last executing test programs: 21m16.950749393s ago: executing program 32 (id=246): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}}, 0x50) chown(&(0x7f0000000200)='./file0\x00', 0x0, r2) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x5, 0x1, 0x4, 0x400000004, 0x401, 0xe767, 0x800, 0xe96, 0x8000, 0x2, r4, r2, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m1.90918882s ago: executing program 33 (id=447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffff5fb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 18m38.848583832s ago: executing program 34 (id=579): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3e}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 17m20.821625613s ago: executing program 4 (id=700): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0xf4, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc000000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x802}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3af}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x11c}}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000180)=""/164, &(0x7f00000000c0)=0xa4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000380)=0x7fffffff, 0x4) 17m20.488940965s ago: executing program 4 (id=701): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x40) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39be, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) close(r1) mq_unlink(&(0x7f0000000000)='eth0\x00') 17m20.184344857s ago: executing program 4 (id=702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x3) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f00000001c0), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x2, 0x26000, 0x1000, &(0x7f0000d6f000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000) 17m18.690057814s ago: executing program 4 (id=706): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x2) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 17m17.728043154s ago: executing program 4 (id=708): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006}, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 17m16.293034375s ago: executing program 4 (id=710): socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 17m14.583043793s ago: executing program 35 (id=710): socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 13m47.781926289s ago: executing program 3 (id=984): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x10, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250d002613a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000040}, 0x40000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r2, 0x0, 0x0) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 13m47.026963771s ago: executing program 3 (id=986): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x3e8}, [], {0x14, 0x3fa, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgget(0x3, 0x401) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0xa000000c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0100000000000000000000000000000d02000000000000000000000d00000000000000000000000200000000000000000000005f"], 0x0, 0x61}, 0x28) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0xfffd, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1e}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) 13m45.806587674s ago: executing program 3 (id=990): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) close(r2) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x2) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4095, 0x7721, 0x16, 0x0, 0x0) 13m44.321416536s ago: executing program 3 (id=995): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x10, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250d002613a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000040}, 0x40000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r2, 0x0, 0x0) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 13m43.422441684s ago: executing program 3 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d67a10c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa4a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x224]}, 0x45c) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x60040, 0x0) 13m40.29699992s ago: executing program 3 (id=999): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x10, 0x3}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x10, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0x4) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r2, 0x1) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 13m32.72141399s ago: executing program 7 (id=1007): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 13m31.868198386s ago: executing program 7 (id=1009): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$pptp(0x18, 0x1, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) socket$packet(0x11, 0xa, 0x300) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write(r4, &(0x7f0000000480)="f48068515083", 0x6) 13m28.181584044s ago: executing program 7 (id=1012): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 13m26.814438405s ago: executing program 7 (id=1015): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x6) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 13m26.274507261s ago: executing program 7 (id=1016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 13m25.006194589s ago: executing program 7 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 13m22.555716633s ago: executing program 36 (id=999): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x10, 0x3}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x10, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0x4) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r2, 0x1) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 13m9.855785025s ago: executing program 37 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 9m54.221605197s ago: executing program 0 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6c, r0}, 0x38) 9m45.799981909s ago: executing program 0 (id=1208): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r1, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9m43.64770437s ago: executing program 0 (id=1211): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x8) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9m42.985378058s ago: executing program 0 (id=1212): socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r0, r0, 0x7}) io_setup(0x9, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) close(r4) listen(r3, 0xfff) syz_emit_ethernet(0x56, 0x0, 0x0) 9m40.520661294s ago: executing program 0 (id=1215): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0xc) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9m35.491201159s ago: executing program 0 (id=1223): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m19.858019601s ago: executing program 38 (id=1223): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m0.824865877s ago: executing program 8 (id=1251): syz_open_dev$admmidi(&(0x7f0000000140), 0x21c, 0x240400) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0xfffffffd, @mcast2, 0x7}, 0x1c) listen(r1, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000baf000/0x4000)=nil, 0x4000, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 8m59.246025074s ago: executing program 8 (id=1255): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) socket(0x2d, 0x2, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000008"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000010"], 0x48}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x190) syz_emit_ethernet(0x52, &(0x7f0000000a00)=ANY=[@ANYBLOB="bbbbbbbbbbbb465e4243f09086dd60000000001c3afffe80e2000000000000000000000000bbff020000000000000000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 8m57.144635084s ago: executing program 8 (id=1259): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x1c}}, 0x2000040) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) 8m53.229630296s ago: executing program 8 (id=1265): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m50.810211398s ago: executing program 8 (id=1266): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x10, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250d002613a0"], 0x24}, 0x1, 0x0, 0x0, 0x40000040}, 0x40000) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r2, 0x0, 0x0) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, r4, 0x0) 8m45.815869382s ago: executing program 8 (id=1271): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc00000000000000"], 0x68}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a6"], 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) close(0x3) close(0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) 8m29.8511871s ago: executing program 39 (id=1271): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc00000000000000"], 0x68}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) close(0x3) close(0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) 19.380577746s ago: executing program 2 (id=2118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 18.363362436s ago: executing program 2 (id=2121): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x10, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="080028bd7000fcdb"], 0x24}, 0x1, 0x0, 0x0, 0x40000040}, 0x40000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) accept(r1, 0x0, 0x0) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, r3, 0x0) 16.629698363s ago: executing program 2 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$unix(r2, 0x0, 0x0) 16.066117378s ago: executing program 2 (id=2129): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000040)={[{@time_offset={'time_offset', 0x3d, 0x6}}, {@fmask}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@discard}, {}, {@keep_last_dots}]}, 0x1, 0x1548, &(0x7f0000003300)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt") creat(&(0x7f0000000080)='./file0\x00', 0x6a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 14.543678363s ago: executing program 2 (id=2131): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x805, &(0x7f0000000100)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_mixed}, {@fat=@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_mixed}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@gid}, {@rodir}]}, 0x27, 0x338, &(0x7f0000000600)="$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") syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0405"], 0x7) 13.179150177s ago: executing program 5 (id=2135): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r0, 0x0, 0x0, 0x80800) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) 12.177848727s ago: executing program 5 (id=2139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000001211"], 0x0) 12.012096162s ago: executing program 2 (id=2140): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e23, @multicast1=0xe000006a}, 0x10) 11.71209198s ago: executing program 6 (id=2141): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x10, 0x5, 0x3, "def6cb85", "dcc86bc4"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x2, 0x3, 0x0, 0x2, 0xe}}}, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xfffc}, 0x0, &(0x7f00000006c0)={0x40, 0xb, 0x2, "aa46"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.677941968s ago: executing program 1 (id=2142): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8050, &(0x7f00000004c0), 0x1, 0x418, &(0x7f0000001880)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 9.009612384s ago: executing program 40 (id=2140): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e23, @multicast1=0xe000006a}, 0x10) 8.949436049s ago: executing program 1 (id=2144): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x7a, &(0x7f0000000980)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "b6ff6c", 0x44, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0xa, 0x2, 0x1, 0x2, 0x1, 0xe1}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x8c, 0x1, 0x0, 0x3, 0x1, 0x8}, 0x2, {0x8, 0xc7, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1}}}}}}}}}, 0x0) 8.883202407s ago: executing program 6 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 8.880472471s ago: executing program 5 (id=2146): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 8.835120638s ago: executing program 9 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f0000000340)) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 8.135752454s ago: executing program 5 (id=2147): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x10, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="080028bd7000fcdb"], 0x24}, 0x1, 0x0, 0x0, 0x40000040}, 0x40000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) accept(r1, 0x0, 0x0) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, r3, 0x0) 7.939223628s ago: executing program 1 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000818}, 0x20000004) 7.843726741s ago: executing program 6 (id=2149): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 7.396992s ago: executing program 6 (id=2150): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) symlink(0x0, &(0x7f0000000040)='./file0\x00') getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, 0x0) 7.204959344s ago: executing program 1 (id=2151): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x7}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x100000, @mcast2, 0x3}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000280)={0xa, 0x4e20, 0x20000004, @mcast2, 0xa}, 0x1c) 4.759052569s ago: executing program 9 (id=2152): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) 4.639696853s ago: executing program 1 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x170bd2b, 0x80, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) 4.428335338s ago: executing program 5 (id=2154): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x10}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0xe00) 3.929360371s ago: executing program 6 (id=2155): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfe}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 3.875864337s ago: executing program 9 (id=2156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() poll(&(0x7f00000001c0)=[{r0, 0x45a}], 0x1, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c 1 [ 1123.735822][T12095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1123.747070][T12095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1123.774858][T12095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1123.783925][ T5681] cp210x 7-1:0.0: querying part number failed [ 1123.793826][T12095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1123.827711][ T5681] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1124.209331][T12242] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1328'. [ 1126.358875][ T5578] Bluetooth: hci5: command tx timeout [ 1126.411571][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.450946][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.160777][ T5681] usb 7-1: USB disconnect, device number 2 [ 1127.291036][ T5681] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1127.417739][ T5681] cp210x 7-1:0.0: device disconnected [ 1127.441948][ T5977] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.844689][ T5977] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.297327][ T5977] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.387850][ T5578] Bluetooth: hci5: command tx timeout [ 1129.591025][ T6016] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1129.929887][ T5977] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.292428][T12273] overlayfs: missing 'lowerdir' [ 1130.466503][ T5578] Bluetooth: hci5: command tx timeout [ 1130.633454][ T5578] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1130.643817][ T5578] CPU: 0 UID: 0 PID: 5578 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1130.643961][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1130.644062][ T5578] Workqueue: hci3 hci_rx_work [ 1130.644238][ T5578] Call Trace: [ 1130.644284][ T5578] [ 1130.644330][ T5578] __dump_stack+0x26/0x30 [ 1130.644477][ T5578] dump_stack_lvl+0x14c/0x1c0 [ 1130.644624][ T5578] dump_stack+0x1e/0x25 [ 1130.644761][ T5578] sysfs_create_dir_ns+0x46c/0x540 [ 1130.644925][ T5578] kobject_add_internal+0x1084/0x19b0 [ 1130.645103][ T5578] kobject_add+0x2c1/0x410 [ 1130.645257][ T5578] ? kmsan_get_metadata+0xf1/0x160 [ 1130.645426][ T5578] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1130.645606][ T5578] device_add+0xa70/0x1c90 [ 1130.645771][ T5578] hci_conn_add_sysfs+0x159/0x2e0 [ 1130.645935][ T5578] le_conn_complete_evt+0x1de1/0x2330 [ 1130.646118][ T5578] hci_le_conn_complete_evt+0x157/0x260 [ 1130.646325][ T5578] hci_le_meta_evt+0x6eb/0x960 [ 1130.646450][ T5578] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1130.646654][ T5578] hci_event_packet+0xb8c/0x1820 [ 1130.646814][ T5578] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1130.646985][ T5578] hci_rx_work+0x8c3/0xfc0 [ 1130.647160][ T5578] ? kmsan_get_metadata+0xf1/0x160 [ 1130.647338][ T5578] ? __pfx_hci_rx_work+0x10/0x10 [ 1130.647504][ T5578] process_scheduled_works+0xb65/0x1e40 [ 1130.647719][ T5578] worker_thread+0xee4/0x1590 [ 1130.647908][ T5578] kthread+0x53a/0x5f0 [ 1130.648088][ T5578] ? __pfx_worker_thread+0x10/0x10 [ 1130.648246][ T5578] ? __pfx_kthread+0x10/0x10 [ 1130.648397][ T5578] ret_from_fork+0x20f/0x8d0 [ 1130.648533][ T5578] ? __switch_to+0x573/0x7a0 [ 1130.648702][ T5578] ? __pfx_kthread+0x10/0x10 [ 1130.648872][ T5578] ret_from_fork_asm+0x1a/0x30 [ 1130.649069][ T5578] [ 1130.847899][ T5578] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1130.862337][ T5578] Bluetooth: hci3: failed to register connection device [ 1132.152120][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1338'. [ 1132.366006][ T5977] bridge_slave_1: left allmulticast mode [ 1132.421527][ T5977] bridge_slave_1: left promiscuous mode [ 1132.465642][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.544647][T12095] Bluetooth: hci5: command tx timeout [ 1132.560763][ T5977] bridge_slave_0: left allmulticast mode [ 1132.592605][ T5977] bridge_slave_0: left promiscuous mode [ 1132.600316][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.636149][T12095] Bluetooth: hci3: command 0x0406 tx timeout [ 1138.837649][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.889386][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.951065][ T5977] bond0 (unregistering): Released all slaves [ 1139.717296][T12316] lo speed is unknown, defaulting to 1000 [ 1139.723960][T12316] lo speed is unknown, defaulting to 1000 [ 1139.730859][T12316] lo speed is unknown, defaulting to 1000 [ 1139.738395][T12316] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1139.753017][T12316] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1139.770532][T12316] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1139.811433][T12317] tipc: Started in network mode [ 1139.816567][T12317] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 1139.828429][T12317] tipc: Enabled bearer , priority 10 [ 1139.849632][T12316] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1139.902396][T12316] lo speed is unknown, defaulting to 1000 [ 1139.910776][T12316] lo speed is unknown, defaulting to 1000 [ 1139.919753][T12316] lo speed is unknown, defaulting to 1000 [ 1139.933889][T12316] lo speed is unknown, defaulting to 1000 [ 1139.942340][T12316] lo speed is unknown, defaulting to 1000 [ 1139.950869][T12316] lo speed is unknown, defaulting to 1000 [ 1139.959298][T12316] lo speed is unknown, defaulting to 1000 [ 1143.607315][ T24] tipc: Node number set to 4269801494 [ 1144.888808][ T5977] hsr_slave_0: left promiscuous mode [ 1145.335478][ T5977] hsr_slave_1: left promiscuous mode [ 1145.419371][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.423522][ T5578] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1145.439873][ T5578] CPU: 1 UID: 0 PID: 5578 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1145.440015][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1145.440112][ T5578] Workqueue: hci0 hci_rx_work [ 1145.440278][ T5578] Call Trace: [ 1145.440322][ T5578] [ 1145.440367][ T5578] __dump_stack+0x26/0x30 [ 1145.440506][ T5578] dump_stack_lvl+0x14c/0x1c0 [ 1145.440655][ T5578] dump_stack+0x1e/0x25 [ 1145.440780][ T5578] sysfs_create_dir_ns+0x46c/0x540 [ 1145.440925][ T5578] kobject_add_internal+0x1084/0x19b0 [ 1145.441088][ T5578] kobject_add+0x2c1/0x410 [ 1145.441237][ T5578] ? kmsan_get_metadata+0xf1/0x160 [ 1145.441402][ T5578] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1145.441577][ T5578] device_add+0xa70/0x1c90 [ 1145.441728][ T5578] hci_conn_add_sysfs+0x159/0x2e0 [ 1145.441887][ T5578] le_conn_complete_evt+0x1de1/0x2330 [ 1145.442055][ T5578] hci_le_conn_complete_evt+0x157/0x260 [ 1145.442258][ T5578] hci_le_meta_evt+0x6eb/0x960 [ 1145.442375][ T5578] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1145.442579][ T5578] hci_event_packet+0xb8c/0x1820 [ 1145.442732][ T5578] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1145.442886][ T5578] hci_rx_work+0x8c3/0xfc0 [ 1145.443045][ T5578] ? kmsan_get_metadata+0xf1/0x160 [ 1145.443208][ T5578] ? __pfx_hci_rx_work+0x10/0x10 [ 1145.443383][ T5578] process_scheduled_works+0xb65/0x1e40 [ 1145.443600][ T5578] worker_thread+0xee4/0x1590 [ 1145.443781][ T5578] kthread+0x53a/0x5f0 [ 1145.443938][ T5578] ? __pfx_worker_thread+0x10/0x10 [ 1145.444094][ T5578] ? __pfx_kthread+0x10/0x10 [ 1145.444250][ T5578] ret_from_fork+0x20f/0x8d0 [ 1145.444384][ T5578] ? __switch_to+0x573/0x7a0 [ 1145.444547][ T5578] ? __pfx_kthread+0x10/0x10 [ 1145.444707][ T5578] ret_from_fork_asm+0x1a/0x30 [ 1145.444883][ T5578] [ 1145.445067][ T5578] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1145.655344][ T5578] Bluetooth: hci0: failed to register connection device [ 1145.864592][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.943132][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1145.991646][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.090588][ T5977] veth1_macvtap: left promiscuous mode [ 1146.131628][ T5977] veth0_macvtap: left promiscuous mode [ 1146.181439][ T5977] veth1_vlan: left promiscuous mode [ 1146.205947][ T5977] veth0_vlan: left promiscuous mode [ 1150.594065][ T5578] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1151.792991][T12386] netlink: 'syz.1.1357': attribute type 2 has an invalid length. [ 1151.949806][T12388] netlink: 'syz.1.1357': attribute type 2 has an invalid length. [ 1151.982293][T12379] Bluetooth: hci0: command 0x0406 tx timeout [ 1153.002334][T12400] 9pnet_virtio: no channels available for device syz [ 1154.333391][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 1154.414233][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 1156.004587][T12388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1357'. [ 1156.034768][T12398] lo speed is unknown, defaulting to 1000 [ 1156.040818][T12398] lo speed is unknown, defaulting to 1000 [ 1156.053302][T12398] lo speed is unknown, defaulting to 1000 [ 1156.060784][T12398] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1156.075343][T12398] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1156.092704][T12398] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1156.146494][T12398] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1156.199093][T12398] lo speed is unknown, defaulting to 1000 [ 1156.207961][T12398] lo speed is unknown, defaulting to 1000 [ 1156.216446][T12398] lo speed is unknown, defaulting to 1000 [ 1156.381792][T12398] lo speed is unknown, defaulting to 1000 [ 1156.390519][T12398] lo speed is unknown, defaulting to 1000 [ 1156.399130][T12398] lo speed is unknown, defaulting to 1000 [ 1156.726256][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1160.554146][T12379] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1160.959454][T12455] loop1: detected capacity change from 0 to 512 [ 1161.555820][ T6010] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1161.569057][T12455] EXT4-fs (loop1): filesystem is read-only [ 1161.586714][T12455] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1161.613844][T12455] EXT4-fs (loop1): filesystem is read-only [ 1161.619908][T12455] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1161.628844][T12455] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1366: bg 0: block 64: padding at end of block bitmap is not set [ 1161.643717][T12455] loop1: lost filesystem error report for type 5 error -117 [ 1161.645916][T12455] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1161.653586][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1161.653675][ C1] EXT4-fs (loop1): initial error at time 525449: ext4_validate_block_bitmap:441 [ 1161.653798][ C1] EXT4-fs (loop1): last error at time 525449: ext4_validate_block_bitmap:441 [ 1161.691055][T12455] loop1: lost filesystem error report for type 5 error -117 [ 1161.711487][T12455] EXT4-fs (loop1): 1 orphan inode deleted [ 1161.737572][T12455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1162.356640][T11841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.264991][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.337713][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.507912][T12476] loop5: detected capacity change from 0 to 1024 [ 1163.862140][T12232] bridge_slave_0: entered allmulticast mode [ 1164.193013][T12379] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 1164.200534][T12379] Bluetooth: hci3: unexpected event for opcode 0x203e [ 1164.503898][T12475] fuse: fd is not a fuse device [ 1165.309829][T12232] bridge_slave_0: entered promiscuous mode [ 1165.356360][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.366389][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.707322][T12232] bridge_slave_1: entered allmulticast mode [ 1165.717312][T12232] bridge_slave_1: entered promiscuous mode [ 1165.911938][T12379] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1166.636838][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.910797][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.459735][T12095] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1168.468629][T12095] Bluetooth: hci3: Injecting HCI hardware error event [ 1168.476304][T12095] Bluetooth: hci3: hardware error 0x00 [ 1169.078048][T12509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1169.601659][T12232] team0: Port device team_slave_0 added [ 1170.165529][T12232] team0: Port device team_slave_1 added [ 1170.487880][T12379] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1170.594233][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1171.274477][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1386'. [ 1171.316261][T12525] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1386'. [ 1171.325751][T12525] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1386'. [ 1171.534456][T12232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.581756][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.649083][T12095] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1171.734595][T12232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.825580][T12095] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1171.837504][T12232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.901742][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.079360][T12232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.518872][ T5585] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1172.610964][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1172.800073][T12232] hsr_slave_0: entered promiscuous mode [ 1172.865006][T12232] hsr_slave_1: entered promiscuous mode [ 1172.926565][T12232] debugfs: 'hsr0' already exists in 'hsr' [ 1172.957086][T12232] Cannot create hsr debugfs directory [ 1175.323468][T12560] loop1: detected capacity change from 0 to 512 [ 1175.580226][T12560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.588376][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1397'. [ 1175.604953][T12566] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1397'. [ 1175.616646][T12566] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1397'. [ 1175.668390][T12560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'. [ 1176.729084][T12095] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1176.843095][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1177.156531][T11841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.609549][T12232] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1177.793638][T12232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1177.861306][T12232] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1178.030028][T12232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.045879][ T5585] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1178.125035][T12232] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1178.313419][T12232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.392682][T12232] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1179.494302][T12232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1179.865469][T12095] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1179.928360][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1182.795479][T12232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.944364][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 1183.985419][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'. [ 1184.061966][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'. [ 1184.080574][T12095] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1184.684326][T12379] Bluetooth: hci0: command 0x0406 tx timeout [ 1187.091190][T12095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1187.111439][T12095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1187.123546][T12095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1187.154783][T12095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1187.185217][T12095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1187.739989][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.748688][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.842312][T12095] Bluetooth: hci0: command 0x0406 tx timeout [ 1189.241098][ T5585] Bluetooth: hci4: command tx timeout [ 1190.941506][ T5585] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1190.950546][ T5585] Bluetooth: hci0: Injecting HCI hardware error event [ 1190.966209][ T5585] Bluetooth: hci0: hardware error 0x00 [ 1191.395878][T12095] Bluetooth: hci4: command tx timeout [ 1191.923334][ T5726] IPVS: starting estimator thread 0... [ 1192.026273][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1425'. [ 1192.038974][T12699] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1425'. [ 1192.051488][T12699] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1425'. [ 1192.061811][T12697] IPVS: using max 192 ests per chain, 9600 per kthread [ 1192.777396][T12095] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1193.108596][T12095] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1193.479803][T12379] Bluetooth: hci4: command tx timeout [ 1193.959273][ T5585] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1195.588561][ T5585] Bluetooth: hci4: command tx timeout [ 1195.644561][ T6018] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1197.238951][ T6001] bridge_slave_1: left allmulticast mode [ 1197.747316][ T6001] bridge_slave_1: left promiscuous mode [ 1197.754274][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.723157][ T6001] bridge_slave_0: left allmulticast mode [ 1198.759700][ T6001] bridge_slave_0: left promiscuous mode [ 1198.782286][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.679821][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 1199.734261][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 1199.801687][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'. [ 1200.364650][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.709704][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.812609][ T6001] bond0 (unregistering): Released all slaves [ 1205.161474][ T5585] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1206.192722][ T6001] hsr_slave_0: left promiscuous mode [ 1206.301440][ T6001] hsr_slave_1: left promiscuous mode [ 1206.357378][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.462358][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.269773][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 1207.324105][T12792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1449'. [ 1207.382134][T12792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1449'. [ 1209.149107][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 1211.339178][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 1213.022430][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 1213.067186][T12830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1460'. [ 1213.093865][T12830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1460'. [ 1214.828098][T12656] lo speed is unknown, defaulting to 1000 [ 1214.949724][T12656] lo speed is unknown, defaulting to 1000 [ 1219.941686][T12858] loop5: detected capacity change from 0 to 512 [ 1220.401605][T12858] EXT4-fs (loop5): filesystem is read-only [ 1220.426716][T12858] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1220.495853][T12858] EXT4-fs (loop5): filesystem is read-only [ 1220.502096][T12858] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1220.519781][T12858] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1465: bg 0: block 64: padding at end of block bitmap is not set [ 1220.542821][T12858] loop5: lost filesystem error report for type 5 error -117 [ 1220.548548][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1220.562863][ C0] EXT4-fs (loop5): initial error at time 525508: ext4_validate_block_bitmap:441 [ 1220.572173][ C0] EXT4-fs (loop5): last error at time 525508: ext4_validate_block_bitmap:441 [ 1220.589985][T12858] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1220.599281][T12858] loop5: lost filesystem error report for type 5 error -117 [ 1220.604002][T12858] EXT4-fs (loop5): 1 orphan inode deleted [ 1220.619824][T12858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1221.598548][T11808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.596574][T12870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.974351][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1225.083527][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1229.307647][ T5988] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1232.667057][T12904] loop5: detected capacity change from 0 to 8 [ 1233.979218][T12906] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1233.987582][T12906] SQUASHFS error: Failed to read block 0x0: -5 [ 1233.994778][T12906] SQUASHFS error: Failed to read block 0xff: -5 [ 1234.001623][T12906] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1234.009934][T12906] SQUASHFS error: Failed to read block 0x0: -5 [ 1234.021811][T12906] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1234.029999][T12906] SQUASHFS error: Failed to read block 0x0: -5 [ 1234.041767][T12906] SQUASHFS error: Failed to read block 0x6a4: -5 [ 1234.054031][T12906] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 1234.061485][T12906] SQUASHFS error: read_indexes: reading block [6a2:0] [ 1234.068727][T12906] SQUASHFS error: Failed to read block 0x0: -5 [ 1234.075311][T12906] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 1234.082737][T12906] SQUASHFS error: read_indexes: reading block [6a2:0] [ 1234.090068][T12906] SQUASHFS error: Failed to read block 0x0: -5 [ 1234.854885][ T29] audit: type=1800 audit(525522.086:379): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1476" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 1236.157370][ T29] audit: type=1800 audit(525522.106:380): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1476" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 1238.418111][T12912] loop2: detected capacity change from 0 to 512 [ 1238.870554][T12912] EXT4-fs (loop2): filesystem is read-only [ 1238.894494][T12912] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1238.926907][T12912] EXT4-fs (loop2): filesystem is read-only [ 1238.933104][T12912] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1238.945073][T12912] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1477: bg 0: block 64: padding at end of block bitmap is not set [ 1238.966367][T12912] loop2: lost filesystem error report for type 5 error -117 [ 1238.971154][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1238.985830][ C0] EXT4-fs (loop2): initial error at time 525527: ext4_validate_block_bitmap:441 [ 1238.995304][ C0] EXT4-fs (loop2): last error at time 525527: ext4_validate_block_bitmap:441 [ 1239.022516][T12912] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1239.031714][T12912] loop2: lost filesystem error report for type 5 error -117 [ 1239.035675][T12912] EXT4-fs (loop2): 1 orphan inode deleted [ 1239.079192][T12912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1239.794236][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.939139][T12918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.026417][T12656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.073636][T12656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.143519][T12656] bridge_slave_0: entered allmulticast mode [ 1240.211690][T12656] bridge_slave_0: entered promiscuous mode [ 1240.390242][T12656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.479673][T12656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.548207][T12656] bridge_slave_1: entered allmulticast mode [ 1240.660308][T12656] bridge_slave_1: entered promiscuous mode [ 1240.895128][T12924] loop2: detected capacity change from 0 to 512 [ 1241.031976][T12924] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1242.392604][ T5585] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1243.622990][T12656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.848372][T12656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.127510][T12938] loop1: detected capacity change from 0 to 512 [ 1244.186109][T12938] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1483: inode has both inline data and extents flags [ 1244.187074][ T5585] Bluetooth: hci2: unexpected cc 0x1407 length: 99 > 9 [ 1244.205122][T12938] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1244.207041][ T5585] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1244.208417][T12938] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1483: couldn't read orphan inode 15 (err -117) [ 1244.221064][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1244.221153][ C1] EXT4-fs (loop1): initial error at time 525532: ext4_orphan_get:1397: inode 15 [ 1244.221305][ C1] EXT4-fs (loop1): last error at time 525532: ext4_orphan_get:1397: inode 15 [ 1244.287131][T12938] loop1: lost filesystem error report for type 5 error -117 [ 1244.320107][T12938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.585673][T11841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.000916][ T24] IPVS: starting estimator thread 0... [ 1247.763741][T12962] IPVS: using max 336 ests per chain, 16800 per kthread [ 1248.381311][T12957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1249.168361][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.182671][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.600910][T12379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1249.623169][T12379] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1249.630984][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1249.645738][T12379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1249.688415][T12379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1249.710482][T12379] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1249.844351][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1249.933426][ T10] usb 2-1: config 7 has an invalid interface number: 207 but max is 0 [ 1249.945618][T12988] loop2: detected capacity change from 0 to 512 [ 1249.999445][T12988] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1495: inode has both inline data and extents flags [ 1250.025518][T12988] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1250.028710][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1250.048028][ C1] EXT4-fs (loop2): initial error at time 525538: ext4_orphan_get:1397: inode 15 [ 1250.063365][ C1] EXT4-fs (loop2): last error at time 525538: ext4_orphan_get:1397: inode 15 [ 1250.076349][T12988] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1495: couldn't read orphan inode 15 (err -117) [ 1250.078321][ T10] usb 2-1: config 7 has no interface number 0 [ 1250.093251][T12988] loop2: lost filesystem error report for type 5 error -117 [ 1250.135012][T12988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.253024][ T10] usb 2-1: config 7 interface 207 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 16 [ 1250.431428][ T10] usb 2-1: config 7 interface 207 has no altsetting 0 [ 1250.465476][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.511313][ T10] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0176, bcdDevice=bf.b9 [ 1250.576008][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.638336][ T10] usb 2-1: Product: syz [ 1250.663939][ T10] usb 2-1: Manufacturer: syz [ 1250.697677][ T10] usb 2-1: SerialNumber: syz [ 1250.829302][T12974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1251.030292][ T5585] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1251.102117][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1251.323825][ T10] ftdi_sio 2-1:7.207: FTDI USB Serial Device converter detected [ 1251.425670][ T10] ftdi_sio ttyUSB0: unknown device type: 0xbfb9 [ 1251.537742][ T10] usb 2-1: USB disconnect, device number 3 [ 1251.634351][ T10] ftdi_sio 2-1:7.207: device disconnected [ 1251.784587][T12379] Bluetooth: hci5: command tx timeout [ 1252.396983][ T5997] bridge_slave_1: left allmulticast mode [ 1252.444074][ T5997] bridge_slave_1: left promiscuous mode [ 1252.501942][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.565470][ T5997] bridge_slave_0: left allmulticast mode [ 1252.592594][ T5997] bridge_slave_0: left promiscuous mode [ 1252.645194][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.178559][T13017] loop2: detected capacity change from 0 to 512 [ 1253.244140][T13017] EXT4-fs (loop2): filesystem is read-only [ 1253.286323][T13017] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1253.351578][T13017] EXT4-fs (loop2): filesystem is read-only [ 1253.357973][T13017] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1253.369498][T13017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1500: bg 0: block 64: padding at end of block bitmap is not set [ 1253.384857][T13017] loop2: lost filesystem error report for type 5 error -117 [ 1253.396683][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1253.410910][ C0] EXT4-fs (loop2): initial error at time 525541: ext4_validate_block_bitmap:441 [ 1253.420230][ C0] EXT4-fs (loop2): last error at time 525541: ext4_validate_block_bitmap:441 [ 1253.479268][T13017] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1253.489868][T13017] loop2: lost filesystem error report for type 5 error -117 [ 1253.534331][T13017] EXT4-fs (loop2): 1 orphan inode deleted [ 1253.554038][T13017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1253.866207][T12379] Bluetooth: hci5: command tx timeout [ 1255.484868][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.725239][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.893012][ T5997] bond0 (unregistering): Released all slaves [ 1255.944958][ T5585] Bluetooth: hci5: command tx timeout [ 1256.166428][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.688094][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1257.757198][T12379] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1257.827723][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1258.025507][T12379] Bluetooth: hci5: command 0x0419 tx timeout [ 1259.451019][T12977] lo speed is unknown, defaulting to 1000 [ 1259.556904][T12977] lo speed is unknown, defaulting to 1000 [ 1260.093591][T12379] Bluetooth: hci5: command 0x0419 tx timeout [ 1260.599283][T13064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.467670][T13077] loop5: detected capacity change from 0 to 512 [ 1261.600017][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1262.024237][T13077] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1519: inode has both inline data and extents flags [ 1262.045124][T13077] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1262.055262][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1262.075074][ C1] EXT4-fs (loop5): initial error at time 525550: ext4_orphan_get:1397: inode 15 [ 1262.090453][ C1] EXT4-fs (loop5): last error at time 525550: ext4_orphan_get:1397: inode 15 [ 1262.240740][T13086] loop2: detected capacity change from 0 to 512 [ 1262.389797][T13077] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1519: couldn't read orphan inode 15 (err -117) [ 1262.411415][T13077] loop5: lost filesystem error report for type 5 error -117 [ 1262.415315][T13077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.079654][T13086] EXT4-fs (loop2): filesystem is read-only [ 1263.095494][T13086] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1263.128015][T13086] EXT4-fs (loop2): filesystem is read-only [ 1263.138926][T13086] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1263.153990][T13086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1518: bg 0: block 64: padding at end of block bitmap is not set [ 1263.176390][T13086] loop2: lost filesystem error report for type 5 error -117 [ 1263.186894][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1263.203941][ C1] EXT4-fs (loop2): initial error at time 525551: ext4_validate_block_bitmap:441 [ 1263.219061][ C1] EXT4-fs (loop2): last error at time 525551: ext4_validate_block_bitmap:441 [ 1263.309692][T13086] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1263.325841][T13086] loop2: lost filesystem error report for type 5 error -117 [ 1263.497312][T13086] EXT4-fs (loop2): 1 orphan inode deleted [ 1263.525068][T13086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1263.832871][T11808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.505073][ T6016] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1264.580165][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.850993][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1264.893198][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1268.120382][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'. [ 1268.135690][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 1268.149362][T13103] netlink: 'syz.2.1524': attribute type 15 has an invalid length. [ 1269.031832][T13107] netlink: 'syz.6.1526': attribute type 30 has an invalid length. [ 1269.092667][T13109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.107339][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1526'. [ 1269.393831][T13107] bond0: option arp_missed_max: invalid value (0) [ 1269.475011][T13107] bond0: option arp_missed_max: allowed values 1 - 255 [ 1270.225073][T13122] loop5: detected capacity change from 0 to 512 [ 1270.298795][T13122] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1531: inode has both inline data and extents flags [ 1270.312459][T13122] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1270.313314][T13122] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1531: couldn't read orphan inode 15 (err -117) [ 1270.322790][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1270.322884][ C0] EXT4-fs (loop5): initial error at time 525558: ext4_orphan_get:1397: inode 15 [ 1270.323125][ C0] EXT4-fs (loop5): last error at time 525558: ext4_orphan_get:1397: inode 15 [ 1270.360652][T13122] loop5: lost filesystem error report for type 5 error -117 [ 1270.368079][T13122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.661300][T11808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.030905][T12977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.118441][T12977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.172537][T12977] bridge_slave_0: entered allmulticast mode [ 1271.231888][T12977] bridge_slave_0: entered promiscuous mode [ 1271.353004][T12977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.396993][T12977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.450944][T12977] bridge_slave_1: entered allmulticast mode [ 1271.496119][ T5585] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1271.498593][T12977] bridge_slave_1: entered promiscuous mode [ 1271.629041][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1271.646306][T13120] loop1: detected capacity change from 0 to 8192 [ 1271.744352][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1271.755976][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1272.006527][T12977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.197745][T12977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.272992][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 1275.884137][T12977] team0: Port device team_slave_0 added [ 1276.716676][T12977] team0: Port device team_slave_1 added [ 1280.237504][T13167] netlink: 'syz.1.1541': attribute type 30 has an invalid length. [ 1280.299056][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 1280.351156][T12977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.404180][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.561248][T12977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.610881][T13167] bond0: option arp_missed_max: invalid value (0) [ 1280.651458][T13167] bond0: option arp_missed_max: allowed values 1 - 255 [ 1280.704366][T12977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.777237][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.814747][T12977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.528488][T12977] hsr_slave_0: entered promiscuous mode [ 1281.603972][T12977] hsr_slave_1: entered promiscuous mode [ 1281.672947][T12977] debugfs: 'hsr0' already exists in 'hsr' [ 1281.704867][T12977] Cannot create hsr debugfs directory [ 1282.243632][ T5585] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1282.249362][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1286.145452][T13208] loop1: detected capacity change from 0 to 512 [ 1286.214244][T13208] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1554: inode has both inline data and extents flags [ 1286.228157][T13208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1286.231004][T13208] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1554: couldn't read orphan inode 15 (err -117) [ 1286.240589][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1286.240675][ C0] EXT4-fs (loop1): initial error at time 525574: ext4_orphan_get:1397: inode 15 [ 1286.240829][ C0] EXT4-fs (loop1): last error at time 525574: ext4_orphan_get:1397: inode 15 [ 1286.283391][T13208] loop1: lost filesystem error report for type 5 error -117 [ 1286.298480][T13208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1286.645660][T11841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.830368][T12379] Bluetooth: Wrong link type (-71) [ 1289.376564][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1289.699661][T12379] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1289.704071][T12977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1289.779622][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1289.830905][T12977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.878803][T12977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1289.925227][T12977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.963358][T12977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1290.018828][T12977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1290.035564][T12977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1290.133201][T12977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1293.589422][T12977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.942699][T12977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.090999][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.098601][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.365096][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.377727][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.677520][ T5227] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1294.893800][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1294.925945][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1295.554964][T12379] Bluetooth: hci2: unexpected event for opcode 0x202f [ 1296.459701][T13296] fuse: Bad value for 'fd' [ 1297.219660][T13305] netlink: 'syz.2.1585': attribute type 30 has an invalid length. [ 1297.283278][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 1297.328863][T13305] bond0: option arp_missed_max: invalid value (0) [ 1297.401256][T13305] bond0: option arp_missed_max: allowed values 1 - 255 [ 1298.354045][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1299.052038][ T6025] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1300.903493][T13354] netlink: 'syz.5.1598': attribute type 30 has an invalid length. [ 1300.963603][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1598'. [ 1301.009183][ T5227] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1301.058192][T12977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.129618][T13354] bond0: option arp_missed_max: invalid value (0) [ 1301.153810][T13354] bond0: option arp_missed_max: allowed values 1 - 255 [ 1301.959344][T13366] loop2: detected capacity change from 0 to 64 [ 1302.042795][T13366] BFS-fs: bfs_fill_super(): Impossible last inode number 257073 > 513 on loop2 [ 1303.593924][T12379] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 1304.355372][T13401] netlink: 'syz.5.1610': attribute type 30 has an invalid length. [ 1304.394110][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'. [ 1304.443506][T13401] bond0: option arp_missed_max: invalid value (0) [ 1304.479641][T13401] bond0: option arp_missed_max: allowed values 1 - 255 [ 1306.839908][ T5227] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1308.764128][ T5585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1308.781196][ T5585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1308.793495][ T5585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1308.820456][ T5585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1308.847576][ T5585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1310.627955][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1310.951449][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.963379][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.965016][ T5585] Bluetooth: hci4: command tx timeout [ 1312.951918][T13468] netlink: 'syz.5.1623': attribute type 30 has an invalid length. [ 1312.991393][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 1313.018157][T13468] bond0: option arp_missed_max: invalid value (0) [ 1313.046968][ T5585] Bluetooth: hci4: command tx timeout [ 1313.067232][T13468] bond0: option arp_missed_max: allowed values 1 - 255 [ 1314.193292][T13438] lo speed is unknown, defaulting to 1000 [ 1314.225122][T13438] lo speed is unknown, defaulting to 1000 [ 1315.042150][ T5227] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1315.123417][ T5585] Bluetooth: hci4: command tx timeout [ 1317.203637][ T5585] Bluetooth: hci4: command tx timeout [ 1317.807082][ T5585] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1317.866921][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1318.669233][ T6016] bridge_slave_1: left allmulticast mode [ 1318.745099][ T6016] bridge_slave_1: left promiscuous mode [ 1318.797860][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.936405][ T6016] bridge_slave_0: left allmulticast mode [ 1318.983041][ T6016] bridge_slave_0: left promiscuous mode [ 1319.042026][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.388022][ T5585] Bluetooth: unknown link type 128 [ 1322.503520][ T5585] Bluetooth: hci2: command 0x0406 tx timeout [ 1323.791797][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.016281][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.079338][ T6016] bond0 (unregistering): Released all slaves [ 1324.589049][ T5585] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1324.623263][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1325.717036][ T6016] hsr_slave_0: left promiscuous mode [ 1325.752486][ T6016] hsr_slave_1: left promiscuous mode [ 1325.808834][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.884078][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.787757][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 1328.886583][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 1330.453528][T12184] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1330.828948][T13623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.207086][T13638] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.1665'. [ 1332.284200][T13638] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1333.823545][T13659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.762415][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.835776][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.889714][T13438] bridge_slave_0: entered allmulticast mode [ 1334.956450][T13438] bridge_slave_0: entered promiscuous mode [ 1335.019463][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.051477][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.081705][T13438] bridge_slave_1: entered allmulticast mode [ 1335.127092][T13438] bridge_slave_1: entered promiscuous mode [ 1335.549189][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.749384][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.355843][T13438] team0: Port device team_slave_0 added [ 1336.472041][T13438] team0: Port device team_slave_1 added [ 1336.586331][ T8947] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1336.870701][ T8947] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.942673][ T8947] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1337.054206][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.093163][ T8947] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1337.119154][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.180175][ T8947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1337.209139][ T8947] usb 2-1: SerialNumber: syz [ 1337.268922][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.479664][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.560446][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.625878][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.694294][ T8947] cdc_ether 2-1:1.0: bad CDC descriptors [ 1337.993084][ T8947] usb 2-1: USB disconnect, device number 4 [ 1343.170427][T13438] hsr_slave_0: entered promiscuous mode [ 1343.255386][T13438] hsr_slave_1: entered promiscuous mode [ 1343.324617][T13438] debugfs: 'hsr0' already exists in 'hsr' [ 1343.358214][T13438] Cannot create hsr debugfs directory [ 1347.588422][T13438] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1348.876753][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.937407][T13438] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1349.060254][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1349.094847][T13438] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1349.211867][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1349.237579][T13438] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1349.350243][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1350.376003][T13772] loop1: detected capacity change from 0 to 512 [ 1350.519972][T13772] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1707: corrupted in-inode xattr: overlapping e_value [ 1350.613361][T13772] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1350.614571][T13772] EXT4-fs (loop1): Remounting filesystem read-only [ 1350.636884][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1350.636974][ C1] EXT4-fs (loop1): initial error at time 525638: ext4_iget_extra_inode:5128: inode 15 [ 1350.637132][ C1] EXT4-fs (loop1): last error at time 525638: ext4_iget_extra_inode:5128: inode 15 [ 1350.710106][T13772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1351.110264][T11841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.631467][T13438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.050311][T13438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.208184][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.215924][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.439385][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.453483][T12184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.666170][T13815] loop1: detected capacity change from 0 to 16 [ 1355.705052][T13815] erofs (device loop1): mounted with root inode @ nid 36. [ 1355.816434][T13815] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 1355.911054][T13815] erofs (device loop1): read error -117 @ 0 of nid 89 [ 1355.967014][T13818] netlink: 'syz.2.1721': attribute type 4 has an invalid length. [ 1356.003436][ T29] audit: type=1800 audit(525644.111:381): pid=13815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1720" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1356.634091][ T29] audit: type=1326 audit(525644.731:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.6.1722" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0e59ce59 code=0x7ffc0000 [ 1356.821256][T13824] loop1: detected capacity change from 0 to 1024 [ 1356.844367][ T29] audit: type=1326 audit(525644.751:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.6.1722" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0e59ce59 code=0x7ffc0000 [ 1356.993544][T13824] hfsplus: (loop1): Attributes File (cnid 0x8) map record invalid or bitmap corruption detected, forcing read-only. [ 1357.069665][ T29] audit: type=1326 audit(525644.801:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.6.1722" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a0e59ce59 code=0x7ffc0000 [ 1357.110756][T13824] hfsplus: Run fsck.hfsplus to repair. [ 1357.249420][ T29] audit: type=1326 audit(525644.801:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.6.1722" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a0e59ce59 code=0x7ffc0000 [ 1357.712879][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1726'. [ 1358.314350][T13844] fuse: Bad value for 'fd' [ 1359.457894][ T8441] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1359.689436][ T8441] usb 3-1: Using ep0 maxpacket: 32 [ 1359.826923][ T8441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1359.896784][ T8441] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.907126][ T8441] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 234, using maximum allowed: 30 [ 1360.016135][ T8441] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 39680, setting to 1024 [ 1360.060846][ T8441] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1360.171196][ T8441] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 234 [ 1360.387099][ T8441] usb 3-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 1360.396399][ T8441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.436730][ T8441] usb 3-1: Product: syz [ 1360.441397][ T8441] usb 3-1: Manufacturer: syz [ 1360.473051][ T8441] usb 3-1: SerialNumber: syz [ 1360.543999][T13852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1360.872783][ T8441] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1360.878365][T13872] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1360.878365][T13872] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1361.265832][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.670497][ T8441] usb 3-1: USB disconnect, device number 4 [ 1362.629332][ T6011] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1362.765006][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'. [ 1362.783737][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1741'. [ 1362.793343][T13890] netlink: 'syz.5.1741': attribute type 15 has an invalid length. [ 1363.627910][T13893] udevd[13893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1365.958053][T13920] loop1: detected capacity change from 0 to 256 [ 1366.029375][T13920] exfat: Deprecated parameter 'utf8' [ 1366.077706][T13920] exfat: Deprecated parameter 'utf8' [ 1366.117536][T13920] exfat: Deprecated parameter 'namecase' [ 1366.381963][T13920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1367.587938][T13934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1369.616139][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 1369.625267][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 1369.634408][T13952] netlink: 'syz.1.1755': attribute type 15 has an invalid length. [ 1371.986597][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.996914][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.294777][ T5585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1373.307143][ T5585] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1373.320554][ T5585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1373.383495][ T5585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1373.413965][ T5585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1373.871048][T13973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.587819][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 1374.956212][ T5585] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1375.503276][ T5585] Bluetooth: hci5: command tx timeout [ 1375.733505][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 1375.742927][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 1375.755421][T13996] netlink: 'syz.1.1771': attribute type 15 has an invalid length. [ 1377.585072][ T5585] Bluetooth: hci5: command tx timeout [ 1378.114593][T14008] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1777'. [ 1379.667673][ T5585] Bluetooth: hci5: command tx timeout [ 1379.866073][ T5983] bridge_slave_1: left allmulticast mode [ 1379.927102][ T5983] bridge_slave_1: left promiscuous mode [ 1379.990405][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.020389][T14024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.107641][ T5983] bridge_slave_0: left allmulticast mode [ 1380.157356][ T5983] bridge_slave_0: left promiscuous mode [ 1380.179381][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.748278][ T5585] Bluetooth: hci5: command tx timeout [ 1381.963422][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'. [ 1381.980743][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1786'. [ 1381.990261][T14048] netlink: 'syz.6.1786': attribute type 15 has an invalid length. [ 1383.827805][T14046] loop2: detected capacity change from 0 to 512 [ 1383.851117][T14046] EXT4-fs (loop2): filesystem is read-only [ 1383.860245][T14046] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1383.896613][T14046] EXT4-fs (loop2): filesystem is read-only [ 1383.902922][T14046] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1384.073789][T14046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1787: bg 0: block 64: padding at end of block bitmap is not set [ 1384.088453][T14046] loop2: lost filesystem error report for type 5 error -117 [ 1384.098970][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1384.113139][ C0] EXT4-fs (loop2): initial error at time 525672: ext4_validate_block_bitmap:441 [ 1384.122442][ C0] EXT4-fs (loop2): last error at time 525672: ext4_validate_block_bitmap:441 [ 1384.924412][T14046] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1384.938731][T14046] loop2: lost filesystem error report for type 5 error -117 [ 1384.945824][T14046] EXT4-fs (loop2): 1 orphan inode deleted [ 1384.961523][T14046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1385.216924][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.411796][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.554016][ T5983] bond0 (unregistering): Released all slaves [ 1385.997509][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.085987][ T5983] hsr_slave_0: left promiscuous mode [ 1387.871093][ T5983] hsr_slave_1: left promiscuous mode [ 1387.926716][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.983742][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.588836][T14081] loop2: detected capacity change from 0 to 64 [ 1388.711830][T14081] syz.2.1794: attempt to access beyond end of device [ 1388.711830][T14081] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1388.813924][T14081] Buffer I/O error on dev loop2, logical block 512, async page read [ 1388.867275][T14081] syz.2.1794: attempt to access beyond end of device [ 1388.867275][T14081] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1388.965836][T14081] Buffer I/O error on dev loop2, logical block 56576, async page read [ 1389.025051][T14085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.108207][ T5585] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1390.404671][T14097] loop2: detected capacity change from 0 to 512 [ 1390.435536][T14097] EXT4-fs (loop2): filesystem is read-only [ 1390.442354][T14097] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1390.503749][T14097] EXT4-fs (loop2): filesystem is read-only [ 1390.510099][T14097] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1390.518446][T14097] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1798: bg 0: block 64: padding at end of block bitmap is not set [ 1390.533484][T14097] loop2: lost filesystem error report for type 5 error -117 [ 1390.546821][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1390.560933][ C0] EXT4-fs (loop2): initial error at time 525678: ext4_validate_block_bitmap:441 [ 1390.570310][ C0] EXT4-fs (loop2): last error at time 525678: ext4_validate_block_bitmap:441 [ 1390.587707][T14097] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1390.596702][T14097] loop2: lost filesystem error report for type 5 error -117 [ 1390.604314][T14097] EXT4-fs (loop2): 1 orphan inode deleted [ 1390.620013][T14097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1392.531216][T14101] loop1: detected capacity change from 0 to 512 [ 1392.643523][T14101] EXT4-fs (loop1): filesystem is read-only [ 1392.653808][T14101] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1393.587709][T14101] EXT4-fs (loop1): filesystem is read-only [ 1393.593763][T14101] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1393.623340][T14101] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1800: bg 0: block 64: padding at end of block bitmap is not set [ 1393.644486][T14101] loop1: lost filesystem error report for type 5 error -117 [ 1393.654392][T14101] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1393.662028][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1393.662122][ C0] EXT4-fs (loop1): initial error at time 525681: ext4_validate_block_bitmap:441 [ 1393.662245][ C0] EXT4-fs (loop1): last error at time 525681: ext4_validate_block_bitmap:441 [ 1393.696139][T14101] loop1: lost filesystem error report for type 5 error -117 [ 1393.702993][T14101] EXT4-fs (loop1): 1 orphan inode deleted [ 1393.719375][T14101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1394.328424][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.742488][T11841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.337991][T14119] netlink: 193 bytes leftover after parsing attributes in process `syz.6.1807'. [ 1396.638951][ T6008] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1396.900582][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 1397.055441][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 1397.237727][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1401.226889][T13966] lo speed is unknown, defaulting to 1000 [ 1401.313306][T13966] lo speed is unknown, defaulting to 1000 [ 1401.553419][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1403.030094][T14175] vxcan2: entered allmulticast mode [ 1404.759563][T14197] loop5: detected capacity change from 0 to 512 [ 1404.777649][T14197] EXT4-fs (loop5): filesystem is read-only [ 1404.793879][T14197] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1404.825337][T14197] EXT4-fs (loop5): filesystem is read-only [ 1404.831557][T14197] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1404.847361][T14197] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1828: bg 0: block 64: padding at end of block bitmap is not set [ 1404.865356][T14197] loop5: lost filesystem error report for type 5 error -117 [ 1404.867928][T14197] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1404.875620][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1404.875715][ C0] EXT4-fs (loop5): initial error at time 525692: ext4_validate_block_bitmap:441 [ 1404.875837][ C0] EXT4-fs (loop5): last error at time 525692: ext4_validate_block_bitmap:441 [ 1404.915881][T14197] loop5: lost filesystem error report for type 5 error -117 [ 1404.932639][T14197] EXT4-fs (loop5): 1 orphan inode deleted [ 1404.948276][T14197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1405.729809][T11808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.435227][T14208] loop1: detected capacity change from 0 to 4096 [ 1406.804681][T14208] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1407.065355][ T29] audit: type=1326 audit(525695.188:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.2.1838" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0aef9ce59 code=0x7ffc0000 [ 1407.113910][T14208] ntfs3(loop1): Failed to load $Extend (-22). [ 1407.155400][T14208] ntfs3(loop1): Failed to initialize $Extend. [ 1407.222938][ T29] audit: type=1326 audit(525695.188:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.2.1838" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0aef9ce59 code=0x7ffc0000 [ 1407.413126][ T29] audit: type=1326 audit(525695.228:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.2.1838" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fa0aef9ce59 code=0x7ffc0000 [ 1407.597055][ T29] audit: type=1326 audit(525695.228:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.2.1838" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0aef9ce59 code=0x7ffc0000 [ 1407.700342][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.707845][T13966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.737618][T14233] loop2: detected capacity change from 0 to 64 [ 1407.775509][ T29] audit: type=1326 audit(525695.228:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.2.1838" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0aef9ce59 code=0x7ffc0000 [ 1407.813597][T13966] bridge_slave_0: entered allmulticast mode [ 1407.822982][T13966] bridge_slave_0: entered promiscuous mode [ 1407.895093][T14233] minix: block size(59136) > page size(4096) not supported by filesystem [ 1407.992969][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.000437][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.097100][T13966] bridge_slave_1: entered allmulticast mode [ 1408.155303][T13966] bridge_slave_1: entered promiscuous mode [ 1408.586264][T10871] Trying to free block not in datazone [ 1408.620476][T10871] Trying to free block not in datazone [ 1408.669704][T10871] Trying to free block not in datazone [ 1408.705863][T10871] Trying to free block not in datazone [ 1408.710554][T13966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.760402][T10871] Trying to free block not in datazone [ 1408.824885][T10871] Trying to free block not in datazone [ 1408.860552][T13966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.865516][T10871] Trying to free block not in datazone [ 1408.929697][T10871] Trying to free block not in datazone [ 1409.003114][T10871] Trying to free block not in datazone [ 1409.008732][T10871] Trying to free block not in datazone [ 1409.056577][T10871] Trying to free block not in datazone [ 1409.062201][T10871] Trying to free block not in datazone [ 1409.067774][T10871] Trying to free block not in datazone [ 1409.134826][T10871] Trying to free block not in datazone [ 1409.140453][T10871] Trying to free block not in datazone [ 1409.146032][T10871] Trying to free block not in datazone [ 1409.213105][T10871] Trying to free block not in datazone [ 1409.218725][T10871] Trying to free block not in datazone [ 1409.224389][T10871] Trying to free block not in datazone [ 1409.265270][T13966] team0: Port device team_slave_0 added [ 1409.298416][T10871] Trying to free block not in datazone [ 1409.304042][T10871] Trying to free block not in datazone [ 1409.352512][T10871] Trying to free block not in datazone [ 1409.358136][T10871] Trying to free block not in datazone [ 1409.364054][T10871] Trying to free block not in datazone [ 1409.379414][T13966] team0: Port device team_slave_1 added [ 1409.432054][T10871] Trying to free block not in datazone [ 1409.437680][T10871] Trying to free block not in datazone [ 1409.443254][T10871] Trying to free block not in datazone [ 1409.512553][T10871] Trying to free block not in datazone [ 1409.518186][T10871] Trying to free block not in datazone [ 1409.569882][T10871] Trying to free block not in datazone [ 1409.575504][T10871] Trying to free block not in datazone [ 1409.733446][T10871] Trying to free block not in datazone [ 1409.739069][T10871] Trying to free block not in datazone [ 1409.800744][T10871] Trying to free block not in datazone [ 1409.827577][T10871] Trying to free block not in datazone [ 1409.830143][T13966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.163307][T10871] Trying to free block not in datazone [ 1411.169182][T10871] Trying to free block not in datazone [ 1411.175317][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.202654][T10871] Trying to free block not in datazone [ 1411.208528][T10871] Trying to free block not in datazone [ 1411.214840][T10871] Trying to free block not in datazone [ 1411.220793][T10871] Trying to free block not in datazone [ 1411.226827][T13966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.242800][T10871] Trying to free block not in datazone [ 1411.248852][T10871] Trying to free block not in datazone [ 1411.300048][T10871] Trying to free block not in datazone [ 1411.405295][T13966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.436094][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.437757][T10871] Trying to free block not in datazone [ 1411.588651][T13966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.624700][T10871] Trying to free block not in datazone [ 1411.707236][T10871] Trying to free block not in datazone [ 1411.712863][T10871] Trying to free block not in datazone [ 1411.718442][T10871] Trying to free block not in datazone [ 1411.807928][T10871] Trying to free block not in datazone [ 1411.813555][T10871] Trying to free block not in datazone [ 1411.907596][T10871] Trying to free block not in datazone [ 1411.931674][T10871] Trying to free block not in datazone [ 1412.019608][T10871] Trying to free block not in datazone [ 1412.025240][T10871] Trying to free block not in datazone [ 1412.055135][T10871] Trying to free block not in datazone [ 1412.060755][T10871] Trying to free block not in datazone [ 1412.066330][T10871] Trying to free block not in datazone [ 1412.141677][T10871] Trying to free block not in datazone [ 1412.253891][T10871] Trying to free block not in datazone [ 1412.284931][T10871] Trying to free block not in datazone [ 1412.308139][T10871] Trying to free block not in datazone [ 1412.313760][T10871] Trying to free block not in datazone [ 1412.336488][T13966] hsr_slave_0: entered promiscuous mode [ 1412.349403][T14261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.386698][T10871] Trying to free block not in datazone [ 1412.393518][T13966] hsr_slave_1: entered promiscuous mode [ 1412.396096][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1412.409398][T13966] debugfs: 'hsr0' already exists in 'hsr' [ 1412.427381][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1412.479007][T13966] Cannot create hsr debugfs directory [ 1412.493515][T10871] Trying to free block not in datazone [ 1412.499155][T10871] Trying to free block not in datazone [ 1412.556329][T10871] Trying to free block not in datazone [ 1412.621967][T10871] Trying to free block not in datazone [ 1412.627601][T10871] Trying to free block not in datazone [ 1412.633179][T10871] Trying to free block not in datazone [ 1412.699436][T10871] Trying to free block not in datazone [ 1412.705066][T10871] Trying to free block not in datazone [ 1412.710666][T10871] Trying to free block not in datazone [ 1412.835015][T10871] Trying to free block not in datazone [ 1412.872907][T10871] Trying to free block not in datazone [ 1412.921221][T10871] Trying to free block not in datazone [ 1412.926854][T10871] Trying to free block not in datazone [ 1413.030797][T10871] Trying to free block not in datazone [ 1413.036431][T10871] Trying to free block not in datazone [ 1413.087198][T10871] Trying to free block not in datazone [ 1413.092827][T10871] Trying to free block not in datazone [ 1413.109421][T10871] Trying to free block not in datazone [ 1413.115046][T10871] Trying to free block not in datazone [ 1413.156349][T10871] Trying to free block not in datazone [ 1413.174764][T10871] Trying to free block not in datazone [ 1413.180654][T10871] Trying to free block not in datazone [ 1413.254765][T10871] Trying to free block not in datazone [ 1413.284250][T10871] Trying to free block not in datazone [ 1413.289882][T10871] Trying to free block not in datazone [ 1413.304159][T10871] Trying to free block not in datazone [ 1413.310160][T10871] Trying to free block not in datazone [ 1413.329421][T14269] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1852'. [ 1413.365075][T10871] Trying to free block not in datazone [ 1413.370706][T10871] Trying to free block not in datazone [ 1413.402657][T10871] Trying to free block not in datazone [ 1413.408282][T10871] Trying to free block not in datazone [ 1413.438030][T10871] Trying to free block not in datazone [ 1413.443657][T10871] Trying to free block not in datazone [ 1413.449232][T10871] Trying to free block not in datazone [ 1413.553212][T10871] Trying to free block not in datazone [ 1413.558838][T10871] Trying to free block not in datazone [ 1413.607708][T10871] Trying to free block not in datazone [ 1413.613335][T10871] Trying to free block not in datazone [ 1413.700293][T10871] Trying to free block not in datazone [ 1413.705919][T10871] Trying to free block not in datazone [ 1413.723207][T10871] Trying to free block not in datazone [ 1413.737948][T10871] Trying to free block not in datazone [ 1413.743695][T10871] Trying to free block not in datazone [ 1413.792117][T10871] Trying to free block not in datazone [ 1413.797754][T10871] Trying to free block not in datazone [ 1413.844384][T10871] Trying to free block not in datazone [ 1413.850028][T10871] Trying to free block not in datazone [ 1413.855632][T10871] Trying to free block not in datazone [ 1413.967418][T10871] Trying to free block not in datazone [ 1414.044783][T10871] Trying to free block not in datazone [ 1414.101947][T10871] Trying to free block not in datazone [ 1414.167165][T10871] Trying to free block not in datazone [ 1414.172797][T10871] Trying to free block not in datazone [ 1414.178390][T10871] Trying to free block not in datazone [ 1414.281395][T10871] Trying to free block not in datazone [ 1414.287025][T10871] Trying to free block not in datazone [ 1414.292616][T10871] Trying to free block not in datazone [ 1414.344682][T10871] Trying to free block not in datazone [ 1414.350557][T10871] Trying to free block not in datazone [ 1414.369673][T10871] Trying to free block not in datazone [ 1414.381822][T10871] Trying to free block not in datazone [ 1414.406871][T10871] Trying to free block not in datazone [ 1414.493100][T14281] Mount JFS Failure: -5 [ 1415.243100][T10871] Trying to free block not in datazone [ 1415.273458][T10871] Trying to free block not in datazone [ 1415.279084][T10871] Trying to free block not in datazone [ 1415.284682][T10871] Trying to free block not in datazone [ 1415.308232][T10871] Trying to free block not in datazone [ 1415.357685][T10871] Trying to free block not in datazone [ 1415.363800][T10871] Trying to free block not in datazone [ 1415.394250][T10871] Trying to free block not in datazone [ 1415.399899][T10871] Trying to free block not in datazone [ 1415.410853][T10871] Trying to free block not in datazone [ 1415.416457][T10871] Trying to free block not in datazone [ 1415.422034][T10871] Trying to free block not in datazone [ 1415.436803][T10871] Trying to free block not in datazone [ 1415.442431][T10871] Trying to free block not in datazone [ 1415.454373][T10871] Trying to free block not in datazone [ 1415.459987][T10871] Trying to free block not in datazone [ 1415.465563][T10871] Trying to free block not in datazone [ 1415.478210][T10871] Trying to free block not in datazone [ 1415.483815][T10871] Trying to free block not in datazone [ 1415.489389][T10871] Trying to free block not in datazone [ 1415.528638][T10871] Trying to free block not in datazone [ 1415.576673][T10871] Trying to free block not in datazone [ 1415.600829][T10871] Trying to free block not in datazone [ 1415.653164][T10871] Trying to free block not in datazone [ 1415.692362][T10871] Trying to free block not in datazone [ 1415.718870][T10871] Trying to free block not in datazone [ 1415.735842][T10871] Trying to free block not in datazone [ 1415.754389][T10871] Trying to free block not in datazone [ 1415.768739][T10871] Trying to free block not in datazone [ 1415.792220][T10871] Trying to free block not in datazone [ 1415.838482][T10871] Trying to free block not in datazone [ 1415.844722][T10871] Trying to free block not in datazone [ 1415.872135][T10871] Trying to free block not in datazone [ 1415.887619][T10871] Trying to free block not in datazone [ 1415.894929][T10871] Trying to free block not in datazone [ 1415.961245][T10871] Trying to free block not in datazone [ 1415.966847][T10871] Trying to free block not in datazone [ 1416.009594][T10871] Trying to free block not in datazone [ 1416.096495][T10871] Trying to free block not in datazone [ 1416.102120][T10871] Trying to free block not in datazone [ 1416.107704][T10871] Trying to free block not in datazone [ 1416.197066][T10871] Trying to free block not in datazone [ 1416.202702][T10871] Trying to free block not in datazone [ 1416.287288][T10871] Trying to free block not in datazone [ 1416.292942][T10871] Trying to free block not in datazone [ 1416.374359][T10871] Trying to free block not in datazone [ 1416.379980][T10871] Trying to free block not in datazone [ 1416.385566][T10871] Trying to free block not in datazone [ 1416.428657][T10871] Trying to free block not in datazone [ 1416.440341][T10871] Trying to free block not in datazone [ 1416.470868][T10871] Trying to free block not in datazone [ 1416.482677][T10871] Trying to free block not in datazone [ 1416.499388][T10871] Trying to free block not in datazone [ 1416.527802][T10871] Trying to free block not in datazone [ 1416.548660][T10871] Trying to free block not in datazone [ 1416.577477][T10871] Trying to free block not in datazone [ 1416.607744][T10871] Trying to free block not in datazone [ 1416.641101][T10871] Trying to free block not in datazone [ 1416.680952][T10871] Trying to free block not in datazone [ 1416.715433][T10871] Trying to free block not in datazone [ 1416.750528][T10871] Trying to free block not in datazone [ 1416.784388][T10871] Trying to free block not in datazone [ 1416.811230][T10871] Trying to free block not in datazone [ 1416.822489][T14291] loop1: detected capacity change from 0 to 4096 [ 1416.884358][T10871] Trying to free block not in datazone [ 1416.917267][T10871] Trying to free block not in datazone [ 1416.948018][T10871] Trying to free block not in datazone [ 1417.003698][T10871] Trying to free block not in datazone [ 1417.037515][T10871] Trying to free block not in datazone [ 1417.105185][T10871] Trying to free block not in datazone [ 1417.153733][T10871] Trying to free block not in datazone [ 1417.191536][T10871] Trying to free block not in datazone [ 1417.216856][T10871] Trying to free block not in datazone [ 1417.235407][T10871] Trying to free block not in datazone [ 1417.251522][T10871] Trying to free block not in datazone [ 1417.296063][T10871] Trying to free block not in datazone [ 1417.323666][T10871] Trying to free block not in datazone [ 1417.351560][T10871] Trying to free block not in datazone [ 1417.394237][T10871] Trying to free block not in datazone [ 1417.415344][T13966] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1417.427838][T10871] Trying to free block not in datazone [ 1417.447251][T10871] Trying to free block not in datazone [ 1417.470374][T10871] Trying to free block not in datazone [ 1417.505475][T10871] Trying to free block not in datazone [ 1417.545873][T10871] Trying to free block not in datazone [ 1417.568316][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1417.606512][T10871] Trying to free block not in datazone [ 1417.635414][T13966] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1417.646084][T10871] Trying to free block not in datazone [ 1417.703337][T10871] Trying to free block not in datazone [ 1417.741530][T10871] Trying to free block not in datazone [ 1417.779597][T10871] Trying to free block not in datazone [ 1417.809141][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1417.825940][T10871] Trying to free block not in datazone [ 1417.850047][T10871] Trying to free block not in datazone [ 1417.872080][T13966] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1417.903466][T10871] Trying to free block not in datazone [ 1417.963327][T10871] Trying to free block not in datazone [ 1418.016885][T10871] Trying to free block not in datazone [ 1418.601585][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1418.823119][T13966] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1418.838153][T10871] Trying to free block not in datazone [ 1418.851564][T10871] Trying to free block not in datazone [ 1418.857366][T10871] Trying to free block not in datazone [ 1418.864309][T10871] Trying to free block not in datazone [ 1418.870393][T10871] Trying to free block not in datazone [ 1418.876344][T10871] Trying to free block not in datazone [ 1418.882369][T10871] Trying to free block not in datazone [ 1418.889155][T10871] Trying to free block not in datazone [ 1418.894990][T10871] Trying to free block not in datazone [ 1418.901016][T10871] Trying to free block not in datazone [ 1418.907440][T10871] Trying to free block not in datazone [ 1418.920163][T10871] Trying to free block not in datazone [ 1418.926022][T10871] Trying to free block not in datazone [ 1418.932137][T10871] Trying to free block not in datazone [ 1418.938036][T10871] Trying to free block not in datazone [ 1418.943819][T10871] Trying to free block not in datazone [ 1418.950837][T10871] Trying to free block not in datazone [ 1418.956628][T10871] Trying to free block not in datazone [ 1418.962958][T10871] Trying to free block not in datazone [ 1418.969424][T10871] Trying to free block not in datazone [ 1418.975259][T10871] Trying to free block not in datazone [ 1418.981327][T10871] Trying to free block not in datazone [ 1418.987127][T10871] Trying to free block not in datazone [ 1418.993694][T10871] Trying to free block not in datazone [ 1419.000954][T10871] Trying to free block not in datazone [ 1419.006933][T10871] Trying to free block not in datazone [ 1419.013165][T10871] Trying to free block not in datazone [ 1419.025413][T10871] Trying to free block not in datazone [ 1419.063053][T10871] Trying to free block not in datazone [ 1419.100404][T10871] Trying to free block not in datazone [ 1419.135564][T10871] Trying to free block not in datazone [ 1419.152501][T13966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1419.152598][T10871] Trying to free block not in datazone [ 1419.184910][T10871] Trying to free block not in datazone [ 1419.216560][T10871] Trying to free block not in datazone [ 1419.252817][T10871] Trying to free block not in datazone [ 1419.293393][T10871] Trying to free block not in datazone [ 1419.331858][T10871] Trying to free block not in datazone [ 1419.375925][T10871] Trying to free block not in datazone [ 1419.407778][T10871] Trying to free block not in datazone [ 1419.449007][T10871] Trying to free block not in datazone [ 1419.471961][T10871] Trying to free block not in datazone [ 1419.512034][T10871] Trying to free block not in datazone [ 1419.586477][T10871] Trying to free block not in datazone [ 1419.620935][T10871] minix_free_inode: bit 6 already cleared [ 1419.685166][T10871] minix_free_block (loop2:24): bit already cleared [ 1419.728195][T10871] Trying to free block not in datazone [ 1419.767984][T10871] minix_free_inode: bit 7 already cleared [ 1420.017676][T14322] loop5: detected capacity change from 0 to 128 [ 1420.185248][T14322] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1420.817078][T11808] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1421.192908][T13966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.226222][T14334] netlink: 'syz.2.1868': attribute type 8 has an invalid length. [ 1421.409467][T13966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.484531][T14336] loop5: detected capacity change from 0 to 512 [ 1421.720461][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.735626][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.831526][T14336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.894532][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.902075][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.394542][T11808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.442955][T14351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.344923][ T6016] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1430.959179][T14400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1433.440787][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.447415][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.631072][T12379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1435.684489][T12379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1435.707301][T12379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1435.734363][T12379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1435.758293][T12379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1435.941254][T14445] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 1435.977708][T14442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1437.345639][T14458] loop1: detected capacity change from 0 to 64 [ 1437.510931][T14458] Bad inode number on dev loop1: 393221 is out of range [ 1437.882176][T12379] Bluetooth: hci4: command tx timeout [ 1438.093926][T14453] loop2: detected capacity change from 0 to 4096 [ 1438.281739][T14453] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1439.107678][T14453] ntfs3(loop2): ino=0, attr_set_size_ex [ 1439.680222][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1439.712698][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1439.966224][T12379] Bluetooth: hci4: command tx timeout [ 1441.753200][ T6008] bridge_slave_1: left allmulticast mode [ 1441.802099][ T6008] bridge_slave_1: left promiscuous mode [ 1441.808659][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.022580][ T6008] bridge_slave_0: left allmulticast mode [ 1442.028432][ T6008] bridge_slave_0: left promiscuous mode [ 1442.043010][T12379] Bluetooth: hci4: command tx timeout [ 1442.138971][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.986353][T14487] loop2: detected capacity change from 0 to 8 [ 1443.919632][T14490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1443.932569][T14490] IPv6: NLM_F_CREATE should be set when creating new route [ 1443.939954][T14490] IPv6: NLM_F_CREATE should be set when creating new route [ 1444.117746][T12379] Bluetooth: hci4: command tx timeout [ 1444.814451][ T29] audit: type=1326 audit(525732.950:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1444.999976][ T29] audit: type=1326 audit(525733.050:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1445.233155][ T29] audit: type=1326 audit(525733.090:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1445.457891][ T29] audit: type=1326 audit(525733.090:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1445.702022][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.712482][ T29] audit: type=1326 audit(525733.090:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1445.979361][ T29] audit: type=1326 audit(525733.090:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1446.021658][T14509] loop5: detected capacity change from 0 to 1024 [ 1446.184256][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1446.239380][ T29] audit: type=1326 audit(525733.090:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1446.477494][ T6008] bond0 (unregistering): Released all slaves [ 1446.500795][ T29] audit: type=1326 audit(525733.090:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1446.706976][ T29] audit: type=1326 audit(525733.090:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14497 comm="syz.5.1912" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8da2f9ce59 code=0x7ffc0000 [ 1447.370366][ T6008] hsr_slave_0: left promiscuous mode [ 1447.403130][ T6008] hsr_slave_1: left promiscuous mode [ 1447.410985][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.629298][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.849614][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 1449.968049][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 1459.214485][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1460.113130][T14437] lo speed is unknown, defaulting to 1000 [ 1460.304908][T14437] lo speed is unknown, defaulting to 1000 [ 1461.811639][T14598] netlink: 10384 bytes leftover after parsing attributes in process `syz.2.1944'. [ 1462.195942][ T5983] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1465.771127][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1466.214825][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.261645][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.307772][T14437] bridge_slave_0: entered allmulticast mode [ 1466.360889][T14437] bridge_slave_0: entered promiscuous mode [ 1466.463195][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.511096][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.552699][T14437] bridge_slave_1: entered allmulticast mode [ 1466.575520][T14437] bridge_slave_1: entered promiscuous mode [ 1467.066709][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.171524][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.816591][T14437] team0: Port device team_slave_0 added [ 1468.115997][T14437] team0: Port device team_slave_1 added [ 1468.309311][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.316449][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.353743][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.377928][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.391019][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.457286][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.476092][T14437] hsr_slave_0: entered promiscuous mode [ 1469.568134][T14437] hsr_slave_1: entered promiscuous mode [ 1469.576838][T14437] debugfs: 'hsr0' already exists in 'hsr' [ 1469.680888][T14437] Cannot create hsr debugfs directory [ 1470.112555][ T9092] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1470.129437][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1470.824170][ T9092] usb 2-1: device descriptor read/64, error -32 [ 1471.081859][ T9092] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1471.314917][ T9092] usb 2-1: Using ep0 maxpacket: 8 [ 1471.418235][ T9092] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1471.426381][ T9092] usb 2-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 1471.485545][ T9092] usb 2-1: config 0 has no interface number 0 [ 1471.548855][ T9092] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1471.644461][ T9092] usb 2-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 1471.700642][ T9092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.755228][ T9092] usb 2-1: config 0 descriptor?? [ 1471.833637][ T9092] rndis_host 2-1:0.1: invalid descriptor buffer length [ 1471.879146][ T9092] rndis_host 2-1:0.1: rndis: master #0/0000000000000000 slave #1/ffff8880170b9000 [ 1471.938893][ T9092] cdc_acm 2-1:0.1: invalid descriptor buffer length [ 1472.040921][ T9092] usb 2-1: USB disconnect, device number 6 [ 1472.222983][T14673] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1965'. [ 1472.730431][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1472.766183][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1473.679883][T14437] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1473.795097][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.886449][T14437] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1474.004242][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1474.138810][T14437] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1474.951858][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1474.974749][T14437] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1475.032340][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1475.044492][ T5585] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1475.162923][T14437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1477.170646][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1477.528246][T14437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.899722][T14437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.072779][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.080660][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.360056][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.374860][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.181185][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1479.184558][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1479.298114][T12379] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1479.388450][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1481.528011][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1482.404801][T14770] fuse: Bad value for 'group_id' [ 1482.409952][T14770] fuse: Bad value for 'group_id' [ 1483.386020][T14785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1484.535721][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1484.566359][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1486.407670][T14806] netlink: 'syz.2.2005': attribute type 11 has an invalid length. [ 1486.461122][T14806] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2005'. [ 1487.935816][T12379] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1488.064266][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1488.196752][T14437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.359133][T14819] fuse: Bad value for 'group_id' [ 1488.399865][T14819] fuse: Bad value for 'group_id' [ 1489.327645][ T5585] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1489.639462][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1492.713685][T14858] loop5: detected capacity change from 0 to 64 [ 1494.188954][T12184] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1494.830529][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.843152][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.623763][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1496.095510][T14891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1496.120747][T14891] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1496.141898][T14891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1496.174888][T14891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1496.215170][T14891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1498.263373][T12379] Bluetooth: hci5: command tx timeout [ 1500.342563][T12379] Bluetooth: hci5: command tx timeout [ 1500.657452][ T5988] bridge_slave_1: left allmulticast mode [ 1500.705627][ T5988] bridge_slave_1: left promiscuous mode [ 1500.712175][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.985244][ T5988] bridge_slave_0: left allmulticast mode [ 1500.991099][ T5988] bridge_slave_0: left promiscuous mode [ 1501.045134][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.575826][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1501.767783][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1502.422195][T12379] Bluetooth: hci5: command tx timeout [ 1502.777539][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.932203][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.054123][ T5988] bond0 (unregistering): Released all slaves [ 1504.062399][ T5988] hsr_slave_0: left promiscuous mode [ 1504.136186][ T5988] hsr_slave_1: left promiscuous mode [ 1504.193553][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.351740][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.506641][T12379] Bluetooth: hci5: command tx timeout [ 1508.075512][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 1508.286964][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 1508.714038][T14993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1509.385698][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1510.732457][T14889] lo speed is unknown, defaulting to 1000 [ 1510.767932][T14889] lo speed is unknown, defaulting to 1000 [ 1513.517384][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1517.402660][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.410148][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.448109][T14889] bridge_slave_0: entered allmulticast mode [ 1517.487032][T14889] bridge_slave_0: entered promiscuous mode [ 1517.561739][T14889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.581398][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.632698][T14889] bridge_slave_1: entered allmulticast mode [ 1517.642139][T14889] bridge_slave_1: entered promiscuous mode [ 1518.224625][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.285825][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.657681][T14889] team0: Port device team_slave_0 added [ 1518.785887][T14889] team0: Port device team_slave_1 added [ 1519.071230][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.096110][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.211412][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.235809][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.256804][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.305545][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.724529][T12379] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1519.914689][T14889] hsr_slave_0: entered promiscuous mode [ 1519.988393][T14889] hsr_slave_1: entered promiscuous mode [ 1520.047739][T14889] debugfs: 'hsr0' already exists in 'hsr' [ 1520.102164][T14889] Cannot create hsr debugfs directory [ 1521.221008][T12379] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1521.230364][T12379] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1521.241707][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1523.255291][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1523.268111][T14889] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1523.413197][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1523.460761][T14889] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1523.570919][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1523.631259][T14889] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1523.856307][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1523.953765][T14889] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1524.186598][T14889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1524.705045][T15120] loop2: detected capacity change from 0 to 1024 [ 1524.836938][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1524.945339][T15120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.474345][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.192077][ T5992] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1526.526501][T14889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.844858][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.003565][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.011146][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.242521][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.256938][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.111235][T15168] loop2: detected capacity change from 0 to 1024 [ 1530.364336][T15168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.516514][T15168] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2097: bg 0: block 4: invalid block bitmap [ 1530.592355][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1530.858552][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.573254][T15190] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1533.920038][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.059070][T15217] loop5: detected capacity change from 0 to 1024 [ 1534.161768][T15217] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1534.242686][T14891] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1534.252359][T14891] CPU: 1 UID: 0 PID: 14891 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1534.252495][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1534.252599][T14891] Workqueue: hci1 hci_rx_work [ 1534.252777][T14891] Call Trace: [ 1534.252826][T14891] [ 1534.252874][T14891] __dump_stack+0x26/0x30 [ 1534.253037][T14891] dump_stack_lvl+0x14c/0x1c0 [ 1534.253187][T14891] dump_stack+0x1e/0x25 [ 1534.253322][T14891] sysfs_create_dir_ns+0x46c/0x540 [ 1534.253473][T14891] kobject_add_internal+0x1084/0x19b0 [ 1534.253649][T14891] kobject_add+0x2c1/0x410 [ 1534.253807][T14891] ? kmsan_get_metadata+0xf1/0x160 [ 1534.253985][T14891] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1534.254168][T14891] device_add+0xa70/0x1c90 [ 1534.254329][T14891] hci_conn_add_sysfs+0x159/0x2e0 [ 1534.254492][T14891] le_conn_complete_evt+0x1de1/0x2330 [ 1534.254656][T14891] hci_le_conn_complete_evt+0x157/0x260 [ 1534.254855][T14891] hci_le_meta_evt+0x6eb/0x960 [ 1534.254986][T14891] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1534.255196][T14891] hci_event_packet+0xb8c/0x1820 [ 1534.255359][T14891] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1534.255520][T14891] hci_rx_work+0x8c3/0xfc0 [ 1534.255688][T14891] ? kmsan_get_metadata+0xf1/0x160 [ 1534.255859][T14891] ? __pfx_hci_rx_work+0x10/0x10 [ 1534.256028][T14891] process_scheduled_works+0xb65/0x1e40 [ 1534.256247][T14891] worker_thread+0xee4/0x1590 [ 1534.256435][T14891] kthread+0x53a/0x5f0 [ 1534.256596][T14891] ? __pfx_worker_thread+0x10/0x10 [ 1534.256762][T14891] ? __pfx_kthread+0x10/0x10 [ 1534.256932][T14891] ret_from_fork+0x20f/0x8d0 [ 1534.257073][T14891] ? __switch_to+0x573/0x7a0 [ 1534.257249][T14891] ? __pfx_kthread+0x10/0x10 [ 1534.257419][T14891] ret_from_fork_asm+0x1a/0x30 [ 1534.257601][T14891] [ 1534.497857][T14891] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1534.512135][T14891] Bluetooth: hci1: failed to register connection device [ 1534.677697][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1535.545212][T14891] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 1535.789046][T15224] loop1: detected capacity change from 0 to 4096 [ 1536.830710][T15224] ntfs3(loop1): Failed to load $Extend (-22). [ 1536.865443][T15224] ntfs3(loop1): Failed to initialize $Extend. [ 1537.890587][T14889] veth0_vlan: entered promiscuous mode [ 1537.918910][T14889] veth1_vlan: entered promiscuous mode [ 1538.216423][T14889] veth0_macvtap: entered promiscuous mode [ 1538.504617][T14889] veth1_macvtap: entered promiscuous mode [ 1538.661695][T12379] Bluetooth: hci1: command 0x0406 tx timeout [ 1538.800572][T14891] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1538.811007][T14891] CPU: 0 UID: 0 PID: 14891 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1538.811142][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1538.811245][T14891] Workqueue: hci1 hci_rx_work [ 1538.811420][T14891] Call Trace: [ 1538.811474][T14891] [ 1538.811525][T14891] __dump_stack+0x26/0x30 [ 1538.811671][T14891] dump_stack_lvl+0x14c/0x1c0 [ 1538.811824][T14891] dump_stack+0x1e/0x25 [ 1538.811957][T14891] sysfs_create_dir_ns+0x46c/0x540 [ 1538.812114][T14891] kobject_add_internal+0x1084/0x19b0 [ 1538.812292][T14891] kobject_add+0x2c1/0x410 [ 1538.812451][T14891] ? kmsan_get_metadata+0xf1/0x160 [ 1538.812632][T14891] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1538.812819][T14891] device_add+0xa70/0x1c90 [ 1538.812981][T14891] hci_conn_add_sysfs+0x159/0x2e0 [ 1538.813155][T14891] le_conn_complete_evt+0x1de1/0x2330 [ 1538.813334][T14891] hci_le_conn_complete_evt+0x157/0x260 [ 1538.813551][T14891] hci_le_meta_evt+0x6eb/0x960 [ 1538.813680][T14891] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1538.813897][T14891] hci_event_packet+0xb8c/0x1820 [ 1538.814060][T14891] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1538.814227][T14891] hci_rx_work+0x8c3/0xfc0 [ 1538.814400][T14891] ? kmsan_get_metadata+0xf1/0x160 [ 1538.814577][T14891] ? __pfx_hci_rx_work+0x10/0x10 [ 1538.814750][T14891] process_scheduled_works+0xb65/0x1e40 [ 1538.814972][T14891] worker_thread+0xee4/0x1590 [ 1538.815166][T14891] kthread+0x53a/0x5f0 [ 1538.815336][T14891] ? __pfx_worker_thread+0x10/0x10 [ 1538.815507][T14891] ? __pfx_kthread+0x10/0x10 [ 1538.815677][T14891] ret_from_fork+0x20f/0x8d0 [ 1538.815819][T14891] ? __switch_to+0x573/0x7a0 [ 1538.815988][T14891] ? __pfx_kthread+0x10/0x10 [ 1538.816158][T14891] ret_from_fork_asm+0x1a/0x30 [ 1538.816347][T14891] [ 1538.816527][T14891] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1539.036534][T14891] Bluetooth: hci1: failed to register connection device [ 1539.058277][T15272] sctp: [Deprecated]: syz.5.2123 (pid 15272) Use of int in max_burst socket option deprecated. [ 1539.058277][T15272] Use struct sctp_assoc_value instead [ 1539.264112][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.285201][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.428732][ T6025] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.558063][ T5992] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.600542][ T5992] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.695884][ T5992] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.063626][T12379] Bluetooth: hci1: command 0x0406 tx timeout [ 1541.207828][T15294] xt_hashlimit: size too large, truncated to 1048576 [ 1541.324164][T15293] loop2: detected capacity change from 0 to 256 [ 1541.441784][T15293] exfat: Deprecated parameter 'utf8' [ 1541.504773][T15293] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1542.797180][T14891] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1542.802648][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1543.153990][T12379] Bluetooth: hci1: command 0x0406 tx timeout [ 1543.973248][ T5585] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1543.983498][ T5585] CPU: 0 UID: 0 PID: 5585 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1543.983642][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1543.983747][ T5585] Workqueue: hci2 hci_rx_work [ 1543.983922][ T5585] Call Trace: [ 1543.983970][ T5585] [ 1543.984018][ T5585] __dump_stack+0x26/0x30 [ 1543.984166][ T5585] dump_stack_lvl+0x14c/0x1c0 [ 1543.984330][ T5585] dump_stack+0x1e/0x25 [ 1543.984467][ T5585] sysfs_create_dir_ns+0x46c/0x540 [ 1543.984630][ T5585] kobject_add_internal+0x1084/0x19b0 [ 1543.984808][ T5585] kobject_add+0x2c1/0x410 [ 1543.984971][ T5585] ? kmsan_get_metadata+0xf1/0x160 [ 1543.985157][ T5585] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1543.985346][ T5585] device_add+0xa70/0x1c90 [ 1543.985513][ T5585] hci_conn_add_sysfs+0x159/0x2e0 [ 1543.985692][ T5585] le_conn_complete_evt+0x1de1/0x2330 [ 1543.985870][ T5585] hci_le_conn_complete_evt+0x157/0x260 [ 1543.986083][ T5585] hci_le_meta_evt+0x6eb/0x960 [ 1543.986211][ T5585] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1543.986429][ T5585] hci_event_packet+0xb8c/0x1820 [ 1543.986594][ T5585] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1543.986779][ T5585] hci_rx_work+0x8c3/0xfc0 [ 1543.986952][ T5585] ? kmsan_get_metadata+0xf1/0x160 [ 1543.987128][ T5585] ? __pfx_hci_rx_work+0x10/0x10 [ 1543.987300][ T5585] process_scheduled_works+0xb65/0x1e40 [ 1543.987525][ T5585] worker_thread+0xee4/0x1590 [ 1543.987726][ T5585] kthread+0x53a/0x5f0 [ 1543.987897][ T5585] ? __pfx_worker_thread+0x10/0x10 [ 1543.988065][ T5585] ? __pfx_kthread+0x10/0x10 [ 1543.988233][ T5585] ret_from_fork+0x20f/0x8d0 [ 1543.988378][ T5585] ? __switch_to+0x573/0x7a0 [ 1543.988552][ T5585] ? __pfx_kthread+0x10/0x10 [ 1543.988776][ T5585] ret_from_fork_asm+0x1a/0x30 [ 1543.988988][ T5585] [ 1543.989185][ T5585] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1544.199602][ T5585] Bluetooth: hci2: failed to register connection device [ 1544.286063][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 1544.864625][ T6011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.416923][T15340] loop1: detected capacity change from 0 to 512 [ 1545.511383][T15340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1545.758146][ T6011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.247802][ T6011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.256617][T11841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.281589][T12379] Bluetooth: hci2: command 0x0406 tx timeout [ 1546.744625][ T6011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.952443][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.981374][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.337580][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.382102][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.592525][ T6011] bridge_slave_1: left allmulticast mode [ 1547.598382][ T6011] bridge_slave_1: left promiscuous mode [ 1547.608499][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.621260][ T6011] bridge_slave_0: left allmulticast mode [ 1547.629127][ T6011] bridge_slave_0: left promiscuous mode [ 1547.635623][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.371208][T12379] Bluetooth: hci2: command 0x0406 tx timeout [ 1551.183003][T12379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1551.192768][T12379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1551.202569][T12379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1551.296074][T12379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1551.307148][T12379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1552.819987][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.923478][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.946910][ T6011] bond0 (unregistering): Released all slaves [ 1553.520396][T14891] Bluetooth: hci1: command tx timeout [ 1555.795007][T14891] Bluetooth: hci1: command 0x041b tx timeout [ 1556.406462][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.413079][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.424529][ T1311] ------------[ cut here ]------------ [ 1556.468544][ T1311] WARNING: ./include/linux/skbuff.h:3242 at lowpan_xmit+0xa0e/0x1d00, CPU#1: aoe_tx0/1311 [ 1556.478838][ T1311] Modules linked in: [ 1556.482937][ T1311] CPU: 1 UID: 0 PID: 1311 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1556.492157][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1556.502377][ T1311] RIP: 0010:lowpan_xmit+0xa0e/0x1d00 [ 1556.507911][ T1311] Code: fb 8b 7d d4 e8 a3 4b 25 f2 48 89 df e9 35 fd ff ff 44 89 f7 e8 93 4b 25 f2 66 41 83 fd ff 0f 85 7f fd ff ff e8 a3 2b 77 f1 90 <0f> 0b 90 80 7d c0 00 0f 84 3b 12 00 00 48 8b bd 00 ff ff ff 0f b7 [ 1556.527726][ T1311] RSP: 0018:ffff88810df07960 EFLAGS: 00010293 [ 1556.534027][ T1311] RAX: ffffffff908951ed RBX: 0000000000000000 RCX: ffff88810dc62140 [ 1556.542171][ T1311] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 1556.550309][ T1311] RBP: ffff88810df07ac0 R08: ffffea000000000f R09: 0000000000000000 [ 1556.558458][ T1311] R10: ffff88810d7078d8 R11: ffff88811af49110 R12: ffff88810dc62d00 [ 1556.566609][ T1311] R13: 000000000000ffff R14: 0000000000000000 R15: ffff88805aa9d500 [ 1556.612599][ T1311] FS: 0000000000000000(0000) GS:ffff8881aa70f000(0000) knlGS:0000000000000000 [ 1556.621772][ T1311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1556.628543][ T1311] CR2: 00007fedf53194c8 CR3: 00000000b9efa000 CR4: 00000000003526f0 [ 1556.636753][ T1311] Call Trace: [ 1556.640153][ T1311] [ 1556.643216][ T1311] ? validate_xmit_xfrm+0x84/0x19e0 [ 1556.648761][ T1311] ? netif_skb_features+0x1bd3/0x1ea0 [ 1556.654476][ T1311] ? kmsan_report+0x2a0/0x320 [ 1556.659410][ T1311] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1556.665998][ T1311] ? __pfx_lowpan_xmit+0x10/0x10 [ 1556.671159][ T1311] dev_hard_start_xmit+0x22f/0xa80 [ 1556.676543][ T1311] __dev_queue_xmit+0x2990/0x5a00 [ 1556.681800][ T1311] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1556.688121][ T1311] ? kmsan_get_metadata+0xf1/0x160 [ 1556.693496][ T1311] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1556.700109][ T1311] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1556.705454][ T1311] ? kmsan_get_metadata+0xf1/0x160 [ 1556.710864][ T1311] tx+0xb6/0x440 [ 1556.750743][ T1311] ? __pfx_tx+0x10/0x10 [ 1556.755356][ T1311] kthread+0x17d/0x370 [ 1556.759669][ T1311] ? __pfx_default_wake_function+0x10/0x10 [ 1556.765735][ T1311] kthread+0x53a/0x5f0 [ 1556.770071][ T1311] ? __pfx_kthread+0x10/0x10 [ 1556.774930][ T1311] ? __pfx_kthread+0x10/0x10 [ 1556.779793][ T1311] ret_from_fork+0x20f/0x8d0 [ 1556.784626][ T1311] ? __switch_to+0x573/0x7a0 [ 1556.790429][ T1311] ? __pfx_kthread+0x10/0x10 [ 1556.795273][ T1311] ret_from_fork_asm+0x1a/0x30 [ 1556.800323][ T1311] [ 1556.803494][ T1311] ---[ end trace 0000000000000000 ]--- [ 1556.809098][ T1311] ===================================================== [ 1556.816220][ T1311] BUG: KMSAN: uninit-value in lowpan_xmit+0xa6b/0x1d00 [ 1556.823225][ T1311] lowpan_xmit+0xa6b/0x1d00 [ 1556.827868][ T1311] dev_hard_start_xmit+0x22f/0xa80 [ 1556.833141][ T1311] __dev_queue_xmit+0x2990/0x5a00 [ 1556.838332][ T1311] tx+0xb6/0x440 [ 1556.842058][ T1311] kthread+0x17d/0x370 [ 1556.846296][ T1311] kthread+0x53a/0x5f0 [ 1556.850542][ T1311] ret_from_fork+0x20f/0x8d0 [ 1556.891374][ T1311] ret_from_fork_asm+0x1a/0x30 [ 1556.896320][ T1311] [ 1556.898714][ T1311] Uninit was stored to memory at: [ 1556.903980][ T1311] lowpan_xmit+0x68f/0x1d00 [ 1556.908623][ T1311] dev_hard_start_xmit+0x22f/0xa80 [ 1556.913895][ T1311] __dev_queue_xmit+0x2990/0x5a00 [ 1556.919112][ T1311] tx+0xb6/0x440 [ 1556.922838][ T1311] kthread+0x17d/0x370 [ 1556.927060][ T1311] kthread+0x53a/0x5f0 [ 1556.931293][ T1311] ret_from_fork+0x20f/0x8d0 [ 1556.936055][ T1311] ret_from_fork_asm+0x1a/0x30 [ 1556.941006][ T1311] [ 1556.943447][ T1311] Uninit was created at: [ 1556.947923][ T1311] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 1556.954099][ T1311] __alloc_skb+0x855/0x1190 [ 1556.958855][ T1311] new_skb+0x4a/0x550 [ 1556.962999][ T1311] aoecmd_cfg+0x2c2/0xb70 [ 1556.967492][ T1311] discover_timer+0x64/0x80 [ 1556.972171][ T1311] call_timer_fn+0x4c/0x510 [ 1556.976814][ T1311] __run_timer_base+0x80a/0xdb0 [ 1556.981812][ T1311] run_timer_softirq+0x3a/0x70 [ 1557.022600][ T1311] handle_softirqs+0x171/0x7b0 [ 1557.027621][ T1311] __irq_exit_rcu+0x9a/0x1e0 [ 1557.032382][ T1311] irq_exit_rcu+0x12/0x20 [ 1557.036876][ T1311] sysvec_apic_timer_interrupt+0x84/0x90 [ 1557.042813][ T1311] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1557.048958][ T1311] [ 1557.051376][ T1311] CPU: 1 UID: 0 PID: 1311 Comm: aoe_tx0 Tainted: G W syzkaller #0 PREEMPT(full) [ 1557.062129][ T1311] Tainted: [W]=WARN [ 1557.066008][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.076181][ T1311] ===================================================== [ 1557.083231][ T1311] Disabling lock debugging due to kernel taint [ 1557.089481][ T1311] Kernel panic - not syncing: kmsan.panic set ... [ 1557.096016][ T1311] CPU: 1 UID: 0 PID: 1311 Comm: aoe_tx0 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1557.106781][ T1311] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1557.111873][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1557.122028][ T1311] Call Trace: [ 1557.125386][ T1311] [ 1557.128385][ T1311] __dump_stack+0x26/0x30 [ 1557.132860][ T1311] dump_stack_lvl+0x50/0x1c0 [ 1557.137598][ T1311] ? dump_stack+0x12/0x25 [ 1557.142069][ T1311] dump_stack+0x1e/0x25 [ 1557.146349][ T1311] vpanic+0x7b4/0x1430 [ 1557.150581][ T1311] panic+0x15d/0x160 [ 1557.154662][ T1311] kmsan_report+0x31a/0x320 [ 1557.159328][ T1311] ? __msan_warning+0x1b/0x30 [ 1557.164274][ T1311] ? lowpan_xmit+0xa6b/0x1d00 [ 1557.169088][ T1311] ? dev_hard_start_xmit+0x22f/0xa80 [ 1557.174507][ T1311] ? __dev_queue_xmit+0x2990/0x5a00 [ 1557.179841][ T1311] ? tx+0xb6/0x440 [ 1557.183711][ T1311] ? kthread+0x17d/0x370 [ 1557.188091][ T1311] ? kthread+0x53a/0x5f0 [ 1557.192489][ T1311] ? ret_from_fork+0x20f/0x8d0 [ 1557.197381][ T1311] ? ret_from_fork_asm+0x1a/0x30 [ 1557.202472][ T1311] ? kmsan_get_metadata+0xf1/0x160 [ 1557.207748][ T1311] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1557.214238][ T1311] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1557.220474][ T1311] ? report_bug+0x196/0x1d0 [ 1557.225212][ T1311] ? lowpan_xmit+0xa10/0x1d00 [ 1557.230027][ T1311] ? lowpan_xmit+0xa0e/0x1d00 [ 1557.234845][ T1311] ? handle_bug+0xb2/0x230 [ 1557.239490][ T1311] ? exc_invalid_op+0x1f/0x50 [ 1557.244337][ T1311] ? kmsan_get_metadata+0xf1/0x160 [ 1557.249623][ T1311] __msan_warning+0x1b/0x30 [ 1557.254268][ T1311] lowpan_xmit+0xa6b/0x1d00 [ 1557.258906][ T1311] ? validate_xmit_xfrm+0x84/0x19e0 [ 1557.264241][ T1311] ? netif_skb_features+0x1bd3/0x1ea0 [ 1557.269786][ T1311] ? kmsan_report+0x2a0/0x320 [ 1557.274617][ T1311] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1557.281208][ T1311] ? __pfx_lowpan_xmit+0x10/0x10 [ 1557.286288][ T1311] dev_hard_start_xmit+0x22f/0xa80 [ 1557.291575][ T1311] __dev_queue_xmit+0x2990/0x5a00 [ 1557.296748][ T1311] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1557.302970][ T1311] ? kmsan_get_metadata+0xf1/0x160 [ 1557.308239][ T1311] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1557.314740][ T1311] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1557.319997][ T1311] ? kmsan_get_metadata+0xf1/0x160 [ 1557.325314][ T1311] tx+0xb6/0x440 [ 1557.329025][ T1311] ? __pfx_tx+0x10/0x10 [ 1557.333341][ T1311] kthread+0x17d/0x370 [ 1557.337565][ T1311] ? __pfx_default_wake_function+0x10/0x10 [ 1557.343536][ T1311] kthread+0x53a/0x5f0 [ 1557.347774][ T1311] ? __pfx_kthread+0x10/0x10 [ 1557.352520][ T1311] ? __pfx_kthread+0x10/0x10 [ 1557.357264][ T1311] ret_from_fork+0x20f/0x8d0 [ 1557.362074][ T1311] ? __switch_to+0x573/0x7a0 [ 1557.367170][ T1311] ? __pfx_kthread+0x10/0x10 [ 1557.371942][ T1311] ret_from_fork_asm+0x1a/0x30 [ 1557.377035][ T1311] [ 1557.380440][ T1311] Kernel Offset: disabled [ 1557.384811][ T1311] Rebooting in 86400 seconds..