last executing test programs: 18m18.928460055s ago: executing program 32 (id=98): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 18m14.411041957s ago: executing program 33 (id=114): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syslog(0x2, 0xfffffffffffffffd, 0xd) close(0xffffffffffffffff) futex(0x0, 0x83, 0x1, 0x0, 0x0, 0x1) 18m9.580774508s ago: executing program 34 (id=136): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000180)='\"', 0x1}], 0x1) write(r0, &(0x7f0000001e00)="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", 0xfdef) 17m26.127505706s ago: executing program 35 (id=303): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 16m21.040549205s ago: executing program 36 (id=563): open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m9.016261621s ago: executing program 37 (id=557): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 14m35.048724851s ago: executing program 6 (id=1068): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000200)) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x824021, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newnexthop={0x24, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @rand_addr=0x64010102}, 'batadv0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 14m34.773366295s ago: executing program 6 (id=1070): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000600)=[{&(0x7f0000000640)=""/81, 0x51}], 0x1, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 14m34.163831209s ago: executing program 6 (id=1073): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x366, 0xc000, 0x800c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m32.239229763s ago: executing program 6 (id=1080): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 14m30.963870945s ago: executing program 6 (id=1087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x8, 0x0, 0x6, 0x6, 0x6, 0xff06, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 14m30.213684587s ago: executing program 6 (id=1090): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x7, 0x0, 0x4}) r2 = getpgrp(0x0) r3 = gettid() r4 = getpgid(r3) rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000200)={0x5, 0x8}) rt_tgsigqueueinfo(r2, r3, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 14m28.967895658s ago: executing program 38 (id=1090): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x7, 0x0, 0x4}) r2 = getpgrp(0x0) r3 = gettid() r4 = getpgid(r3) rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000200)={0x5, 0x8}) rt_tgsigqueueinfo(r2, r3, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 4m11.824440024s ago: executing program 1 (id=3755): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000480)='\x00', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 4m6.724453597s ago: executing program 5 (id=3770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="42f7a8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, 0x0}, 0x440}], 0x0, 0x0, 0x0}) 4m5.493376624s ago: executing program 1 (id=3773): epoll_create(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, r1, 0x21, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x400) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x4011) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000100)={0x11, 0x80f3, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 4m5.314761096s ago: executing program 5 (id=3774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1012}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syz_tun\x00', 0x41}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0x2000000, 0x2000000}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='20000000\n', 0x9) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="52540012345652540065432108004500002600004000401121c50a0000010a000002123456780012792130313233343536373839"], 0x34) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="52540012345652540065432108004500002600004000401121c50a0000010a000002123456780012792130313233343536373839"], 0x34) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="52540012345652540065432108004500002600004000401121c50a0000010a000002123456780012792130313233343536373839"], 0x34) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="52540012345652540065432108004500002600004000401121c50a0000010a000002123456780012792130313233343536373839"], 0x34) 4m3.801375071s ago: executing program 0 (id=3778): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\x01\x00\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x90\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde=\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84\x00\x00r\x8f\b\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0x66, &(0x7f0000001080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0xfe, '\x00', {0x7, 0x6, "724bc1", 0x400, 0x32, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 4m3.570746468s ago: executing program 1 (id=3780): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000007c0)=0xffffffff) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 4m3.351433131s ago: executing program 5 (id=3783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='tpm_tis\x00', 0x8) close(r1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/drivers/tpm_tis\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000300)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='pcspkr\x00', 0x7) close(r3) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tpm/tpm0/enabled\x00', 0x0, 0x0) 4m3.018205362s ago: executing program 0 (id=3785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) getegid() io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) 4m2.851302917s ago: executing program 5 (id=3786): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x400001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read(r1, &(0x7f0000000040)=""/43, 0x2b) vmsplice(r2, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) getxattr(0x0, &(0x7f0000000580)=@known='user.syz\x00', 0x0, 0x0) 4m0.692284591s ago: executing program 0 (id=3788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000002000)='./file0\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0)) 3m59.288636783s ago: executing program 0 (id=3790): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 3m59.19255276s ago: executing program 5 (id=3792): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000080)=0x2) 3m48.180060088s ago: executing program 39 (id=3780): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000007c0)=0xffffffff) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 3m44.210171227s ago: executing program 40 (id=3790): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 3m43.280056349s ago: executing program 41 (id=3792): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000080)=0x2) 19.935017239s ago: executing program 7 (id=4310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xc, 0xb}, {0xffff, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 18.719838461s ago: executing program 4 (id=4311): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd632}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000014) 18.563414002s ago: executing program 7 (id=4313): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 18.332318116s ago: executing program 4 (id=4314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 16.895844701s ago: executing program 4 (id=4316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x8c) 16.607285412s ago: executing program 3 (id=4317): socket(0x1e, 0x4, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000002100)={0x4000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 15.567839021s ago: executing program 4 (id=4319): fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x43, 0xd, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2", 0x0, 0x0, 0xffffffff}, 0x50) 15.34771017s ago: executing program 3 (id=4320): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) shutdown(r3, 0x2) 15.342472737s ago: executing program 9 (id=4321): mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000040)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 14.287783289s ago: executing program 7 (id=4322): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) sched_setattr(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000580)={0x0, 0xf5cf, 0x1000, 0x3, 0x2d1}, &(0x7f00000003c0)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/154, 0x9a}], 0x1) 14.145643378s ago: executing program 4 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13.729938377s ago: executing program 2 (id=4324): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) 13.64317437s ago: executing program 3 (id=4325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000007d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.191324375s ago: executing program 3 (id=4326): epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) pselect6(0x40, &(0x7f00000001c0)={0x8, 0xe0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 11.500311674s ago: executing program 9 (id=4327): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c0840, &(0x7f0000000040), 0x1, 0x5e9, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 11.428509384s ago: executing program 8 (id=4328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(r1) r5 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0) get_robust_list(r5, 0x0, 0x0) 10.803867563s ago: executing program 2 (id=4329): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 9.060571573s ago: executing program 8 (id=4330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 9.056318481s ago: executing program 9 (id=4331): mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r0 = epoll_create1(0x80000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe2e, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x132}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba0, 0x20000, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7301, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x250, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r6, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 8.895825935s ago: executing program 3 (id=4332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6) 8.847054835s ago: executing program 7 (id=4333): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 7.801105153s ago: executing program 8 (id=4334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=@ipv6_newrule={0x3c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x1000c}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 7.344935758s ago: executing program 2 (id=4335): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000) unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x10003, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.215324265s ago: executing program 9 (id=4336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) capset(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.140826732s ago: executing program 8 (id=4337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) 4.892307323s ago: executing program 2 (id=4338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) 4.015176493s ago: executing program 9 (id=4339): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0xffe) 2.782797198s ago: executing program 4 (id=4340): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000100)=0x93, 0x4) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r1, &(0x7f0000023f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfce0}, 0x100db30}], 0x1, 0x40002062, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x13cad4c8689ffbc5}, 0x4084) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f00000000c0)=0xfa3) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES32]) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04023c20"], 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x50) 2.779720442s ago: executing program 2 (id=4341): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 2.707732956s ago: executing program 7 (id=4342): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 1.371097006s ago: executing program 8 (id=4343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1a4, 0x3, 0x9, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 382.139164ms ago: executing program 9 (id=4344): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioperm(0x100, 0x9, 0x20) geteuid() ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000280)=ANY=[], 0x0, 0x1c7, &(0x7f0000000080)="$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") syz_emit_ethernet(0x19, &(0x7f0000000280)={@remote, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x16, 0xf0, 'x'}}}}}, 0x0) 270.090757ms ago: executing program 7 (id=4345): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@errors_remount}]}, 0x1, 0x52f, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x80, 0x2b, 0x0, @empty, @empty}}}}) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') 255.68363ms ago: executing program 2 (id=4346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, 0x0, 0x0, &(0x7f00002c8000/0x3000)=nil, 0x3000, 0x5}) 203.705877ms ago: executing program 3 (id=4347): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 8 (id=4348): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x100, 0x100, 0xfeffffff, 0x0, 0x100, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x3, 0x1], 0x0, 0x4}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'batadv_slave_1\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0xd7983ab608da75d7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001e000000200000000000000000000000000000004000000000a006080", @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): k. [ 853.320014][T18708] netlink: 'syz.5.3422': attribute type 2 has an invalid length. [ 853.320053][T18708] netlink: 'syz.5.3422': attribute type 2 has an invalid length. [ 854.236116][ T982] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 854.391309][ T982] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 854.396031][ T982] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.413406][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.413448][ T982] usb 2-1: Product: syz [ 854.413476][ T982] usb 2-1: Manufacturer: syz [ 854.413504][ T982] usb 2-1: SerialNumber: syz [ 854.516510][ T982] usb-storage 2-1:1.0: USB Mass Storage device detected [ 854.680462][ T982] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 854.683922][ T982] scsi host1: usb-storage 2-1:1.0 [ 854.836761][ T982] usb 2-1: USB disconnect, device number 17 [ 856.751186][T18763] fuse: fd is not a fuse device [ 858.383203][T18779] rdma_rxe: rxe_newlink: failed to add lo [ 858.485998][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3444'. [ 865.998489][T18879] fuse: fd is not a fuse device [ 866.420113][T18885] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5613] was attempted by ""[18885] [ 867.434730][T18892] netlink: 'syz.0.3478': attribute type 1 has an invalid length. [ 867.700221][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 868.565264][T18892] bond7: entered promiscuous mode [ 868.565320][T18892] bond7: entered allmulticast mode [ 868.565739][T18892] 8021q: adding VLAN 0 to HW filter on device bond7 [ 868.705762][T18897] macsec1: entered promiscuous mode [ 868.706742][T18897] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 868.752714][T18899] erspan1: entered allmulticast mode [ 868.772609][T18899] bond7: (slave erspan1): making interface the new active one [ 868.772646][T18899] erspan1: entered promiscuous mode [ 868.804106][T18899] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 869.187390][T18909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3481'. [ 869.187428][T18909] openvswitch: netlink: Flow actions attr not present in new flow. [ 869.976946][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.977026][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.000146][T18906] sch_fq: defrate 4294967295 ignored. [ 871.891482][T14889] libceph: connect (1)[c::]:6789 error -101 [ 871.891691][T14889] libceph: mon0 (1)[c::]:6789 connect error [ 872.012317][T18930] ceph: No mds server is up or the cluster is laggy [ 872.145066][T14889] libceph: connect (1)[c::]:6789 error -101 [ 872.145275][T14889] libceph: mon0 (1)[c::]:6789 connect error [ 873.747516][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'. [ 873.747554][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'. [ 873.918022][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3496'. [ 874.154763][T18973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3501'. [ 874.154801][T18973] openvswitch: netlink: Flow actions attr not present in new flow. [ 875.598033][T18985] syz.2.3502: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 875.598457][T18985] CPU: 1 UID: 0 PID: 18985 Comm: syz.2.3502 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.598516][T18985] Tainted: [L]=SOFTLOCKUP [ 875.598531][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 875.598557][T18985] Call Trace: [ 875.598571][T18985] [ 875.598587][T18985] dump_stack_lvl+0x100/0x190 [ 875.598650][T18985] warn_alloc.cold+0x9e/0xb2 [ 875.598697][T18985] ? __pfx_warn_alloc+0x10/0x10 [ 875.598750][T18985] ? __kasan_kmalloc+0xaa/0xb0 [ 875.598811][T18985] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 875.598864][T18985] ? xskq_create+0x52/0x290 [ 875.598924][T18985] ? do_sock_setsockopt+0xf3/0x1d0 [ 875.598965][T18985] ? do_syscall_64+0x123/0x790 [ 875.599005][T18985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.599071][T18985] ? xsk_setsockopt+0x743/0xab0 [ 875.599131][T18985] __vmalloc_node_range_noprof+0x123b/0x1420 [ 875.599196][T18985] ? xsk_setsockopt+0x743/0xab0 [ 875.599265][T18985] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 875.599311][T18985] ? kasan_save_track+0x14/0x30 [ 875.599373][T18985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.599428][T18985] ? __kasan_kmalloc+0xaa/0xb0 [ 875.599492][T18985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.599541][T18985] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 875.599596][T18985] ? xskq_create+0x52/0x290 [ 875.599659][T18985] ? xsk_setsockopt+0x743/0xab0 [ 875.599718][T18985] xskq_create+0x18f/0x290 [ 875.599779][T18985] ? xsk_setsockopt+0x743/0xab0 [ 875.599843][T18985] xsk_setsockopt+0x743/0xab0 [ 875.599899][T18985] ? __pfx_aa_sk_perm+0x10/0x10 [ 875.599967][T18985] ? __pfx_xsk_setsockopt+0x10/0x10 [ 875.600027][T18985] ? __rcu_read_unlock+0x26a/0x5e0 [ 875.600069][T18985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.600125][T18985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.600175][T18985] ? aa_sock_opt_perm+0x114/0x1e0 [ 875.600231][T18985] ? __pfx_xsk_setsockopt+0x10/0x10 [ 875.600298][T18985] do_sock_setsockopt+0xf3/0x1d0 [ 875.600347][T18985] __sys_setsockopt+0x195/0x220 [ 875.600420][T18985] __x64_sys_setsockopt+0xbd/0x160 [ 875.600478][T18985] ? do_syscall_64+0xae/0x790 [ 875.600519][T18985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.600568][T18985] ? lockdep_hardirqs_on+0x7d/0x110 [ 875.600610][T18985] do_syscall_64+0x123/0x790 [ 875.600657][T18985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.600699][T18985] RIP: 0033:0x7f1e14f9e159 [ 875.600732][T18985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.600772][T18985] RSP: 002b:00007f1e15dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 875.600810][T18985] RAX: ffffffffffffffda RBX: 00007f1e15226180 RCX: 00007f1e14f9e159 [ 875.600839][T18985] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 875.600865][T18985] RBP: 00007f1e1503506b R08: 0000000000000004 R09: 0000000000000000 [ 875.600892][T18985] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.600918][T18985] R13: 00007f1e15226218 R14: 00007f1e15226180 R15: 00007ffc289b4068 [ 875.600972][T18985] [ 875.601018][T18985] Mem-Info: [ 875.601084][T18985] active_anon:116808 inactive_anon:40 isolated_anon:0 [ 875.601084][T18985] active_file:108 inactive_file:63924 isolated_file:0 [ 875.601084][T18985] unevictable:0 dirty:277 writeback:0 [ 875.601084][T18985] slab_reclaimable:8438 slab_unreclaimable:113076 [ 875.601084][T18985] mapped:76453 shmem:109700 pagetables:1908 [ 875.601084][T18985] sec_pagetables:0 bounce:0 [ 875.601084][T18985] kernel_misc_reclaimable:0 [ 875.601084][T18985] free:1142767 free_pcp:12911 free_cma:0 [ 875.601221][T18985] Node 0 active_anon:465184kB inactive_anon:160kB active_file:432kB inactive_file:255448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:305772kB dirty:1104kB writeback:0kB shmem:436752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16804kB pagetables:7492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 875.601365][T18985] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:2048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 875.601507][T18985] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.601679][T18985] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 875.601935][T18985] Node 0 DMA32 free:614436kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:465184kB inactive_anon:160kB active_file:432kB inactive_file:255448kB unevictable:0kB writepending:1104kB zspages:0kB present:3129332kB managed:2530548kB mlocked:0kB bounce:0kB free_pcp:51612kB local_pcp:26688kB free_cma:0kB [ 875.602119][T18985] lowmem_reserve[]: 0 0 0 0 0 [ 875.602386][T18985] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 875.602554][T18985] lowmem_reserve[]: 0 0 0 0 0 [ 875.602941][T18985] Node 1 Normal free:3941272kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 875.603114][T18985] lowmem_reserve[]: 0 0 0 0 0 [ 875.603371][T18985] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 875.604090][T18985] Node 0 DMA32: 2695*4kB (UME) 1401*8kB (UME) 594*16kB (UME) 233*32kB (UME) 112*64kB (ME) 38*128kB (UME) 11*256kB (ME) 3*512kB (UME) 4*1024kB (UE) 5*2048kB (UME) 133*4096kB (UM) = 614436kB [ 875.605137][T18985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 875.607806][T18985] Node 1 Normal: 3*4kB (M) 2*8kB (UM) 9*16kB (UM) 9*32kB (UM) 8*64kB (UM) 8*128kB (UM) 6*256kB (UM) 5*512kB (UM) 3*1024kB (M) 4*2048kB (UM) 958*4096kB (UM) = 3941324kB [ 875.608819][T18985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 875.608880][T18985] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 875.608940][T18985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 875.609008][T18985] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 875.609073][T18985] 173711 total pagecache pages [ 875.609114][T18985] 0 pages in swap cache [ 875.609154][T18985] Free swap = 124996kB [ 875.609217][T18985] Total swap = 124996kB [ 875.609263][T18985] 2097051 pages RAM [ 875.609304][T18985] 0 pages HighMem/MovableOnly [ 875.609349][T18985] 432779 pages reserved [ 875.609452][T18985] 0 pages cma reserved [ 878.209112][T19016] team0: Port device xfrm0 removed [ 878.270664][T19016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.271297][ T5941] tipc: Resetting bearer [ 880.375468][T19046] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 881.302828][T19046] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 881.478715][T19058] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 883.949280][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 883.949309][ T31] audit: type=1326 audit(1700000611.338:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19092 comm="syz.3.3531" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb00d99e159 code=0x0 [ 884.515017][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3545'. [ 895.625182][T19223] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 898.059603][T19241] ip6gre2: entered allmulticast mode [ 898.070373][ T50] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 900.240029][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 900.241882][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 900.574348][T19270] tipc: New replicast peer: 127.0.0.1 [ 900.574695][T19270] tipc: Enabled bearer , priority 10 [ 900.578199][T19274] sch_fq: defrate 4294967295 ignored. [ 900.608794][T19274] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3583'. [ 900.608825][T19274] openvswitch: netlink: Flow actions attr not present in new flow. [ 902.441392][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 903.022711][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3591'. [ 904.017210][T19308] bond6: entered promiscuous mode [ 904.017248][T19308] bond6: entered allmulticast mode [ 904.696018][T19315] veth0_to_bond: entered promiscuous mode [ 904.696491][T19315] bond8: entered promiscuous mode [ 904.696659][T19315] veth4: entered promiscuous mode [ 904.748904][T19315] veth5: entered promiscuous mode [ 904.781674][T19315] bond9: entered promiscuous mode [ 904.839356][T19315] bridge4: entered promiscuous mode [ 904.860370][T19315] veth6: entered promiscuous mode [ 905.172583][T19328] overlayfs: failed to clone upperpath [ 908.587147][T19379] Set syz0 is full, maxelem 0 reached [ 908.642550][T19381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3611'. [ 911.640784][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 912.143251][T19410] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 912.522964][T19421] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3619'. [ 913.402761][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'. [ 913.670275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 914.722838][T19410] bond6: (slave bridge3): making interface the new active one [ 914.739703][T19410] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 915.377775][T19465] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3633'. [ 915.430937][T19467] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3633'. [ 918.664932][T19516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 921.299971][T19536] syz.4.3655: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 921.300263][T19536] CPU: 1 UID: 0 PID: 19536 Comm: syz.4.3655 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.300324][T19536] Tainted: [L]=SOFTLOCKUP [ 921.300340][T19536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 921.300366][T19536] Call Trace: [ 921.300379][T19536] [ 921.300395][T19536] dump_stack_lvl+0x100/0x190 [ 921.300457][T19536] warn_alloc.cold+0x9e/0xb2 [ 921.300504][T19536] ? __pfx_warn_alloc+0x10/0x10 [ 921.300556][T19536] ? __kasan_kmalloc+0xaa/0xb0 [ 921.300618][T19536] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 921.300668][T19536] ? xskq_create+0x52/0x290 [ 921.300729][T19536] ? do_sock_setsockopt+0xf3/0x1d0 [ 921.300770][T19536] ? do_syscall_64+0x123/0x790 [ 921.300810][T19536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.300876][T19536] ? xsk_setsockopt+0x743/0xab0 [ 921.300936][T19536] __vmalloc_node_range_noprof+0x123b/0x1420 [ 921.301006][T19536] ? xsk_setsockopt+0x743/0xab0 [ 921.301075][T19536] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 921.301120][T19536] ? kasan_save_track+0x14/0x30 [ 921.301182][T19536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.301231][T19536] ? __kasan_kmalloc+0xaa/0xb0 [ 921.301295][T19536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.301344][T19536] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 921.301398][T19536] ? xskq_create+0x52/0x290 [ 921.301461][T19536] ? xsk_setsockopt+0x743/0xab0 [ 921.301520][T19536] xskq_create+0x18f/0x290 [ 921.301581][T19536] ? xsk_setsockopt+0x743/0xab0 [ 921.301645][T19536] xsk_setsockopt+0x743/0xab0 [ 921.301701][T19536] ? __pfx_aa_sk_perm+0x10/0x10 [ 921.301769][T19536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 921.301828][T19536] ? __rcu_read_unlock+0x26a/0x5e0 [ 921.301869][T19536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.301925][T19536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.301979][T19536] ? aa_sock_opt_perm+0x114/0x1e0 [ 921.302034][T19536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 921.302097][T19536] do_sock_setsockopt+0xf3/0x1d0 [ 921.302144][T19536] __sys_setsockopt+0x195/0x220 [ 921.302212][T19536] __x64_sys_setsockopt+0xbd/0x160 [ 921.302269][T19536] ? do_syscall_64+0xae/0x790 [ 921.302309][T19536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.302358][T19536] ? lockdep_hardirqs_on+0x7d/0x110 [ 921.302400][T19536] do_syscall_64+0x123/0x790 [ 921.302446][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.302489][T19536] RIP: 0033:0x7fd613f9e159 [ 921.302521][T19536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.302561][T19536] RSP: 002b:00007fd614e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 921.302600][T19536] RAX: ffffffffffffffda RBX: 00007fd614226180 RCX: 00007fd613f9e159 [ 921.302628][T19536] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 921.302654][T19536] RBP: 00007fd61403506b R08: 0000000000000004 R09: 0000000000000000 [ 921.302680][T19536] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.302705][T19536] R13: 00007fd614226218 R14: 00007fd614226180 R15: 00007ffe561e2f98 [ 921.302759][T19536] [ 921.302804][T19536] Mem-Info: [ 921.302870][T19536] active_anon:46875 inactive_anon:65783 isolated_anon:0 [ 921.302870][T19536] active_file:156 inactive_file:61573 isolated_file:0 [ 921.302870][T19536] unevictable:0 dirty:429 writeback:0 [ 921.302870][T19536] slab_reclaimable:8880 slab_unreclaimable:113285 [ 921.302870][T19536] mapped:72853 shmem:105805 pagetables:1928 [ 921.302870][T19536] sec_pagetables:0 bounce:0 [ 921.302870][T19536] kernel_misc_reclaimable:0 [ 921.302870][T19536] free:1152164 free_pcp:8643 free_cma:0 [ 921.303008][T19536] Node 0 active_anon:185452kB inactive_anon:263132kB active_file:624kB inactive_file:246044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:291372kB dirty:1716kB writeback:0kB shmem:421172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16816kB pagetables:7572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 921.303146][T19536] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:2048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 921.303281][T19536] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.303452][T19536] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 921.303707][T19536] Node 0 DMA32 free:651940kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:185452kB inactive_anon:263132kB active_file:624kB inactive_file:246044kB unevictable:0kB writepending:1716kB zspages:856kB present:3129332kB managed:2530548kB mlocked:0kB bounce:0kB free_pcp:34572kB local_pcp:21140kB free_cma:0kB [ 921.303882][T19536] lowmem_reserve[]: 0 0 0 0 0 [ 921.304148][T19536] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.304313][T19536] lowmem_reserve[]: 0 0 0 0 0 [ 921.304614][T19536] Node 1 Normal free:3941356kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.304787][T19536] lowmem_reserve[]: 0 0 0 0 0 [ 921.305049][T19536] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 921.305771][T19536] Node 0 DMA32: 6375*4kB (UME) 2491*8kB (UME) 741*16kB (UME) 293*32kB (UME) 149*64kB (UME) 46*128kB (ME) 14*256kB (ME) 8*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 133*4096kB (UM) = 651940kB [ 921.306798][T19536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 921.307433][T19536] Node 1 Normal: 1*4kB (M) 1*8kB (U) 8*16kB (UM) 7*32kB (U) 8*64kB (UM) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 959*4096kB (UM) = 3941356kB [ 921.308500][T19536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.308560][T19536] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 921.308626][T19536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.308693][T19536] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 921.308752][T19536] 167514 total pagecache pages [ 921.308800][T19536] 1 pages in swap cache [ 921.308840][T19536] Free swap = 71040kB [ 921.308889][T19536] Total swap = 124996kB [ 921.308931][T19536] 2097051 pages RAM [ 921.308977][T19536] 0 pages HighMem/MovableOnly [ 921.309017][T19536] 432779 pages reserved [ 921.309057][T19536] 0 pages cma reserved [ 924.448349][T19538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.458126][T19538] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.777471][T19538] bridge0: port 1(dummy0) entered blocking state [ 925.777660][T19538] bridge0: port 1(dummy0) entered listening state [ 926.351511][T19549] syz.2.3667 (19549) used greatest stack depth: 19776 bytes left [ 926.541580][ T31] audit: type=1800 audit(1700000653.940:605): pid=19558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3661" name="nullb0" dev="tmpfs" ino=628 res=0 errno=0 [ 926.937275][T19538] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 927.030512][T19566] fuse: fd is not a fuse device [ 927.513601][T19573] ip_tables: iptables: counters copy to user failed while replacing table [ 928.919695][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 930.841802][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.841914][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.258273][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3672'. [ 931.954806][T19613] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 932.849951][T19610] IPVS: Error connecting to the multicast addr [ 935.503738][T19634] fuse: Bad value for 'fd' [ 938.966158][T19660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3690'. [ 939.035803][T19666] syz.0.3690 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 942.577582][T19678] xt_hashlimit: max too large, truncated to 1048576 [ 944.009121][T19703] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 946.115377][ T52] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 946.115420][ T52] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 946.243416][T19729] netlink: 'syz.4.3710': attribute type 39 has an invalid length. [ 946.308478][T19729] hsr_slave_0 (unregistering): left promiscuous mode [ 946.506871][T19733] ceph: No mds server is up or the cluster is laggy [ 946.518813][T14889] libceph: connect (1)[c::]:6789 error -101 [ 946.520618][T14889] libceph: mon0 (1)[c::]:6789 connect error [ 946.604600][T19743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3711'. [ 946.604631][T19743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3711'. [ 946.604654][T19743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3711'. [ 946.778519][T14889] libceph: connect (1)[c::]:6789 error -101 [ 946.895068][T14889] libceph: mon0 (1)[c::]:6789 connect error [ 947.607657][T14889] libceph: connect (1)[c::]:6789 error -101 [ 947.607885][T14889] libceph: mon0 (1)[c::]:6789 connect error [ 950.365526][T19772] tipc: Started in network mode [ 950.365551][T19772] tipc: Node identity 4, cluster identity 4711 [ 950.365568][T19772] tipc: Node number set to 4 [ 952.137906][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 1024 jiffies old. [ 954.487570][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 954.489390][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 954.489452][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 954.489514][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 954.509418][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 954.509469][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 954.509515][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 954.509556][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 955.800249][ C1] bridge0: port 1(dummy0) entered learning state [ 959.584732][T18598] syz.2.3398 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 959.772107][T18598] CPU: 0 UID: 0 PID: 18598 Comm: syz.2.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.772174][T18598] Tainted: [L]=SOFTLOCKUP [ 959.772190][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 959.772214][T18598] Call Trace: [ 959.772229][T18598] [ 959.772244][T18598] dump_stack_lvl+0x100/0x190 [ 959.772306][T18598] dump_header+0xfb/0x606 [ 959.772355][T18598] oom_kill_process.cold+0xd/0x380 [ 959.772406][T18598] out_of_memory+0x340/0x14f0 [ 959.772458][T18598] ? __pfx_out_of_memory+0x10/0x10 [ 959.772501][T18598] ? __pfx___schedule+0x10/0x10 [ 959.772580][T18598] mem_cgroup_out_of_memory+0xc6/0x130 [ 959.772642][T18598] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 959.772702][T18598] ? preempt_schedule_common+0x3c/0xb0 [ 959.772780][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.772828][T18598] ? _raw_spin_unlock+0x3e/0x50 [ 959.772893][T18598] try_charge_memcg+0x783/0xf60 [ 959.772954][T18598] ? __pfx_try_charge_memcg+0x10/0x10 [ 959.773001][T18598] ? find_held_lock+0x2b/0x80 [ 959.773055][T18598] ? rcu_read_unlock+0x17/0x60 [ 959.773105][T18598] ? rcu_read_unlock+0x17/0x60 [ 959.773154][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.773202][T18598] ? find_held_lock+0x2b/0x80 [ 959.773257][T18598] ? rcu_read_unlock+0x17/0x60 [ 959.773305][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.773364][T18598] charge_memcg+0x1ae/0x210 [ 959.773415][T18598] __mem_cgroup_charge+0x2b/0x1c0 [ 959.773472][T18598] shmem_alloc_and_add_folio+0x451/0xd40 [ 959.773538][T18598] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 959.773592][T18598] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 959.773644][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.773692][T18598] ? __lock_acquire+0x5c0/0x1f40 [ 959.773737][T18598] shmem_get_folio_gfp+0x75b/0x1980 [ 959.773799][T18598] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 959.773846][T18598] ? inode_set_ctime_current+0x9c/0x850 [ 959.773894][T18598] ? find_held_lock+0x2b/0x80 [ 959.773951][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.773999][T18598] ? timestamp_truncate+0x22e/0x2f0 [ 959.774050][T18598] shmem_write_begin+0x1a4/0x420 [ 959.774106][T18598] ? __pfx_shmem_write_begin+0x10/0x10 [ 959.774154][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.774204][T18598] ? inode_set_ctime_current+0x283/0x850 [ 959.774250][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.774297][T18598] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 959.774354][T18598] ? inode_maybe_inc_iversion+0x169/0x220 [ 959.774425][T18598] generic_perform_write+0x292/0xa40 [ 959.774491][T18598] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 959.774568][T18598] ? __pfx_generic_perform_write+0x10/0x10 [ 959.774637][T18598] ? mnt_put_write_access_file+0x4e/0x100 [ 959.774680][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.774728][T18598] ? file_update_time_flags+0x38c/0x520 [ 959.774786][T18598] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 959.774843][T18598] shmem_file_write_iter+0x10e/0x140 [ 959.774905][T18598] __kernel_write_iter+0x2ac/0x930 [ 959.774966][T18598] ? __pfx___kernel_write_iter+0x10/0x10 [ 959.775023][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.775071][T18598] ? __up_read+0x333/0x980 [ 959.775122][T18598] ? dump_user_range+0x65e/0xad0 [ 959.775178][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.775227][T18598] ? copy_mc_enhanced_fast_string+0x6/0xf [ 959.775292][T18598] dump_user_range+0x3f9/0xad0 [ 959.775360][T18598] ? __pfx_dump_user_range+0x10/0x10 [ 959.775423][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.775480][T18598] ? __pfx_writenote+0x10/0x10 [ 959.775546][T18598] ? elf_core_dump+0x1f25/0x3d20 [ 959.775615][T18598] elf_core_dump+0x2d68/0x3d20 [ 959.775703][T18598] ? __pfx_elf_core_dump+0x10/0x10 [ 959.775761][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.775808][T18598] ? kasan_save_stack+0x3f/0x50 [ 959.775869][T18598] ? kasan_save_stack+0x30/0x50 [ 959.775929][T18598] ? kasan_save_track+0x14/0x30 [ 959.775989][T18598] ? __kasan_kmalloc+0xaa/0xb0 [ 959.776049][T18598] ? vfs_coredump+0x21f6/0x54a0 [ 959.776102][T18598] ? get_signal+0x1f2a/0x21e0 [ 959.776140][T18598] ? arch_do_signal_or_restart+0x91/0x7e0 [ 959.776209][T18598] ? 0xffffffffff600000 [ 959.776258][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.776345][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.776392][T18598] ? lock_acquire+0x1d1/0x380 [ 959.776431][T18598] ? get_signal+0x1f2a/0x21e0 [ 959.776471][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.776528][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.776585][T18598] ? vfs_coredump+0x281a/0x54a0 [ 959.776639][T18598] ? __pfx_elf_core_dump+0x10/0x10 [ 959.776697][T18598] vfs_coredump+0x281a/0x54a0 [ 959.776772][T18598] ? __pfx_vfs_coredump+0x10/0x10 [ 959.776828][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.776876][T18598] ? __lock_acquire+0x5c0/0x1f40 [ 959.776926][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.776974][T18598] ? __lock_acquire+0x5c0/0x1f40 [ 959.777019][T18598] ? lock_acquire+0x1d1/0x380 [ 959.777056][T18598] ? unwind_next_frame+0xbd/0x2090 [ 959.777119][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.777167][T18598] ? lock_acquire+0x1d1/0x380 [ 959.777218][T18598] ? bpf_ksym_find+0x124/0x1c0 [ 959.777275][T18598] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 959.777355][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.777403][T18598] ? arch_stack_walk+0xa6/0xf0 [ 959.777468][T18598] ? __sigqueue_free+0xbe/0x2a0 [ 959.777524][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.777572][T18598] ? stack_trace_save+0x8e/0xc0 [ 959.777632][T18598] ? __pfx_stack_trace_save+0x10/0x10 [ 959.777694][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.777742][T18598] ? stack_depot_save_flags+0x27/0x9f0 [ 959.777804][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.777851][T18598] ? __lock_acquire+0x5c0/0x1f40 [ 959.777970][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.778018][T18598] ? proc_coredump_connector+0x2d3/0x4f0 [ 959.778067][T18598] ? __pfx_proc_coredump_connector+0x10/0x10 [ 959.778124][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.778172][T18598] ? rcu_is_watching+0x13/0xc0 [ 959.778231][T18598] get_signal+0x1f2a/0x21e0 [ 959.778291][T18598] ? __pfx_get_signal+0x10/0x10 [ 959.778346][T18598] arch_do_signal_or_restart+0x91/0x7e0 [ 959.778407][T18598] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 959.778480][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.778536][T18598] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.778594][T18598] irqentry_exit+0x402/0xa10 [ 959.778644][T18598] asm_exc_page_fault+0x26/0x30 [ 959.778684][T18598] RIP: 0033:0x7f1e14e53bd7 [ 959.778715][T18598] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 959.778755][T18598] RSP: 002b:00007f1e15de9120 EFLAGS: 00010202 [ 959.778787][T18598] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1e14f9e159 [ 959.778813][T18598] RDX: 00007f1e15de9140 RSI: 00007f1e15de9270 RDI: 000000000000000b [ 959.778839][T18598] RBP: 00007f1e1503506b R08: 0000000000000000 R09: 0000000000000000 [ 959.778865][T18598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 959.778891][T18598] R13: 00007f1e15226038 R14: 00007f1e15225fa0 R15: 00007ffc289b4068 [ 959.778944][T18598] [ 960.270253][T19863] md/raid1:md0: not clean -- starting background reconstruction [ 960.270276][T19863] md/raid1:md0: active with 2 out of 2 mirrors [ 960.372561][T18598] memory: usage 307200kB, limit 307200kB, failcnt 60147 [ 960.372593][T18598] memory+swap: usage 431948kB, limit 9007199254740988kB, failcnt 0 [ 960.372619][T18598] kmem: usage 5848kB, limit 9007199254740988kB, failcnt 0 [ 960.372642][T18598] Memory cgroup stats for /syz2: [ 960.372962][T18598] cache 308256768 [ 960.372979][T18598] rss 299008 [ 960.372993][T18598] rss_huge 0 [ 960.373013][T18598] shmem 308256768 [ 960.373029][T18598] mapped_file 115064832 [ 960.373045][T18598] dirty 0 [ 960.373058][T18598] writeback 0 [ 960.373072][T18598] workingset_refault_anon 647 [ 960.373088][T18598] workingset_refault_file 2508 [ 960.373105][T18598] swap 127741952 [ 960.373120][T18598] swapcached 139550720 [ 960.373135][T18598] pgpgin 514749 [ 960.373150][T18598] pgpgout 440944 [ 960.373165][T18598] pgfault 374333 [ 960.373179][T18598] pgmajfault 1251 [ 960.373194][T18598] inactive_anon 173281280 [ 960.373210][T18598] active_anon 135303168 [ 960.373226][T18598] inactive_file 0 [ 960.373241][T18598] active_file 0 [ 960.373256][T18598] unevictable 0 [ 960.373271][T18598] hierarchical_memory_limit 314572800 [ 960.373289][T18598] hierarchical_memsw_limit 9223372036854771712 [ 960.373307][T18598] total_cache 308256768 [ 960.373323][T18598] total_rss 299008 [ 960.373338][T18598] total_rss_huge 0 [ 960.373353][T18598] total_shmem 308256768 [ 960.373368][T18598] total_mapped_file 115064832 [ 960.373385][T18598] total_dirty 0 [ 960.373400][T18598] total_writeback 0 [ 960.373415][T18598] total_workingset_refault_anon 647 [ 960.373432][T18598] total_workingset_refault_file 2508 [ 960.373449][T18598] total_swap 127741952 [ 960.373465][T18598] total_swapcached 139550720 [ 960.373482][T18598] total_pgpgin 514749 [ 960.373497][T18598] total_pgpgout 440944 [ 960.373512][T18598] total_pgfault 374333 [ 960.373527][T18598] total_pgmajfault 1251 [ 960.373543][T18598] total_inactive_anon 173281280 [ 960.373560][T18598] total_active_anon 135303168 [ 960.373576][T18598] total_inactive_file 0 [ 960.373592][T18598] total_active_file 0 [ 960.373607][T18598] total_unevictable 0 [ 960.373623][T18598] anon_cost 0 [ 960.373637][T18598] file_cost 0 [ 960.373652][T18598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3398,pid=18598,uid=0 [ 960.375599][T18598] Memory cgroup out of memory: Killed process 18598 (syz.2.3398) total-vm:200560kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:58052kB, UID:0 pgtables:360kB oom_score_adj:0 [ 960.408892][T19863] md0: detected capacity change from 0 to 2048 [ 961.767582][T19878] md: resync of RAID array md0 [ 961.816296][T18613] syz.2.3398 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 961.816340][T18613] CPU: 0 UID: 0 PID: 18613 Comm: syz.2.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.816382][T18613] Tainted: [L]=SOFTLOCKUP [ 961.816394][T18613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 961.816412][T18613] Call Trace: [ 961.816423][T18613] [ 961.816435][T18613] dump_stack_lvl+0x100/0x190 [ 961.816482][T18613] dump_header+0xfb/0x606 [ 961.816518][T18613] oom_kill_process.cold+0xd/0x380 [ 961.816555][T18613] out_of_memory+0x340/0x14f0 [ 961.816595][T18613] ? __pfx_out_of_memory+0x10/0x10 [ 961.816625][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.816671][T18613] mem_cgroup_out_of_memory+0xc6/0x130 [ 961.816717][T18613] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 961.816761][T18613] ? find_held_lock+0x2b/0x80 [ 961.816808][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.816844][T18613] ? do_raw_spin_unlock+0x145/0x1e0 [ 961.816881][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.816920][T18613] ? _raw_spin_unlock+0x28/0x50 [ 961.816969][T18613] try_charge_memcg+0x783/0xf60 [ 961.817014][T18613] ? __pfx_try_charge_memcg+0x10/0x10 [ 961.817053][T18613] ? find_held_lock+0x2b/0x80 [ 961.817092][T18613] ? rcu_read_unlock+0x17/0x60 [ 961.817133][T18613] ? rcu_read_unlock+0x17/0x60 [ 961.817183][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.817230][T18613] ? find_held_lock+0x2b/0x80 [ 961.817283][T18613] ? rcu_read_unlock+0x17/0x60 [ 961.817329][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.817387][T18613] charge_memcg+0x1ae/0x210 [ 961.817438][T18613] __mem_cgroup_charge+0x2b/0x1c0 [ 961.817496][T18613] shmem_alloc_and_add_folio+0x451/0xd40 [ 961.817543][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.817583][T18613] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 961.817623][T18613] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 961.817669][T18613] shmem_get_folio_gfp+0x75b/0x1980 [ 961.817715][T18613] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 961.817755][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.817790][T18613] ? filemap_map_pages+0x1155/0x2060 [ 961.817829][T18613] shmem_fault+0x1fb/0xa30 [ 961.817868][T18613] ? __pfx_shmem_fault+0x10/0x10 [ 961.817910][T18613] ? __pfx_filemap_map_pages+0x10/0x10 [ 961.817945][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.817981][T18613] ? find_held_lock+0x2b/0x80 [ 961.818030][T18613] ? __pfx_filemap_map_pages+0x10/0x10 [ 961.818060][T18613] __do_fault+0x10b/0x440 [ 961.818106][T18613] do_fault+0xb3f/0x1830 [ 961.818138][T18613] ? __pfx_do_fault+0x10/0x10 [ 961.818165][T18613] ? rcu_read_unlock+0x2d/0xb0 [ 961.818200][T18613] ? rcu_read_unlock+0x2d/0xb0 [ 961.818235][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.818271][T18613] ? __pte_offset_map+0x179/0x310 [ 961.818322][T18613] __handle_mm_fault+0x150b/0x2f60 [ 961.818366][T18613] ? __pfx___handle_mm_fault+0x10/0x10 [ 961.818400][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.818435][T18613] ? pte_offset_map_lock+0x174/0x320 [ 961.818480][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.818515][T18613] ? find_held_lock+0x2b/0x80 [ 961.818555][T18613] ? find_held_lock+0x2b/0x80 [ 961.818594][T18613] ? follow_page_pte+0x536/0x1050 [ 961.818652][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.818696][T18613] handle_mm_fault+0x363/0xa20 [ 961.818739][T18613] __get_user_pages+0x8ae/0x2c30 [ 961.818796][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.818832][T18613] ? lock_acquire+0x1d1/0x380 [ 961.818863][T18613] ? __pfx___get_user_pages+0x10/0x10 [ 961.818920][T18613] ? __pfx___might_resched+0x10/0x10 [ 961.818967][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.819005][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.819051][T18613] get_dump_page+0x27e/0x3d0 [ 961.819080][T18613] ? __pfx_get_dump_page+0x10/0x10 [ 961.819109][T18613] ? dump_user_range+0x65e/0xad0 [ 961.819150][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.819186][T18613] ? copy_mc_enhanced_fast_string+0x6/0xf [ 961.819235][T18613] dump_user_range+0x18d/0xad0 [ 961.819285][T18613] ? __pfx_dump_user_range+0x10/0x10 [ 961.819331][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.819374][T18613] ? __pfx_writenote+0x10/0x10 [ 961.819419][T18613] ? elf_core_dump+0x1f25/0x3d20 [ 961.819470][T18613] elf_core_dump+0x2d68/0x3d20 [ 961.819535][T18613] ? __pfx_elf_core_dump+0x10/0x10 [ 961.819578][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.819614][T18613] ? kasan_save_stack+0x3f/0x50 [ 961.819658][T18613] ? kasan_save_stack+0x30/0x50 [ 961.819702][T18613] ? kasan_save_track+0x14/0x30 [ 961.819746][T18613] ? __kasan_kmalloc+0xaa/0xb0 [ 961.819790][T18613] ? vfs_coredump+0x21f6/0x54a0 [ 961.819830][T18613] ? get_signal+0x1f2a/0x21e0 [ 961.819859][T18613] ? arch_do_signal_or_restart+0x91/0x7e0 [ 961.819909][T18613] ? 0xffffffffff600000 [ 961.819946][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820010][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820063][T18613] ? lock_acquire+0x1d1/0x380 [ 961.820091][T18613] ? get_signal+0x1f2a/0x21e0 [ 961.820121][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820159][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820201][T18613] ? vfs_coredump+0x281a/0x54a0 [ 961.820241][T18613] ? __pfx_elf_core_dump+0x10/0x10 [ 961.820283][T18613] vfs_coredump+0x281a/0x54a0 [ 961.820341][T18613] ? __pfx_vfs_coredump+0x10/0x10 [ 961.820382][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820417][T18613] ? __lock_acquire+0x5c0/0x1f40 [ 961.820454][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820489][T18613] ? __lock_acquire+0x5c0/0x1f40 [ 961.820523][T18613] ? lock_acquire+0x1d1/0x380 [ 961.820550][T18613] ? unwind_next_frame+0xbd/0x2090 [ 961.820596][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820631][T18613] ? lock_acquire+0x1d1/0x380 [ 961.820668][T18613] ? bpf_ksym_find+0x124/0x1c0 [ 961.820712][T18613] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 961.820769][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820804][T18613] ? arch_stack_walk+0xa6/0xf0 [ 961.820851][T18613] ? __sigqueue_free+0xbe/0x2a0 [ 961.820888][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.820923][T18613] ? stack_trace_save+0x8e/0xc0 [ 961.820968][T18613] ? __pfx_stack_trace_save+0x10/0x10 [ 961.821013][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.821052][T18613] ? stack_depot_save_flags+0x27/0x9f0 [ 961.821097][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.821132][T18613] ? __lock_acquire+0x5c0/0x1f40 [ 961.821221][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.821257][T18613] ? proc_coredump_connector+0x2d3/0x4f0 [ 961.821293][T18613] ? __pfx_proc_coredump_connector+0x10/0x10 [ 961.821335][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.821370][T18613] ? rcu_is_watching+0x13/0xc0 [ 961.821414][T18613] get_signal+0x1f2a/0x21e0 [ 961.821458][T18613] ? __pfx_get_signal+0x10/0x10 [ 961.821499][T18613] arch_do_signal_or_restart+0x91/0x7e0 [ 961.821544][T18613] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 961.821598][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.821635][T18613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 961.821677][T18613] irqentry_exit+0x402/0xa10 [ 961.821713][T18613] asm_exc_page_fault+0x26/0x30 [ 961.821742][T18613] RIP: 0033:0x7f1e14e53bd7 [ 961.821767][T18613] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 961.821794][T18613] RSP: 002b:00007f1e15dc8120 EFLAGS: 00010202 [ 961.821818][T18613] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1e14f9e159 [ 961.821837][T18613] RDX: 00007f1e15dc8140 RSI: 00007f1e15dc8270 RDI: 000000000000000b [ 961.821856][T18613] RBP: 00007f1e1503506b R08: 0000000000000000 R09: 0000000000000000 [ 961.821875][T18613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 961.821893][T18613] R13: 00007f1e15226128 R14: 00007f1e15226090 R15: 00007ffc289b4068 [ 961.821932][T18613] [ 962.079246][T19878] md: md0: resync done. [ 962.126972][T18613] memory: usage 307200kB, limit 307200kB, failcnt 60227 [ 962.127003][T18613] memory+swap: usage 431948kB, limit 9007199254740988kB, failcnt 0 [ 962.127032][T18613] kmem: usage 5848kB, limit 9007199254740988kB, failcnt 0 [ 962.127056][T18613] Memory cgroup stats for /syz2: [ 962.127560][T18613] cache 308256768 [ 962.127577][T18613] rss 299008 [ 962.127591][T18613] rss_huge 0 [ 962.127606][T18613] shmem 308256768 [ 962.127620][T18613] mapped_file 100167680 [ 962.127636][T18613] dirty 0 [ 962.127650][T18613] writeback 0 [ 962.127663][T18613] workingset_refault_anon 647 [ 962.127679][T18613] workingset_refault_file 2508 [ 962.127695][T18613] swap 127741952 [ 962.127709][T18613] swapcached 139550720 [ 962.127724][T18613] pgpgin 514749 [ 962.127738][T18613] pgpgout 440944 [ 962.127753][T18613] pgfault 374333 [ 962.127767][T18613] pgmajfault 1251 [ 962.127782][T18613] inactive_anon 173281280 [ 962.127798][T18613] active_anon 135303168 [ 962.127813][T18613] inactive_file 0 [ 962.127828][T18613] active_file 0 [ 962.127842][T18613] unevictable 0 [ 962.127857][T18613] hierarchical_memory_limit 314572800 [ 962.127874][T18613] hierarchical_memsw_limit 9223372036854771712 [ 962.127892][T18613] total_cache 308256768 [ 962.127908][T18613] total_rss 299008 [ 962.127923][T18613] total_rss_huge 0 [ 962.127937][T18613] total_shmem 308256768 [ 962.127952][T18613] total_mapped_file 100167680 [ 962.127968][T18613] total_dirty 0 [ 962.127982][T18613] total_writeback 0 [ 962.127997][T18613] total_workingset_refault_anon 647 [ 962.128013][T18613] total_workingset_refault_file 2508 [ 962.128036][T18613] total_swap 127741952 [ 962.128051][T18613] total_swapcached 139550720 [ 962.128067][T18613] total_pgpgin 514749 [ 962.128082][T18613] total_pgpgout 440944 [ 962.128098][T18613] total_pgfault 374333 [ 962.128113][T18613] total_pgmajfault 1251 [ 962.128128][T18613] total_inactive_anon 173281280 [ 962.128145][T18613] total_active_anon 135303168 [ 962.128161][T18613] total_inactive_file 0 [ 962.128176][T18613] total_active_file 0 [ 962.128191][T18613] total_unevictable 0 [ 962.128207][T18613] anon_cost 0 [ 962.128221][T18613] file_cost 0 [ 962.128235][T18613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3398,pid=18613,uid=0 [ 962.137849][T18613] Memory cgroup out of memory: Killed process 18613 (syz.2.3398) total-vm:200824kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:54316kB, UID:0 pgtables:360kB oom_score_adj:0 [ 962.454051][ T33] oom_reaper: reaped process 18598 (syz.2.3398), now anon-rss:0kB, file-rss:20480kB, shmem-rss:34976kB [ 962.839277][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.573284][ T33] oom_reaper: reaped process 18613 (syz.2.3398), now anon-rss:0kB, file-rss:6116kB, shmem-rss:0kB [ 965.485179][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 965.485222][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.485278][ T52] Tainted: [L]=SOFTLOCKUP [ 965.485294][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 965.485321][ T52] Workqueue: hci0 hci_rx_work [ 965.485385][ T52] Call Trace: [ 965.485399][ T52] [ 965.485414][ T52] dump_stack_lvl+0x100/0x190 [ 965.485471][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 965.485535][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 965.485579][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 965.485616][ T52] ? find_held_lock+0x2b/0x80 [ 965.485663][ T52] ? kobject_add_internal+0x25f/0x930 [ 965.485710][ T52] ? kobject_add_internal+0x25f/0x930 [ 965.485760][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.485802][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 965.485849][ T52] kobject_add_internal+0x2c8/0x930 [ 965.485907][ T52] kobject_add+0x16a/0x1e0 [ 965.485971][ T52] ? __pfx_kobject_add+0x10/0x10 [ 965.486012][ T52] ? class_to_subsys+0x10f/0x150 [ 965.486054][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.486094][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.486131][ T52] ? kobject_put+0xb9/0x640 [ 965.486168][ T52] ? _raw_spin_unlock+0x28/0x50 [ 965.486225][ T52] device_add+0x294/0x1970 [ 965.486256][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 965.486292][ T52] ? __pfx_device_add+0x10/0x10 [ 965.486322][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.486360][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 965.486420][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 965.486454][ T52] le_conn_complete_evt+0x122f/0x2130 [ 965.486510][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 965.486557][ T52] ? hci_event_packet+0x186/0xcd0 [ 965.486600][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.486650][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 965.486699][ T52] ? skb_pull_data+0x15f/0x1e0 [ 965.486739][ T52] hci_le_meta_evt+0x34a/0x5f0 [ 965.486790][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 965.486845][ T52] hci_event_packet+0x51c/0xcd0 [ 965.486893][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 965.486946][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 965.487000][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.487045][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 965.487078][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.487126][ T52] hci_rx_work+0x451/0xfc0 [ 965.487180][ T52] process_one_work+0xac7/0x1b10 [ 965.487249][ T52] ? __pfx_process_one_work+0x10/0x10 [ 965.487301][ T52] ? lock_acquire+0x1d1/0x380 [ 965.487344][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.487388][ T52] worker_thread+0x5ef/0xe50 [ 965.487454][ T52] ? kthread+0x13a/0x450 [ 965.487497][ T52] ? __pfx_worker_thread+0x10/0x10 [ 965.487547][ T52] kthread+0x373/0x450 [ 965.487591][ T52] ? __pfx_kthread+0x10/0x10 [ 965.487640][ T52] ret_from_fork+0x730/0xd60 [ 965.487680][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 965.487718][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.487760][ T52] ? __switch_to+0x800/0x10f0 [ 965.487802][ T52] ? __switch_to_asm+0x39/0x70 [ 965.487835][ T52] ? __pfx_kthread+0x10/0x10 [ 965.487884][ T52] ret_from_fork_asm+0x1a/0x30 [ 965.487941][ T52] [ 965.488182][ T52] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 965.488227][ T52] Bluetooth: hci0: failed to register connection device [ 965.853072][ T31] audit: type=1800 audit(1700000693.253:606): pid=19899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3761" name="file1" dev="ramfs" ino=64983 res=0 errno=0 [ 965.903689][T19908] IPVS: dh: FWM 3 0x00000003 - no destination available [ 967.558317][ T52] Bluetooth: hci0: command 0x2016 tx timeout [ 969.651957][T14011] Bluetooth: hci0: command 0x2016 tx timeout [ 970.128008][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 29 (since boot) is 1074 jiffies old. [ 970.282342][T19963] netlink: 'syz.3.3777': attribute type 9 has an invalid length. [ 970.282368][T19963] netlink: 'syz.3.3777': attribute type 7 has an invalid length. [ 970.282386][T19963] netlink: 'syz.3.3777': attribute type 8 has an invalid length. [ 970.564885][T19970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3781'. [ 970.599667][T19967] 9p: Bad value for 'rfdno' [ 970.609654][T19971] syzkaller0: create flow: hash 849834151 index 1 [ 970.620466][T19970] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.3781'. [ 970.906942][T14890] syzkaller0: tun_net_xmit 76 [ 971.917501][T14890] syzkaller0: tun_net_xmit 76 [ 972.245801][T19984] fuse: fd is not a fuse device [ 974.206671][ C0] syzkaller0: delete flow: hash 849834151 index 1 [ 975.308033][T20000] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 978.767712][T20037] netlink: 'syz.4.3798': attribute type 3 has an invalid length. [ 978.767751][T20037] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.3798'. [ 983.510924][T20064] xt_hashlimit: size too large, truncated to 1048576 [ 983.573213][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3807'. [ 984.466668][T20075] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3811'. [ 985.875762][ C1] bridge0: port 1(dummy0) entered forwarding state [ 985.875797][ C1] bridge0: topology change detected, propagating [ 986.537769][T14011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 986.555398][T14011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 986.566046][T14011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 986.591958][T14011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 986.605936][T14011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 987.178068][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3820'. [ 988.430878][T18598] syz.2.3398 (18598) used greatest stack depth: 18144 bytes left [ 988.587231][T18613] syz.2.3398 (18613) used greatest stack depth: 17928 bytes left [ 988.675595][ T52] Bluetooth: hci5: command tx timeout [ 990.127375][T14011] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 990.135904][T14011] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 990.156226][T14011] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 990.174225][T14011] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 990.183335][T14011] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 990.759903][ T52] Bluetooth: hci5: command tx timeout [ 991.276806][T14011] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 991.290534][T14011] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 991.296626][T14011] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 991.310294][T14011] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 991.311647][T14011] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 991.669740][ T31] audit: type=1326 audit(1700000719.065:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.3.3829" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb00d99e159 code=0x0 [ 991.789998][ T31] audit: type=1326 audit(1700000719.175:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.3.3829" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb00d99e159 code=0x0 [ 992.280536][ T52] Bluetooth: hci7: command tx timeout [ 992.288497][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.288580][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.835832][ T52] Bluetooth: hci5: command tx timeout [ 993.397267][ T52] Bluetooth: hci8: command tx timeout [ 994.356394][ T52] Bluetooth: hci7: command tx timeout [ 994.916846][ T52] Bluetooth: hci5: command tx timeout [ 995.476423][ T52] Bluetooth: hci8: command tx timeout [ 996.395390][ T5925] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.395599][ T5925] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.395664][ T5925] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.395727][ T5925] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.399740][T20188] x_tables: ip_tables: REDIRECT target: only valid in nat table, not  [ 996.440597][ T52] Bluetooth: hci7: command tx timeout [ 996.470534][ T5946] veth0_to_bond: left allmulticast mode [ 996.470570][ T5946] veth0_to_bond: left promiscuous mode [ 996.471115][ T5946] bridge1: port 2(veth0_to_bond) entered disabled state [ 996.524450][ T5946] veth7: left allmulticast mode [ 996.524486][ T5946] veth7: left promiscuous mode [ 996.525313][ T5946] bridge1: port 1(veth7) entered disabled state [ 996.645683][ T5946] dvmrp6: left allmulticast mode [ 996.948829][ T5946] bond7 (unregistering): (slave erspan1): Releasing active interface [ 997.066430][ T5946] bond4 (unregistering): (slave geneve2): Releasing active interface [ 997.203502][ T5946] bond0 (unregistering): Released all slaves [ 997.560353][ T52] Bluetooth: hci8: command tx timeout [ 997.729371][ T5946] bond1 (unregistering): Released all slaves [ 997.942955][ T5946] bond2 (unregistering): (slave veth3): Releasing active interface [ 997.983697][ T5946] bond2 (unregistering): Released all slaves [ 998.114521][ T5946] bond3 (unregistering): (slave veth5): Releasing active interface [ 998.166253][ T5946] bond3 (unregistering): Released all slaves [ 998.230912][ T5946] bond4 (unregistering): Released all slaves [ 998.257662][ T5946] bond5 (unregistering): Released all slaves [ 998.288079][ T5946] bond6 (unregistering): Released all slaves [ 998.363814][ T5946] bond7 (unregistering): Released all slaves [ 998.516063][ T52] Bluetooth: hci7: command tx timeout [ 999.635572][ T52] Bluetooth: hci8: command tx timeout [ 999.697821][T20246] overlayfs: failed to clone upperpath [ 1000.499403][T20268] No source specified [ 1001.199876][ T5946] hsr_slave_0: left promiscuous mode [ 1001.221377][ T5946] hsr_slave_1: left promiscuous mode [ 1004.309047][T20307] netlink: zone id is out of range [ 1004.309126][T20307] netlink: zone id is out of range [ 1004.309167][T20307] netlink: zone id is out of range [ 1004.309208][T20307] netlink: zone id is out of range [ 1004.309249][T20307] netlink: zone id is out of range [ 1004.309290][T20307] netlink: zone id is out of range [ 1004.309764][T20307] netlink: zone id is out of range [ 1004.309811][T20307] netlink: zone id is out of range [ 1004.309854][T20307] netlink: zone id is out of range [ 1004.309896][T20307] netlink: zone id is out of range [ 1004.579306][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3865'. [ 1006.517493][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1006.581350][T20327] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[8457] was attempted by " [ 1006.638512][T20127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.740561][T20127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.769986][T20127] bridge_slave_0: entered allmulticast mode [ 1007.008285][T20127] bridge_slave_0: entered promiscuous mode [ 1007.401359][T20127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.401483][T20127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.401668][T20127] bridge_slave_1: entered allmulticast mode [ 1007.432945][T20127] bridge_slave_1: entered promiscuous mode [ 1007.553363][T20117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.553494][T20117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.553710][T20117] bridge_slave_0: entered allmulticast mode [ 1007.556262][T20117] bridge_slave_0: entered promiscuous mode [ 1007.602532][T20117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.602655][T20117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.602835][T20117] bridge_slave_1: entered allmulticast mode [ 1007.607449][T20117] bridge_slave_1: entered promiscuous mode [ 1007.806711][T20117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.858873][T20127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.889390][T20343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.924584][T20117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.661825][T20127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.688918][T20117] team0: Port device team_slave_0 added [ 1008.873424][T20117] team0: Port device team_slave_1 added [ 1008.986707][T20127] team0: Port device team_slave_0 added [ 1009.007224][T20127] team0: Port device team_slave_1 added [ 1009.040373][ T5946] IPVS: stop unused estimator thread 0... [ 1010.199304][T20117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.199331][T20117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.200344][T20117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.269079][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1010.334936][T20127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.334964][T20127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.335012][T20127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.340229][T20117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.340252][T20117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.340300][T20117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.458287][T20127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.458313][T20127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.458363][T20127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.959192][T20117] hsr_slave_0: entered promiscuous mode [ 1010.963192][T20117] hsr_slave_1: entered promiscuous mode [ 1010.977945][T20117] debugfs: 'hsr0' already exists in 'hsr' [ 1010.977979][T20117] Cannot create hsr debugfs directory [ 1011.046325][T20127] hsr_slave_0: entered promiscuous mode [ 1011.047478][T20127] hsr_slave_1: entered promiscuous mode [ 1011.048291][T20127] debugfs: 'hsr0' already exists in 'hsr' [ 1011.048320][T20127] Cannot create hsr debugfs directory [ 1011.237241][T20388] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[8457] was attempted by ""[20388] [ 1012.026548][T20393] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1012.138666][ T5946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1012.556572][T20405] overlayfs: failed to clone lowerpath [ 1012.571237][T20405] overlayfs: failed to clone lowerpath [ 1012.717387][ T5946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1013.320525][ T5946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1013.477477][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1013.478097][T20091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.478632][T20091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.478783][T20091] bridge_slave_0: entered allmulticast mode [ 1013.522519][T20091] bridge_slave_0: entered promiscuous mode [ 1013.539114][T20091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.539234][T20091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.539386][T20091] bridge_slave_1: entered allmulticast mode [ 1013.565926][T20091] bridge_slave_1: entered promiscuous mode [ 1013.676865][ T5946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1015.611788][T20091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.675087][T20444] xt_limit: Overflow, try lower: 0/0 [ 1015.696835][T20091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.841426][T20117] netdevsim netdevsim8 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.014768][T20453] x_tables: ip_tables: REDIRECT target: only valid in nat table, not ™ [ 1016.024309][T20091] team0: Port device team_slave_0 added [ 1016.028725][T20091] team0: Port device team_slave_1 added [ 1016.101589][T20457] netlink: 'syz.4.3895': attribute type 1 has an invalid length. [ 1016.139505][T20117] netdevsim netdevsim8 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.311832][T20091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.311860][T20091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.311907][T20091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.481525][T20091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.481552][T20091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.481600][T20091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.484778][ T5936] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.488218][ T5936] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.660435][T20457] bridge4: entered promiscuous mode [ 1016.692395][T20457] bond7: (slave bridge4): making interface the new active one [ 1016.696410][T20457] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1017.879880][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3899'. [ 1017.915980][T20091] hsr_slave_0: entered promiscuous mode [ 1017.919457][T20091] hsr_slave_1: entered promiscuous mode [ 1017.921940][T20091] debugfs: 'hsr0' already exists in 'hsr' [ 1017.921972][T20091] Cannot create hsr debugfs directory [ 1018.146285][ T5946] dummy0: left allmulticast mode [ 1018.188137][ T5946] bridge0: port 1(dummy0) entered disabled state [ 1019.272715][T20501] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1019.282581][T20501] netlink: 'syz.3.3904': attribute type 8 has an invalid length. [ 1019.282615][T20501] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1021.469429][ T5946] bond9 (unregistering): (slave geneve3): Releasing active interface [ 1021.486960][ T5946] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1021.530564][ T5946] bond0 (unregistering): Released all slaves [ 1021.541901][ T5946] bond1 (unregistering): Released all slaves [ 1021.567534][ T5946] bond2 (unregistering): Released all slaves [ 1021.581261][ T5946] bond3 (unregistering): Released all slaves [ 1021.600525][ T5946] bond4 (unregistering): (slave veth3): Releasing active interface [ 1021.601527][ T5946] bond4 (unregistering): Released all slaves [ 1021.621533][ T5946] bond5 (unregistering): Released all slaves [ 1021.639057][ T5946] bond6 (unregistering): Released all slaves [ 1021.652738][ T5946] bond7 (unregistering): Released all slaves [ 1021.683053][ T5946] bond8 (unregistering): Released all slaves [ 1021.699310][ T5946] bond9 (unregistering): Released all slaves [ 1021.739046][ T5925] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.740185][ T5925] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.762392][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1021.934432][T20117] netdevsim netdevsim8 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.180994][T20117] netdevsim netdevsim8 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.216857][ T5946] tipc: Left network mode [ 1022.868775][T20117] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1022.876728][T20117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.887551][T20117] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1022.926631][T20117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.928005][T20117] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1022.932343][T20117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.978248][T20117] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1022.992979][T20117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.366987][T20127] netdevsim netdevsim9 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.929569][T20127] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.081841][T20127] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.234574][T20127] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.336393][ T5946] IPVS: stop unused estimator thread 0... [ 1024.434343][T20117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.462546][T20117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.490224][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.490349][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.524443][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.524551][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.667814][T20091] netdevsim netdevsim7 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.850837][T20091] netdevsim netdevsim7 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.002526][T20091] netdevsim netdevsim7 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.129166][T20091] netdevsim netdevsim7 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.413625][T20127] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1025.425514][T20127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.431200][T20127] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1025.452236][T20127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.459568][T20127] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1025.472606][T20127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.491761][T20127] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1025.514233][T20127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1025.767799][T20117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.846770][T20091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1025.856120][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.857604][T20091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1025.866764][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.872592][T20091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1025.886550][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.887739][T20091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1025.898671][T20091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1026.027199][T20127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.091442][T20127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.116940][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.117064][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.147217][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.147344][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.212283][T20091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.301078][T20091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.327169][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.327300][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.360406][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.360536][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.831150][T20117] veth0_vlan: entered promiscuous mode [ 1026.857173][T20117] veth1_vlan: entered promiscuous mode [ 1026.918105][T20117] veth0_macvtap: entered promiscuous mode [ 1026.936986][T20117] veth1_macvtap: entered promiscuous mode [ 1027.010849][T20117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.028368][T20117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.224294][T13257] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.225368][T13257] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.225433][T13257] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.225495][T13257] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.402405][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.402440][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.566226][ T5946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.566260][ T5946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.451373][T20127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.488533][T20091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.069957][T20659] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1031.027431][T20091] veth0_vlan: entered promiscuous mode [ 1031.064094][T20091] veth1_vlan: entered promiscuous mode [ 1031.146883][T20091] veth0_macvtap: entered promiscuous mode [ 1031.180612][T20091] veth1_macvtap: entered promiscuous mode [ 1032.116228][T20091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.161576][T20091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.180708][T20127] veth0_vlan: entered promiscuous mode [ 1032.213005][ T5944] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.213094][ T5944] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.213166][ T5944] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.213229][ T5944] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.395462][T20127] veth1_vlan: entered promiscuous mode [ 1032.559997][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.560030][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.804153][T13255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.804187][T13255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.817374][T20127] veth0_macvtap: entered promiscuous mode [ 1032.839529][T20127] veth1_macvtap: entered promiscuous mode [ 1032.953120][T20127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.997507][T20127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.017113][T13255] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.061764][ T5944] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.062250][ T5944] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.062442][ T5944] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.796288][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.796322][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.895163][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.895207][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.449464][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3937'. [ 1044.670387][T20838] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1045.241641][T20838] netlink: 'syz.4.3958': attribute type 4 has an invalid length. [ 1045.241701][T20838] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1053.720850][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.720928][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.329979][T21017] tipc: Started in network mode [ 1060.330030][T21017] tipc: Node identity ac14142f, cluster identity 4711 [ 1060.330299][T21017] tipc: New replicast peer: 127.0.0.1 [ 1060.365099][T21017] tipc: Enabled bearer , priority 10 [ 1061.474750][T14890] tipc: Node number set to 2886997039 [ 1062.262690][T21038] ERROR: Out of memory at tomoyo_memory_ok. [ 1062.408827][T21049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1062.408863][T21049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1062.408893][T21049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1063.300018][T21061] fuse: fd is not a fuse device [ 1063.891896][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1063.891938][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.891994][ T52] Tainted: [L]=SOFTLOCKUP [ 1063.892010][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1063.892037][ T52] Workqueue: hci5 hci_rx_work [ 1063.892095][ T52] Call Trace: [ 1063.892109][ T52] [ 1063.892125][ T52] dump_stack_lvl+0x100/0x190 [ 1063.892190][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 1063.892254][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 1063.892299][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1063.892341][ T52] ? find_held_lock+0x2b/0x80 [ 1063.892395][ T52] ? kobject_add_internal+0x25f/0x930 [ 1063.892452][ T52] ? kobject_add_internal+0x25f/0x930 [ 1063.892510][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.892558][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 1063.892610][ T52] kobject_add_internal+0x2c8/0x930 [ 1063.892672][ T52] kobject_add+0x16a/0x1e0 [ 1063.892725][ T52] ? __pfx_kobject_add+0x10/0x10 [ 1063.892776][ T52] ? class_to_subsys+0x10f/0x150 [ 1063.892820][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.892871][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.892918][ T52] ? kobject_put+0xb9/0x640 [ 1063.892965][ T52] ? _raw_spin_unlock+0x28/0x50 [ 1063.893038][ T52] device_add+0x294/0x1970 [ 1063.893077][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 1063.893123][ T52] ? __pfx_device_add+0x10/0x10 [ 1063.893161][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.893214][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 1063.893290][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 1063.893334][ T52] le_conn_complete_evt+0x122f/0x2130 [ 1063.893405][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1063.893462][ T52] ? hci_event_packet+0x186/0xcd0 [ 1063.893517][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.893579][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1063.893640][ T52] ? skb_pull_data+0x15f/0x1e0 [ 1063.893690][ T52] hci_le_meta_evt+0x34a/0x5f0 [ 1063.893752][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1063.893819][ T52] hci_event_packet+0x51c/0xcd0 [ 1063.893878][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1063.893942][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 1063.894009][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.894057][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 1063.894100][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.894158][ T52] hci_rx_work+0x451/0xfc0 [ 1063.894228][ T52] process_one_work+0xac7/0x1b10 [ 1063.894309][ T52] ? __pfx_process_one_work+0x10/0x10 [ 1063.894372][ T52] ? lock_acquire+0x1d1/0x380 [ 1063.894425][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.894480][ T52] worker_thread+0x5ef/0xe50 [ 1063.894558][ T52] ? kthread+0x13a/0x450 [ 1063.894608][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1063.894666][ T52] kthread+0x373/0x450 [ 1063.894717][ T52] ? __pfx_kthread+0x10/0x10 [ 1063.894775][ T52] ret_from_fork+0x730/0xd60 [ 1063.894818][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.894862][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.894909][ T52] ? __switch_to+0x800/0x10f0 [ 1063.894962][ T52] ? __switch_to_asm+0x39/0x70 [ 1063.895001][ T52] ? __pfx_kthread+0x10/0x10 [ 1063.895057][ T52] ret_from_fork_asm+0x1a/0x30 [ 1063.895122][ T52] [ 1063.895226][ T52] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1063.895274][ T52] Bluetooth: hci5: failed to register connection device [ 1065.269419][T21103] rdma_rxe: rxe_newlink: failed to add lo [ 1065.348661][T21109] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4010'. [ 1066.400072][T21121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1068.780424][T21129] netlink: 'syz.2.4015': attribute type 2 has an invalid length. [ 1068.780458][T21129] netlink: 'syz.2.4015': attribute type 1 has an invalid length. [ 1068.780483][T21129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1068.780509][T21129] netlink: 'syz.2.4015': attribute type 2 has an invalid length. [ 1068.780533][T21129] netlink: 'syz.2.4015': attribute type 1 has an invalid length. [ 1068.780556][T21129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1068.780580][T21129] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 1069.714486][T21147] loop9: detected capacity change from 0 to 128 [ 1070.045755][T21147] affs: No valid root block on device loop9 [ 1070.591206][T14011] Bluetooth: hci5: command 0x0406 tx timeout [ 1070.997201][ T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1070.997244][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.997301][ T52] Tainted: [L]=SOFTLOCKUP [ 1070.997317][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1070.997344][ T52] Workqueue: hci1 hci_rx_work [ 1070.997402][ T52] Call Trace: [ 1070.997416][ T52] [ 1070.997432][ T52] dump_stack_lvl+0x100/0x190 [ 1070.997491][ T52] sysfs_warn_dup.cold+0x1c/0x28 [ 1070.997554][ T52] sysfs_create_dir_ns+0x24b/0x2b0 [ 1070.997600][ T52] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1070.997642][ T52] ? find_held_lock+0x2b/0x80 [ 1070.997696][ T52] ? kobject_add_internal+0x25f/0x930 [ 1070.997745][ T52] ? kobject_add_internal+0x25f/0x930 [ 1070.997798][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.997847][ T52] ? do_raw_spin_unlock+0x145/0x1e0 [ 1070.997902][ T52] kobject_add_internal+0x2c8/0x930 [ 1070.997963][ T52] kobject_add+0x16a/0x1e0 [ 1070.998018][ T52] ? __pfx_kobject_add+0x10/0x10 [ 1070.998071][ T52] ? class_to_subsys+0x10f/0x150 [ 1070.998115][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.998163][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.998218][ T52] ? kobject_put+0xb9/0x640 [ 1070.998267][ T52] ? _raw_spin_unlock+0x28/0x50 [ 1070.998343][ T52] device_add+0x294/0x1970 [ 1070.998383][ T52] ? __pfx_dev_set_name+0x10/0x10 [ 1070.998431][ T52] ? __pfx_device_add+0x10/0x10 [ 1070.998470][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.998519][ T52] ? mgmt_send_event_skb+0x2fb/0x460 [ 1070.998600][ T52] hci_conn_add_sysfs+0x1a3/0x260 [ 1070.998645][ T52] le_conn_complete_evt+0x122f/0x2130 [ 1070.998718][ T52] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1070.998777][ T52] ? hci_event_packet+0x186/0xcd0 [ 1070.998833][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.998895][ T52] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1070.998958][ T52] ? skb_pull_data+0x15f/0x1e0 [ 1070.999009][ T52] hci_le_meta_evt+0x34a/0x5f0 [ 1070.999073][ T52] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1070.999141][ T52] hci_event_packet+0x51c/0xcd0 [ 1070.999207][ T52] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1070.999273][ T52] ? __pfx_hci_event_packet+0x10/0x10 [ 1070.999342][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.999391][ T52] ? lockdep_hardirqs_on+0x7d/0x110 [ 1070.999432][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.999492][ T52] hci_rx_work+0x451/0xfc0 [ 1070.999558][ T52] process_one_work+0xac7/0x1b10 [ 1070.999639][ T52] ? __pfx_process_one_work+0x10/0x10 [ 1070.999703][ T52] ? lock_acquire+0x1d1/0x380 [ 1070.999757][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1070.999815][ T52] worker_thread+0x5ef/0xe50 [ 1070.999894][ T52] ? kthread+0x13a/0x450 [ 1070.999947][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1071.000005][ T52] kthread+0x373/0x450 [ 1071.000058][ T52] ? __pfx_kthread+0x10/0x10 [ 1071.000117][ T52] ret_from_fork+0x730/0xd60 [ 1071.000163][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1071.000214][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1071.000263][ T52] ? __switch_to+0x800/0x10f0 [ 1071.000316][ T52] ? __switch_to_asm+0x39/0x70 [ 1071.000355][ T52] ? __pfx_kthread+0x10/0x10 [ 1071.000413][ T52] ret_from_fork_asm+0x1a/0x30 [ 1071.000479][ T52] [ 1071.000737][ T52] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1071.000792][ T52] Bluetooth: hci1: failed to register connection device [ 1072.080296][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1072.232841][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1072.237865][ T10] usb 9-1: config index 0 descriptor too short (expected 34617, got 36) [ 1072.237908][ T10] usb 9-1: config 217 has too many interfaces: 67, using maximum allowed: 32 [ 1072.237948][ T10] usb 9-1: config 217 has 1 interface, different from the descriptor's value: 67 [ 1072.238014][ T10] usb 9-1: config 217 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.238065][ T10] usb 9-1: config 217 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.238132][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.818983][ T10] usbhid 9-1:217.0: can't add hid device: -71 [ 1072.819117][ T10] usbhid 9-1:217.0: probe with driver usbhid failed with error -71 [ 1072.834857][ T10] usb 9-1: USB disconnect, device number 4 [ 1073.070162][T14011] Bluetooth: hci1: command 0x0406 tx timeout [ 1073.117084][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1074.613432][T21203] loop7: detected capacity change from 0 to 128 [ 1075.180033][T14011] Bluetooth: hci1: command 0x0406 tx timeout [ 1076.135781][T21224] loop8: detected capacity change from 0 to 512 [ 1076.146725][T21224] EXT4-fs (loop8): unsupported inode size: 65152 [ 1076.146757][T21224] EXT4-fs (loop8): blocksize: 4096 [ 1084.328990][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1084.332114][T21311] futex_wake_op: syz.4.4061 tries to shift op by 144; fix this program [ 1084.827085][ T982] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1084.985754][ T982] usb 10-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1084.988695][ T982] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1084.988739][ T982] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1084.988834][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.087850][ T982] dln2 10-1:1.0: USB write failed: -90 [ 1085.088068][ T982] dln2 10-1:1.0: failed to initialize hardware [ 1085.101756][ T982] dln2 10-1:1.0: probe with driver dln2 failed with error -90 [ 1085.176883][T21335] Cannot find add_set index 0 as target [ 1085.314112][T15368] usb 10-1: USB disconnect, device number 2 [ 1089.661007][T21384] loop7: detected capacity change from 0 to 1024 [ 1090.934893][T21393] netlink: 'syz.3.4077': attribute type 2 has an invalid length. [ 1090.934927][T21393] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 1090.934951][T21393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4077'. [ 1090.934977][T21393] netlink: 'syz.3.4077': attribute type 2 has an invalid length. [ 1090.935002][T21393] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 1090.935026][T21393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4077'. [ 1090.935051][T21393] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 1091.055207][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1093.908910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1095.141603][T21417] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1095.193699][T21417] netlink: 'syz.3.4083': attribute type 4 has an invalid length. [ 1095.193735][T21417] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1095.281912][T21420] binder_alloc: 21418: binder_alloc_buf, no vma [ 1095.671277][T21427] syzkaller0: entered promiscuous mode [ 1095.671311][T21427] syzkaller0: entered allmulticast mode [ 1099.406445][T21484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.406481][T21484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.434156][T21484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.434189][T21484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.566615][T21487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.178502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1101.588466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1102.204073][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1108.934744][T21567] lo: entered promiscuous mode [ 1108.964218][T21567] tunl0: entered promiscuous mode [ 1108.982821][T21567] gre0: entered promiscuous mode [ 1109.067606][T21567] gretap0: entered promiscuous mode [ 1109.114049][T21567] erspan0: entered promiscuous mode [ 1109.127116][T21567] ip_vti0: entered promiscuous mode [ 1109.141296][T21567] ip6_vti0: entered promiscuous mode [ 1109.146537][T21567] sit0: entered promiscuous mode [ 1109.179845][T21567] ip6tnl0: entered promiscuous mode [ 1109.207023][T21567] ip6gre0: entered promiscuous mode [ 1109.258318][T21567] syz_tun: entered promiscuous mode [ 1109.322999][T21567] ip6gretap0: entered promiscuous mode [ 1109.346216][T21567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.346913][T21567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.355061][T21567] bridge0: entered promiscuous mode [ 1109.391070][T21567] vcan0: entered promiscuous mode [ 1109.429195][T21567] bond0: entered promiscuous mode [ 1109.430072][T21567] bond_slave_0: entered promiscuous mode [ 1109.430309][T21567] bond_slave_1: entered promiscuous mode [ 1109.467351][T21567] team0: entered promiscuous mode [ 1109.467384][T21567] team_slave_0: entered promiscuous mode [ 1109.467599][T21567] team_slave_1: entered promiscuous mode [ 1109.493212][T21567] dummy0: entered promiscuous mode [ 1109.546704][T21567] nlmon0: entered promiscuous mode [ 1109.561231][T21567] batadv0: entered promiscuous mode [ 1109.584937][T21567] vxcan0: entered promiscuous mode [ 1109.596734][T21567] vxcan1: entered promiscuous mode [ 1109.608478][T21567] veth0: entered promiscuous mode [ 1109.634587][T21567] veth1: entered promiscuous mode [ 1109.652453][T21567] wg0: entered promiscuous mode [ 1109.669690][T21567] wg1: entered promiscuous mode [ 1109.682581][T21567] wg2: entered promiscuous mode [ 1109.692153][T21567] veth0_to_bridge: entered promiscuous mode [ 1109.717374][T21567] veth1_to_bridge: entered promiscuous mode [ 1109.735944][T21567] veth0_to_bond: entered promiscuous mode [ 1109.773121][T21567] veth1_to_bond: entered promiscuous mode [ 1109.797327][T21567] veth0_to_team: entered promiscuous mode [ 1109.914929][T21567] veth1_to_team: entered promiscuous mode [ 1109.966585][T21567] veth0_to_batadv: entered promiscuous mode [ 1110.012971][T21567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.013048][T21567] batadv_slave_0: entered promiscuous mode [ 1110.071061][T21567] veth1_to_batadv: entered promiscuous mode [ 1110.101011][T21567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.101068][T21567] batadv_slave_1: entered promiscuous mode [ 1110.264197][T21567] xfrm0: entered promiscuous mode [ 1110.498233][T21567] veth0_to_hsr: entered promiscuous mode [ 1110.705667][T21567] veth1_to_hsr: entered promiscuous mode [ 1110.761708][T21567] hsr0: entered promiscuous mode [ 1110.893927][T21567] veth1_virt_wifi: entered promiscuous mode [ 1110.932883][T21567] veth0_virt_wifi: entered promiscuous mode [ 1110.973708][T21567] virt_wifi0: entered promiscuous mode [ 1111.082027][T21567] vlan0: entered promiscuous mode [ 1111.100146][T21567] vlan1: entered promiscuous mode [ 1111.835798][T21567] macvlan0: entered promiscuous mode [ 1112.097018][T21567] macvlan1: entered promiscuous mode [ 1112.108171][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 1112.704125][T21567] ipvlan0: entered promiscuous mode [ 1112.704283][T21567] ipvlan1: entered promiscuous mode [ 1112.809212][T21567] macvtap0: entered promiscuous mode [ 1112.826746][T21567] macsec0: entered promiscuous mode [ 1112.842687][T21567] geneve0: entered promiscuous mode [ 1112.867213][T21567] geneve1: entered promiscuous mode [ 1112.962302][T21567] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1113.018394][T21567] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1113.269121][T21567] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 1114.697890][T21567] netdevsim netdevsim9 netdevsim3: entered promiscuous mode [ 1114.934292][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4135'. [ 1114.991412][T21567] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 1115.043582][T21567] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 1115.068300][ T5929] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.068945][ T5929] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.069010][ T5929] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.069071][ T5929] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.098654][T21632] netlink: 'syz.7.4136': attribute type 10 has an invalid length. [ 1115.150292][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.150374][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.237707][T21632] team0 (unregistering): Port device team_slave_0 removed [ 1115.294805][T21632] team0 (unregistering): Port device team_slave_1 removed [ 1117.257326][T21637] Bluetooth: hci8: command 0x0406 tx timeout [ 1117.257380][T21637] Bluetooth: hci7: command 0x0406 tx timeout [ 1123.047348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1123.072921][T21685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.741190][T21708] lo: entered promiscuous mode [ 1126.764032][T21708] tunl0: entered promiscuous mode [ 1126.788073][T21708] gre0: entered promiscuous mode [ 1128.075390][T21708] gretap0: entered promiscuous mode [ 1128.766968][T21708] erspan0: entered promiscuous mode [ 1128.792588][T21708] ip_vti0: entered promiscuous mode [ 1128.805175][T21708] ip6_vti0: entered promiscuous mode [ 1128.829947][T21708] sit0: entered promiscuous mode [ 1128.871783][T21708] ip6tnl0: entered promiscuous mode [ 1129.336534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 1130.244274][T21708] ip6gre0: entered promiscuous mode [ 1130.296952][T21708] syz_tun: entered promiscuous mode [ 1130.349482][T21708] ip6gretap0: entered promiscuous mode [ 1130.394981][T21708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.395661][T21708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.411455][T21708] bridge0: entered promiscuous mode [ 1130.439723][T21708] vcan0: entered promiscuous mode [ 1130.485460][T21708] bond0: entered promiscuous mode [ 1130.485499][T21708] bond_slave_0: entered promiscuous mode [ 1130.485754][T21708] bond_slave_1: entered promiscuous mode [ 1130.517814][T21708] dummy0: entered promiscuous mode [ 1130.622007][T21708] nlmon0: entered promiscuous mode [ 1130.631718][T21708] batadv0: entered promiscuous mode [ 1130.657888][T21708] vxcan0: entered promiscuous mode [ 1130.666037][T21708] vxcan1: entered promiscuous mode [ 1130.675545][T21708] veth0: entered promiscuous mode [ 1130.730798][T21708] veth1: entered promiscuous mode [ 1130.751300][T21708] wg0: entered promiscuous mode [ 1130.774615][T21708] wg1: entered promiscuous mode [ 1130.792457][T21708] wg2: entered promiscuous mode [ 1130.820185][T21708] veth0_to_bridge: entered promiscuous mode [ 1130.898753][T21708] veth1_to_bridge: entered promiscuous mode [ 1131.704865][T21708] veth0_to_bond: entered promiscuous mode [ 1131.752253][T21708] veth1_to_bond: entered promiscuous mode [ 1131.804156][T21708] veth0_to_team: entered promiscuous mode [ 1131.824279][T21708] team_slave_0: entered promiscuous mode [ 1131.874732][T21708] veth1_to_team: entered promiscuous mode [ 1131.892083][T21708] team_slave_1: entered promiscuous mode [ 1131.892439][T21708] veth0_to_batadv: entered promiscuous mode [ 1131.923221][T21708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.923292][T21708] batadv_slave_0: entered promiscuous mode [ 1131.954429][T21708] veth1_to_batadv: entered promiscuous mode [ 1131.982888][T21708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.982947][T21708] batadv_slave_1: entered promiscuous mode [ 1133.198709][T21708] xfrm0: entered promiscuous mode [ 1133.225116][T21708] veth0_to_hsr: entered promiscuous mode [ 1133.850497][T21708] veth1_to_hsr: entered promiscuous mode [ 1133.886196][T21708] hsr0: entered promiscuous mode [ 1133.889181][T21708] veth1_virt_wifi: entered promiscuous mode [ 1133.892190][T21708] veth0_virt_wifi: entered promiscuous mode [ 1133.909885][T21708] virt_wifi0: entered promiscuous mode [ 1133.919909][T21708] vlan0: entered promiscuous mode [ 1133.922919][T21708] vlan1: entered promiscuous mode [ 1133.937887][T21708] macvlan0: entered promiscuous mode [ 1133.964828][T21708] macvlan1: entered promiscuous mode [ 1133.981753][T21708] ipvlan0: entered promiscuous mode [ 1133.981962][T21708] ipvlan1: entered promiscuous mode [ 1134.169747][T21708] macvtap0: entered promiscuous mode [ 1134.433932][T21708] macsec0: entered promiscuous mode [ 1134.687298][T21708] geneve0: entered promiscuous mode [ 1134.810273][T21708] geneve1: entered promiscuous mode [ 1134.865853][T21708] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1134.890646][T21708] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1134.946784][T21708] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 1134.972140][T21708] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 1135.003890][T21708] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 1135.041107][T21708] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 1135.043620][T13257] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.044481][T13257] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.044919][ T50] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.044987][ T50] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.718939][T21778] netlink: 'syz.8.4180': attribute type 10 has an invalid length. [ 1137.720767][T21778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.721102][T21778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.766577][T21778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.766719][T21778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.770109][T21778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.770256][T21778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.819065][T21778] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1140.508569][T21794] fuse: fd is not a fuse device [ 1146.396440][T21857] lo: entered promiscuous mode [ 1146.407017][T21857] tunl0: entered promiscuous mode [ 1146.409390][T21857] gre0: entered promiscuous mode [ 1146.436808][T21857] gretap0: entered promiscuous mode [ 1146.456479][T21857] erspan0: entered promiscuous mode [ 1146.460859][T21857] ip_vti0: entered promiscuous mode [ 1146.463158][T21857] ip6_vti0: entered promiscuous mode [ 1146.484012][T21857] sit0: entered promiscuous mode [ 1146.500332][T21857] ip6tnl0: entered promiscuous mode [ 1146.513298][T21857] ip6gre0: entered promiscuous mode [ 1146.535272][T21857] syz_tun: entered promiscuous mode [ 1146.561170][T21857] ip6gretap0: entered promiscuous mode [ 1146.576063][T21857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.576288][T21857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.577311][T21857] bridge0: entered promiscuous mode [ 1146.580932][T21857] vcan0: entered promiscuous mode [ 1146.618543][T21857] bond0: entered promiscuous mode [ 1146.618575][T21857] bond_slave_0: entered promiscuous mode [ 1146.618805][T21857] bond_slave_1: entered promiscuous mode [ 1146.623036][T21857] team0: entered promiscuous mode [ 1146.623064][T21857] team_slave_0: entered promiscuous mode [ 1146.623344][T21857] team_slave_1: entered promiscuous mode [ 1146.663211][T21857] dummy0: entered promiscuous mode [ 1146.679945][T21857] nlmon0: entered promiscuous mode [ 1146.687888][T21857] vxcan0: entered promiscuous mode [ 1146.691429][T21857] vxcan1: entered promiscuous mode [ 1146.697184][T21857] veth0: entered promiscuous mode [ 1146.707723][T21857] veth1: entered promiscuous mode [ 1146.721244][T21857] wg0: entered promiscuous mode [ 1146.791251][T21857] wg1: entered promiscuous mode [ 1146.827249][T21857] wg2: entered promiscuous mode [ 1146.834005][T21857] veth0_to_bridge: entered promiscuous mode [ 1146.871330][T21857] veth1_to_bridge: entered promiscuous mode [ 1146.935111][T21857] veth0_to_bond: entered promiscuous mode [ 1146.971114][T21857] veth1_to_bond: entered promiscuous mode [ 1146.993998][T21857] veth0_to_team: entered promiscuous mode [ 1147.053592][T21857] veth1_to_team: entered promiscuous mode [ 1147.092463][T21857] veth0_to_batadv: entered promiscuous mode [ 1147.292151][T21857] batadv_slave_0: entered promiscuous mode [ 1147.301388][T21857] veth1_to_batadv: entered promiscuous mode [ 1147.310513][T21857] batadv_slave_1: entered promiscuous mode [ 1147.320183][T21857] xfrm0: entered promiscuous mode [ 1147.329975][T21857] veth0_to_hsr: entered promiscuous mode [ 1147.345933][T21857] veth1_to_hsr: entered promiscuous mode [ 1148.096931][T21857] hsr0: entered promiscuous mode [ 1148.141478][T21857] veth1_virt_wifi: entered promiscuous mode [ 1148.191881][T21857] veth0_virt_wifi: entered promiscuous mode [ 1148.209862][T21857] virt_wifi0: entered promiscuous mode [ 1148.266848][T21857] vlan0: entered promiscuous mode [ 1148.280086][T21857] vlan1: entered promiscuous mode [ 1148.303239][T21857] macvlan0: entered promiscuous mode [ 1148.328398][T21857] macvlan1: entered promiscuous mode [ 1148.338863][T21857] ipvlan0: entered promiscuous mode [ 1148.339078][T21857] ipvlan1: entered promiscuous mode [ 1148.631522][T21857] macvtap0: entered promiscuous mode [ 1148.659412][T21857] macsec0: entered promiscuous mode [ 1149.640602][T21857] geneve0: entered promiscuous mode [ 1149.657405][T21857] geneve1: entered promiscuous mode [ 1149.815144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1150.774125][T21857] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1150.811728][T21857] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 1150.841404][T21857] netdevsim netdevsim8 netdevsim2: entered promiscuous mode [ 1150.973021][T21857] netdevsim netdevsim8 netdevsim3: entered promiscuous mode [ 1151.359247][T21894] loop9: detected capacity change from 0 to 40427 [ 1151.366239][T21894] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1151.366289][T21894] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1151.400288][T21894] F2FS-fs (loop9): invalid crc value [ 1151.427981][T21857] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 1151.489253][T21894] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1151.516231][T21894] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1151.516266][T21894] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1152.838848][T21857] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 1152.854074][T21857] syztnl0: entered promiscuous mode [ 1152.854342][T21857] batadv0: entered promiscuous mode [ 1152.868346][ T5924] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.868433][ T5924] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.868499][ T5924] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.876204][ T5937] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.428486][T21921] Cannot find del_set index 4 as target [ 1153.504018][T21925] loop7: detected capacity change from 0 to 164 [ 1153.582765][T21930] loop8: detected capacity change from 0 to 164 [ 1154.022854][T21938] rock: directory entry would overflow storage [ 1154.022902][T21938] rock: sig=0x4f50, size=4, remaining=3 [ 1154.022955][T21938] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1155.675723][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4211'. [ 1158.028287][T21973] loop8: detected capacity change from 0 to 512 [ 1158.035195][T21973] ext4: Unknown parameter 'noacl' [ 1158.218726][T21970] loop7: detected capacity change from 0 to 40427 [ 1158.223773][T21970] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1158.223829][T21970] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1158.249556][T21975] lo: entered promiscuous mode [ 1158.257622][T21970] F2FS-fs (loop7): invalid crc value [ 1158.311727][T21975] tunl0: entered promiscuous mode [ 1158.312668][T21975] gre0: entered promiscuous mode [ 1158.365806][T21970] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1158.389403][T21975] gretap0: entered promiscuous mode [ 1158.394461][T21975] erspan0: entered promiscuous mode [ 1158.409910][T21970] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1158.409949][T21970] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1158.422297][T21975] ip_vti0: entered promiscuous mode [ 1158.431675][T21975] ip6_vti0: entered promiscuous mode [ 1158.432538][T21975] sit0: entered promiscuous mode [ 1158.491388][T21975] ip6tnl0: entered promiscuous mode [ 1158.631202][T21975] ip6gre0: entered promiscuous mode [ 1158.653371][T21975] bridge0: entered promiscuous mode [ 1158.668623][T21975] bond0: entered promiscuous mode [ 1158.695555][T21975] team0: entered promiscuous mode [ 1158.725977][T21975] nlmon0: entered promiscuous mode [ 1158.730885][T21975] vxcan0: entered promiscuous mode [ 1158.747223][T21975] vxcan1: entered promiscuous mode [ 1158.788700][T21975] veth0: entered promiscuous mode [ 1158.794154][T21975] veth1: entered promiscuous mode [ 1158.817168][T21975] wg0: entered promiscuous mode [ 1158.822658][T21975] wg2: entered promiscuous mode [ 1158.826188][T21975] veth0_to_bridge: entered promiscuous mode [ 1159.064342][T21975] bridge_slave_0: entered promiscuous mode [ 1159.294204][T21975] veth1_to_bridge: entered promiscuous mode [ 1159.578851][T21975] bridge_slave_1: entered promiscuous mode [ 1159.674391][T21975] veth0_to_bond: entered promiscuous mode [ 1159.693880][T21975] bond_slave_0: entered promiscuous mode [ 1159.739156][T21975] veth1_to_bond: entered promiscuous mode [ 1159.751947][T21975] bond_slave_1: entered promiscuous mode [ 1159.757987][T21975] veth0_to_team: entered promiscuous mode [ 1159.772598][T21975] team_slave_0: entered promiscuous mode [ 1159.811370][T21975] veth1_to_team: entered promiscuous mode [ 1159.828275][T21975] team_slave_1: entered promiscuous mode [ 1159.829040][T21975] veth0_to_batadv: entered promiscuous mode [ 1159.841049][T21975] batadv_slave_0: entered promiscuous mode [ 1159.857699][T21975] xfrm0: entered promiscuous mode [ 1159.881840][T21975] veth0_to_hsr: entered promiscuous mode [ 1159.906750][T21975] veth1_to_hsr: entered promiscuous mode [ 1160.008073][T21975] veth1_virt_wifi: entered promiscuous mode [ 1160.025719][T21975] veth0_virt_wifi: entered promiscuous mode [ 1160.314702][T21975] virt_wifi0: entered promiscuous mode [ 1160.327014][T21975] vlan0: entered promiscuous mode [ 1160.333262][T21975] vlan1: entered promiscuous mode [ 1160.467578][T21998] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 1160.467624][T21998] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1160.502018][T21998] vhci_hcd vhci_hcd.0: Device attached [ 1160.548071][T21999] vhci_hcd: connection closed [ 1160.554671][ T52] Bluetooth: hci8: unexpected subevent 0x10 length: 30 > 2 [ 1160.587524][ T5924] vhci_hcd vhci_hcd.9: stop threads [ 1160.589891][ T5924] vhci_hcd vhci_hcd.9: release socket [ 1160.589940][ T5924] vhci_hcd vhci_hcd.9: disconnect device [ 1162.207113][T21975] macvlan0: entered promiscuous mode [ 1162.248015][T21975] macvlan1: entered promiscuous mode [ 1162.355644][T21975] ipvlan0: entered promiscuous mode [ 1162.365175][T21975] ipvlan1: entered promiscuous mode [ 1162.950783][T21975] macvtap0: entered promiscuous mode [ 1163.218186][T21975] macsec0: entered promiscuous mode [ 1163.952740][T21975] geneve0: entered promiscuous mode [ 1164.640161][T21975] geneve1: entered promiscuous mode [ 1164.964111][T21975] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1165.028907][T21975] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1165.065735][T21975] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1165.099238][T21975] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1165.120835][T21975] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1165.161519][T21975] bond1: entered promiscuous mode [ 1165.179376][T21975] veth2: entered promiscuous mode [ 1165.203665][T21975] veth3: entered promiscuous mode [ 1165.210986][T21975] bond2: entered promiscuous mode [ 1165.256529][T22025] net_ratelimit: 48 callbacks suppressed [ 1165.256560][T22025] ip_tables: iptables: counters copy to user failed while replacing table [ 1165.259725][T21975] bridge2: entered promiscuous mode [ 1165.264264][T14889] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1165.314899][T21975] bond4: entered promiscuous mode [ 1165.315086][T21975] veth4: entered promiscuous mode [ 1165.322627][T21975] veth5: entered promiscuous mode [ 1165.348077][T21975] bond5: entered promiscuous mode [ 1165.355355][T21975] vlan3: entered promiscuous mode [ 1165.410510][T21975] bond6: entered promiscuous mode [ 1165.410546][T21975] bridge3: entered promiscuous mode [ 1165.410952][T21975] bond7: entered promiscuous mode [ 1165.412553][T21975] batadv0: entered promiscuous mode [ 1165.440675][T21975] syztnl0: entered promiscuous mode [ 1165.456810][T14889] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1165.458171][T14889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1165.458216][T14889] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1165.460990][T14889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.461032][T14889] usb 9-1: Product: syz [ 1165.461060][T14889] usb 9-1: Manufacturer: syz [ 1165.461090][T14889] usb 9-1: SerialNumber: syz [ 1165.467443][ T34] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.467701][ T34] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.467761][ T34] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.467820][ T34] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.034113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1167.539520][T14889] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1167.568458][T14889] usb 9-1: USB disconnect, device number 5 [ 1167.592567][T14889] usblp0: removed [ 1171.010287][T22069] loop7: detected capacity change from 0 to 512 [ 1171.027149][T22070] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4241'. [ 1171.030724][T22070] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4241'. [ 1171.332016][T22073] pim6reg: entered allmulticast mode [ 1171.338082][T22073] pim6reg: left allmulticast mode [ 1173.320446][T22109] lo: entered promiscuous mode [ 1173.334790][T22109] tunl0: entered promiscuous mode [ 1173.338313][T22109] gre0: entered promiscuous mode [ 1173.359055][T22109] gretap0: entered promiscuous mode [ 1173.361832][T22109] erspan0: entered promiscuous mode [ 1173.377997][T22109] ip_vti0: entered promiscuous mode [ 1173.397249][T22109] ip6_vti0: entered promiscuous mode [ 1173.419194][T22109] sit0: entered promiscuous mode [ 1173.461896][T22109] ip6tnl0: entered promiscuous mode [ 1173.488277][T22109] ip6gre0: entered promiscuous mode [ 1173.502902][T22109] ip6gretap0: entered promiscuous mode [ 1173.785471][T22109] bridge0: entered promiscuous mode [ 1174.708555][T22109] bond0: entered promiscuous mode [ 1174.708597][T22109] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1174.711221][T22109] tipc: Resetting bearer [ 1174.762525][T22109] team0: entered promiscuous mode [ 1174.800461][T22109] nlmon0: entered promiscuous mode [ 1174.801855][T22109] vxcan0: entered promiscuous mode [ 1174.816319][T22109] vxcan1: entered promiscuous mode [ 1174.819500][T22109] veth0: entered promiscuous mode [ 1174.838044][T22109] veth1: entered promiscuous mode [ 1174.948983][T22123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.982042][T22109] wg0: entered promiscuous mode [ 1176.401499][T22109] wg1: entered promiscuous mode [ 1176.448734][T22109] wg2: entered promiscuous mode [ 1176.450249][T22109] veth0_to_bridge: entered promiscuous mode [ 1176.452878][T22109] bridge_slave_0: entered promiscuous mode [ 1176.475115][T22109] veth1_to_bridge: entered promiscuous mode [ 1176.477768][T22109] bridge_slave_1: entered promiscuous mode [ 1176.480254][T22109] veth0_to_bond: entered promiscuous mode [ 1176.482568][T22109] bond_slave_0: entered promiscuous mode [ 1176.523385][T22101] syz.8.4247 (22101): drop_caches: 2 [ 1176.555421][T22109] veth1_to_bond: entered promiscuous mode [ 1176.595650][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.595732][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.755311][T22109] bond_slave_1: entered promiscuous mode [ 1176.771186][T22109] veth0_to_team: entered promiscuous mode [ 1176.791017][T22109] team_slave_0: entered promiscuous mode [ 1176.812417][T22109] veth1_to_team: entered promiscuous mode [ 1176.835265][T22109] team_slave_1: entered promiscuous mode [ 1176.842615][T22109] veth0_to_batadv: entered promiscuous mode [ 1176.880008][T22109] batadv_slave_0: entered promiscuous mode [ 1176.904358][T22109] veth1_to_batadv: entered promiscuous mode [ 1176.907336][T22109] batadv_slave_1: entered promiscuous mode [ 1176.937618][T22109] xfrm0: entered promiscuous mode [ 1176.937918][T22109] veth1_to_hsr: entered promiscuous mode [ 1176.966438][T22109] hsr0: entered promiscuous mode [ 1176.975294][T22109] veth1_virt_wifi: entered promiscuous mode [ 1176.986551][T22109] veth0_virt_wifi: entered promiscuous mode [ 1177.005633][T22109] virt_wifi0: entered promiscuous mode [ 1177.025532][T22109] vlan0: entered promiscuous mode [ 1177.036108][T22109] vlan1: entered promiscuous mode [ 1177.050104][T22109] macvlan0: entered promiscuous mode [ 1177.064606][T22109] macvlan1: entered promiscuous mode [ 1177.072611][T22109] ipvlan0: entered promiscuous mode [ 1177.088593][T22109] ipvlan1: entered promiscuous mode [ 1177.299809][T22109] macvtap0: entered promiscuous mode [ 1177.314065][T22109] macsec0: entered promiscuous mode [ 1178.040446][T22109] geneve0: entered promiscuous mode [ 1178.058265][T22109] geneve1: entered promiscuous mode [ 1178.165220][T22109] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1178.197675][T22109] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1178.215404][T22109] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1178.242278][T22109] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1178.261560][T22109] bond1: entered promiscuous mode [ 1178.261586][T22109] gretap1: entered promiscuous mode [ 1178.287489][T22143] jffs2: notice: (22143) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1178.308360][T22109] bond2: entered promiscuous mode [ 1178.308390][T22109] bridge1: entered promiscuous mode [ 1178.361338][T22109] bond3: entered promiscuous mode [ 1178.374833][T22109] bridge2: entered promiscuous mode [ 1178.389011][T22109] bond4: entered promiscuous mode [ 1178.389042][T22109] veth3: entered promiscuous mode [ 1178.408810][T22109] veth2: entered promiscuous mode [ 1178.445308][T22109] bond5: entered promiscuous mode [ 1178.446279][T22109] gre1: entered promiscuous mode [ 1178.466763][T22109] bond6: entered promiscuous mode [ 1178.481053][T22109] bridge3: entered promiscuous mode [ 1178.494018][T22109] bridge0.257: entered promiscuous mode [ 1178.500506][T22109] bond7: entered promiscuous mode [ 1178.500913][T22109] bond8: entered promiscuous mode [ 1178.522633][T22109] batadv0: entered promiscuous mode [ 1178.544112][ T5937] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.544204][ T5937] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.544266][ T5937] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.544368][ T5937] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.817590][T22177] netlink: 'syz.7.4266': attribute type 2 has an invalid length. [ 1185.023222][T22222] syzkaller0: entered promiscuous mode [ 1185.023258][T22222] syzkaller0: entered allmulticast mode [ 1185.154921][T22227] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1186.541409][T22239] loop8: detected capacity change from 0 to 512 [ 1186.558171][T22239] EXT4-fs: Ignoring removed orlov option [ 1186.562374][T22239] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 48900)! [ 1186.562428][T22239] EXT4-fs (loop8): group descriptors corrupted! [ 1187.234540][T22249] fuse: fd is not a fuse device [ 1189.170346][T20592] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1189.352945][T20592] usb 9-1: Using ep0 maxpacket: 16 [ 1189.353802][T20592] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1189.355175][T20592] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.355239][T20592] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.355288][T20592] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.355328][T20592] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1189.355378][T20592] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1189.355434][T20592] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.368162][T20592] usb 9-1: config 0 descriptor?? [ 1189.466681][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1189.470134][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1189.472252][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1189.474103][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1189.475920][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1189.476429][T20592] usbhid 9-1:0.0: can't add hid device: -32 [ 1189.476558][T20592] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1190.438610][ T30] usb 9-1: USB disconnect, device number 6 [ 1191.549931][T22284] dummy0: left promiscuous mode [ 1191.619108][T22284] bond0: (slave bond_slave_0): Releasing backup interface [ 1191.645747][T22284] bond_slave_0: left promiscuous mode [ 1191.744139][T22292] fuse: fd is not a fuse device [ 1191.909829][T22284] dummy0: entered promiscuous mode [ 1191.936016][T22284] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1192.301741][T22306] trusted_key: encrypted_key: insufficient parameters specified [ 1192.316658][T22306] FAULT_INJECTION: forcing a failure. [ 1192.316658][T22306] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.316713][T22306] CPU: 1 UID: 0 PID: 22306 Comm: syz.7.4302 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.316769][T22306] Tainted: [L]=SOFTLOCKUP [ 1192.316786][T22306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1192.316810][T22306] Call Trace: [ 1192.316824][T22306] [ 1192.316839][T22306] dump_stack_lvl+0x100/0x190 [ 1192.316899][T22306] should_fail_ex.cold+0x5/0xa [ 1192.316952][T22306] should_failslab+0xc2/0x120 [ 1192.316993][T22306] __kmalloc_cache_noprof+0x91/0x6d0 [ 1192.317047][T22306] ? proc_self_get_link+0x189/0x1f0 [ 1192.317103][T22306] proc_self_get_link+0x189/0x1f0 [ 1192.317152][T22306] pick_link+0xac2/0x13c0 [ 1192.317209][T22306] ? __pfx_proc_self_get_link+0x10/0x10 [ 1192.317263][T22306] step_into_slowpath+0x9ba/0xf90 [ 1192.317321][T22306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.317381][T22306] ? __pfx_step_into_slowpath+0x10/0x10 [ 1192.317454][T22306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.317502][T22306] ? lookup_fast+0x2da/0x600 [ 1192.317555][T22306] ? inode_permission+0x374/0x620 [ 1192.317613][T22306] link_path_walk+0xf28/0x1cc0 [ 1192.317689][T22306] path_openat+0x1ac/0x2440 [ 1192.317737][T22306] ? __pfx_path_openat+0x10/0x10 [ 1192.317791][T22306] do_file_open+0x20e/0x430 [ 1192.317835][T22306] ? __pfx_do_file_open+0x10/0x10 [ 1192.317910][T22306] ? _raw_spin_unlock+0x28/0x50 [ 1192.317969][T22306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.318021][T22306] ? alloc_fd+0x471/0x7a0 [ 1192.318076][T22306] do_sys_openat2+0x10f/0x1e0 [ 1192.318123][T22306] ? __pfx_do_sys_openat2+0x10/0x10 [ 1192.318173][T22306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.318221][T22306] ? fput+0x7c/0x100 [ 1192.318272][T22306] __x64_sys_openat+0x12d/0x210 [ 1192.318322][T22306] ? __pfx___x64_sys_openat+0x10/0x10 [ 1192.318377][T22306] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.318438][T22306] do_syscall_64+0x123/0x790 [ 1192.318484][T22306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.318525][T22306] RIP: 0033:0x7feadd35e98e [ 1192.318556][T22306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1192.318595][T22306] RSP: 002b:00007feade1d7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1192.318634][T22306] RAX: ffffffffffffffda RBX: 00007feade1d86c0 RCX: 00007feadd35e98e [ 1192.318661][T22306] RDX: 0000000000000002 RSI: 00007feade1d7f90 RDI: ffffffffffffff9c [ 1192.318688][T22306] RBP: 00007feadd43506b R08: 0000000000000000 R09: 0000000000000000 [ 1192.318713][T22306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.318738][T22306] R13: 00007feadd626038 R14: 00007feadd625fa0 R15: 00007ffce3e6b358 [ 1192.318790][T22306] [ 1193.980974][T22330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4305'. [ 1194.039178][T22334] syzkaller0: entered promiscuous mode [ 1194.039215][T22334] syzkaller0: entered allmulticast mode [ 1194.054685][T22334] tipc: Started in network mode [ 1194.054750][T22334] tipc: Node identity 4e8e3044e9cb, cluster identity 4711 [ 1194.058805][T22334] tipc: Enabled bearer , priority 0 [ 1194.081656][T22333] tipc: Resetting bearer [ 1194.338507][T22333] tipc: Disabling bearer [ 1194.441999][T22340] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[8457] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[22340] [ 1195.455019][T22348] bridge: RTM_NEWNEIGH with invalid ether address [ 1195.455363][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4312'. [ 1198.416604][T22349] syz.7.4313 (22349): drop_caches: 2 [ 1200.092129][T22383] loop9: detected capacity change from 0 to 2048 [ 1200.175486][T22383] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1200.180626][T22383] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1200.226252][T22383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1203.051137][T22405] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 1203.307379][T22416] loop9: detected capacity change from 0 to 512 [ 1213.244988][T14011] Bluetooth: hci6: unexpected event for opcode 0x203c [ 1213.482373][T22480] syzkaller0: entered promiscuous mode [ 1213.482409][T22480] syzkaller0: entered allmulticast mode [ 1213.535329][T22480] tipc: Started in network mode [ 1213.535378][T22480] tipc: Node identity ca65816a9fdc, cluster identity 4711 [ 1213.535652][T22480] tipc: Enabled bearer , priority 0 [ 1213.602343][T22478] tipc: Resetting bearer [ 1213.691206][T22478] tipc: Disabling bearer [ 1213.793925][T22484] loop9: detected capacity change from 0 to 8 [ 1213.916741][T22494] loop7: detected capacity change from 0 to 512 [ 1213.931680][T22494] EXT4-fs (loop7): bad s_min_extra_isize: 544 [ 1214.065490][T22487] [ 1214.067871][T22487] ====================================================== [ 1214.068212][T22484] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1214.068242][T22484] SQUASHFS error: Failed to read block 0x9b: -5 [ 1214.068263][T22484] SQUASHFS error: Unable to read metadata cache entry [99] [ 1214.068283][T22484] SQUASHFS error: Unable to read inode 0x127 [ 1214.102097][T22487] WARNING: possible circular locking dependency detected [ 1214.109119][T22487] syzkaller #0 Tainted: G L [ 1214.115097][T22487] ------------------------------------------------------ [ 1214.122108][T22487] syz.7.4345/22487 is trying to acquire lock: [ 1214.128202][T22487] ffffffff904010a8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 1214.139574][T22487] [ 1214.139574][T22487] but task is already holding lock: [ 1214.146938][T22487] ffff88804755b0c0 (&sb->s_type->i_mutex_key#36){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1214.157447][T22487] [ 1214.157447][T22487] which lock already depends on the new lock. [ 1214.157447][T22487] [ 1214.167848][T22487] [ 1214.167848][T22487] the existing dependency chain (in reverse order) is: [ 1214.176863][T22487] [ 1214.176863][T22487] -> #3 (&sb->s_type->i_mutex_key#36){++++}-{4:4}: [ 1214.185604][T22487] lock_acquire+0x1d1/0x380 [ 1214.190645][T22487] down_write+0x8b/0x1f0 [ 1214.195425][T22487] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1214.201868][T22487] usbg_make_tpg+0x251/0x610 [ 1214.207011][T22487] target_fabric_make_tpg+0xab/0x8c0 [ 1214.212829][T22487] configfs_mkdir+0x525/0xd40 [ 1214.218058][T22487] vfs_mkdir+0x364/0x850 [ 1214.222841][T22487] filename_mkdirat+0x48b/0x5e0 [ 1214.228226][T22487] __x64_sys_mkdirat+0x89/0xc0 [ 1214.233522][T22487] do_syscall_64+0x123/0x790 [ 1214.238647][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.245074][T22487] [ 1214.245074][T22487] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1214.253042][T22487] lock_acquire+0x1d1/0x380 [ 1214.258080][T22487] __mutex_lock+0x1a4/0x1bd0 [ 1214.263208][T22487] tcm_alloc_inst+0x5f/0x1e0 [ 1214.268358][T22487] try_get_usb_function_instance+0x136/0x1f0 [ 1214.274889][T22487] usb_get_function_instance+0x16/0x70 [ 1214.280906][T22487] function_make+0x18c/0x3f0 [ 1214.286035][T22487] configfs_mkdir+0x525/0xd40 [ 1214.291263][T22487] vfs_mkdir+0x364/0x850 [ 1214.296049][T22487] filename_mkdirat+0x48b/0x5e0 [ 1214.301432][T22487] __x64_sys_mkdirat+0x89/0xc0 [ 1214.306734][T22487] do_syscall_64+0x123/0x790 [ 1214.311866][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.318293][T22487] [ 1214.318293][T22487] -> #1 (func_lock){+.+.}-{4:4}: [ 1214.325479][T22487] lock_acquire+0x1d1/0x380 [ 1214.330516][T22487] __mutex_lock+0x1a4/0x1bd0 [ 1214.335676][T22487] try_get_usb_function_instance+0x26/0x1f0 [ 1214.342115][T22487] usb_get_function_instance+0x16/0x70 [ 1214.348114][T22487] function_make+0x18c/0x3f0 [ 1214.353233][T22487] configfs_mkdir+0x525/0xd40 [ 1214.358459][T22487] vfs_mkdir+0x364/0x850 [ 1214.363243][T22487] filename_mkdirat+0x48b/0x5e0 [ 1214.368634][T22487] __x64_sys_mkdirat+0x89/0xc0 [ 1214.373932][T22487] do_syscall_64+0x123/0x790 [ 1214.379061][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.385489][T22487] [ 1214.385489][T22487] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1214.393770][T22487] check_prev_add+0xeb/0xe60 [ 1214.398950][T22487] __lock_acquire+0x1528/0x1f40 [ 1214.404331][T22487] lock_acquire+0x1d1/0x380 [ 1214.409453][T22487] __mutex_lock+0x1a4/0x1bd0 [ 1214.414576][T22487] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1214.421284][T22487] configfs_symlink+0x695/0x1340 [ 1214.426775][T22487] vfs_symlink+0x178/0x4d0 [ 1214.431732][T22487] filename_symlinkat+0x2a6/0x560 [ 1214.437321][T22487] __x64_sys_symlink+0x79/0xb0 [ 1214.442618][T22487] do_syscall_64+0x123/0x790 [ 1214.447740][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.454166][T22487] [ 1214.454166][T22487] other info that might help us debug this: [ 1214.454166][T22487] [ 1214.464388][T22487] Chain exists of: [ 1214.464388][T22487] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#36 [ 1214.464388][T22487] [ 1214.479386][T22487] Possible unsafe locking scenario: [ 1214.479386][T22487] [ 1214.486833][T22487] CPU0 CPU1 [ 1214.492192][T22487] ---- ---- [ 1214.497552][T22487] lock(&sb->s_type->i_mutex_key#36); [ 1214.503035][T22487] lock(tpg_instances_lock); [ 1214.510244][T22487] lock(&sb->s_type->i_mutex_key#36); [ 1214.518247][T22487] lock(gadget_subsys.su_mutex); [ 1214.523281][T22487] [ 1214.523281][T22487] *** DEADLOCK *** [ 1214.523281][T22487] [ 1214.531419][T22487] locks held by syz.7.4345/22487: 2, last CPU#0: [ 1214.537748][T22487] #0: ffff88801e378460 (sb_writers#25){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1214.547322][T22487] #1: ffff88804755b0c0 (&sb->s_type->i_mutex_key#36){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 1214.558286][T22487] [ 1214.558286][T22487] stack backtrace: [ 1214.564181][T22487] CPU: 0 UID: 0 PID: 22487 Comm: syz.7.4345 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.575174][T22487] Tainted: [L]=SOFTLOCKUP [ 1214.579498][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1214.589563][T22487] Call Trace: [ 1214.592842][T22487] [ 1214.595774][T22487] dump_stack_lvl+0x100/0x190 [ 1214.600480][T22487] print_circular_bug.cold+0x178/0x1be [ 1214.605976][T22487] check_noncircular+0x146/0x160 [ 1214.610951][T22487] ? lock_acquire+0x1d1/0x380 [ 1214.615647][T22487] check_prev_add+0xeb/0xe60 [ 1214.620244][T22487] ? lockdep_hardirqs_on+0x7d/0x110 [ 1214.625456][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.631113][T22487] __lock_acquire+0x1528/0x1f40 [ 1214.635981][T22487] ? kasan_save_free_info+0x3b/0x70 [ 1214.641203][T22487] ? __kasan_slab_free+0x5f/0x80 [ 1214.646156][T22487] lock_acquire+0x1d1/0x380 [ 1214.650687][T22487] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1214.657055][T22487] ? __pfx___might_resched+0x10/0x10 [ 1214.662379][T22487] __mutex_lock+0x1a4/0x1bd0 [ 1214.666984][T22487] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1214.673351][T22487] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1214.679721][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.685376][T22487] ? __pfx___mutex_lock+0x10/0x10 [ 1214.690424][T22487] ? __pfx___might_resched+0x10/0x10 [ 1214.695746][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.701431][T22487] ? make_vfsgid+0xf1/0x140 [ 1214.705972][T22487] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1214.712332][T22487] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1214.718525][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.724179][T22487] ? inode_permission+0x374/0x620 [ 1214.729228][T22487] ? mntput_no_expire+0xe7/0x220 [ 1214.734210][T22487] configfs_symlink+0x695/0x1340 [ 1214.739186][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.744839][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.750492][T22487] ? security_inode_permission+0xbf/0x250 [ 1214.756247][T22487] ? __pfx_configfs_symlink+0x10/0x10 [ 1214.761655][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.767311][T22487] vfs_symlink+0x178/0x4d0 [ 1214.771753][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.777411][T22487] filename_symlinkat+0x2a6/0x560 [ 1214.782484][T22487] ? __pfx_filename_symlinkat+0x10/0x10 [ 1214.788048][T22487] ? strncpy_from_user+0x19d/0x2d0 [ 1214.793189][T22487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.798840][T22487] ? do_getname+0x191/0x390 [ 1214.803365][T22487] __x64_sys_symlink+0x79/0xb0 [ 1214.808147][T22487] do_syscall_64+0x123/0x790 [ 1214.812754][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.818692][T22487] RIP: 0033:0x7feadd39e159 [ 1214.823115][T22487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.842753][T22487] RSP: 002b:00007feade1d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1214.851181][T22487] RAX: ffffffffffffffda RBX: 00007feadd625fa0 RCX: 00007feadd39e159 [ 1214.859159][T22487] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000 [ 1214.867134][T22487] RBP: 00007feadd43506b R08: 0000000000000000 R09: 0000000000000000 [ 1214.875109][T22487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.883086][T22487] R13: 00007feadd626038 R14: 00007feadd625fa0 R15: 00007ffce3e6b358 [ 1214.891077][T22487]