last executing test programs: 19m12.756699707s ago: executing program 2 (id=121): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[], [], 0x2c}) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) syz_emit_ethernet(0x56, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="8b4efad9459f08282d662cbb788a96bffed9d0bacd80657f3cac600356fe667d18f545a3b175a706442b241be0a2567c90703acce7d9a42940c375c89c1bb489f90616095f98a44bbdc43262ebb02f06", 0x50}], 0x1, 0x0, 0x0, 0xc1}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_setup(0x4168, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() 19m11.348234647s ago: executing program 2 (id=124): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1) syz_open_dev$vim2m(0x0, 0x10000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0xa, 0x5, 0x3, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x5}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000004100)={0x50, 0x0, 0xb3400, {0x7, 0x2d, 0x5, 0x201, 0xbcbf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f00000001c0)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x9, 0x8, 0xfe9, 0x401, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20007, 0x8]}) 19m8.755684862s ago: executing program 2 (id=128): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060a63e57fd1b9", 0x9, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) 19m7.846689983s ago: executing program 2 (id=131): syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) gettid() r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000040)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 19m6.85856651s ago: executing program 2 (id=133): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_emit_ethernet(0x76, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x13, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x6, '^\x00\x00\x00'}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0xec, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x400440, 0x0) 19m4.573552246s ago: executing program 2 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x29380, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, 0xffffffffffffffff, 0x4}, 0x5) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_clone(0x10974200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 18m48.321446079s ago: executing program 32 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x29380, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, 0xffffffffffffffff, 0x4}, 0x5) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_clone(0x10974200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 41.88031247s ago: executing program 3 (id=3795): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x7f41f000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) 41.229303095s ago: executing program 3 (id=3805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x801) r3 = eventfd(0x80000001) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0xffff1000, 0x2, r3, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r2, 0xf}) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) readv(r5, &(0x7f0000001380)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x100, 0x28, 0xe4d, 0x81, 0x4, 0x2, 0x5, 0x1000, 0x2800, 0x9, 0x101, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x40, 0x4, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="0031840000008431b9ac0d0f6509ee35b0be013393bc5a31b8aec173c5d72a76070ead2f972c470c4e23ae5d6a853ce44f27c82ff872b2e9700d8f6bde084bb300449d1c55360808463c73204e54c9bd42d2ae7d37677713b6248e85657651a633b2883cd7916c571dafc40088bfdc5381c9bf5e0a5ccc2403b8a8013370711c46b6498a5ca164e3a14a0caff493ed7043915b2e6d402c7c1473ca9036cbb09f17b8712f6ecc605702f89f920717f88f9ebef204d54654da533459c2b14afa1b0a1d384283a815fca987e84652"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@main=@item_012={0x2, 0x0, 0xb, "a0ae"}, @main=@item_4={0x3, 0x0, 0x9, "c1423e2d"}, @global=@item_4={0x3, 0x1, 0x7, "ce3af990"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x1, 0x1, {0x22, 0x933}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000300)={0x40, 0xe, 0x8, "5b4afbd146343cb6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x1, 0xca, "a9b8e3fe58d41ac80a44074ae258909584d10d9c8304bcc9453e957644e929a2d914caf092b62c714f8833e4399ce3e6980a55fda89ea5fd3afac65a866ac7fdf1b0995a24eb81e049463c9cd39572ac5be5ead09641684168db4680722558f85d6994ee873a29bb1b993deb6882d7ea56a483bd0d406517d2b7c742093f01fe7b0d40cce4afefbd10fd0ac7fd0451e24532e40ddfd15937a101a7f129462e8cc7bc0b9c2a8346ba9f7f2a4e89d1aec8a5693998c58cf00625f56580db6d13d65d1c57a3f0b4a8a3df7c"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xf3}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3cdf4309}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x6d, 0x0, &(0x7f0000000700)="d1fd5b41a5ae09dfdf77a4392cd819a4054d5240de98da5b90a9855a0592d15168de09be86add0088bf87dc6fc21157515a43dee7020b6ca27377bb0d55cb3b23f2179695a5750ef57e07b99756901ea4a4b60f7aff4662cf13dc1170d24bd32b3160b1dce34330a6870cee42f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x3e) 40.985163806s ago: executing program 0 (id=3813): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x34, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c88"], 0xfdef) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, 0x0], 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 40.912550541s ago: executing program 0 (id=3814): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f00000002c0)="8b3306", 0x3}], 0x2}, 0x0) 40.860116537s ago: executing program 0 (id=3815): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x4}, 0x80) uname(&(0x7f0000000080)=""/209) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r7}, 0x20) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 40.412431285s ago: executing program 3 (id=3819): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) 40.337151127s ago: executing program 3 (id=3822): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, [@offload={0xc}]}, 0xc4}}, 0x0) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 39.849240867s ago: executing program 0 (id=3827): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x79}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x4}, 0x80) uname(&(0x7f0000000080)=""/209) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r7}, 0x20) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 39.43335085s ago: executing program 5 (id=3833): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc8", 0x7, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 39.433105369s ago: executing program 4 (id=3834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x9000, 0x12000}) 39.317513042s ago: executing program 5 (id=3835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x801) r3 = eventfd(0x80000001) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0xffff1000, 0x2, r3, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x1, r2, 0xf}) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006"], 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) readv(r5, &(0x7f0000001380)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x100, 0x28, 0xe4d, 0x81, 0x4, 0x2, 0x5, 0x1000, 0x2800, 0x9, 0x101, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001002dbd70000000000002100000fc00000900000000060015000200000014001680100008800c00018004dd020081000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x40, 0x4, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="0031840000008431b9ac0d0f6509ee35b0be013393bc5a31b8aec173c5d72a76070ead2f972c470c4e23ae5d6a853ce44f27c82ff872b2e9700d8f6bde084bb300449d1c55360808463c73204e54c9bd42d2ae7d37677713b6248e85657651a633b2883cd791"], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@main=@item_012={0x2, 0x0, 0xb, "a0ae"}, @main=@item_4={0x3, 0x0, 0x9, "c1423e2d"}, @global=@item_4={0x3, 0x1, 0x7, "ce3af990"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x1, 0x1, {0x22, 0x933}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000300)={0x40, 0xe}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x1, 0x7f, "a9b8e3fe58d41ac80a44074ae258909584d10d9c8304bcc9453e957644e929a2d914caf092b62c714f8833e4399ce3e6980a55fda89ea5fd3afac65a866ac7fdf1b0995a24eb81e049463c9cd39572ac5be5ead09641684168db4680722558f85d6994ee873a29bb1b993deb6882d7ea56a483bd0d406517d2b7c742093f01"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xf3}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3cdf4309}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x6d, 0x0, &(0x7f0000000700)="d1fd5b41a5ae09dfdf77a4392cd819a4054d5240de98da5b90a9855a0592d15168de09be86add0088bf87dc6fc21157515a43dee7020b6ca27377bb0d55cb3b23f2179695a5750ef57e07b99756901ea4a4b60f7aff4662cf13dc1170d24bd32b3160b1dce34330a6870cee42f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x3e) 39.317157996s ago: executing program 3 (id=3836): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, [@offload={0xc}]}, 0xc4}}, 0x0) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 39.316937333s ago: executing program 4 (id=3837): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0xfffffffd, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 39.248691327s ago: executing program 4 (id=3839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x2a, 0x68, 0x4000, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0x0, 0x0, 0x3}, {"984b"}}}}}}, 0x0) 39.154242274s ago: executing program 4 (id=3840): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) 39.060898748s ago: executing program 4 (id=3841): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x4c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 39.060315465s ago: executing program 1 (id=3842): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r2, 0xfffffffe, 0x6}, &(0x7f0000000080)=0xc) 39.02721881s ago: executing program 1 (id=3843): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, 0x0, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x34, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c88"], 0xfdef) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 38.960785696s ago: executing program 1 (id=3844): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback, 0x2, 0x1}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x400000}, 0x20) 38.9606657s ago: executing program 1 (id=3845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0xe, 0x8, 0x2, "ff00f7020000000000000010000000000900"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 38.946951813s ago: executing program 1 (id=3846): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, [@offload={0xc}]}, 0xc4}}, 0x0) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 38.792737721s ago: executing program 0 (id=3847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x80, 0xfe, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000023, 0x0) 38.600854192s ago: executing program 0 (id=3848): socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080201000000400000a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0x7, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 38.463628035s ago: executing program 5 (id=3849): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 38.435317581s ago: executing program 5 (id=3850): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0xfffffffffffffffe) 38.402040454s ago: executing program 5 (id=3851): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x2]}}}) socket(0x10, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 38.376502265s ago: executing program 5 (id=3852): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 38.31218813s ago: executing program 3 (id=3853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4000400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, &(0x7f0000000140)) timerfd_create(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffff", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) fchdir(0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0xa) socket$nl_generic(0x10, 0x3, 0x10) 33.541251422s ago: executing program 1 (id=3854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x6, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20040084) 29.271653443s ago: executing program 4 (id=3855): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 33 (id=3848): socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080201000000400000a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0x7, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) kernel console output (not intermixed with test programs): t+0x10/0x10 [ 1023.337600][ T50] ? hci_event_packet+0x186/0xcd0 [ 1023.337628][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1023.337652][ T50] ? skb_pull_data+0x15f/0x1e0 [ 1023.337674][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 1023.337698][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1023.337725][ T50] hci_event_packet+0x51c/0xcd0 [ 1023.337747][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1023.337772][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1023.337805][ T50] ? kcov_remote_start+0x394/0x670 [ 1023.337834][ T50] hci_rx_work+0x451/0xfc0 [ 1023.337863][ T50] process_one_work+0xa23/0x1940 [ 1023.337899][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1023.337928][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 1023.337952][ T50] worker_thread+0x5ef/0xe50 [ 1023.337984][ T50] ? kthread+0x13a/0x450 [ 1023.338002][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1023.338022][ T50] kthread+0x370/0x450 [ 1023.338040][ T50] ? __pfx_kthread+0x10/0x10 [ 1023.338061][ T50] ret_from_fork+0x72b/0xd50 [ 1023.338089][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1023.338118][ T50] ? __switch_to+0x800/0x10f0 [ 1023.338139][ T50] ? __pfx_kthread+0x10/0x10 [ 1023.338160][ T50] ret_from_fork_asm+0x1a/0x30 [ 1023.338193][ T50] [ 1023.338297][ T50] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1023.607260][ T50] Bluetooth: hci0: failed to register connection device [ 1023.830565][T15101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2119'. [ 1023.842480][T15101] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1023.850632][T15101] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1023.859112][T15101] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1024.086322][ T9462] net_ratelimit: 12 callbacks suppressed [ 1024.086356][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1024.274423][T15107] kAFS: unable to lookup cell 'ÿ' [ 1024.920216][T15107] netlink: 'syz.4.2120': attribute type 10 has an invalid length. [ 1024.960465][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1025.140305][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1025.221496][T15124] kAFS: unable to lookup cell 'ÿ' [ 1025.262532][T15124] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 1025.888222][ T4929] Bluetooth: hci0: command 0x0406 tx timeout [ 1025.935567][T15123] 9p: Bad value for 'wfdno' [ 1025.955701][T15124] bond0: (slave netdevsim1): Releasing backup interface [ 1026.091087][T15132] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 1026.135827][T15124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1026.589716][T15124] team0: Port device netdevsim1 added [ 1026.605835][T15136] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2126'. [ 1026.624210][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1026.807606][T15132] team0: Port device netdevsim1 removed [ 1026.846236][T15132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.063822][T15143] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1027.355805][T15132] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1027.382440][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1027.467416][T15148] xt_hashlimit: max too large, truncated to 1048576 [ 1027.523763][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.248888][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 1028.601744][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1028.942511][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1029.072707][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1029.159996][T15166] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2130'. [ 1029.254473][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1029.264710][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1029.264736][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1029.264748][ T50] Workqueue: hci4 hci_rx_work [ 1029.264774][ T50] Call Trace: [ 1029.264781][ T50] [ 1029.264788][ T50] dump_stack_lvl+0x100/0x190 [ 1029.264818][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 1029.264847][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 1029.264877][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1029.264905][ T50] ? find_held_lock+0x2b/0x80 [ 1029.264922][ T50] ? kobject_add_internal+0x25f/0x930 [ 1029.264949][ T50] ? kobject_add_internal+0x25f/0x930 [ 1029.264978][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 1029.265006][ T50] kobject_add_internal+0x2c8/0x930 [ 1029.265037][ T50] kobject_add+0x16a/0x1e0 [ 1029.265063][ T50] ? __pfx_kobject_add+0x10/0x10 [ 1029.265088][ T50] ? preempt_schedule_thunk+0x16/0x40 [ 1029.265114][ T50] ? kobject_put+0xb9/0x640 [ 1029.265137][ T50] ? _raw_spin_unlock+0x3e/0x50 [ 1029.265173][ T50] device_add+0x294/0x1970 [ 1029.265194][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 1029.265217][ T50] ? __pfx_device_add+0x10/0x10 [ 1029.265244][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 1029.265274][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 1029.265301][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 1029.265330][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1029.265352][ T50] ? irqentry_exit+0x24d/0xa00 [ 1029.265372][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 1029.265396][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1029.265421][ T50] ? skb_pull_data+0x15f/0x1e0 [ 1029.265445][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 1029.265468][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1029.265494][ T50] hci_event_packet+0x51c/0xcd0 [ 1029.265518][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1029.265543][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1029.265569][ T50] ? kcov_remote_start+0x394/0x670 [ 1029.265597][ T50] hci_rx_work+0x451/0xfc0 [ 1029.265623][ T50] process_one_work+0xa23/0x1940 [ 1029.265655][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1029.265684][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 1029.265707][ T50] worker_thread+0x5ef/0xe50 [ 1029.265738][ T50] ? kthread+0x13a/0x450 [ 1029.265754][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1029.265773][ T50] kthread+0x370/0x450 [ 1029.265790][ T50] ? __pfx_kthread+0x10/0x10 [ 1029.265810][ T50] ret_from_fork+0x72b/0xd50 [ 1029.265838][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1029.265866][ T50] ? __switch_to+0x800/0x10f0 [ 1029.265886][ T50] ? __pfx_kthread+0x10/0x10 [ 1029.265906][ T50] ret_from_fork_asm+0x1a/0x30 [ 1029.265937][ T50] [ 1029.266093][ T50] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1029.447371][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1029.557268][ T50] Bluetooth: hci4: failed to register connection device [ 1029.572251][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1029.604605][T15166] unsupported nlmsg_type 40 [ 1029.714075][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1029.863148][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1029.889530][T15171] /dev/nullb0: Can't lookup blockdev [ 1030.003715][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1030.054522][T15177] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1030.066341][T15177] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1030.074578][T15177] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1030.082983][T15177] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1030.144479][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1030.172531][T15181] netlink: 'syz.0.2135': attribute type 4 has an invalid length. [ 1030.181587][T15181] netlink: 'syz.0.2135': attribute type 4 has an invalid length. [ 1030.191201][T14452] lo speed is unknown, defaulting to 1000 [ 1030.212158][T14452] syz0: Port: 1 Link ACTIVE [ 1030.336649][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1030.829764][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1030.970535][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1031.119756][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1031.316207][T15187] lo speed is unknown, defaulting to 1000 [ 1031.705993][T15186] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1031.782961][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 1031.812929][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1032.795221][T15195] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.348094][T13953] smc: removing ib device syz1 [ 1033.479907][T15199] Option 'D' to dns_resolver key: bad/missing value [ 1033.668295][T13953] smbdirect: ib_dev[syz1] removed [ 1033.693963][T15203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.701047][T15203] bridge0: port 2(bridge_slave_1) entered listening state [ 1033.722668][T15203] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1033.730701][T15203] bridge1: left promiscuous mode [ 1033.735623][T15203] bridge1: left allmulticast mode [ 1033.742367][T15203] macsec1: left promiscuous mode [ 1033.907842][T15203] xt_ecn: cannot match TCP bits for non-tcp packets [ 1034.034647][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 1034.839996][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1034.849718][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1034.849743][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1034.849757][ T50] Workqueue: hci5 hci_rx_work [ 1034.849782][ T50] Call Trace: [ 1034.849788][ T50] [ 1034.849796][ T50] dump_stack_lvl+0x100/0x190 [ 1034.849825][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 1034.849855][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 1034.849886][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1034.849915][ T50] ? find_held_lock+0x2b/0x80 [ 1034.849933][ T50] ? kobject_add_internal+0x25f/0x930 [ 1034.849959][ T50] ? kobject_add_internal+0x25f/0x930 [ 1034.849989][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 1034.850018][ T50] kobject_add_internal+0x2c8/0x930 [ 1034.850050][ T50] kobject_add+0x16a/0x1e0 [ 1034.850076][ T50] ? __pfx_kobject_add+0x10/0x10 [ 1034.850102][ T50] ? preempt_schedule_thunk+0x16/0x40 [ 1034.850128][ T50] ? kobject_put+0xb9/0x640 [ 1034.850151][ T50] ? _raw_spin_unlock+0x3e/0x50 [ 1034.850188][ T50] device_add+0x294/0x1970 [ 1034.850208][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 1034.850231][ T50] ? __pfx_device_add+0x10/0x10 [ 1034.850252][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 1034.850278][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 1034.850302][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 1034.850331][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1034.850351][ T50] ? hci_event_packet+0x186/0xcd0 [ 1034.850375][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1034.850399][ T50] ? skb_pull_data+0x15f/0x1e0 [ 1034.850423][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 1034.850447][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1034.850470][ T50] hci_event_packet+0x51c/0xcd0 [ 1034.850492][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1034.850515][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1034.850536][ T50] ? kcov_remote_start+0x394/0x670 [ 1034.850561][ T50] hci_rx_work+0x451/0xfc0 [ 1034.850585][ T50] process_one_work+0xa23/0x1940 [ 1034.850617][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1034.850645][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 1034.850667][ T50] worker_thread+0x5ef/0xe50 [ 1034.850707][ T50] ? kthread+0x13a/0x450 [ 1034.850723][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1034.850741][ T50] kthread+0x370/0x450 [ 1034.850758][ T50] ? __pfx_kthread+0x10/0x10 [ 1034.850777][ T50] ret_from_fork+0x72b/0xd50 [ 1034.850806][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1034.850833][ T50] ? __switch_to+0x800/0x10f0 [ 1034.850852][ T50] ? __pfx_kthread+0x10/0x10 [ 1034.850871][ T50] ret_from_fork_asm+0x1a/0x30 [ 1034.850902][ T50] [ 1034.850978][ T50] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1035.127328][ T50] Bluetooth: hci5: failed to register connection device [ 1036.341724][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.843585][ T29] audit: type=1400 audit(1782355243.026:1409): avc: denied { listen } for pid=15233 comm="syz.0.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1036.899658][ T29] audit: type=1400 audit(1782355243.044:1410): avc: denied { accept } for pid=15233 comm="syz.0.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1037.055540][T15218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.074528][ T29] audit: type=1326 audit(1782355243.238:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.4.2147" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x0 [ 1037.142836][T15218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.322436][T15218] veth1_macvtap: left allmulticast mode [ 1037.338020][ T4929] Bluetooth: hci5: command 0x0406 tx timeout [ 1037.489928][T15218] vlan2: left allmulticast mode [ 1037.502304][T15218] macsec0: left allmulticast mode [ 1037.547606][T15218] bond4: left promiscuous mode [ 1038.036108][ T5933] net_ratelimit: 17 callbacks suppressed [ 1038.036123][ T5933] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.132008][T13953] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.162946][T13953] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1038.197380][T13953] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.232744][T13953] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1038.251238][T13953] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.273184][T13953] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1038.296050][T13953] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.317627][T13953] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1038.348689][T15246] netlink: 'syz.5.2150': attribute type 10 has an invalid length. [ 1038.377484][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.441095][T15248] netlink: 'syz.5.2150': attribute type 10 has an invalid length. [ 1038.497638][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.590160][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 1038.621586][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'. [ 1039.069940][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.210892][ T5943] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.330831][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.681684][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1039.809492][ T5933] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.919232][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 1039.936686][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1040.066665][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1040.187854][ T5933] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1042.131600][T15307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2167'. [ 1042.220950][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 1042.253211][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 1043.612846][T15324] xt_hashlimit: size too large, truncated to 1048576 [ 1043.649753][T15312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.656967][T15312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.018833][T15312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.531450][ T1228] lo speed is unknown, defaulting to 1000 [ 1044.595648][ T1228] syz0: Port: 1 Link DOWN [ 1044.613641][ T9462] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.740949][ T9462] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1046.765928][ T5938] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.959909][ T5938] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1047.047690][ T5938] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.069182][ T5938] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1047.160096][ T5938] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.178993][ T5938] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1047.191769][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 1047.935757][ T29] audit: type=1400 audit(1782355253.255:1412): avc: denied { write } for pid=15330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.268569][T15360] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2175'. [ 1048.271173][T15373] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 1048.286078][ T29] audit: type=1400 audit(1782355253.587:1413): avc: denied { write } for pid=15370 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.473462][T15360] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2175'. [ 1049.352948][T15389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.360471][T15389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.369679][T15389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.377656][T15389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.386044][T15389] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1049.394257][T15389] batman_adv: batadv0: Removing interface: ipvlan2 [ 1050.253365][ T29] audit: type=1400 audit(1782355255.387:1414): avc: denied { write } for pid=15377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.361968][T15405] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1050.788401][ T29] audit: type=1400 audit(1782355255.895:1415): avc: denied { write } for pid=15417 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.821214][T15405] bond6: (slave lo): Enslaving as an active interface with an up link [ 1050.888361][T15389] 9p: Bad value for 'rfdno' [ 1050.896843][T15405] net_ratelimit: 12 callbacks suppressed [ 1050.896858][T15405] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1050.911639][ T29] audit: type=1400 audit(1782355256.015:1416): avc: denied { map } for pid=15388 comm="syz.5.2182" path="socket:[36577]" dev="sockfs" ino=36577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1051.209358][T15424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2185'. [ 1051.221176][T15424] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1051.229891][T15424] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1051.238346][T15424] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1051.891701][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.898123][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.041027][ T29] audit: type=1400 audit(1782355257.058:1417): avc: denied { write } for pid=15419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.174736][ T29] audit: type=1400 audit(1782355257.178:1418): avc: denied { write } for pid=15440 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.260114][T15416] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1052.291058][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 1053.016551][T15460] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2191'. [ 1053.917211][T15475] bridge0: port 1(syz_tun) entered blocking state [ 1053.923693][T15475] bridge0: port 1(syz_tun) entered forwarding state [ 1053.931817][T15475] bridge0: left promiscuous mode [ 1053.937320][T15475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.944598][T15475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.010405][T15479] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1054.040483][T15475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.070218][T15475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.082426][T15475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.466879][T15475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1054.477851][T15475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.491398][T15475] veth1_macvtap: left promiscuous mode [ 1054.498452][T15475] veth1_macvtap: entered promiscuous mode [ 1054.507569][T15475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1054.515401][T15475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1054.523479][T15475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.531577][T15475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1054.542565][T15475] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1054.550246][T15475] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1054.575102][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.582235][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.758187][T13953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.805380][T13953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.921425][T13953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.956719][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.182062][T15506] sctp: [Deprecated]: syz.3.2202 (pid 15506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1058.182062][T15506] Use struct sctp_sack_info instead [ 1058.327865][T15530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2207'. [ 1058.342309][T15530] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1058.350463][T15530] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1058.358885][T15530] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1058.395455][T15532] futex_wake_op: syz.5.2208 tries to shift op by 144; fix this program [ 1060.748752][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2211'. [ 1060.784860][T15550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2213'. [ 1060.795569][T15550] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1060.804209][T15550] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1060.813055][T15550] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1060.847013][T15552] lo speed is unknown, defaulting to 1000 [ 1060.882505][T15555] kAFS: unable to lookup cell 'ÿ' [ 1061.475844][T15569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2215'. [ 1062.001475][T15576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2218'. [ 1062.013027][T15576] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1062.021191][T15576] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1062.030033][T15576] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1062.225474][T15586] fuse: fd is not a fuse device [ 1062.517839][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2223'. [ 1062.547906][T15597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'. [ 1063.634642][T15612] fuse: fd is not a fuse device [ 1063.642014][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 1063.650918][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 1065.058098][T15623] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2230'. [ 1065.681334][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'. [ 1065.881103][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1065.891292][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1065.891318][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1065.891332][ T50] Workqueue: hci5 hci_rx_work [ 1065.891357][ T50] Call Trace: [ 1065.891365][ T50] [ 1065.891372][ T50] dump_stack_lvl+0x100/0x190 [ 1065.891401][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 1065.891431][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 1065.891468][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1065.891496][ T50] ? find_held_lock+0x2b/0x80 [ 1065.891515][ T50] ? kobject_add_internal+0x25f/0x930 [ 1065.891541][ T50] ? kobject_add_internal+0x25f/0x930 [ 1065.891571][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 1065.891601][ T50] kobject_add_internal+0x2c8/0x930 [ 1065.891634][ T50] kobject_add+0x16a/0x1e0 [ 1065.891661][ T50] ? __pfx_kobject_add+0x10/0x10 [ 1065.891685][ T50] ? preempt_schedule_thunk+0x16/0x40 [ 1065.891712][ T50] ? kobject_put+0xb9/0x640 [ 1065.891735][ T50] ? _raw_spin_unlock+0x3e/0x50 [ 1065.891771][ T50] device_add+0x294/0x1970 [ 1065.891793][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 1065.891816][ T50] ? __pfx_device_add+0x10/0x10 [ 1065.891839][ T50] ? mgmt_device_connected+0x433/0x610 [ 1065.891858][ T50] ? __sanitizer_cov_trace_pc+0x3f/0x70 [ 1065.891886][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 1065.891911][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 1065.891940][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1065.891960][ T50] ? hci_event_packet+0x186/0xcd0 [ 1065.891987][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1065.892010][ T50] ? skb_pull_data+0x15f/0x1e0 [ 1065.892033][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 1065.892057][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1065.892083][ T50] hci_event_packet+0x51c/0xcd0 [ 1065.892104][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1065.892128][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1065.892156][ T50] ? kcov_remote_start+0x394/0x670 [ 1065.892183][ T50] hci_rx_work+0x451/0xfc0 [ 1065.892210][ T50] process_one_work+0xa23/0x1940 [ 1065.892243][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1065.892272][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 1065.892296][ T50] worker_thread+0x5ef/0xe50 [ 1065.892328][ T50] ? kthread+0x13a/0x450 [ 1065.892348][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1065.892367][ T50] kthread+0x370/0x450 [ 1065.892385][ T50] ? __pfx_kthread+0x10/0x10 [ 1065.892406][ T50] ret_from_fork+0x72b/0xd50 [ 1065.892434][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1065.892467][ T50] ? __switch_to+0x800/0x10f0 [ 1065.892487][ T50] ? __pfx_kthread+0x10/0x10 [ 1065.892508][ T50] ret_from_fork_asm+0x1a/0x30 [ 1065.892539][ T50] [ 1065.892709][ T50] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1066.179337][ T50] Bluetooth: hci5: failed to register connection device [ 1066.293310][T15619] tipc: Started in network mode [ 1066.305787][T15619] tipc: Node identity 76657468115f, cluster identity 4711 [ 1066.323518][T15619] tipc: Enabled bearer , priority 0 [ 1067.428325][ T5832] tipc: Node number set to 1731884136 [ 1068.437237][ T4929] Bluetooth: hci5: command 0x0406 tx timeout [ 1068.496599][ T29] audit: type=1400 audit(1782355272.245:1419): avc: denied { write } for pid=15662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.823850][ T29] audit: type=1400 audit(1782355272.549:1420): avc: denied { write } for pid=15681 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.688889][ T4929] Bluetooth: hci5: command 0x0406 tx timeout [ 1070.870914][ T29] audit: type=1400 audit(1782355274.442:1421): avc: denied { write } for pid=15699 comm="syz.5.2243" path="socket:[39105]" dev="sockfs" ino=39105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1071.883234][ T4929] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1071.892824][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1071.892849][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1071.892863][ T4929] Workqueue: hci3 hci_rx_work [ 1071.892889][ T4929] Call Trace: [ 1071.892896][ T4929] [ 1071.892904][ T4929] dump_stack_lvl+0x100/0x190 [ 1071.892933][ T4929] sysfs_warn_dup.cold+0x1c/0x28 [ 1071.892964][ T4929] sysfs_create_dir_ns+0x24b/0x2b0 [ 1071.892995][ T4929] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1071.893023][ T4929] ? find_held_lock+0x2b/0x80 [ 1071.893040][ T4929] ? kobject_add_internal+0x25f/0x930 [ 1071.893066][ T4929] ? kobject_add_internal+0x25f/0x930 [ 1071.893095][ T4929] ? do_raw_spin_unlock+0x145/0x1e0 [ 1071.893125][ T4929] kobject_add_internal+0x2c8/0x930 [ 1071.893156][ T4929] kobject_add+0x16a/0x1e0 [ 1071.893182][ T4929] ? __pfx_kobject_add+0x10/0x10 [ 1071.893207][ T4929] ? preempt_schedule_thunk+0x16/0x40 [ 1071.893233][ T4929] ? kobject_put+0xb9/0x640 [ 1071.893256][ T4929] ? _raw_spin_unlock+0x3e/0x50 [ 1071.893292][ T4929] device_add+0x294/0x1970 [ 1071.893313][ T4929] ? __pfx_dev_set_name+0x10/0x10 [ 1071.893336][ T4929] ? __pfx_device_add+0x10/0x10 [ 1071.893356][ T4929] ? mgmt_send_event_skb+0x2fb/0x460 [ 1071.893385][ T4929] hci_conn_add_sysfs+0x1a3/0x260 [ 1071.893417][ T4929] le_conn_complete_evt+0x11eb/0x1f60 [ 1071.893449][ T4929] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1071.893472][ T4929] ? irqentry_exit+0x24d/0xa00 [ 1071.893492][ T4929] ? lockdep_hardirqs_on+0x78/0x100 [ 1071.893515][ T4929] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1071.893539][ T4929] ? skb_pull_data+0x15f/0x1e0 [ 1071.893562][ T4929] hci_le_meta_evt+0x34a/0x5f0 [ 1071.893586][ T4929] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1071.893611][ T4929] hci_event_packet+0x51c/0xcd0 [ 1071.893633][ T4929] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1071.893657][ T4929] ? __pfx_hci_event_packet+0x10/0x10 [ 1071.893684][ T4929] ? kcov_remote_start+0x394/0x670 [ 1071.893711][ T4929] hci_rx_work+0x451/0xfc0 [ 1071.893736][ T4929] process_one_work+0xa23/0x1940 [ 1071.893770][ T4929] ? __pfx_process_one_work+0x10/0x10 [ 1071.893799][ T4929] ? __pfx_hci_rx_work+0x10/0x10 [ 1071.893823][ T4929] worker_thread+0x5ef/0xe50 [ 1071.893850][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 1071.893872][ T4929] ? kthread+0x13a/0x450 [ 1071.893893][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 1071.893911][ T4929] kthread+0x370/0x450 [ 1071.893929][ T4929] ? __pfx_kthread+0x10/0x10 [ 1071.893949][ T4929] ret_from_fork+0x72b/0xd50 [ 1071.893977][ T4929] ? __pfx_ret_from_fork+0x10/0x10 [ 1071.894005][ T4929] ? __switch_to+0x800/0x10f0 [ 1071.894026][ T4929] ? __pfx_kthread+0x10/0x10 [ 1071.894046][ T4929] ret_from_fork_asm+0x1a/0x30 [ 1071.894077][ T4929] [ 1071.894231][ T4929] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1072.173045][ T4929] Bluetooth: hci3: failed to register connection device [ 1072.376871][T15710] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1072.384253][T15710] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1072.392161][T15717] __nla_validate_parse: 1 callbacks suppressed [ 1072.392173][T15717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2248'. [ 1072.416645][T15717] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1072.427997][T15717] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1072.436429][T15717] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1072.475135][T15718] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2247'. [ 1073.419483][T15741] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1073.433477][T15741] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1074.094044][T15750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2254'. [ 1074.597660][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 1074.612821][T15750] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1074.621511][T15750] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1074.629941][T15750] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1076.598689][T15795] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 1076.674965][T15795] bond0: (slave netdevsim1): Releasing backup interface [ 1076.705045][T15797] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1076.745844][T15798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1076.814811][T15795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.841402][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 1076.962288][T15795] team0: Port device netdevsim1 added [ 1077.880652][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1078.030182][T15830] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1079.007140][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1079.780949][ T29] audit: type=1326 audit(1782355282.668:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1079.839252][ T29] audit: type=1326 audit(1782355282.668:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1079.910721][ T29] audit: type=1326 audit(1782355282.668:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1079.950986][ T29] audit: type=1326 audit(1782355282.668:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1080.016428][ T29] audit: type=1326 audit(1782355282.668:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1080.080905][ T29] audit: type=1326 audit(1782355282.668:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1080.117150][ T29] audit: type=1326 audit(1782355282.668:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1080.150939][ T29] audit: type=1326 audit(1782355282.668:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1080.178584][ T29] audit: type=1326 audit(1782355282.668:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1080.206315][ T29] audit: type=1326 audit(1782355282.668:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15860 comm="syz.4.2272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1080.349167][T15861] SET target dimension over the limit! [ 1080.445632][ T4929] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1080.455470][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1080.455495][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1080.455509][ T4929] Workqueue: hci0 hci_rx_work [ 1080.455534][ T4929] Call Trace: [ 1080.455541][ T4929] [ 1080.455549][ T4929] dump_stack_lvl+0x100/0x190 [ 1080.455579][ T4929] sysfs_warn_dup.cold+0x1c/0x28 [ 1080.455607][ T4929] sysfs_create_dir_ns+0x24b/0x2b0 [ 1080.455639][ T4929] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1080.455667][ T4929] ? find_held_lock+0x2b/0x80 [ 1080.455684][ T4929] ? kobject_add_internal+0x25f/0x930 [ 1080.455710][ T4929] ? kobject_add_internal+0x25f/0x930 [ 1080.455739][ T4929] ? do_raw_spin_unlock+0x145/0x1e0 [ 1080.455770][ T4929] kobject_add_internal+0x2c8/0x930 [ 1080.455802][ T4929] kobject_add+0x16a/0x1e0 [ 1080.455828][ T4929] ? __pfx_kobject_add+0x10/0x10 [ 1080.455852][ T4929] ? preempt_schedule_thunk+0x16/0x40 [ 1080.455878][ T4929] ? kobject_put+0xb9/0x640 [ 1080.455901][ T4929] ? _raw_spin_unlock+0x3e/0x50 [ 1080.455936][ T4929] device_add+0x294/0x1970 [ 1080.455957][ T4929] ? __pfx_dev_set_name+0x10/0x10 [ 1080.455980][ T4929] ? __pfx_device_add+0x10/0x10 [ 1080.456001][ T4929] ? mgmt_send_event_skb+0x2fb/0x460 [ 1080.456031][ T4929] hci_conn_add_sysfs+0x1a3/0x260 [ 1080.456057][ T4929] le_conn_complete_evt+0x11eb/0x1f60 [ 1080.456086][ T4929] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1080.456116][ T4929] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1080.456139][ T4929] ? skb_pull_data+0x15f/0x1e0 [ 1080.456162][ T4929] hci_le_meta_evt+0x34a/0x5f0 [ 1080.456186][ T4929] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1080.456212][ T4929] hci_event_packet+0x51c/0xcd0 [ 1080.456234][ T4929] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1080.456258][ T4929] ? __pfx_hci_event_packet+0x10/0x10 [ 1080.456286][ T4929] ? kcov_remote_start+0x394/0x670 [ 1080.456314][ T4929] hci_rx_work+0x451/0xfc0 [ 1080.456339][ T4929] process_one_work+0xa23/0x1940 [ 1080.456381][ T4929] ? __pfx_process_one_work+0x10/0x10 [ 1080.456410][ T4929] ? __pfx_hci_rx_work+0x10/0x10 [ 1080.456434][ T4929] worker_thread+0x5ef/0xe50 [ 1080.456461][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 1080.456484][ T4929] ? kthread+0x13a/0x450 [ 1080.456500][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 1080.456519][ T4929] kthread+0x370/0x450 [ 1080.456536][ T4929] ? __pfx_kthread+0x10/0x10 [ 1080.456557][ T4929] ret_from_fork+0x72b/0xd50 [ 1080.456586][ T4929] ? __pfx_ret_from_fork+0x10/0x10 [ 1080.456613][ T4929] ? __switch_to+0x800/0x10f0 [ 1080.456633][ T4929] ? __pfx_kthread+0x10/0x10 [ 1080.456653][ T4929] ret_from_fork_asm+0x1a/0x30 [ 1080.456684][ T4929] [ 1080.456833][ T4929] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1080.722763][ T4929] Bluetooth: hci0: failed to register connection device [ 1082.462589][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 1082.907955][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1085.022088][T15927] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2285'. [ 1085.160194][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1085.250327][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 1085.250340][ T29] audit: type=1326 audit(1782355287.708:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1085.530488][ T29] audit: type=1326 audit(1782355287.745:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8c259cbc2 code=0x7ffc0000 [ 1085.982821][ T29] audit: type=1326 audit(1782355287.745:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa8c259cc57 code=0x7ffc0000 [ 1086.073814][ T29] audit: type=1326 audit(1782355287.745:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa8c2559b51 code=0x7ffc0000 [ 1086.166703][ T29] audit: type=1326 audit(1782355287.755:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa8c259dc49 code=0x7ffc0000 [ 1086.252190][ T29] audit: type=1326 audit(1782355287.755:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa8c25592ac code=0x7ffc0000 [ 1086.532490][T15934] sctp: [Deprecated]: syz.0.2287 (pid 15934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1086.532490][T15934] Use struct sctp_sack_info instead [ 1086.536163][T15948] lo speed is unknown, defaulting to 1000 [ 1087.855003][ T29] audit: type=1326 audit(1782355287.755:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa8c255930e code=0x7ffc0000 [ 1087.989177][ T29] audit: type=1326 audit(1782355287.755:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1088.041454][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2289'. [ 1088.110482][T15957] IPv6: NLM_F_CREATE should be specified when creating new route [ 1088.131421][ T29] audit: type=1326 audit(1782355287.764:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa8c2559bbb code=0x7ffc0000 [ 1088.246432][ T29] audit: type=1326 audit(1782355287.764:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.4.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c259ce59 code=0x7ffc0000 [ 1090.003152][T16003] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1090.035853][T16003] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1090.552811][T16003] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1090.554456][T15999] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2299'. [ 1091.157985][T16013] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1091.716890][ T4929] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1091.727413][ T4929] CPU: 1 UID: 0 PID: 4929 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1091.727439][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1091.727453][ T4929] Workqueue: hci4 hci_rx_work [ 1091.727479][ T4929] Call Trace: [ 1091.727485][ T4929] [ 1091.727493][ T4929] dump_stack_lvl+0x100/0x190 [ 1091.727522][ T4929] sysfs_warn_dup.cold+0x1c/0x28 [ 1091.727550][ T4929] sysfs_create_dir_ns+0x24b/0x2b0 [ 1091.727582][ T4929] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1091.727609][ T4929] ? find_held_lock+0x2b/0x80 [ 1091.727627][ T4929] ? kobject_add_internal+0x25f/0x930 [ 1091.727654][ T4929] ? kobject_add_internal+0x25f/0x930 [ 1091.727684][ T4929] ? do_raw_spin_unlock+0x145/0x1e0 [ 1091.727714][ T4929] kobject_add_internal+0x2c8/0x930 [ 1091.727746][ T4929] kobject_add+0x16a/0x1e0 [ 1091.727779][ T4929] ? __pfx_kobject_add+0x10/0x10 [ 1091.727804][ T4929] ? preempt_schedule_thunk+0x16/0x40 [ 1091.727830][ T4929] ? kobject_put+0xb9/0x640 [ 1091.727854][ T4929] ? _raw_spin_unlock+0x3e/0x50 [ 1091.727890][ T4929] device_add+0x294/0x1970 [ 1091.727913][ T4929] ? __pfx_dev_set_name+0x10/0x10 [ 1091.727937][ T4929] ? __pfx_device_add+0x10/0x10 [ 1091.727966][ T4929] hci_conn_add_sysfs+0x1a3/0x260 [ 1091.727995][ T4929] le_conn_complete_evt+0x11eb/0x1f60 [ 1091.728025][ T4929] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1091.728048][ T4929] ? irqentry_exit+0x24d/0xa00 [ 1091.728070][ T4929] ? lockdep_hardirqs_on+0x78/0x100 [ 1091.728096][ T4929] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1091.728119][ T4929] ? skb_pull_data+0x15f/0x1e0 [ 1091.728142][ T4929] hci_le_meta_evt+0x34a/0x5f0 [ 1091.728165][ T4929] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1091.728191][ T4929] hci_event_packet+0x51c/0xcd0 [ 1091.728212][ T4929] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1091.728236][ T4929] ? __pfx_hci_event_packet+0x10/0x10 [ 1091.728262][ T4929] ? kcov_remote_start+0x394/0x670 [ 1091.728291][ T4929] hci_rx_work+0x451/0xfc0 [ 1091.728316][ T4929] process_one_work+0xa23/0x1940 [ 1091.728349][ T4929] ? __pfx_process_one_work+0x10/0x10 [ 1091.728379][ T4929] ? __pfx_hci_rx_work+0x10/0x10 [ 1091.728402][ T4929] worker_thread+0x5ef/0xe50 [ 1091.728430][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 1091.728451][ T4929] ? kthread+0x13a/0x450 [ 1091.728468][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 1091.728487][ T4929] kthread+0x370/0x450 [ 1091.728505][ T4929] ? __pfx_kthread+0x10/0x10 [ 1091.728525][ T4929] ret_from_fork+0x72b/0xd50 [ 1091.728557][ T4929] ? __pfx_ret_from_fork+0x10/0x10 [ 1091.728585][ T4929] ? __switch_to+0x800/0x10f0 [ 1091.728604][ T4929] ? __pfx_kthread+0x10/0x10 [ 1091.728625][ T4929] ret_from_fork_asm+0x1a/0x30 [ 1091.728656][ T4929] [ 1091.728846][ T4929] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1092.089671][ T4929] Bluetooth: hci4: failed to register connection device [ 1093.295738][T16036] kAFS: unable to lookup cell 'ÿ' [ 1093.446363][T16036] netlink: 'syz.1.2306': attribute type 10 has an invalid length. [ 1094.505753][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1096.688859][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 1096.987719][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1096.987731][ T29] audit: type=1400 audit(1782355298.552:1659): avc: denied { name_bind } for pid=16055 comm="syz.0.2310" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1097.039589][T16058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2311'. [ 1097.050604][T16058] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1097.058811][T16058] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1097.067212][T16058] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1100.177514][T16071] 0ªî{X¹¦: left allmulticast mode [ 1100.262962][T16071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.277358][T16071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.303604][T16071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.562972][T16071] veth0_to_team: left promiscuous mode [ 1100.571062][T16071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.580843][T16071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1100.591557][T16071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1100.603995][T16071] veth1_vlan: left promiscuous mode [ 1100.609593][T16071] veth0_vlan: left promiscuous mode [ 1100.615555][T16071] veth0_vlan: entered promiscuous mode [ 1100.622391][T16071] veth1_vlan: entered promiscuous mode [ 1100.629923][T16071] veth1_macvtap: left promiscuous mode [ 1100.636578][T16071] veth1_macvtap: entered promiscuous mode [ 1100.643863][T16071] bridge0: port 3(vlan2) entered blocking state [ 1100.650138][T16071] bridge0: port 3(vlan2) entered forwarding state [ 1100.659472][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1100.667287][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1100.674931][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1100.682730][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1100.690481][T16071] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 1100.698286][T16071] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1100.706087][T16071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1100.714659][T16071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1100.722713][T16071] veth0_to_team: entered promiscuous mode [ 1100.730951][T16071] bond3: left promiscuous mode [ 1100.736097][T16071] dummy0: left promiscuous mode [ 1100.741218][T16071] bond3: left allmulticast mode [ 1100.746423][T16071] dummy0: left allmulticast mode [ 1100.751725][T16071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1100.759265][T16071] bond4: left promiscuous mode [ 1100.764389][T16071] vti0: left promiscuous mode [ 1100.769309][T16071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1100.855393][T14452] lo speed is unknown, defaulting to 1000 [ 1100.883435][T14452] syz0: Port: 1 Link ACTIVE [ 1100.900406][T13956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.911093][ T88] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1100.989529][T13956] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1101.000980][ T36] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.068009][T16016] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.080987][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.088596][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.122321][T16016] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.192673][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.199777][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.229705][T16016] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.273141][T16016] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.341626][ T5939] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.393601][T16016] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.425085][T16016] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.479764][ T5939] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1101.518385][T13956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.576254][T13956] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1101.659072][T13956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.699910][T13956] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1101.719367][T16087] overlayfs: failed to resolve './file0': -2 [ 1101.739486][T13956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.785977][T13956] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1101.973510][T16093] xt_hashlimit: max too large, truncated to 1048576 [ 1102.221413][T16093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1103.002109][ T4929] Bluetooth: hci5: unexpected event for opcode 0x202a [ 1104.044115][T16117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2323'. [ 1104.255894][T16117] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1104.339132][T16117] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1104.360883][T16117] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1105.223140][T16133] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1106.468219][ T5934] net_ratelimit: 27 callbacks suppressed [ 1106.468235][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1106.615020][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'. [ 1106.642897][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2327'. [ 1107.143339][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1107.364267][ T5943] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1107.811985][T16158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16158 comm=syz.4.2331 [ 1107.986752][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1108.209696][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1108.807251][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1108.890908][T16169] lo speed is unknown, defaulting to 1000 [ 1109.549151][T16178] ceph: No mds server is up or the cluster is laggy [ 1109.558204][T14448] libceph: connect (1)[c::]:6789 error -99 [ 1109.777085][T14448] libceph: mon0 (1)[c::]:6789 connect error [ 1109.899315][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1110.031092][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1110.968622][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1111.178213][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1111.242009][ T29] audit: type=1400 audit(1782355311.701:1660): avc: denied { execute } for pid=16196 comm="syz.1.2341" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1111.292862][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2342'. [ 1111.302426][T16201] tipc: Enabling of bearer rejected, media not registered [ 1111.537441][T16205] lo speed is unknown, defaulting to 1000 [ 1112.293740][T16209] ipvlan2: left allmulticast mode [ 1112.299713][T16209] batadv_slave_1: left allmulticast mode [ 1112.408572][ T5933] net_ratelimit: 2 callbacks suppressed [ 1112.408587][ T5933] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1112.904289][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1113.043928][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1113.101610][T16219] netlink: 'syz.0.2345': attribute type 10 has an invalid length. [ 1113.182295][T16219] bond0: (slave netdevsim1): Releasing backup interface [ 1113.790011][T16227] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1113.820381][T16227] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1113.832931][T16219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1113.844885][T16227] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1114.122370][T16219] team0: Port device netdevsim1 added [ 1114.132953][T16223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2347'. [ 1114.180969][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1114.220942][T16235] kAFS: unable to lookup cell 'ÿ' [ 1114.284987][T16235] netlink: 'syz.3.2348': attribute type 10 has an invalid length. [ 1114.413293][T16224] sctp: [Deprecated]: syz.1.2343 (pid 16224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1114.413293][T16224] Use struct sctp_sack_info instead [ 1114.433076][T16235] bond0: (slave netdevsim1): Releasing backup interface [ 1114.438213][T16245] netlink: 'syz.3.2348': attribute type 10 has an invalid length. [ 1114.481466][T16235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1114.641421][T16235] team0: Port device netdevsim1 added [ 1114.772655][ T29] audit: type=1400 audit(1782355314.940:1661): avc: denied { write } for pid=16234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.861355][T16245] team0: Port device netdevsim1 removed [ 1114.925878][T16245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1114.988463][T16245] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1115.004231][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1115.047180][ T29] audit: type=1400 audit(1782355315.199:1662): avc: denied { write } for pid=16252 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1115.144509][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1115.297151][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1115.747551][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1115.925493][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1116.081695][T16267] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1116.096539][T16267] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1116.114058][T16267] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1116.172659][T16267] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1116.544612][ T29] audit: type=1400 audit(1782355316.149:1663): avc: denied { read } for pid=16262 comm="syz.5.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1117.169523][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1117.449048][T16279] kAFS: unable to lookup cell 'Þ({^ú@' [ 1117.770392][T16285] overlayfs: failed to resolve './file0': -2 [ 1118.081531][T13960] net_ratelimit: 4 callbacks suppressed [ 1118.081549][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1118.185575][ T4929] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 1118.225918][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1118.400958][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1118.458450][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.468591][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.585836][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1118.790794][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1119.118990][T16302] netlink: 'syz.5.2365': attribute type 2 has an invalid length. [ 1119.213416][ T29] audit: type=1326 audit(1782355319.046:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1119.285429][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1119.304033][ T29] audit: type=1326 audit(1782355319.056:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1119.333584][ T29] audit: type=1326 audit(1782355319.083:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1119.552698][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1119.755519][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1120.083200][ T29] audit: type=1326 audit(1782355319.083:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1120.190311][ T29] audit: type=1326 audit(1782355319.083:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1120.249091][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1120.256566][ T29] audit: type=1326 audit(1782355319.083:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1120.395529][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2368'. [ 1120.399943][T16314] lo speed is unknown, defaulting to 1000 [ 1120.414162][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1120.515430][ T29] audit: type=1326 audit(1782355319.203:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1121.025455][ T29] audit: type=1326 audit(1782355319.203:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1121.080149][ T29] audit: type=1326 audit(1782355319.203:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1121.211558][ T29] audit: type=1326 audit(1782355319.203:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16265 comm="syz.0.2355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3079ce59 code=0x7ffc0000 [ 1121.292300][ T4929] Bluetooth: hci4: unexpected event for opcode 0x0c56 [ 1121.439921][T16336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2376'. [ 1121.466970][T16336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2376'. [ 1121.515166][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'. [ 1121.890771][T16352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2383'. [ 1121.900687][T16352] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1121.908851][T16352] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1121.917236][T16352] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1122.213381][T16360] kAFS: unable to lookup cell 'ÿ' [ 1122.334050][T16360] netlink: 'syz.5.2384': attribute type 10 has an invalid length. [ 1122.421849][T16363] netlink: 'syz.5.2384': attribute type 10 has an invalid length. [ 1122.803158][T16373] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 1122.837291][T16373] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 1123.087378][T16384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2395'. [ 1123.133226][T16384] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1123.152409][T16384] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1123.182209][T16384] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1123.529924][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 1123.560149][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 1123.960170][T13956] net_ratelimit: 21 callbacks suppressed [ 1123.960185][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1124.153233][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1124.280110][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1124.313662][ T4929] Bluetooth: hci4: unexpected event for opcode 0x080c [ 1124.429204][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1124.460283][T16421] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2420'. [ 1124.612577][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1125.130118][ T9468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1125.221288][T16437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2414'. [ 1125.289450][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1125.417999][ T5943] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1125.580747][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1125.633051][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 1125.633064][ T29] audit: type=1400 audit(1782355324.980:1737): avc: denied { getopt } for pid=16458 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1126.159645][ T9468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1127.959843][T16494] netlink: 'syz.5.2435': attribute type 2 has an invalid length. [ 1127.968438][T16492] __nla_validate_parse: 2 callbacks suppressed [ 1127.968450][T16492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2436'. [ 1128.047926][T16494] : entered promiscuous mode [ 1128.079101][T16492] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1128.109292][T16492] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1128.127856][T16492] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1128.969307][T16528] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 1129.071829][T16532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2449'. [ 1129.082375][T16532] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1129.090530][T16532] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1129.098946][T16532] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1129.190000][T16534] wg1: Caught tx_queue_len zero misconfig [ 1129.684640][T13953] net_ratelimit: 16 callbacks suppressed [ 1129.684657][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1129.874941][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1129.993082][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1130.152772][T16551] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2459'. [ 1130.198498][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1130.349263][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1130.584470][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1131.306834][ T9463] wlan0: Trigger new scan to find an IBSS to join [ 1131.503257][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1131.613358][T16577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2467'. [ 1131.653184][T16577] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1131.681857][T16577] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1131.693344][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1131.705324][T16577] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1131.812470][T13959] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1131.971629][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1132.920628][T16616] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2483'. [ 1132.985654][T16618] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2486'. [ 1133.245926][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 1134.385501][T16656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2499'. [ 1134.395817][T16656] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1134.404052][T16656] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1134.412447][T16656] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1135.224071][ T88] net_ratelimit: 16 callbacks suppressed [ 1135.224089][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1135.269986][ T88] wlan0: Trigger new scan to find an IBSS to join [ 1135.401894][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1135.935393][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1136.092634][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1136.107888][T16687] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1136.234022][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1136.831800][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1137.004644][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1137.225801][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1137.514294][ T5943] wlan0: Creating new IBSS network, BSSID ca:07:91:36:e5:b6 [ 1137.526465][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1137.924709][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1138.333718][T16734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1138.344105][T16734] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1138.353053][T16734] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1138.361839][T16734] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1140.749651][ T9472] net_ratelimit: 10 callbacks suppressed [ 1140.749685][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.665530][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.837710][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1141.861867][T16771] kAFS: unable to lookup cell 'ÿ' [ 1142.011191][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1142.718005][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1142.899068][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.062711][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.202306][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1143.219799][ T29] audit: type=1400 audit(1782355341.211:1738): avc: denied { ioctl } for pid=16797 comm="syz.3.2549" path="socket:[43279]" dev="sockfs" ino=43279 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1143.499011][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1144.070557][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1144.549583][T16831] netlink: 'syz.5.2562': attribute type 2 has an invalid length. [ 1145.032867][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2571'. [ 1145.221927][T16864] tmpfs: Bad value for 'mpol' [ 1145.455790][ T29] audit: type=1400 audit(1782355343.269:1739): avc: denied { accept } for pid=16872 comm="syz.5.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1145.646538][T16884] netlink: 'syz.3.2585': attribute type 1 has an invalid length. [ 1145.654636][T16884] netlink: 'syz.3.2585': attribute type 2 has an invalid length. [ 1145.777800][T16888] 9pnet_virtio: no channels available for device syz [ 1145.862440][T16890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2587'. [ 1145.872505][T16890] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1145.880706][T16890] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1145.889106][T16890] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1145.917426][T16891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2583'. [ 1145.974938][T16886] lo speed is unknown, defaulting to 1000 [ 1145.996875][T16897] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2589'. [ 1146.437808][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'. [ 1146.594626][T16918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2598'. [ 1146.605048][ T5939] net_ratelimit: 15 callbacks suppressed [ 1146.605062][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1146.774308][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1146.911468][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1147.032450][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'. [ 1147.061661][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1147.101137][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'. [ 1147.202301][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1147.343523][T13960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1147.607612][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1147.667851][ T29] audit: type=1326 audit(1782355345.317:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1147.775325][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1147.884919][ T29] audit: type=1326 audit(1782355345.336:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1147.927379][ T29] audit: type=1326 audit(1782355345.336:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1147.964514][ T29] audit: type=1326 audit(1782355345.336:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1148.002855][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1148.068000][ T29] audit: type=1326 audit(1782355345.354:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1148.150328][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1148.198777][ T29] audit: type=1326 audit(1782355345.354:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1148.320941][ T29] audit: type=1326 audit(1782355345.354:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1148.446236][T16970] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2619'. [ 1148.503294][ T29] audit: type=1326 audit(1782355345.354:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16911 comm="syz.5.2595" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73099ce59 code=0x7ffc0000 [ 1148.725058][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 1149.301414][T16983] netlink: 'syz.0.2620': attribute type 10 has an invalid length. [ 1150.247513][T17005] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1150.255706][T17005] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1150.264653][T17005] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1150.900038][ T4929] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 1151.000868][T17025] __nla_validate_parse: 1 callbacks suppressed [ 1151.000879][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2638'. [ 1151.538791][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1151.669879][T17058] netlink: 'syz.0.2653': attribute type 11 has an invalid length. [ 1151.757864][T17066] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2656'. [ 1151.768667][T17066] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1151.776910][T17066] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1151.785354][T17066] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1153.732255][T13961] net_ratelimit: 22 callbacks suppressed [ 1153.732272][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.000958][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.147312][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.279777][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.353311][T17103] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1154.353311][T17103] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1154.429701][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.560172][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.575294][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2674'. [ 1154.585650][T17111] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1154.743890][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1154.994231][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1155.710551][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1155.823376][T17128] netlink: 4984 bytes leftover after parsing attributes in process `syz.1.2680'. [ 1156.332156][T17172] kAFS: unable to lookup cell 'ÿ' [ 1156.386380][T17172] netlink: 'syz.5.2693': attribute type 10 has an invalid length. [ 1156.521484][T17177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2700'. [ 1156.538746][T17177] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1156.547548][T17177] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1156.556342][T17177] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1157.071428][T17172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1157.178847][T17188] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2704'. [ 1157.219502][T17188] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2704'. [ 1157.402801][T17198] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2709'. [ 1158.007782][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 1158.007798][ T29] audit: type=1400 audit(1782355354.859:1813): avc: denied { ioctl } for pid=17230 comm="syz.3.2725" path="socket:[44175]" dev="sockfs" ino=44175 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1158.241817][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 1158.268228][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 1159.206064][T17260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2738'. [ 1159.216168][T17260] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1159.224369][T17260] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1159.232828][T17260] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1159.245412][ T9463] net_ratelimit: 23 callbacks suppressed [ 1159.245426][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.478879][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.546557][T17274] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1159.584550][T17274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1159.633098][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.773999][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1159.824638][T17288] kAFS: unable to lookup cell 'ÿ' [ 1159.891966][T17288] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 1159.982897][T17296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1160.085798][T17288] bond0: (slave netdevsim1): Releasing backup interface [ 1160.191821][T17288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1160.202089][T17309] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1160.210905][T17309] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1160.219784][T17309] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1160.291526][T17317] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1160.309098][T17288] team0: Port device netdevsim1 added [ 1160.315787][T17317] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1160.356203][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.519941][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.661915][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.803165][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1160.933972][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1161.763296][T17370] nftables ruleset with unbound set [ 1162.566580][T17415] netlink: 'syz.3.2807': attribute type 27 has an invalid length. [ 1162.875925][T17431] overlayfs: failed to clone upperpath [ 1162.881520][T17429] __nla_validate_parse: 1 callbacks suppressed [ 1162.881534][T17429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2815'. [ 1163.354998][T17458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2828'. [ 1163.368017][T17458] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1163.376256][T17458] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1163.384813][T17458] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1163.660715][T17477] smc: net device erspan0 applied user defined pnetid SYZ2 [ 1163.944806][T17496] tipc: Started in network mode [ 1163.958938][T17496] tipc: Node identity fe80000000000000000000000000000f, cluster identity 4711 [ 1164.035424][T17496] tipc: Enabling of bearer rejected, failed to enable media [ 1164.477465][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2851'. [ 1164.681260][T13961] net_ratelimit: 30 callbacks suppressed [ 1164.681276][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.837596][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.995590][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.026183][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 1165.066015][T17541] tipc: Invalid UDP bearer configuration [ 1165.066059][T17541] tipc: Enabling of bearer rejected, failed to enable media [ 1165.136365][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.243662][ T29] audit: type=1400 audit(1782355361.530:1814): avc: denied { listen } for pid=17548 comm="syz.4.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1165.299796][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.429737][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.569581][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.700529][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.830227][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.962875][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.023902][T17586] bridge_slave_0: default FDB implementation only supports local addresses [ 1166.193022][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 1166.914784][T17639] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1166.922975][T17639] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1166.931417][T17639] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1168.342933][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 1168.392280][T17683] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1168.402158][T17683] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1168.410951][T17683] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1170.153780][ T88] net_ratelimit: 40 callbacks suppressed [ 1170.153796][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.305393][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.363996][T17757] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2952'. [ 1170.469257][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.623156][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.771263][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.923525][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.025960][T17782] kAFS: unable to lookup cell 'ÿ' [ 1171.076399][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.110777][T17785] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2962'. [ 1171.238511][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.443773][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.506654][T17801] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1171.514919][T17801] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1171.523352][T17801] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1171.585425][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1171.973963][T17811] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2970'. [ 1172.290646][ T4929] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1172.305237][ T4929] Bluetooth: hci4: Injecting HCI hardware error event [ 1172.321613][ T4929] Bluetooth: hci4: hardware error 0x00 [ 1173.243070][T13930] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1173.271843][T17837] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1173.280576][T17837] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1173.289369][T17837] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1174.498410][T17869] tipc: Started in network mode [ 1174.527462][T17869] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1174.555286][T17869] tipc: Enabling of bearer rejected, failed to enable media [ 1175.127828][ T4929] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1175.648654][T13956] net_ratelimit: 23 callbacks suppressed [ 1175.648669][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1175.799704][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1175.941247][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.149454][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.359218][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.786447][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.844409][T17937] tipc: MTU too low for tipc bearer [ 1176.915928][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.978994][T17941] atomic_op ffff88807e297198 conn xmit_atomic 0000000000000000 [ 1176.994011][ T29] audit: type=1400 audit(1782355372.363:1815): avc: denied { ioctl } for pid=17942 comm="syz.3.3025" path="socket:[46534]" dev="sockfs" ino=46534 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1177.057558][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1177.070125][T17949] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3027'. [ 1177.152507][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 1177.175997][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1177.297375][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1178.143467][T17984] devpts: Bad value for 'max' [ 1178.365080][T17996] 9pnet_fd: p9_fd_create_tcp (17996): problem binding to privport [ 1179.874982][ T29] audit: type=1400 audit(1782355375.030:1816): avc: denied { write } for pid=18053 comm="syz.5.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1181.088849][ T5934] net_ratelimit: 22 callbacks suppressed [ 1181.088867][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.148020][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'. [ 1181.239936][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.380965][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.534270][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.665109][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.674432][T18119] Cannot find set identified by id 0 to match [ 1181.815089][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.981744][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.129673][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.270761][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.402643][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.417705][T18164] netlink: 'syz.0.3118': attribute type 2 has an invalid length. [ 1185.035786][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.042209][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.057148][T18239] tmpfs: Invalid gid '0x00000000ffffffff' [ 1185.462753][ T29] audit: type=1400 audit(1782355380.188:1817): avc: denied { audit_read } for pid=18266 comm="syz.3.3161" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1185.519821][ T29] audit: type=1400 audit(1782355380.225:1818): avc: denied { nlmsg_read } for pid=18266 comm="syz.3.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1187.029530][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'. [ 1187.057315][T13930] net_ratelimit: 23 callbacks suppressed [ 1187.057329][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1187.265539][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1187.385549][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1187.513953][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1187.578178][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1187.825619][T14448] libceph: connect (1)[c::]:6789 error -99 [ 1187.859808][T18321] ceph: No mds server is up or the cluster is laggy [ 1187.968279][T18324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.983651][T18324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.156010][T14448] libceph: mon0 (1)[c::]:6789 connect error [ 1188.214569][T18324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1188.225523][T18324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.240047][T18324] veth1_vlan: left promiscuous mode [ 1188.246789][T18324] veth0_vlan: left promiscuous mode [ 1188.253216][T18324] veth0_vlan: entered promiscuous mode [ 1188.263040][T18324] veth1_vlan: entered promiscuous mode [ 1188.271053][T18324] veth1_macvtap: left promiscuous mode [ 1188.278213][T18324] veth0_macvtap: left promiscuous mode [ 1188.285657][T18324] veth1_macvtap: entered promiscuous mode [ 1188.298066][T18324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.306371][T18324] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1188.314601][T18324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.323241][T18324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.334466][T18324] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1188.368415][T18324] 8021q: adding VLAN 0 to HW filter on device team1 [ 1188.377938][T18324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1188.393297][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1188.570662][T13960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.589410][T18327] tipc: Started in network mode [ 1188.600091][T18327] tipc: Node identity ff, cluster identity 4711 [ 1188.612470][T18327] tipc: Enabling of bearer rejected, failed to enable media [ 1188.636690][ T9472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.664663][ T9472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.462138][ T9472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.471945][T18356] netlink: 'syz.5.3195': attribute type 12 has an invalid length. [ 1189.494648][T13956] ip6_tunnel: K xmit: Local address not yet configured! [ 1189.522139][T14454] ip6_tunnel: K xmit: Local address not yet configured! [ 1189.531074][T13956] ip6_tunnel: K xmit: Local address not yet configured! [ 1189.585860][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1189.736810][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1190.000805][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1190.104181][T18404] trusted_key: encrypted_key: insufficient parameters specified [ 1190.117151][T18404] trusted_key: encrypted_key: keylen parameter is missing [ 1190.456091][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1190.584686][T14448] ip6_tunnel: K xmit: Local address not yet configured! [ 1190.618316][T16016] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1190.628671][T14448] ip6_tunnel: K xmit: Local address not yet configured! [ 1190.664306][T18408] tipc: New replicast peer: 255.255.255.255 [ 1190.676090][ T29] audit: type=1400 audit(1782355384.996:1819): avc: denied { read } for pid=18405 comm="syz.5.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1190.678240][T18408] tipc: Enabled bearer , priority 10 [ 1190.714443][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1190.724011][T18408] tipc: Disabling bearer [ 1190.819513][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 1191.114241][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1191.683917][T18441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3235'. [ 1192.817337][T13961] net_ratelimit: 13 callbacks suppressed [ 1192.817355][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1192.867998][T18465] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3245'. [ 1192.968949][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1193.131435][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1193.372021][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1193.519009][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1193.649131][T13956] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1193.790752][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1193.931105][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1194.081980][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1194.222829][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1194.272304][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1194.340299][T18519] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1194.348890][T18519] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1194.357777][T18519] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1194.928994][ T9472] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.695874][ T9462] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.785005][ T9462] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.826214][ T9462] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1196.040084][T18549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3282'. [ 1197.142533][T18583] overlayfs: failed to clone upperpath [ 1197.643361][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 1198.323093][ T9472] net_ratelimit: 16 callbacks suppressed [ 1198.323110][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1198.561137][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1198.635426][T18637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3321'. [ 1198.699725][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1198.728795][T18639] sctp: [Deprecated]: syz.3.3320 (pid 18639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1198.728795][T18639] Use struct sctp_sack_info instead [ 1198.926423][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1198.978983][T18649] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1198.987206][T18649] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1198.995668][T18649] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1199.113957][T14454] libceph: connect (1)[c::]:6789 error -101 [ 1199.148854][T18652] ceph: No mds server is up or the cluster is laggy [ 1199.280504][T18655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1199.301687][T18655] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1199.309069][T18655] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1199.328543][T18655] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1199.423563][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1199.448679][T14454] libceph: mon0 (1)[c::]:6789 connect error [ 1199.621531][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1199.743420][T18665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1199.761772][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1199.904250][T13953] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1200.036240][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1200.402864][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1200.823630][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3349'. [ 1201.382600][T18729] xt_hashlimit: size too large, truncated to 1048576 [ 1201.764923][T18745] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1201.774059][T18745] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1201.782953][T18745] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1202.104755][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3370'. [ 1203.227089][T18788] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1203.235319][T18788] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1203.243760][T18788] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1203.760026][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1203.786145][T15996] net_ratelimit: 26 callbacks suppressed [ 1203.786158][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.412346][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.447736][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 1204.541660][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.670696][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.811995][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.864288][T18857] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1204.874130][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1205.511711][ T9468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1205.689093][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.361257][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.478290][T18887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.501847][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.632635][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.690420][T18929] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1207.698910][T18929] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1207.707424][T18929] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1208.305830][ T9468] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1209.029850][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1209.318840][ T36] net_ratelimit: 17 callbacks suppressed [ 1209.318861][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1209.448867][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1209.580224][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1209.721638][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1209.862715][ T9468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.003409][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.143517][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.184619][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 1210.194384][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1210.213965][T19007] netlink: 'syz.4.3463': attribute type 7 has an invalid length. [ 1210.221794][T19007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1210.283348][ T9468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.302771][T19014] xt_hashlimit: size too large, truncated to 1048576 [ 1210.402545][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.578387][ T5938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.265606][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3477'. [ 1211.590313][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1212.187332][ T5943] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.321968][T13960] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.490529][ T29] audit: type=1400 audit(1782355405.084:1820): avc: denied { read } for pid=19072 comm="syz.5.3491" laddr=172.20.20.170 lport=47753 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1212.590252][T13960] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.627700][T13960] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.621997][T19097] lo speed is unknown, defaulting to 1000 [ 1213.630228][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 1213.750393][T19103] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1213.758681][T19103] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1213.767101][T19103] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1213.854145][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3502'. [ 1214.458734][T19139] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1214.482040][T19139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3515'. [ 1214.571934][T19147] lo: entered allmulticast mode [ 1214.577998][T19147] lo: left allmulticast mode [ 1214.725294][T19156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3522'. [ 1214.793938][ T9472] net_ratelimit: 28 callbacks suppressed [ 1214.793953][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.350667][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.556152][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.709504][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.904554][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.224034][T19189] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1216.384155][T19187] ceph: No mds server is up or the cluster is laggy [ 1216.394290][T14454] libceph: connect (1)[c::]:6789 error -22 [ 1216.404150][ T9468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.417903][T14454] libceph: mon0 (1)[c::]:6789 connect error [ 1216.663844][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.741799][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3537'. [ 1216.819049][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.946209][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.755528][T19238] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1217.764797][T19238] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1217.773240][T19238] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1218.174762][T19246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.423520][T19244] ceph: No mds server is up or the cluster is laggy [ 1218.439996][T14454] libceph: connect (1)[c::]:6789 error -101 [ 1218.459537][T14454] libceph: mon0 (1)[c::]:6789 connect error [ 1218.836851][ T5832] kernel read not supported for file [fscontext] (pid: 5832 comm: kworker/0:6) [ 1219.946145][T19294] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1219.954347][T19294] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1219.962898][T19294] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1220.287396][T13961] net_ratelimit: 23 callbacks suppressed [ 1220.287413][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1220.439497][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1220.568299][T13961] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1220.721541][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1220.850126][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1220.987453][ T9463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.449792][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.534447][T19325] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1221.542633][T19325] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1221.551543][T19325] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1221.630686][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.782727][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.937193][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'. [ 1221.999264][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1222.393352][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3607'. [ 1222.435236][T19374] ip6erspan0: entered allmulticast mode [ 1223.179564][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1223.386464][T19393] lo speed is unknown, defaulting to 1000 [ 1223.883700][ T4929] Bluetooth: hci0: command 0x0406 tx timeout [ 1224.111904][T19403] sctp: [Deprecated]: syz.1.3615 (pid 19403) Use of int in maxseg socket option. [ 1224.111904][T19403] Use struct sctp_assoc_value instead [ 1224.192593][T19405] netlink: 'syz.0.3616': attribute type 21 has an invalid length. [ 1224.239540][T19405] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1224.273087][T19405] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1224.295503][T19407] netlink: 'syz.0.3616': attribute type 21 has an invalid length. [ 1224.313498][T19407] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1224.372396][T19407] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1224.750633][T19419] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1224.759296][T19419] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1224.768087][T19419] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1225.212177][T19435] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 1225.941623][ T88] net_ratelimit: 19 callbacks suppressed [ 1225.941639][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.114583][T19453] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1226.124122][T19453] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1226.133196][T19453] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1226.143571][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.278882][T15996] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.410942][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.437288][T19470] vxcan0: tx address claim with different name [ 1226.595119][ T9462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.691884][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1226.724770][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.874545][ T5962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.398354][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.613290][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.767062][ T88] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1228.170770][T19509] overlayfs: failed to resolve './cgroup': -2 [ 1228.226788][T19505] bridge0: port 1(syz_tun) entered disabled state [ 1228.238161][T19505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.302784][T19505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.318441][T19505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.340045][T19513] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1228.348452][T19513] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1228.357324][T19513] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1228.452257][ T88] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.485417][ T5962] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.514503][ T5962] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.543717][ T5962] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.567009][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1228.844438][T19536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1228.953593][ T29] audit: type=1400 audit(1782355420.319:1821): avc: denied { write } for pid=19516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.111277][ T29] audit: type=1400 audit(1782355420.467:1822): avc: denied { write } for pid=19553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.412606][T19567] lo speed is unknown, defaulting to 1000 [ 1229.750472][ T29] audit: type=1400 audit(1782355421.048:1823): avc: denied { write } for pid=19558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1230.045370][ T29] audit: type=1400 audit(1782355421.325:1824): avc: denied { write } for pid=19584 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1230.234024][T19567] dvmrp0: entered allmulticast mode [ 1230.353140][ T5934] dvmrp0: left allmulticast mode [ 1230.954318][ T29] audit: type=1400 audit(1782355422.164:1825): avc: denied { write } for pid=19593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.280245][ T29] audit: type=1400 audit(1782355422.460:1826): avc: denied { write } for pid=19624 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.471076][ T5939] net_ratelimit: 21 callbacks suppressed [ 1231.471092][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1231.663620][T19648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3691'. [ 1231.674171][T19648] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1231.682907][T19648] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1231.691709][T19648] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1231.702759][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1231.712128][T19650] fuse: fd is not a fuse device [ 1231.916233][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1231.986154][ T29] audit: type=1400 audit(1782355423.115:1827): avc: denied { accept } for pid=19660 comm="syz.0.3696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1232.066472][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.198251][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.326149][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.458636][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.579459][T19680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3703'. [ 1232.596935][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.727588][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1232.911789][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.173386][T19735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1234.276084][T19740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1234.460609][T19750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1234.475779][T19750] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1234.484168][T19750] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1234.492555][T19750] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1234.676385][T19760] xt_hashlimit: size too large, truncated to 1048576 [ 1234.998650][T19779] fuse: fd is not a fuse device [ 1235.439552][T19793] netlink: 'syz.3.3748': attribute type 8 has an invalid length. [ 1235.456742][T19794] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1235.465042][T19794] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1235.473460][T19794] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1235.482122][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3748'. [ 1235.668639][T19810] netlink: 'syz.1.3754': attribute type 4 has an invalid length. [ 1235.687593][T19807] xt_hashlimit: size too large, truncated to 1048576 [ 1235.695906][T19810] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1235.710949][T19810] .`: renamed from bond0 [ 1236.953596][ T9472] net_ratelimit: 31 callbacks suppressed [ 1236.953612][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.083581][ T9472] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.220792][T19865] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1237.229610][T19865] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1237.238404][T19865] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1237.249647][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.271580][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1237.307972][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1237.339354][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1237.360648][T19869] bridge0: entered allmulticast mode [ 1237.366687][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1237.405907][ T5934] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.550428][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.680640][ T5943] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.754710][T19882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3784'. [ 1237.799801][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.930459][T13930] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1238.113644][ T5943] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1238.254565][ T5939] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.159800][T19938] raw_sendmsg: syz.0.3808 forgot to set AF_INET. Fix it! [ 1239.194082][T19941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1239.311277][T19947] xt_hashlimit: size too large, truncated to 1048576 [ 1239.900764][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1239.928096][T19965] netlink: 'syz.1.3818': attribute type 30 has an invalid length. [ 1239.957294][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1239.968193][ T5962] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1239.978107][T19971] netlink: 'syz.1.3818': attribute type 30 has an invalid length. [ 1239.991261][ T5962] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.053906][ T5962] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.085683][ T5943] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1240.241673][T19983] overlayfs: failed to clone upperpath [ 1241.021753][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'. [ 1241.726788][T20035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1241.738364][T20035] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1241.746662][T20035] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1241.755133][T20035] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1245.872301][ C0] sched: DL replenish lagged too much [ 1252.134459][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.152502][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.711744][ T1311] net_ratelimit: 29 callbacks suppressed [ 1252.711762][ T1311] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 1253.976400][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807bcdf000: Timeout. Failed to send simple message. [ 1254.277227][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888052d7c800: Timeout. Failed to send simple message. [ 1254.500246][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888052d7c400: Timeout. Failed to send simple message. [ 1258.491527][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056268000: Timeout. Failed to send simple message. [ 1258.719569][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056269400: Timeout. Failed to send simple message. [ 1260.643953][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1284.803256][T15996] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1306.072139][T18537] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1309.261069][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888037d2f000: Timeout. Failed to send simple message. [ 1315.698420][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888037d2d800: Timeout. Failed to send simple message. [ 1317.179203][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.488916][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.574791][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.061191][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807bcdec00: Timeout. Failed to send simple message. [ 1330.851408][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1330.919552][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1331.519296][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.745229][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.996215][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.287096][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.809292][ T29] audit: type=1400 audit(1782355490.578:1828): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1332.859511][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1340.406002][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1342.176645][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1349.761238][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1363.796140][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1384.737172][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1385.216159][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1385.234104][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1385.294518][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1385.542025][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1387.609706][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1387.873733][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1388.110254][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1388.354664][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1388.602362][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1388.848795][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1389.078619][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1391.623631][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1391.870805][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1392.105220][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1392.354424][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1392.619759][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1392.854388][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1393.159727][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1393.366929][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1393.600696][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1393.846553][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1398.415262][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1398.422224][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20048/1:b..l [ 1398.430790][ C0] rcu: (detected by 0, t=10503 jiffies, g=87993, q=2255 ncpus=2) [ 1398.438583][ C0] task:syz.3.3853 state:R running task stack:26872 pid:20048 tgid:20047 ppid:5608 task_flags:0x400040 flags:0x00080002 [ 1398.453142][ C0] Call Trace: [ 1398.456417][ C0] [ 1398.459344][ C0] __schedule+0x125c/0x6730 [ 1398.463844][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1398.469054][ C0] ? __kernel_text_address+0xd/0x30 [ 1398.474250][ C0] ? __pfx___schedule+0x10/0x10 [ 1398.479096][ C0] ? mark_held_locks+0x40/0x70 [ 1398.483860][ C0] preempt_schedule_irq+0x50/0x90 [ 1398.488899][ C0] irqentry_exit+0x205/0xa00 [ 1398.493489][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1398.499467][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 1398.504661][ C0] Code: 05 7b 80 2e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 c6 74 f6 0e 0f 82 ac 02 00 00 8b 35 8e a8 f6 0e 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 80 2e 12 0f 85 ec 02 00 00 48 83 c4 [ 1398.524267][ C0] RSP: 0018:ffffc900068af9a0 EFLAGS: 00000206 [ 1398.530326][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1398.538287][ C0] RDX: 0000000000000000 RSI: ffffffff8df33a44 RDI: ffffffff8c1e7180 [ 1398.546247][ C0] RBP: ffffffff8e7e60c0 R08: 00000000da95f748 R09: 0000000000000007 [ 1398.554208][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1398.562169][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.570153][ C0] __page_table_check_zero+0x8c/0x410 [ 1398.575521][ C0] ? __page_table_check_zero+0x7b/0x410 [ 1398.581063][ C0] ? __reset_page_owner+0x144/0x190 [ 1398.586257][ C0] __free_frozen_pages+0x790/0x1090 [ 1398.591457][ C0] ? __free_slab+0xd0/0x220 [ 1398.595963][ C0] qlist_free_all+0x47/0xf0 [ 1398.600464][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1398.605922][ C0] __kasan_slab_alloc+0x69/0x90 [ 1398.610790][ C0] __kmalloc_cache_noprof+0x265/0x6c0 [ 1398.616164][ C0] ? ref_tracker_alloc+0x190/0x590 [ 1398.621275][ C0] ref_tracker_alloc+0x190/0x590 [ 1398.626211][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1398.631674][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1398.637039][ C0] ? sock_lock_init+0x2cf/0x710 [ 1398.641878][ C0] ? sock_lock_init+0x2d5/0x710 [ 1398.646729][ C0] sk_alloc+0x2e9/0xe80 [ 1398.650885][ C0] __netlink_create+0x5e/0x2c0 [ 1398.655652][ C0] ? __wake_up+0x3f/0x60 [ 1398.659888][ C0] netlink_create+0x29b/0x610 [ 1398.664558][ C0] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1398.669759][ C0] __sock_create+0x339/0x860 [ 1398.674349][ C0] __sys_socket+0x14d/0x260 [ 1398.678847][ C0] ? __pfx___sys_socket+0x10/0x10 [ 1398.683875][ C0] __x64_sys_socket+0x72/0xb0 [ 1398.688549][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1398.693740][ C0] do_syscall_64+0x115/0x870 [ 1398.698322][ C0] ? clear_bhb_loop+0x40/0x90 [ 1398.702995][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.708884][ C0] RIP: 0033:0x7f07d619ce59 [ 1398.713293][ C0] RSP: 002b:00007f07d43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1398.721699][ C0] RAX: ffffffffffffffda RBX: 00007f07d6415fa0 RCX: 00007f07d619ce59 [ 1398.729660][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1398.737619][ C0] RBP: 00007f07d6232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1398.745580][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.753542][ C0] R13: 00007f07d6416038 R14: 00007f07d6415fa0 R15: 00007ffd0e22df98 [ 1398.761518][ C0] [ 1398.764524][ C0] rcu: rcu_preempt kthread starved for 1297 jiffies! g87993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1398.775618][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1398.785573][ C0] rcu: RCU grace-period kthread stack dump: [ 1398.791444][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1398.804925][ C0] Call Trace: [ 1398.808215][ C0] [ 1398.811139][ C0] __schedule+0x125c/0x6730 [ 1398.815651][ C0] ? __pfx___schedule+0x10/0x10 [ 1398.820492][ C0] ? find_held_lock+0x2b/0x80 [ 1398.825161][ C0] ? schedule+0x2bf/0x390 [ 1398.829485][ C0] schedule+0xdd/0x390 [ 1398.833549][ C0] schedule_timeout+0x127/0x280 [ 1398.838402][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1398.843773][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1398.849054][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1398.854853][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1398.860312][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1398.865071][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1398.870353][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1398.875287][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1398.880479][ C0] ? rcu_is_watching+0x12/0xc0 [ 1398.885243][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1398.891042][ C0] rcu_gp_kthread+0x179/0x230 [ 1398.895713][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1398.900906][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1398.906704][ C0] ? __kthread_parkme+0x18c/0x230 [ 1398.911729][ C0] ? kthread+0x13a/0x450 [ 1398.915959][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1398.921149][ C0] kthread+0x370/0x450 [ 1398.925208][ C0] ? __pfx_kthread+0x10/0x10 [ 1398.929789][ C0] ret_from_fork+0x72b/0xd50 [ 1398.934378][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.939490][ C0] ? __switch_to+0x800/0x10f0 [ 1398.944161][ C0] ? __pfx_kthread+0x10/0x10 [ 1398.948744][ C0] ret_from_fork_asm+0x1a/0x30 [ 1398.953514][ C0] [ 1398.956523][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1398.962832][ C0] CPU: 0 UID: 0 PID: 9468 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 1398.972363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1398.982423][ C0] Workqueue: krds_cp_wq#12/2 rds_connect_worker [ 1398.988662][ C0] RIP: 0010:stack_trace_consume_entry+0x9a/0x170 [ 1398.994982][ C0] Code: 8d 7b 0c 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 00 00 00 8b 43 0c 85 c0 75 57 <48> b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 0f [ 1399.014581][ C0] RSP: 0018:ffffc90000007618 EFLAGS: 00000246 [ 1399.020640][ C0] RAX: 0000000000000000 RBX: ffffc900000076f8 RCX: ffffc9000000758c [ 1399.028602][ C0] RDX: 0000000000000000 RSI: ffffffff896a558a RDI: ffffc90000007704 [ 1399.036563][ C0] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000007 [ 1399.044525][ C0] R10: 0000000000000200 R11: 0000000000016e4c R12: ffffffff81f38c60 [ 1399.052485][ C0] R13: ffffc900000076f8 R14: 0000000000000000 R15: ffff888034b12540 [ 1399.060448][ C0] FS: 0000000000000000(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000 [ 1399.069370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.075947][ C0] CR2: 00007f07d43b4d58 CR3: 000000002ab90000 CR4: 00000000003526f0 [ 1399.083910][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1399.091869][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1399.099835][ C0] Call Trace: [ 1399.103102][ C0] [ 1399.105932][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1399.111561][ C0] arch_stack_walk+0x88/0xf0 [ 1399.116147][ C0] ? skb_ext_add+0xfa/0x810 [ 1399.120648][ C0] stack_trace_save+0x8e/0xc0 [ 1399.125317][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1399.130680][ C0] ? stack_trace_save+0x8e/0xc0 [ 1399.135521][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1399.140893][ C0] kasan_save_stack+0x30/0x50 [ 1399.145562][ C0] ? kasan_save_stack+0x30/0x50 [ 1399.150401][ C0] ? kasan_save_track+0x14/0x30 [ 1399.155242][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1399.160261][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1399.165930][ C0] kasan_save_track+0x14/0x30 [ 1399.170601][ C0] __kasan_slab_alloc+0x89/0x90 [ 1399.175447][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1399.180920][ C0] ? skb_ext_add+0xfa/0x810 [ 1399.185426][ C0] skb_ext_add+0xfa/0x810 [ 1399.189750][ C0] ? __skb_clone+0x570/0x760 [ 1399.194339][ C0] can_can_gw_rcv+0x464/0xca0 [ 1399.199012][ C0] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 1399.204200][ C0] can_rcv_filter+0x153/0x890 [ 1399.208874][ C0] can_receive+0x2cb/0x500 [ 1399.213293][ C0] ? __pfx_can_rcv+0x10/0x10 [ 1399.217877][ C0] can_rcv+0x29e/0x300 [ 1399.221946][ C0] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 1399.227835][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1399.234246][ C0] ? lock_acquire+0x1b9/0x370 [ 1399.238918][ C0] ? process_backlog+0x32a/0x1580 [ 1399.243939][ C0] ? process_backlog+0x32a/0x1580 [ 1399.248954][ C0] __netif_receive_skb+0x1f/0x120 [ 1399.253989][ C0] process_backlog+0x37a/0x1580 [ 1399.258843][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1399.264215][ C0] net_rx_action+0xa40/0xf20 [ 1399.268809][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1399.273915][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1399.279711][ C0] ? try_to_wake_up+0x158/0x1c90 [ 1399.284647][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1399.289836][ C0] ? sched_clock+0x38/0x60 [ 1399.294252][ C0] ? sched_clock_cpu+0x6c/0x570 [ 1399.299096][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1399.304384][ C0] ? mark_held_locks+0x40/0x70 [ 1399.309145][ C0] handle_softirqs+0x1ea/0x9b0 [ 1399.313911][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1399.319193][ C0] ? __inet6_bind+0x8b1/0x1b40 [ 1399.323953][ C0] do_softirq+0xac/0xe0 [ 1399.328102][ C0] [ 1399.331030][ C0] [ 1399.333948][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1399.339056][ C0] __inet6_bind+0x8b1/0x1b40 [ 1399.343646][ C0] inet6_bind+0xdb/0x120 [ 1399.347882][ C0] kernel_bind+0xff/0x160 [ 1399.352216][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1399.357162][ C0] ? __sock_create+0xa3/0x860 [ 1399.361838][ C0] rds_tcp_conn_path_connect+0x554/0xaa0 [ 1399.367478][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1399.373630][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1399.379266][ C0] rds_connect_worker+0x1b4/0x2d0 [ 1399.384287][ C0] process_one_work+0xa23/0x1940 [ 1399.389227][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1399.394601][ C0] ? __pfx_rds_connect_worker+0x10/0x10 [ 1399.400141][ C0] worker_thread+0x5ef/0xe50 [ 1399.404752][ C0] ? kthread+0x13a/0x450 [ 1399.408984][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1399.414088][ C0] kthread+0x370/0x450 [ 1399.418149][ C0] ? __pfx_kthread+0x10/0x10 [ 1399.422730][ C0] ret_from_fork+0x72b/0xd50 [ 1399.427319][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1399.432427][ C0] ? __switch_to+0x800/0x10f0 [ 1399.437094][ C0] ? __pfx_kthread+0x10/0x10 [ 1399.441675][ C0] ret_from_fork_asm+0x1a/0x30 [ 1399.446440][ C0] [ 1399.470359][ T6536] net_ratelimit: 3 callbacks suppressed [ 1399.470374][ T6536] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1406.519158][ T29] audit: type=1400 audit(1782355490.596:1829): avc: denied { search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1