caab9e0d9 code=0x0 [ 366.898171][ T5620] Bluetooth: hci5: command tx timeout [ 369.683698][ T82] bridge_slave_1: left allmulticast mode [ 369.710163][ T82] bridge_slave_1: left promiscuous mode [ 369.742963][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.794151][ T82] bridge_slave_0: left allmulticast mode [ 369.829481][ T82] bridge_slave_0: left promiscuous mode [ 369.859900][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.565073][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.606685][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.632815][ T82] bond0 (unregistering): Released all slaves [ 372.334631][ T30] audit: type=1326 audit(1787663638.604:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2caab9e0d9 code=0x0 [ 372.643876][T10214] loop7: detected capacity change from 0 to 512 [ 372.707108][T10214] ext4: Unknown parameter 'fowner' [ 373.084668][T10213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.179669][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.216682][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.251741][T10008] bridge_slave_0: entered allmulticast mode [ 373.315972][T10008] bridge_slave_0: entered promiscuous mode [ 373.350364][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.378838][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.406171][T10008] bridge_slave_1: entered allmulticast mode [ 373.470286][T10008] bridge_slave_1: entered promiscuous mode [ 373.759582][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.816721][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.954618][ T82] hsr_slave_0: left promiscuous mode [ 373.989838][ T82] hsr_slave_1: left promiscuous mode [ 374.018725][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.061896][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.098306][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.139170][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.174693][T10244] No control pipe specified [ 374.211600][ T82] veth1_macvtap: left promiscuous mode [ 374.236962][ T82] veth0_macvtap: left promiscuous mode [ 374.249426][ T82] veth1_vlan: left promiscuous mode [ 374.270537][ T82] veth0_vlan: left promiscuous mode [ 374.893195][T10260] loop7: detected capacity change from 0 to 512 [ 375.094979][T10260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.202873][T10260] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.578451][ T82] team0 (unregistering): Port device team_slave_1 removed [ 375.665159][ T82] team0 (unregistering): Port device team_slave_0 removed [ 376.035308][ T9084] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.278665][T10296] No control pipe specified [ 376.279846][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 376.805380][T10008] team0: Port device team_slave_0 added [ 376.850030][T10008] team0: Port device team_slave_1 added [ 376.961818][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.972582][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.021227][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.065309][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.094619][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.455517][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.813706][T10008] hsr_slave_0: entered promiscuous mode [ 377.854846][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.867353][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.910016][T10008] hsr_slave_1: entered promiscuous mode [ 377.947345][T10008] debugfs: 'hsr0' already exists in 'hsr' [ 377.969983][T10008] Cannot create hsr debugfs directory [ 379.317422][T10350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 380.828575][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 381.301202][T10008] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 381.375228][T10008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.412615][T10008] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 381.945934][T10008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.118465][T10008] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 382.153193][T10008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.161845][T10008] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 382.186730][T10008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.242198][T10008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.359663][T10008] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.748385][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.755641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.450633][T10474] loop7: detected capacity change from 0 to 256 [ 384.464069][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.471236][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.690306][T10478] 9p: Bad value for 'wfdno' [ 386.396575][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 387.443376][ T5620] Bluetooth: hci6: command 0x1003 tx timeout [ 387.502469][ T5617] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 388.819652][T10536] 9p: Bad value for 'wfdno' [ 388.847294][T10008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.779111][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'. [ 391.137163][T10591] netlink: 'syz.7.1539': attribute type 1 has an invalid length. [ 391.226251][T10593] Bluetooth: MGMT ver 1.23 [ 391.278382][T10596] netlink: 'syz.7.1539': attribute type 10 has an invalid length. [ 391.304601][T10596] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1539'. [ 391.314169][T10008] veth0_vlan: entered promiscuous mode [ 391.421748][T10591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.436651][T10596] dummy0: entered promiscuous mode [ 391.647114][T10606] 9p: Bad value for 'wfdno' [ 391.755065][T10008] veth1_vlan: entered promiscuous mode [ 393.357710][T10008] veth0_macvtap: entered promiscuous mode [ 393.705796][T10008] veth1_macvtap: entered promiscuous mode [ 394.270659][T10008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.389646][T10008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.576603][ T6163] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.599106][ T5973] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.409663][T10658] 9p: Bad value for 'rfdno' [ 395.627348][ T5973] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.710181][ T5973] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.828377][T10664] netlink: 'syz.8.1558': attribute type 2 has an invalid length. [ 396.939706][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.976232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.371101][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.389688][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.707771][T10709] 9p: Bad value for 'rfdno' [ 400.996869][T10738] syzkaller0: entered promiscuous mode [ 401.022801][T10743] netlink: 'syz.9.1579': attribute type 6 has an invalid length. [ 401.061946][T10738] syzkaller0: entered allmulticast mode [ 401.347838][T10741] tipc: Enabled bearer , priority 0 [ 401.429546][T10737] tipc: Resetting bearer [ 401.743093][T10737] tipc: Disabling bearer [ 402.029964][T10777] binder: 10775:10777 ioctl c0306201 200000000080 returned -14 [ 402.117908][T10779] binder: 10775:10779 ioctl c0306201 2000000003c0 returned -14 [ 403.916545][T10794] ip_tables: iptables: counters copy to user failed while replacing table [ 405.199655][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1603'. [ 405.229787][ T5617] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 406.553595][T10823] loop7: detected capacity change from 0 to 128 [ 406.775762][T10823] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.938502][T10823] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.024003][ T9084] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.319759][ T5617] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 409.524043][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 409.726505][T10875] loop7: detected capacity change from 0 to 512 [ 409.790156][T10879] netlink: 'syz.9.1626': attribute type 15 has an invalid length. [ 410.450117][T10875] ext4: Unknown parameter 'fowner' [ 410.484916][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1626'. [ 410.626234][T10879] bond0: option resend_igmp: invalid value (196616) [ 410.658322][T10879] bond0: option resend_igmp: allowed values 0 - 255 [ 410.700287][T10872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.742906][T10882] loop8: detected capacity change from 0 to 1024 [ 411.020749][T10882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.189286][ T5617] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 414.048744][T10928] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1642'. [ 414.441023][ T9377] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.492977][T10967] loop9: detected capacity change from 0 to 1024 [ 416.549993][T10967] EXT4-fs: Ignoring removed orlov option [ 416.550882][T10973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1655'. [ 416.687064][T10967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.719950][T10967] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.969784][T10008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 418.334020][T11000] syzkaller0: entered promiscuous mode [ 418.400477][T11000] syzkaller0: entered allmulticast mode [ 419.056204][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1667'. [ 420.383948][T11028] xt_hashlimit: size too large, truncated to 1048576 [ 420.465469][T11030] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1673'. [ 420.860732][T11036] loop9: detected capacity change from 0 to 4096 [ 420.931207][T11036] EXT4-fs (loop9): Test dummy encryption mode enabled [ 420.985454][T11036] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.510967][T11061] binder_alloc: 11060: binder_alloc_buf, no vma [ 422.536961][T11062] syzkaller0: entered promiscuous mode [ 422.584386][T11062] syzkaller0: entered allmulticast mode [ 423.008494][T10008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.465939][T11127] binder_alloc: 11126: binder_alloc_buf, no vma [ 427.471490][T11132] syzkaller0: entered promiscuous mode [ 427.519975][T11132] syzkaller0: entered allmulticast mode [ 429.328308][T11147] overlayfs: failed to resolve './file0': -2 [ 430.314290][T11160] netlink: 'syz.9.1708': attribute type 2 has an invalid length. [ 430.406380][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1709'. [ 430.783356][T11178] binder_alloc: 11177: binder_alloc_buf, no vma [ 432.237619][ T5617] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 433.452598][T11197] FAULT_INJECTION: forcing a failure. [ 433.452598][T11197] name failslab, interval 1, probability 0, space 0, times 0 [ 433.487461][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.9.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.487501][T11197] Tainted: [L]=SOFTLOCKUP [ 433.487510][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 433.487525][T11197] Call Trace: [ 433.487534][T11197] [ 433.487545][T11197] dump_stack_lvl+0xe8/0x150 [ 433.487594][T11197] should_fail_ex+0x410/0x560 [ 433.487628][T11197] should_failslab+0xa8/0x100 [ 433.487654][T11197] ? do_getname+0x2e/0x250 [ 433.487678][T11197] kmem_cache_alloc_noprof+0xa1/0x600 [ 433.487716][T11197] ? do_getname+0x2e/0x250 [ 433.487739][T11197] ? lock_vma_under_rcu+0x45a/0x500 [ 433.487777][T11197] do_getname+0x2e/0x250 [ 433.487798][T11197] ? getname_flags+0x11/0x20 [ 433.487824][T11197] do_sys_openat2+0xcc/0x200 [ 433.487854][T11197] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.487881][T11197] ? exc_page_fault+0x6a/0xc0 [ 433.487920][T11197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 433.487950][T11197] ? do_user_addr_fault+0xc4c/0x1340 [ 433.487994][T11197] __x64_sys_openat+0x138/0x170 [ 433.488026][T11197] do_syscall_64+0x166/0x520 [ 433.488061][T11197] ? trace_irq_disable+0x3b/0x140 [ 433.488099][T11197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.488131][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.488157][T11197] RIP: 0033:0x7f0eafb5e90e [ 433.488180][T11197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.488201][T11197] RSP: 002b:00007f0eb0a72b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 433.488226][T11197] RAX: ffffffffffffffda RBX: 00007f0eb0a736c0 RCX: 00007f0eafb5e90e [ 433.488245][T11197] RDX: 0000000000000002 RSI: 00007f0eb0a72c00 RDI: ffffffffffffff9c [ 433.488262][T11197] RBP: 00007f0eb0a72c00 R08: 0000000000000000 R09: 0000000000000000 [ 433.488278][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 433.488295][T11197] R13: 00007f0eafe26038 R14: 00007f0eafe25fa0 R15: 00007ffde73453e8 [ 433.488333][T11197] [ 434.081144][T11207] Bluetooth: hci0: unsupported parameter 255 [ 434.117937][T11207] Bluetooth: hci0: unsupported parameter 255 [ 434.171499][T11195] loop7: detected capacity change from 0 to 40427 [ 434.180215][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'. [ 434.209047][T11195] F2FS-fs (loop7): invalid crc value [ 434.419106][T11216] binder_alloc: 11215: binder_alloc_buf, no vma [ 435.329889][T11195] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 435.342662][T11225] netlink: 'syz.5.1731': attribute type 2 has an invalid length. [ 435.459199][T11195] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 435.514612][T11195] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 435.629601][T11195] F2FS-fs (loop7): Start checkpoint disabled! [ 435.718187][T11195] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 436.124650][T11240] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1735'. [ 436.863437][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 436.966581][T11261] Bluetooth: hci0: unsupported parameter 255 [ 436.991523][T11261] Bluetooth: hci0: unsupported parameter 255 [ 437.217485][ T5620] Bluetooth: Wrong link type (-71) [ 437.497824][T11270] binder_alloc: 11269: binder_alloc_buf, no vma [ 439.323039][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.329526][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.807923][T11286] netlink: 'syz.5.1748': attribute type 2 has an invalid length. [ 439.876312][ T5617] Bluetooth: hci1: unexpected event for opcode 0x203c [ 440.168042][T11296] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1751'. [ 440.480491][T11307] syzkaller0: entered promiscuous mode [ 440.504856][T11307] syzkaller0: entered allmulticast mode [ 440.668055][T11307] tipc: Enabled bearer , priority 0 [ 440.705542][T11305] tipc: Resetting bearer [ 440.720656][T11319] ip_tables: iptables: counters copy to user failed while replacing table [ 440.755967][T11318] binder_alloc: 11314: binder_alloc_buf, no vma [ 440.830365][T11305] tipc: Disabling bearer [ 441.364968][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 441.677879][T11342] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 444.334213][T11373] binder_alloc: 11372: binder_alloc_buf, no vma [ 444.859524][T11382] loop9: detected capacity change from 0 to 128 [ 445.034355][T11386] binder: 11384:11386 ioctl c0306201 200000000080 returned -14 [ 445.112205][T11386] binder: 11384:11386 ioctl c0306201 2000000003c0 returned -14 [ 445.155240][ T30] audit: type=1326 audit(1787663712.074:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11390 comm="syz.7.1783" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4213f9e0d9 code=0x0 [ 446.487146][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 446.945288][ T5620] Bluetooth: hci2: ACL packet for unknown connection handle 3584 [ 447.564786][T11437] binder: 11433:11437 ioctl c0306201 200000000080 returned -14 [ 447.598734][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 447.691795][T11437] binder: 11433:11437 ioctl c0306201 2000000003c0 returned -14 [ 447.707093][ T5620] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 449.331019][ T5620] Bluetooth: hci2: ACL packet for unknown connection handle 3584 [ 449.748478][T11488] binder: 11487:11488 ioctl c0306201 200000000080 returned -14 [ 449.806220][T11489] binder: 11487:11489 ioctl c0306201 2000000003c0 returned -14 [ 450.503416][T11502] loop9: detected capacity change from 0 to 512 [ 450.998679][T11502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.040469][T11502] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.180781][ T5620] Bluetooth: hci2: ACL packet for unknown connection handle 3584 [ 451.266164][T10008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.278751][ T5735] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 451.513442][ T5735] wiimote 0005:057E:0306.0003: New device registered [ 451.542737][T11518] wiimote 0005:057E:0306.0003: Device removed [ 451.633980][T11521] fido_id[11521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 452.571724][ T5735] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 452.693094][ T5735] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input17 [ 452.758409][ T5735] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input18 [ 452.814272][ T5735] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input16 [ 453.939796][T11553] loop9: detected capacity change from 0 to 512 [ 454.096085][T11553] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.109088][T11553] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.866353][T10008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.949410][ T5620] Bluetooth: hci1: unexpected event for opcode 0x00e0 [ 457.295561][ T5620] Bluetooth: hci4: unexpected event for opcode 0x00e0 [ 457.966816][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1861'. [ 457.984131][T11610] bond0: entered promiscuous mode [ 457.989855][T11610] bond_slave_0: entered promiscuous mode [ 458.000550][T11610] bond_slave_1: entered promiscuous mode [ 458.008868][T11610] gretap0: entered promiscuous mode [ 458.020823][T11610] debugfs: 'hsr1' already exists in 'hsr' [ 458.027008][T11610] Cannot create hsr debugfs directory [ 458.032854][T11610] hsr1: entered promiscuous mode [ 460.520525][ T5620] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 460.588309][T11631] loop7: detected capacity change from 0 to 4096 [ 460.851554][ T5620] Bluetooth: hci2: unexpected event for opcode 0x00e0 [ 461.819555][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1887'. [ 461.880546][ T5620] Bluetooth: hci3: unexpected event for opcode 0x0060 [ 463.125196][T11689] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5605] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[11689] [ 463.771418][T11692] printk: legacy console [ttyGS0] disabled [ 467.609883][ T997] smc: removing ib device syz2 [ 467.663198][ T5620] Bluetooth: hci0: unexpected event for opcode 0x0060 [ 467.993630][T11730] printk: legacy console [ttyGS0] disabled [ 469.066820][ T997] smbdirect: ib_dev[syz2] removed [ 469.475536][T11751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.231006][T11772] netlink: 'syz.9.1926': attribute type 8 has an invalid length. [ 470.327017][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1926'. [ 470.689211][T11785] overlayfs: overlapping lowerdir path [ 471.032477][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.492112][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.861374][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.887786][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.064147][T11828] netlink: 'syz.9.1948': attribute type 8 has an invalid length. [ 473.121739][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1948'. [ 473.928694][T11844] overlayfs: overlapping lowerdir path [ 474.386043][ T13] bridge_slave_1: left allmulticast mode [ 474.399358][ T13] bridge_slave_1: left promiscuous mode [ 474.420674][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.785335][ T13] bridge_slave_0: left allmulticast mode [ 474.805358][ T13] bridge_slave_0: left promiscuous mode [ 474.812219][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.211800][T11882] xt_hashlimit: size too large, truncated to 1048576 [ 476.453799][ T13] gretap0 (unregistering): left promiscuous mode [ 476.586093][T11892] netlink: 'syz.4.1964': attribute type 8 has an invalid length. [ 476.629051][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 476.875877][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.970884][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.025579][ T13] bond0 (unregistering): Released all slaves [ 477.893570][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 478.731139][ T13] veth1_to_team: left promiscuous mode [ 478.900864][ T13] hsr_slave_0: left promiscuous mode [ 479.231869][ T13] hsr_slave_1: left promiscuous mode [ 479.354980][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.436734][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.566033][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.660164][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.933795][ T13] veth1_macvtap: left promiscuous mode [ 479.987634][ T13] veth0_macvtap: left promiscuous mode [ 480.021536][ T13] veth1_vlan: left promiscuous mode [ 480.083397][ T13] veth0_vlan: left promiscuous mode [ 481.706763][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 481.719182][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 481.739596][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 481.753788][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 481.763787][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 482.322997][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 483.321795][T11994] binder: 11993:11994 ioctl c0306201 200000000080 returned -14 [ 483.367078][T11994] binder: 11993:11994 ioctl c0306201 2000000003c0 returned -14 [ 483.830233][ T5934] IPVS: starting estimator thread 0... [ 483.842587][ T5620] Bluetooth: hci6: command tx timeout [ 483.906663][ T13] team0 (unregistering): Port device team_slave_1 removed [ 483.935243][ T13] team0 (unregistering): Port device team_slave_0 removed [ 483.952436][T12006] IPVS: using max 32 ests per chain, 76800 per kthread [ 485.555133][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 485.927148][ T5620] Bluetooth: hci6: command tx timeout [ 486.349722][ T5620] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 486.845266][T12045] binder: 12044:12045 ioctl c0306201 200000000080 returned -14 [ 486.856983][ T997] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.897515][T12045] binder: 12044:12045 ioctl c0306201 2000000003c0 returned -14 [ 487.311773][ T997] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.658957][ T997] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.660106][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 488.042541][ T5620] Bluetooth: hci6: command tx timeout [ 488.231483][T12088] binder: 12087:12088 ioctl c0306201 200000000080 returned -14 [ 488.261854][ T997] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.311296][T12088] binder: 12087:12088 ioctl c0306201 2000000003c0 returned -14 [ 488.401363][T12101] syzkaller0: entered promiscuous mode [ 488.447174][T12101] syzkaller0: entered allmulticast mode [ 488.529281][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 489.341124][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2034'. [ 489.958331][T12145] binder: 12144:12145 ioctl c0306201 200000000080 returned -14 [ 490.049590][T12145] binder: 12144:12145 ioctl c0306201 2000000003c0 returned -14 [ 490.083394][ T5620] Bluetooth: hci6: command tx timeout [ 493.132914][ T997] gretap0 (unregistering): left promiscuous mode [ 493.271740][ T997] bond0 (unregistering): Released all slaves [ 493.984667][T12169] syzkaller0: entered promiscuous mode [ 494.003372][T12169] syzkaller0: entered allmulticast mode [ 494.107055][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 494.324021][ T997] tipc: Disabling bearer [ 494.338235][ T997] tipc: Left network mode [ 494.341895][T12232] binder: 12231:12232 ioctl c0306201 200000000080 returned -14 [ 494.398903][T12232] binder: 12231:12232 ioctl c0306201 2000000003c0 returned -14 [ 494.574360][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.592473][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.610974][T11962] bridge_slave_0: entered allmulticast mode [ 494.627910][T11962] bridge_slave_0: entered promiscuous mode [ 494.715833][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.741485][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.765179][T11962] bridge_slave_1: entered allmulticast mode [ 494.795109][T11962] bridge_slave_1: entered promiscuous mode [ 494.841958][T12249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.889885][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.903588][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.946979][T11962] team0: Port device team_slave_0 added [ 494.956294][T11962] team0: Port device team_slave_1 added [ 494.999846][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.007103][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.035457][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.049352][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.056693][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.092911][T12248] printk: legacy console [ttyGS0] disabled [ 495.108553][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.170397][T12254] ip_tables: iptables: counters copy to user failed while replacing table [ 495.671188][T12256] syzkaller0: entered promiscuous mode [ 495.705484][T12256] syzkaller0: entered allmulticast mode [ 495.738528][T12250] tipc: Enabled bearer , priority 0 [ 495.829036][T12247] tipc: Resetting bearer [ 495.897460][T12247] tipc: Disabling bearer [ 496.587933][T11962] hsr_slave_0: entered promiscuous mode [ 496.609051][T11962] hsr_slave_1: entered promiscuous mode [ 496.636831][T11962] debugfs: 'hsr0' already exists in 'hsr' [ 496.659469][T11962] Cannot create hsr debugfs directory [ 497.075149][T12300] ip_tables: iptables: counters copy to user failed while replacing table [ 497.270562][T12307] loop9: detected capacity change from 0 to 512 [ 497.295390][T12307] ext4: Unknown parameter 'fowner' [ 497.420659][T12304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.959861][ T997] veth1_to_team: left promiscuous mode [ 498.038390][ T997] hsr_slave_0: left promiscuous mode [ 498.081626][ T997] hsr_slave_1: left promiscuous mode [ 498.103719][T12334] mmap: syz.7.2084 (12334) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 498.123407][ T997] veth1_macvtap: left promiscuous mode [ 498.130922][ T997] veth0_macvtap: left promiscuous mode [ 498.616427][T12359] ip_tables: iptables: counters copy to user failed while replacing table [ 499.390292][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 499.421723][T12342] syzkaller0: entered promiscuous mode [ 499.485988][T12342] syzkaller0: entered allmulticast mode [ 499.521273][T12344] tipc: Enabled bearer , priority 0 [ 499.737437][T12385] syzkaller0: entered promiscuous mode [ 499.807449][T12385] syzkaller0: entered allmulticast mode [ 499.870017][T12367] tipc: Resetting bearer [ 499.935913][T12367] tipc: Disabling bearer [ 500.054856][T12405] ip_tables: iptables: counters copy to user failed while replacing table [ 500.404902][ T997] IPVS: stop unused estimator thread 0... [ 500.610279][T12416] loop7: detected capacity change from 0 to 4096 [ 500.783084][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.791254][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.555499][T12416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.284162][T12440] capability: warning: `syz.7.2108' uses deprecated v2 capabilities in a way that may be insecure [ 502.313919][ T5620] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 502.984218][ T9084] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.334293][T12458] binder_alloc: 12457: binder_alloc_buf, no vma [ 503.606130][T12469] fuse: Unknown parameter 'grou00000000000000000000' [ 503.825109][T11962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 503.877959][T11962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.897498][T11962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 504.186338][T11962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.805770][T11962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 504.843954][T11962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.880274][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 504.952969][T11962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 505.136445][T11962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.462874][T12510] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 505.599100][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.669598][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.709067][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.716364][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.791031][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.798288][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.890440][T12531] fuse: Unknown parameter 'grou00000000000000000000' [ 507.013872][T12530] loop7: detected capacity change from 0 to 512 [ 507.199236][T12530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.358501][T12530] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.514003][T12552] binder_alloc: 12551: binder_alloc_buf, no vma [ 507.864357][ T9084] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.111346][T12572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.178252][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 510.073872][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.380678][T11962] veth0_vlan: entered promiscuous mode [ 510.481033][T11962] veth1_vlan: entered promiscuous mode [ 511.425342][T12627] binder_alloc: 12618: binder_alloc_buf, no vma [ 511.647408][T11962] veth0_macvtap: entered promiscuous mode [ 511.726016][T11962] veth1_macvtap: entered promiscuous mode [ 511.872170][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.967749][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.063300][T11054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.105861][T11054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.153805][T11054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.942184][T12653] netlink: 'syz.9.2160': attribute type 2 has an invalid length. [ 513.194823][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.288054][T12654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.457629][T11095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.509089][T11095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.665469][T10806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.713972][T10806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.291251][T12692] tipc: Started in network mode [ 514.326492][T12692] tipc: Node identity ac1414aa, cluster identity 4711 [ 514.358991][T12692] tipc: Enabled bearer , priority 10 [ 514.849156][T12711] syzkaller0: entered promiscuous mode [ 514.860300][T12711] syzkaller0: entered allmulticast mode [ 516.205049][T12720] tipc: Started in network mode [ 516.230562][T12720] tipc: Node identity e67ba6c619c9, cluster identity 4711 [ 516.257894][T12720] tipc: Enabled bearer , priority 0 [ 516.405202][ T5735] tipc: Node number set to 2886997162 [ 516.467164][T12710] tipc: Resetting bearer [ 516.609636][T12739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 516.643181][T12738] netlink: 'syz.9.2183': attribute type 2 has an invalid length. [ 516.660595][T12741] loop8: detected capacity change from 0 to 512 [ 516.690178][T12741] ext4: Unknown parameter 'fowner' [ 516.835418][T12740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.965114][T12710] tipc: Disabling bearer [ 517.217942][ T5267] 8021q: adding VLAN 0 to HW filter on device eth20 [ 519.313680][T12805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 519.424108][T12808] syzkaller0: entered promiscuous mode [ 519.440400][T12808] syzkaller0: entered allmulticast mode [ 519.558341][T12811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.865906][T12825] tipc: Started in network mode [ 519.878793][T12825] tipc: Node identity d26c77d9e3c6, cluster identity 4711 [ 519.904668][T12825] tipc: Enabled bearer , priority 0 [ 519.995450][T12804] tipc: Resetting bearer [ 520.217370][T12804] tipc: Disabling bearer [ 520.544295][T12847] dummy_hcd dummy_hcd.0: remove, state 1 [ 520.551668][T12847] usb usb1: USB disconnect, device number 1 [ 520.557949][T12847] usb 1-1: USB disconnect, device number 2 [ 520.569222][T12847] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 520.602900][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 520.780325][T12847] dummy_hcd dummy_hcd.0: stopped [ 520.785335][T12847] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 521.165632][T12862] printk: legacy console [ttyGS0] disabled [ 521.473027][T12869] binder_alloc: 12868: binder_alloc_buf, no vma [ 522.141055][T12885] ip_tables: iptables: counters copy to user failed while replacing table [ 522.171289][T12886] loop3: detected capacity change from 0 to 512 [ 522.211064][T12886] ext4: Unknown parameter 'fowner' [ 522.411013][T12882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.670860][T12893] syzkaller0: entered promiscuous mode [ 522.698301][T12893] syzkaller0: entered allmulticast mode [ 523.153298][T12895] tipc: Enabled bearer , priority 0 [ 523.651970][T12892] tipc: Resetting bearer [ 524.481086][T12892] tipc: Disabling bearer [ 524.492153][T12919] binder_alloc: 12918: binder_alloc_buf, no vma [ 524.586403][ T5743] tipc: Node number set to 1400602469 [ 525.459821][T12949] loop9: detected capacity change from 0 to 512 [ 525.502407][T12949] ext4: Unknown parameter 'fowner' [ 525.615954][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.980077][T12963] tipc: Enabling of bearer rejected, already enabled [ 528.008575][ T5941] hid-generic 0005:046D:5502.0004: item fetching failed at offset 0/1 [ 528.035104][T13014] netlink: 'syz.3.2263': attribute type 2 has an invalid length. [ 528.058836][ T5941] hid-generic 0005:046D:5502.0004: probe with driver hid-generic failed with error -22 [ 528.443678][T13021] loop9: detected capacity change from 0 to 512 [ 528.469182][T13021] ext4: Unknown parameter 'fowner' [ 528.615013][T13020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.095624][T13071] loop7: detected capacity change from 0 to 512 [ 530.176937][T13071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.209030][T13071] ext4 filesystem being mounted at /184/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.194136][ T9084] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.431485][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.947088][T13108] printk: legacy console [ttyGS0] disabled [ 536.051479][T13164] loop9: detected capacity change from 0 to 1024 [ 536.081283][T13164] EXT4-fs: Ignoring removed orlov option [ 536.148250][T13164] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.201606][T13164] EXT4-fs error (device loop9): __ext4_new_inode:1289: comm syz.9.2302: failed to insert inode 12: doubly allocated? [ 536.221919][T13164] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 536.744439][T10008] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 536.800587][T10008] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 536.846599][T10008] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 537.038427][T10008] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 537.133057][T10008] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 537.179771][T10008] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 537.216318][T10008] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 537.247234][T10008] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 537.259433][ T8500] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 537.259955][T10008] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 537.271508][ T8500] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 537.271536][ T8500] CPU: 0 UID: 101 PID: 8500 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 537.271572][ T8500] Tainted: [L]=SOFTLOCKUP [ 537.271582][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 537.271598][ T8500] RIP: 0010:dummy_queue+0x1ae/0x900 [ 537.271651][ T8500] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5b 75 76 fa 4d 8b 24 24 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f0 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 537.271673][ T8500] RSP: 0018:ffffc900034ef080 EFLAGS: 00010216 [ 537.271697][ T8500] RAX: 000000000000000c RBX: ffff888074685910 RCX: dffffc0000000000 [ 537.355280][ T8500] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 537.363247][ T8500] RBP: ffff888074685900 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 537.371209][ T8500] R10: dffffc0000000000 R11: ffffffff87c07a00 R12: 0000000000000060 [ 537.379170][ T8500] R13: 1ffff1100e8d0b20 R14: ffff8880203580e0 R15: ffff888020358c00 [ 537.387163][ T8500] FS: 00007efe29c4d780(0000) GS:ffff888124cf1000(0000) knlGS:0000000000000000 [ 537.396083][ T8500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.402653][ T8500] CR2: 000055b68ec3b52f CR3: 0000000074098000 CR4: 0000000000350ef0 [ 537.410619][ T8500] Call Trace: [ 537.413888][ T8500] [ 537.416807][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.422532][ T8500] usb_ep_queue+0xf1/0x3c0 [ 537.426948][ T8500] eth_start_xmit+0x9a7/0x1080 [ 537.431707][ T8500] dev_hard_start_xmit+0x2cd/0x830 [ 537.436835][ T8500] sch_direct_xmit+0x257/0x4c0 [ 537.441596][ T8500] ? __pfx_sch_direct_xmit+0x10/0x10 [ 537.446879][ T8500] __dev_queue_xmit+0x177f/0x3820 [ 537.451906][ T8500] ? __dev_queue_xmit+0x29b/0x3820 [ 537.457012][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.462725][ T8500] ? _copy_from_iter+0x5d4/0x1660 [ 537.467741][ T8500] ? __pfx___dev_queue_xmit+0x10/0x10 [ 537.473114][ T8500] ? __pfx__copy_from_iter+0x10/0x10 [ 537.478392][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.484016][ T8500] ? packet_parse_headers+0x56c/0x7a0 [ 537.489392][ T8500] ? __pfx_packet_parse_headers+0x10/0x10 [ 537.495116][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.500742][ T8500] ? packet_xmit+0x68/0x330 [ 537.505254][ T8500] ? skb_put+0x112/0x210 [ 537.509492][ T8500] packet_sendmsg+0x3d0d/0x4f80 [ 537.514350][ T8500] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 537.519720][ T8500] ? kmem_cache_free+0x182/0x650 [ 537.524660][ T8500] ? sock_read_iter+0x22a/0x2f0 [ 537.529511][ T8500] ? ksys_read+0x150/0x270 [ 537.533921][ T8500] ? do_syscall_64+0x166/0x520 [ 537.538684][ T8500] ? irq_entries_start+0xd0/0xcb0 [ 537.543697][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.549325][ T8500] ? __lock_acquire+0x683/0x2cf0 [ 537.554272][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.559907][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.565629][ T8500] ? __pfx_packet_sendmsg+0x10/0x10 [ 537.570868][ T8500] ? __pfx_aa_sk_perm+0x10/0x10 [ 537.575710][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.581338][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.586964][ T8500] ? aa_sock_msg_perm+0xf6/0x1c0 [ 537.591898][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.597528][ T8500] ? __pfx_packet_sendmsg+0x10/0x10 [ 537.602727][ T8500] sock_sendmsg_nosec+0x13a/0x180 [ 537.607753][ T8500] sock_write_iter+0x2de/0x3e0 [ 537.612519][ T8500] ? __pfx_sock_write_iter+0x10/0x10 [ 537.617822][ T8500] do_iter_readv_writev+0x612/0x8c0 [ 537.623020][ T8500] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 537.628740][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.634363][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.640025][ T8500] ? security_file_permission+0x75/0x260 [ 537.646258][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.651887][ T8500] ? rw_verify_area+0x203/0x4c0 [ 537.656738][ T8500] vfs_writev+0x343/0x990 [ 537.661073][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.666709][ T8500] ? __pfx_vfs_writev+0x10/0x10 [ 537.671570][ T8500] ? __pfx_set_user_sigmask+0x10/0x10 [ 537.676953][ T8500] ? clockevents_program_event+0x491/0x630 [ 537.682758][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.688387][ T8500] do_writev+0x154/0x2e0 [ 537.692634][ T8500] ? __pfx_do_writev+0x10/0x10 [ 537.697399][ T8500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 537.703023][ T8500] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 537.708649][ T8500] do_syscall_64+0x166/0x520 [ 537.713243][ T8500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.719307][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.725194][ T8500] RIP: 0033:0x7efe29cd7407 [ 537.729599][ T8500] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 537.749295][ T8500] RSP: 002b:00007fff9b48f430 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 537.757720][ T8500] RAX: ffffffffffffffda RBX: 00007efe29c4d780 RCX: 00007efe29cd7407 [ 537.765701][ T8500] RDX: 0000000000000002 RSI: 00007fff9b48f490 RDI: 0000000000000003 [ 537.773665][ T8500] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000 [ 537.781623][ T8500] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff9b48f4d0 [ 537.789584][ T8500] R13: 000055b6a85144c0 R14: 00007fff9b48f520 R15: 00007fff9b49f6f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 537.797589][ T8500] [ 537.800592][ T8500] Modules linked in: [ 537.804540][ T8500] ---[ end trace 0000000000000000 ]--- [ 537.810035][ T8500] RIP: 0010:dummy_queue+0x1ae/0x900 [ 537.815281][ T8500] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5b 75 76 fa 4d 8b 24 24 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f0 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 537.834938][ T8500] RSP: 0018:ffffc900034ef080 EFLAGS: 00010216 [ 537.841027][ T8500] RAX: 000000000000000c RBX: ffff888074685910 RCX: dffffc0000000000 [ 537.849023][ T8500] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 537.857017][ T8500] RBP: ffff888074685900 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 537.865007][ T8500] R10: dffffc0000000000 R11: ffffffff87c07a00 R12: 0000000000000060 [ 537.873315][ T8500] R13: 1ffff1100e8d0b20 R14: ffff8880203580e0 R15: ffff888020358c00 [ 537.881294][ T8500] FS: 00007efe29c4d780(0000) GS:ffff888124cf1000(0000) knlGS:0000000000000000 [ 537.890258][ T8500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.896876][ T8500] CR2: 000055b68ec3b52f CR3: 0000000074098000 CR4: 0000000000350ef0 [ 537.904960][ T8500] Kernel panic - not syncing: Fatal exception in interrupt [ 537.912476][ T8500] Kernel Offset: disabled [ 537.916779][ T8500] Rebooting in 86400 seconds..