last executing test programs: 3m36.948191692s ago: executing program 1 (id=1772): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r0, 0x2038}, {r0, 0x204}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m36.006210033s ago: executing program 1 (id=1776): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x3, 0xe6, 0x8, 0x7}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e"], 0x48}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m35.656484888s ago: executing program 1 (id=1782): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006a80)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x40080d0}], 0x1, 0x20048041) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 3m34.392165862s ago: executing program 1 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3m34.277524657s ago: executing program 1 (id=1791): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x1a, 0x0, 0x0, 0x0) 3m33.781334828s ago: executing program 1 (id=1800): socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x801) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) truncate(0x0, 0x200000) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES64=r0], 0x3c}}, 0x8010) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x10, {0x0, 0x0, 0x74, r2, {0xffe0, 0xfff1}, {0x3, 0xfff3}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 3m33.492172141s ago: executing program 32 (id=1800): socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x801) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) truncate(0x0, 0x200000) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES64=r0], 0x3c}}, 0x8010) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x10, {0x0, 0x0, 0x74, r2, {0xffe0, 0xfff1}, {0x3, 0xfff3}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 28.397403087s ago: executing program 0 (id=3453): syz_open_dev$usbfs(0x0, 0x205, 0x40100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(0x0, 0x80, 0x108) symlinkat(0x0, r3, &(0x7f00000002c0)='./file1\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$cgroup_devices(r5, 0x0, 0x8) write$cgroup_devices(r6, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1}, 0x48) 27.316215283s ago: executing program 0 (id=3456): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007900e7e800000000180000000000000000000000000000009500000000000003d50a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) 26.804158175s ago: executing program 0 (id=3460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd60, &(0x7f0000000a00)={@broadcast, @random="8737e577e438", @val, {@llc={0x8100, {@snap={0x1, 0x1, 'c', "4f89cc", 0x6006, "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"}}}}}, 0x0) 26.45501923s ago: executing program 0 (id=3463): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000880), 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000440)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) 25.216551834s ago: executing program 0 (id=3468): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.9121045s ago: executing program 0 (id=3475): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) fsopen(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0xfff) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000180)="76389e147583ddd0569ba5d19f046d6ee0c0d68c37daee07b7721fd6", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.628205582s ago: executing program 33 (id=3475): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) fsopen(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0xfff) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000180)="76389e147583ddd0569ba5d19f046d6ee0c0d68c37daee07b7721fd6", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.34004411s ago: executing program 4 (id=3616): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000986000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1001}]}, 0x0, 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00}, 0x94) 5.281823313s ago: executing program 2 (id=3617): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003080)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c}}, 0x24040084) 5.055731652s ago: executing program 5 (id=3621): syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="050f19630114ecbeeb00000000000040000000000000000000"]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) r1 = socket(0x200000000000011, 0x3, 0xd) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000b00)={0x300, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="020a06970300000028bd7008fcd1df250100", @ANYRES8], 0x18}}, 0x40) 5.006265535s ago: executing program 6 (id=3622): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)}], 0x1}}], 0x1, 0x404a841) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 4.996672405s ago: executing program 2 (id=3623): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) timer_gettime(r5, 0x0) timer_create(0x2, &(0x7f0000000340)={0x0, 0x39, 0x2, @thr={&(0x7f00000003c0)="674279185de1001415d58aba20c7d63dc6e529a345c50ee12734b7640f5dd469244ef36d7ef5d3f5576b6d9f5d194da5ee4e696eb971091f57887f4754ff0613cd6f9287777e3476cd2ca3bfff65c537670c9335d3bd40d84c6f7568ddad7e4707a0192f6acab6a486fad22dcabd1798db8dbb88fd3478aaa4f8909551cc903f4b6f7a2ae2c87bd52a67b1d13ababeec2105a2b991c9d701ce4ed3bcaf0d46b51ef9c25864bbaae0d2faaf11c053ce11cccf48a0f139adefc6f9306ab1cb8967d57f7819a0f5ceb93da73c21f7a47e7d2e11d271a4b7a1e0f7283290e2cfb357", &(0x7f0000000300)}}, &(0x7f00000004c0)) close(r3) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3.792073157s ago: executing program 6 (id=3625): keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0xfc, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}], 0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.784565197s ago: executing program 2 (id=3626): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0xb883, 0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r2, 0x8920, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) r3 = socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) recvmmsg(r6, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="02186008070000001cbd7000fbdbdf2505001a00fc0100000000000000000000000006725e95f3c31beddc5a567b3fa40001000000000000000000000110000808510003c27e7364116166a212c6c900a5f8e3aaea87326f19658f95d44ef8beafeeeca9f5"], 0x38}}, 0x800) 3.753361818s ago: executing program 4 (id=3627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000180)='cpuset\x00', 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x202e}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x36}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 3.684174212s ago: executing program 5 (id=3628): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'ip6tnl0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 3.439481972s ago: executing program 4 (id=3630): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) 3.303591648s ago: executing program 4 (id=3631): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3c3}}, 0x20}}, 0x0) 3.302935728s ago: executing program 3 (id=3632): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000040000000c001a8008000580"], 0x2c}}, 0x800) 3.231530291s ago: executing program 3 (id=3633): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r1, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 3.160605324s ago: executing program 3 (id=3634): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff1f) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r2, &(0x7f00000070c0), 0x0, 0xc000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, 0x0, 0x0) shutdown(r3, 0x1) 3.072108478s ago: executing program 6 (id=3635): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000180)=[{0x73, 0x5, 0xf1, 0x3, @time={0x2, 0x10000}, {0x7, 0x5}, {0x27, 0x4}, @connect={{0x40, 0x2}, {0xa, 0x90}}}, {0x6, 0x5, 0x39, 0x6, @tick=0x5, {0xc, 0xa}, {0x6, 0x10}, @time=@tick=0x1}, {0x7, 0x7f, 0x8, 0x3, @time={0xc86, 0xfffffff9}, {0xb, 0x6d}, {0x3, 0x3}, @quote={{0x2, 0x80}, 0x2, &(0x7f0000000140)={0x3, 0x2, 0x2, 0x0, @time={0x5}, {0x10, 0xc}, {0xa6, 0x4}, @ext={0x95, &(0x7f0000000080)="0a608733023e26e330ad7e88f10ddff9b497685134e3c381a0bb98baf2c52fe349b8c1a580d2d96b65a1f790a8238a6b3d7411f637151699aa410f8447ed6b9a1495c69c8f181e1fbb94563b0a9a940fdfbdd3a7543fd26f7766090bffed7468a918df1a5acc2f45e268913dc9644150008e0b7b1c855f5c0955e34c5bca842006418fe483368e248464ee2452dd86c9ff8fb3ed6e"}}}}, {0x8, 0x6, 0x9, 0x8b, @tick=0x7, {0x2, 0x5}, {0x0, 0x81}, @result={0x5, 0xb}}, {0x4, 0xbe, 0x2, 0x11, @time={0x655ed01d, 0x401}, {0xf1, 0x2}, {0xf2, 0x2}, @control={0x3, 0x9, 0x6652}}, {0x4, 0x7, 0x5, 0x6, @time={0xfd56, 0x3ff}, {0x4, 0x3}, {0x40, 0x40}, @queue={0x3, {0x4, 0x6ad2fe6c}}}, {0x3, 0x7, 0x8, 0xfd, @tick=0x1, {0x3, 0xf}, {0x9, 0x7}, @result={0x0, 0x7}}, {0xdd, 0x2, 0x5, 0x10, @time={0x1ff, 0xffffffff}, {0x8, 0x4}, {0x8, 0xf7}, @raw32={[0x7, 0x8, 0x7]}}, {0x68, 0xf, 0xa, 0x0, @tick=0x8, {0x4}, {0x4, 0x8}, @queue={0x2, {0x3ff, 0x101}}}, {0x8, 0x1, 0x4, 0x9, @time={0x72, 0x9}, {0x3}, {0x2, 0x72}, @raw8={"ec20a2a6393dcd533dd380a9"}}], 0x118) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x4, 0x4001fffe) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000001200)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0xfffffffffffffffa) close(0x3) 3.02806711s ago: executing program 5 (id=3636): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x17}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) 2.085306331s ago: executing program 4 (id=3637): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000986000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1001}]}, 0x0, 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00}, 0x94) 2.054039912s ago: executing program 6 (id=3638): syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="050f19630114ecbeeb00000000000040000000000000000000"]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket(0x200000000000011, 0x3, 0xd) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) sendmsg$key(r1, &(0x7f0000000b00)={0x300, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="020a06970300000028bd7008fcd1df250100", @ANYRES8], 0x18}}, 0x40) 2.009083244s ago: executing program 3 (id=3639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) 2.008686014s ago: executing program 5 (id=3640): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000c00)={0x1, 0x1, {0x12, 0x12, 0x82, 0x8000007, 0xb, 0x85, 0x1, 0x12a}}) 1.960800776s ago: executing program 2 (id=3641): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsmount(0xffffffffffffffff, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x8912, &(0x7f0000000200)="891c591c") 1.792069843s ago: executing program 5 (id=3642): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000011c0)={0x1, &(0x7f0000000140)=[{0x5, 0xf8, 0x4, 0xffffff7f}]}) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x27) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000540)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x1, 0x2, 0x1, 0x2, 0x2]}, &(0x7f00000000c0)=0x54) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x20, 0x132, 0xc000}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f00000001c0)={{}, "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"}) 1.669737839s ago: executing program 2 (id=3643): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, r2, 0x0) 1.518904795s ago: executing program 3 (id=3644): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 959.743889ms ago: executing program 6 (id=3645): keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0xfc, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}], 0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 854.590823ms ago: executing program 5 (id=3646): r0 = getpid() syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x2) r1 = syz_pidfd_open(r0, 0x0) pwrite64(r1, 0x0, 0x0, 0x4) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 854.104023ms ago: executing program 4 (id=3647): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 804.568936ms ago: executing program 2 (id=3648): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3c3}}, 0x20}}, 0x0) 663.540692ms ago: executing program 3 (id=3649): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000180)=[{0x73, 0x5, 0xf1, 0x3, @time={0x2, 0x10000}, {0x7, 0x5}, {0x27, 0x4}, @connect={{0x40, 0x2}, {0xa, 0x90}}}, {0x6, 0x5, 0x39, 0x6, @tick=0x5, {0xc, 0xa}, {0x6, 0x10}, @time=@tick=0x1}, {0x7, 0x7f, 0x8, 0x3, @time={0xc86, 0xfffffff9}, {0xb, 0x6d}, {0x3, 0x3}, @quote={{0x2, 0x80}, 0x2, &(0x7f0000000140)={0x3, 0x2, 0x2, 0x0, @time={0x5}, {0x10, 0xc}, {0xa6, 0x4}, @ext={0x95, &(0x7f0000000080)="0a608733023e26e330ad7e88f10ddff9b497685134e3c381a0bb98baf2c52fe349b8c1a580d2d96b65a1f790a8238a6b3d7411f637151699aa410f8447ed6b9a1495c69c8f181e1fbb94563b0a9a940fdfbdd3a7543fd26f7766090bffed7468a918df1a5acc2f45e268913dc9644150008e0b7b1c855f5c0955e34c5bca842006418fe483368e248464ee2452dd86c9ff8fb3ed6e"}}}}, {0x8, 0x6, 0x9, 0x8b, @tick=0x7, {0x2, 0x5}, {0x0, 0x81}, @result={0x5, 0xb}}, {0x4, 0xbe, 0x2, 0x11, @time={0x655ed01d, 0x401}, {0xf1, 0x2}, {0xf2, 0x2}, @control={0x3, 0x9, 0x6652}}, {0x4, 0x7, 0x5, 0x6, @time={0xfd56, 0x3ff}, {0x4, 0x3}, {0x40, 0x40}, @queue={0x3, {0x4, 0x6ad2fe6c}}}, {0x3, 0x7, 0x8, 0xfd, @tick=0x1, {0x3, 0xf}, {0x9, 0x7}, @result={0x0, 0x7}}, {0xdd, 0x2, 0x5, 0x10, @time={0x1ff, 0xffffffff}, {0x8, 0x4}, {0x8, 0xf7}, @raw32={[0x7, 0x8, 0x7]}}, {0x68, 0xf, 0xa, 0x0, @tick=0x8, {0x4}, {0x4, 0x8}, @queue={0x2, {0x3ff, 0x101}}}, {0x8, 0x1, 0x4, 0x9, @time={0x72, 0x9}, {0x3}, {0x2, 0x72}, @raw8={"ec20a2a6393dcd533dd380a9"}}], 0x118) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x4, 0x4001fffe) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000001200)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9fb) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0xfffffffffffffffa) close(0x3) 0s ago: executing program 6 (id=3650): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000680)=""/245, 0xf5}, {0x0}, {&(0x7f0000000840)=""/167, 0xa7}, {0x0}], 0x6, 0x4, 0x9, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): 000003e syscall=230 compat=0 ip=0x7f3bf7fc2005 code=0x7ffc0000 [ 243.633611][ T9292] chnl_net:caif_netlink_parms(): no params data found [ 243.691639][ T27] audit: type=1326 audit(1764200121.486:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bf7fc2005 code=0x7ffc0000 [ 243.816839][ T27] audit: type=1326 audit(1764200121.486:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bf7fc2005 code=0x7ffc0000 [ 243.882555][ T27] audit: type=1326 audit(1764200121.486:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bf7fc2005 code=0x7ffc0000 [ 244.074884][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 244.088673][ T5996] device hsr_slave_0 left promiscuous mode [ 244.116915][ T5996] device hsr_slave_1 left promiscuous mode [ 244.133566][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.170760][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.217060][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.231297][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.256997][ T5996] device bridge_slave_1 left promiscuous mode [ 244.264007][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.300796][ T5996] device bridge_slave_0 left promiscuous mode [ 244.319011][ T9378] fuse: Bad value for 'fd' [ 244.320643][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.345869][ T9380] fuse: Bad value for 'fd' [ 244.411904][ T5996] device veth1_macvtap left promiscuous mode [ 244.436290][ T5996] device veth0_macvtap left promiscuous mode [ 244.442382][ T5996] device veth1_vlan left promiscuous mode [ 244.457991][ T5996] device veth0_vlan left promiscuous mode [ 244.474852][ T9386] overlayfs: failed to clone upperpath [ 244.482372][ T9386] overlayfs: failed to clone upperpath [ 244.553063][ T9388] overlayfs: failed to clone upperpath [ 244.724373][ T5996] bond4 (unregistering): Released all slaves [ 244.843459][ T5996] bond3 (unregistering): Released all slaves [ 244.949315][ T9399] No such timeout policy "syz0" [ 244.954441][ T9398] ipt_CLUSTERIP: Please specify destination IP [ 244.979591][ T5996] bond2 (unregistering): Released all slaves [ 245.110342][ T5996] bond1 (unregistering): Released all slaves [ 245.847517][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 245.888721][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 245.929143][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.970224][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.159949][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 246.208193][ T9403] fuse: Bad value for 'fd' [ 246.281416][ T9405] fuse: Bad value for 'fd' [ 246.408057][ T5996] bond0 (unregistering): Released all slaves [ 246.536196][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.543359][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.568962][ T9292] device bridge_slave_0 entered promiscuous mode [ 246.587752][ T9383] device ip6gre1 entered promiscuous mode [ 246.615880][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.622980][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.664493][ T9292] device bridge_slave_1 entered promiscuous mode [ 246.762897][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.795171][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.833264][ T9424] fuse: Bad value for 'fd' [ 246.941485][ T9292] team0: Port device team_slave_0 added [ 246.944848][ T9428] fuse: Bad value for 'fd' [ 246.978654][ T9292] team0: Port device team_slave_1 added [ 247.069471][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.094691][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.196912][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.256304][ T9442] overlayfs: failed to clone upperpath [ 247.256492][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.275201][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.311507][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.425617][ T9292] device hsr_slave_0 entered promiscuous mode [ 247.459456][ T9292] device hsr_slave_1 entered promiscuous mode [ 247.482099][ T9452] capability: warning: `syz.2.1875' uses 32-bit capabilities (legacy support in use) [ 247.492417][ T9292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.526249][ T9292] Cannot create hsr debugfs directory [ 247.925454][ T9292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.972967][ T9292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.017394][ T9292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.047262][ T9292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.234749][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 248.380143][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.420700][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.452967][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.480651][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.501819][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.529438][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.565227][ T9332] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.572358][ T9332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.625499][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.658312][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.696946][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.719682][ T9332] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.726828][ T9332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.740592][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.770410][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.806692][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.837920][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.867395][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.897415][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.914147][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.946065][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.960788][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.984859][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.002450][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.023613][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.694310][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.739772][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.750711][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.316516][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 251.124319][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.145863][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.266942][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.288898][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.350563][ T9292] device veth0_vlan entered promiscuous mode [ 251.374782][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.414718][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.468823][ T9292] device veth1_vlan entered promiscuous mode [ 251.540983][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.556645][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.571475][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.625356][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.661018][ T9292] device veth0_macvtap entered promiscuous mode [ 251.679189][ T9292] device veth1_macvtap entered promiscuous mode [ 251.721720][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.754325][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.779582][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.795039][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.809793][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.831817][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.857622][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.871057][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.880955][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.907797][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.923396][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.943547][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.964553][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.982262][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.990300][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.004238][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.019349][ T9292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.032941][ T9292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.042153][ T9292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.056242][ T9292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.213986][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.234853][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.285730][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.304693][ T9620] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 252.459732][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.479439][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.505257][ T9625] device bond4 entered promiscuous mode [ 252.535124][ T9625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.581051][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.299854][ T9675] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 254.645009][ T9675] device bond5 entered promiscuous mode [ 254.686687][ T9675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.437619][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.443988][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.445820][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.457428][ T9718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.891267][ T9734] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 255.942409][ T9734] device bond4 entered promiscuous mode [ 255.952009][ T9739] loop5: detected capacity change from 0 to 256 [ 255.955162][ T9734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.019643][ T9739] FAT-fs (loop5): Directory bread(block 64) failed [ 256.078218][ T9739] FAT-fs (loop5): Directory bread(block 65) failed [ 256.113886][ T9739] FAT-fs (loop5): Directory bread(block 66) failed [ 256.143565][ T9739] FAT-fs (loop5): Directory bread(block 67) failed [ 256.152176][ T9739] FAT-fs (loop5): Directory bread(block 68) failed [ 256.202608][ T9739] FAT-fs (loop5): Directory bread(block 69) failed [ 256.239003][ T9739] FAT-fs (loop5): Directory bread(block 70) failed [ 256.267859][ T9739] FAT-fs (loop5): Directory bread(block 71) failed [ 256.356569][ T9739] FAT-fs (loop5): Directory bread(block 72) failed [ 256.363130][ T9739] FAT-fs (loop5): Directory bread(block 73) failed [ 258.936953][ T9818] overlayfs: failed to clone upperpath [ 259.536076][ T9856] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 260.216587][ T9860] device bond5 entered promiscuous mode [ 260.258959][ T9860] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.583488][ T9883] overlayfs: failed to clone lowerpath [ 262.054257][ T9924] overlayfs: failed to clone upperpath [ 262.064114][ T9925] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551610) [ 262.100041][ T9925] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 262.325259][ T9934] device syz_tun entered promiscuous mode [ 262.369226][ T9932] device syz_tun left promiscuous mode [ 262.523959][ T9940] device veth0_to_batadv entered promiscuous mode [ 262.766864][ T9951] overlayfs: failed to clone lowerpath [ 263.685565][ T9970] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2044'. [ 263.712314][ T9970] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2044'. [ 263.737200][ T9970] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2044'. [ 263.781708][ T9976] Illegal XDP return value 61902904 on prog (id 68) dev N/A, expect packet loss! [ 264.394745][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.125326][T10010] 9pnet_fd: Insufficient options for proto=fd [ 266.777999][T10059] fuse: Bad value for 'group_id' [ 268.031896][T10101] loop5: detected capacity change from 0 to 256 [ 268.059116][T10101] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 268.090477][T10101] FAT-fs (loop5): Filesystem has been set read-only [ 268.121762][T10103] fuse: Bad value for 'group_id' [ 268.439328][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.444382][T10122] overlayfs: failed to clone upperpath [ 268.491393][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 268.538492][T10123] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.548275][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 268.586534][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 268.681055][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 268.723442][T10118] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 268.757656][T10124] netlink: 'syz.4.2104': attribute type 13 has an invalid length. [ 269.007068][ T4267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.093507][T10139] fuse: Bad value for 'group_id' [ 269.293725][T10156] fuse: Bad value for 'group_id' [ 269.476587][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 269.506767][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 269.514206][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 269.529792][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 269.542332][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 269.559812][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 269.580717][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 269.621000][T10160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 269.653762][T10160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.835168][ T4267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.943644][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.154732][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.167099][T10187] loop5: detected capacity change from 0 to 128 [ 270.251292][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 270.251305][ T27] audit: type=1800 audit(1764200150.131:846): pid=10187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2130" name="bus" dev="loop5" ino=1048611 res=0 errno=0 [ 270.346804][T10194] fuse: Bad value for 'group_id' [ 270.487680][ T27] audit: type=1326 audit(1764200150.371:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 270.533040][T10199] overlayfs: failed to clone upperpath [ 270.544795][ T27] audit: type=1326 audit(1764200150.371:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 270.585715][T10201] overlayfs: failed to clone lowerpath [ 270.665560][ T27] audit: type=1326 audit(1764200150.371:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm=14 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 270.765824][ T27] audit: type=1326 audit(1764200150.371:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm=14 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 270.847941][ T27] audit: type=1326 audit(1764200150.371:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 270.939065][ T27] audit: type=1326 audit(1764200150.371:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 271.050337][ T27] audit: type=1326 audit(1764200150.371:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 271.107540][ T27] audit: type=1326 audit(1764200150.371:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm=14 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 271.176282][ T27] audit: type=1326 audit(1764200150.371:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10195 comm=14 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x7ffc0000 [ 271.418738][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2143'. [ 272.111621][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 272.301273][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2155'. [ 272.693745][T10274] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.929446][T10284] sock: sock_set_timeout: `syz.0.2167' (pid 10284) tries to set negative timeout [ 272.929926][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2169'. [ 273.055828][T10294] tmpfs: Bad value for 'mpol' [ 273.066158][T10294] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 273.632029][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2184'. [ 274.183167][T10366] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 274.228331][T10366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.370607][T10369] bond5: (slave veth3): Enslaving as an active interface with a down link [ 274.448723][T10366] bond5: (slave dummy0): making interface the new active one [ 274.466242][T10366] device dummy0 entered promiscuous mode [ 274.486657][T10366] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 274.537791][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2198'. [ 274.570893][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 274.636501][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 274.679503][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 274.698930][T10388] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.747904][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 274.777443][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 274.822034][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 274.868090][T10386] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 274.929905][T10391] device ip6gre2 entered promiscuous mode [ 275.247436][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'. [ 275.740868][T10440] device ip6gre3 entered promiscuous mode [ 275.902880][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 275.902894][ T27] audit: type=1326 audit(1764200155.781:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.5.2224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a9418f749 code=0x0 [ 275.965029][T10452] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 276.036640][T10460] fuse: Unknown parameter 'grou00000000000000000000' [ 276.046856][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.057910][T10452] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 276.135174][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 276.429132][T10482] overlayfs: failed to clone upperpath [ 276.781576][T10502] fuse: Unknown parameter 'grou00000000000000000000' [ 276.969277][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2242'. [ 277.804191][T10544] fuse: Unknown parameter 'grou00000000000000000000' [ 278.194402][T10555] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.704439][T10571] device ip6gre1 entered promiscuous mode [ 278.769660][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2262'. [ 278.988781][T10585] fuse: Unknown parameter 'group_i00000000000000000000' [ 279.183500][T10594] overlayfs: failed to clone upperpath [ 279.200371][T10592] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.878487][T10619] overlayfs: failed to clone upperpath [ 280.642617][T10644] device bridge8 entered promiscuous mode [ 281.662949][T10656] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.374541][T10695] device bridge3 entered promiscuous mode [ 282.941296][T10700] netlink: 'syz.2.2298': attribute type 13 has an invalid length. [ 283.107229][T10700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.173652][T10700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.194440][T10700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.374865][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2313'. [ 284.406058][T10745] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 284.509270][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.516741][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.652037][T10753] netlink: 'syz.5.2316': attribute type 13 has an invalid length. [ 284.729256][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 284.770856][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 284.790647][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 284.837458][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 284.867920][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 284.897289][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 284.928336][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 284.943103][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 285.004956][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 285.060754][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.080236][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.153882][ T27] audit: type=1326 audit(1764200165.031:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf7f8f749 code=0x7ffc0000 [ 285.215260][ T27] audit: type=1326 audit(1764200165.061:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3bf7f8f749 code=0x7ffc0000 [ 285.316098][ T27] audit: type=1326 audit(1764200165.061:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf7f8f749 code=0x7ffc0000 [ 285.364897][ T27] audit: type=1326 audit(1764200165.061:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf7f8f749 code=0x7ffc0000 [ 285.648844][ T4358] device dummy0 left promiscuous mode [ 286.419570][T10786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2329'. [ 286.452488][T10786] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 286.636832][T10793] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2332'. [ 287.199164][T10809] overlayfs: failed to clone upperpath [ 287.337922][T10813] fuse: Unknown parameter 'group_id00000000000000000000' [ 289.111298][T10882] fuse: Unknown parameter 'group_id00000000000000000000' [ 289.713899][T10913] fuse: Bad value for 'user_id' [ 289.913522][T10925] netlink: 'syz.0.2395': attribute type 1 has an invalid length. [ 289.955737][T10928] netlink: 'syz.5.2396': attribute type 1 has an invalid length. [ 290.032035][T10928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.138321][T10928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.173003][T10928] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 290.196644][T10928] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 290.229217][T10943] fuse: Bad value for 'user_id' [ 290.585350][T10965] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 290.791015][T10975] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.238691][T11008] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 291.485901][T11021] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.958965][T11051] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 292.016861][T11054] netlink: 'syz.2.2449': attribute type 13 has an invalid length. [ 292.034699][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.046345][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.062509][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.763514][T11097] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 293.662725][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2496'. [ 294.489154][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 294.736010][T11202] fuse: Bad value for 'fd' [ 294.745358][T11203] fuse: Bad value for 'fd' [ 295.151660][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2525'. [ 295.301702][T11231] fuse: Bad value for 'fd' [ 295.444190][T11239] fuse: Bad value for 'fd' [ 295.460538][T11238] netlink: 'syz.0.2531': attribute type 13 has an invalid length. [ 295.507107][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 295.563012][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 295.685774][ T4255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.942830][T11262] fuse: Bad value for 'fd' [ 296.105933][ T4380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.536544][T11295] fuse: Bad value for 'fd' [ 296.731406][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.072151][T11321] fuse: Invalid rootmode [ 298.628682][T11351] fuse: Invalid rootmode [ 299.239195][T11386] tipc: Enabling of bearer rejected, failed to enable media [ 299.802907][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 299.845723][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 299.854082][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 299.864893][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 299.883711][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 299.905912][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 299.926495][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.945600][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.953082][T11415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.114925][T11423] syz.4.2618 uses obsolete (PF_INET,SOCK_PACKET) [ 300.523101][T11437] xt_connbytes: Forcing CT accounting to be enabled [ 300.988194][T11453] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2627'. [ 301.324006][T11462] netlink: 'syz.2.2630': attribute type 13 has an invalid length. [ 301.357383][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.388725][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.413582][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.662869][T11473] netlink: 'syz.5.2634': attribute type 24 has an invalid length. [ 302.588308][T11505] team0: Port device team_slave_0 removed [ 303.077825][T11528] overlayfs: failed to clone upperpath [ 303.816145][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 303.873035][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 303.895309][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 303.902819][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 303.927625][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 303.954952][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 303.973268][T11552] device syzkaller1 entered promiscuous mode [ 304.361435][T11571] overlayfs: failed to clone upperpath [ 305.098103][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 305.209662][T11600] fuse: Unknown parameter 'use00000000000000000000' [ 305.516176][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 305.559710][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 305.584830][T11613] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 305.621875][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 305.671024][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 305.696377][T11612] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 306.088652][T11633] device batadv_slave_1 entered promiscuous mode [ 306.263477][T11636] fuse: Unknown parameter 'use00000000000000000000' [ 306.832202][T11659] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2711'. [ 306.881520][T11660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 307.087199][T11670] fuse: Unknown parameter 'use00000000000000000000' [ 307.807041][T11702] fuse: Unknown parameter 'user_i00000000000000000000' [ 307.944526][T11705] fuse: Unknown parameter 'use00000000000000000000' [ 307.980528][T11709] overlayfs: failed to clone upperpath [ 308.257231][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 308.304905][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 308.331876][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 308.356019][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 308.372702][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 308.493342][T11735] fuse: Unknown parameter 'user_i00000000000000000000' [ 308.633588][T11741] fuse: Unknown parameter 'user_i00000000000000000000' [ 308.771424][T11748] overlayfs: failed to clone upperpath [ 309.269524][T11771] fuse: Unknown parameter 'user_i00000000000000000000' [ 309.367740][T11775] fuse: Unknown parameter 'user_i00000000000000000000' [ 309.699470][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 309.725912][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 309.741663][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 309.751856][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 309.765411][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 309.772995][T11794] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 309.785759][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 310.190670][T11811] fuse: Unknown parameter 'user_i00000000000000000000' [ 310.223586][T11813] fuse: Unknown parameter 'user_id00000000000000000000' [ 310.338008][T11815] netlink: 'syz.2.2773': attribute type 13 has an invalid length. [ 310.358672][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.371245][T11817] overlayfs: failed to clone upperpath [ 310.385101][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 310.402282][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 310.411188][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 310.464941][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 310.486987][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.501659][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.536218][T11815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.620498][T11821] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 311.096640][T11843] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 311.481681][T11851] overlayfs: failed to clone upperpath [ 311.623457][T11859] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 311.659871][T11859] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 311.688830][T11859] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 311.718141][T11859] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 311.737439][T11859] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 312.265565][T11890] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2799'. [ 312.422662][T11894] overlayfs: failed to clone upperpath [ 314.576821][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2827'. [ 314.753585][T11962] fuse: Bad value for 'fd' [ 314.874259][T11968] 9pnet_fd: Insufficient options for proto=fd [ 315.413433][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 316.754327][T12021] netlink: 'syz.4.2853': attribute type 13 has an invalid length. [ 316.835667][ T26] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.855160][T12025] fuse: Unknown parameter '0x0000000000000004' [ 316.885857][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.892174][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.349908][ T26] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.488166][T12056] fuse: Unknown parameter '0x0000000000000004' [ 317.530702][T12052] ipt_CLUSTERIP: Please specify destination IP [ 318.104521][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 318.119487][T12073] ptrace attach of "./syz-executor exec"[4277] was attempted by ""[12073] [ 318.383325][T12080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2879'. [ 318.873739][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2888'. [ 318.895978][T12102] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2886'. [ 319.184865][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2891'. [ 319.524109][T12117] overlayfs: failed to clone upperpath [ 320.727425][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 320.967831][T12145] overlayfs: failed to clone upperpath [ 321.495173][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.523509][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.532123][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.540971][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.558095][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 321.565359][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.613145][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 321.849944][T12174] fuse: Unknown parameter '0x0000000000000004' [ 321.932664][T12176] overlayfs: failed to clone upperpath [ 322.182077][T12160] chnl_net:caif_netlink_parms(): no params data found [ 322.580003][T12197] netlink: 'syz.5.2927': attribute type 13 has an invalid length. [ 322.604690][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 322.636479][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 322.655260][T12206] fuse: Unknown parameter '0x0000000000000004' [ 322.666239][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 322.690305][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 322.713984][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 322.729501][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 322.758787][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.783230][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.811413][T12197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.129162][T12160] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.144705][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.152950][T12160] device bridge_slave_0 entered promiscuous mode [ 323.311816][T12160] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.324705][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.333702][T12160] device bridge_slave_1 entered promiscuous mode [ 323.357155][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2934'. [ 323.494366][T12160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.553957][T12160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.595016][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 323.650338][T12160] team0: Port device team_slave_0 added [ 323.660374][T12160] team0: Port device team_slave_1 added [ 323.777441][T12160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.794648][T12160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.824999][T12160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.989773][T12234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.061909][T12160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.079506][T12160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.216416][T12160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.343497][T12160] device hsr_slave_0 entered promiscuous mode [ 324.353483][T12160] device hsr_slave_1 entered promiscuous mode [ 324.360104][T12160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.369061][T12160] Cannot create hsr debugfs directory [ 324.580229][T12255] device team_slave_0 left promiscuous mode [ 324.590366][T12255] team0: Port device team_slave_0 removed [ 324.991406][ T9861] bond4: (slave ip6gretap1): Releasing active interface [ 325.004192][ T9861] device ip6gretap1 left promiscuous mode [ 325.129197][T12274] 8021q: adding VLAN 0 to HW filter on device bond8 [ 325.685209][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 325.931322][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 325.951323][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 325.966491][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 325.973754][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 325.996751][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 326.624306][ T9861] device hsr_slave_0 left promiscuous mode [ 326.635355][ T9861] device hsr_slave_1 left promiscuous mode [ 326.654774][ T9861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.665565][ T9861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.677512][ T9861] device bridge_slave_1 left promiscuous mode [ 326.684397][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.695927][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.733383][ T9861] bond9 (unregistering): Released all slaves [ 326.752548][ T9861] bond8 (unregistering): Released all slaves [ 326.987636][ T9861] bond7 (unregistering): Released all slaves [ 327.003369][ T9861] bond6 (unregistering): Released all slaves [ 327.178305][ T9861] bond5 (unregistering): Released all slaves [ 327.403155][ T9861] bond4 (unregistering): Released all slaves [ 327.550066][ T9861] bond3 (unregistering): Released all slaves [ 327.652022][ T9861] bond2 (unregistering): Released all slaves [ 327.724900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.733243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.741603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 327.749904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 327.758197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 327.766498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 327.774834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 327.784601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 327.794603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 327.804603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 327.854362][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 327.989513][ T9861] bond1 (unregistering): Released all slaves [ 328.829832][ T9861] team0 (unregistering): Port device team_slave_1 removed [ 328.873387][ T9861] team0 (unregistering): Port device team_slave_0 removed [ 328.922478][ T9861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.968140][ T9861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.381951][ T9861] bond0 (unregistering): Released all slaves [ 329.725870][T12160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.754142][T12160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.789527][T12160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.830677][T12357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 329.861406][T12357] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 329.879315][T12357] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 329.896625][T12357] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 329.914743][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 329.949102][T12357] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 329.967062][T12357] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 330.014670][T12160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.016124][T12160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.187911][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.218654][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.269326][T12160] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.336788][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.614115][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.825062][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.832282][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.924449][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.033101][T12160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.127366][T12160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.173676][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.193780][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.217761][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.224920][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.253405][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.277435][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.308421][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.329388][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.349077][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.381505][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.409001][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.436845][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.459906][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.473883][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.511677][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.541525][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.563987][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 332.608919][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 332.637333][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 332.697556][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 332.711818][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 332.931579][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.943780][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.957141][T12160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.353835][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.374349][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.417063][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.439073][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.460428][T12160] device veth0_vlan entered promiscuous mode [ 333.471315][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.488994][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.510327][T12160] device veth1_vlan entered promiscuous mode [ 333.523244][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.570265][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.582160][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.601422][T12160] device veth0_macvtap entered promiscuous mode [ 333.618984][T12160] device veth1_macvtap entered promiscuous mode [ 333.649136][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.690450][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.722627][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.740341][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.751674][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.762776][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.786718][T12160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.798808][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 333.815965][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.829448][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.845602][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.897322][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.914531][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.929793][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.944522][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.962032][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.972752][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.984160][T12160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.993169][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.023224][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.039746][T12160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.058776][T12160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.077732][T12160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.088896][T12160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.103253][T12501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 334.112709][T12501] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 334.120482][T12501] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 334.129684][T12501] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 334.137499][T12501] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 334.145193][T12501] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 334.226915][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.248305][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.272372][ T9861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.289318][ T9861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.297877][ T9861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.309750][ T7740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.341723][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3021'. [ 334.424235][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2903'. [ 334.494183][T12515] device gre0 entered promiscuous mode [ 335.241717][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.256200][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.263810][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.278214][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.286022][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.293216][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.696622][T12543] chnl_net:caif_netlink_parms(): no params data found [ 335.709398][T12555] loop4: detected capacity change from 0 to 1024 [ 335.812690][T12555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.987249][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.000082][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.009505][T12543] device bridge_slave_0 entered promiscuous mode [ 336.024878][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.032566][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.076430][T12543] device bridge_slave_1 entered promiscuous mode [ 336.140246][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'. [ 336.173251][T12568] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 336.230900][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.295749][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.364380][ T7789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.474383][T12160] EXT4-fs (loop4): unmounting filesystem. [ 336.489393][T12543] team0: Port device team_slave_0 added [ 336.575911][ T7789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.594471][T12543] team0: Port device team_slave_1 added [ 336.609675][T12573] loop4: detected capacity change from 0 to 256 [ 336.647534][ T7789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.663494][T12573] exFAT-fs (loop4): invalid boot record signature [ 336.672347][T12573] exFAT-fs (loop4): failed to read boot sector [ 336.689913][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.701075][T12573] exFAT-fs (loop4): failed to recognize exfat type [ 336.708681][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.739164][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.953471][ T7789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.554699][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 337.657434][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.695016][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.701980][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.749368][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.850882][T12543] device hsr_slave_0 entered promiscuous mode [ 337.902026][T12543] device hsr_slave_1 entered promiscuous mode [ 337.911946][T12543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.934448][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 337.948036][T12543] Cannot create hsr debugfs directory [ 338.374352][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'. [ 339.594735][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 339.633416][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 339.674122][T12543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.930898][T12543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.294172][T12543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.805310][T12543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.898611][ T7789] device hsr_slave_0 left promiscuous mode [ 340.935399][ T7789] device hsr_slave_1 left promiscuous mode [ 340.959116][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.979945][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.009482][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.028486][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.041855][ T7789] device bridge_slave_1 left promiscuous mode [ 341.054142][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.071085][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.415039][ T7789] device veth1_macvtap left promiscuous mode [ 341.522768][ T7789] device veth0_macvtap left promiscuous mode [ 341.639942][ T7789] device veth1_vlan left promiscuous mode [ 341.674942][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 341.762497][ T7789] device veth0_vlan left promiscuous mode [ 343.755286][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 344.008480][ T7789] bond8 (unregistering): Released all slaves [ 344.245556][ T7789] bond7 (unregistering): Released all slaves [ 344.420177][ T7789] bond6 (unregistering): Released all slaves [ 344.539352][ T7789] bond5 (unregistering): Released all slaves [ 344.648983][ T7789] bond4 (unregistering): Released all slaves [ 344.850266][ T7789] bond3 (unregistering): Released all slaves [ 344.954687][ T7789] bond2 (unregistering): Released all slaves [ 345.060326][ T7789] bond1 (unregistering): Released all slaves [ 345.399155][ T7789] device team_slave_1 left promiscuous mode [ 345.523947][ T7789] team0 (unregistering): Port device team_slave_1 removed [ 345.560887][ T7789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.660086][ T7789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.569727][ T7789] bond0 (unregistering): Released all slaves [ 346.695162][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 346.695324][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'. [ 347.022313][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.051078][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.073896][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.116847][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.151745][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.178925][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.202149][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.209352][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.277458][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.286351][T12734] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3092'. [ 347.309307][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.328352][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.453661][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.460885][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.469192][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.486908][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.529470][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.552126][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.591785][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.614070][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.623465][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.632859][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.642106][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.662302][T12543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.695574][T12543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.704159][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.725529][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.995472][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3095'. [ 350.003109][ T9808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.043619][ T9808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.264175][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.117428][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.182220][ T9331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.608735][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.679554][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.736089][T12543] device veth0_vlan entered promiscuous mode [ 351.759318][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.812427][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.859848][T12543] device veth1_vlan entered promiscuous mode [ 352.007953][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 352.051598][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 352.060397][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.069068][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.080344][T12543] device veth0_macvtap entered promiscuous mode [ 352.102042][T12543] device veth1_macvtap entered promiscuous mode [ 352.126407][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.145986][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 352.971480][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.008665][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.079321][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.110259][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.140729][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.159296][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.181045][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.212918][T12804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 353.260138][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.270426][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.310274][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.342309][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.359381][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.372683][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.385825][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.396538][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.415855][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.443796][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.463456][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.487901][T12543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.506864][T12543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.525086][T12543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.543964][T12543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.564644][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 353.728945][T12830] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 353.770735][T12830] device bond8 entered promiscuous mode [ 353.779809][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 353.788966][T12830] 8021q: adding VLAN 0 to HW filter on device bond8 [ 353.834022][ T14] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 353.854651][ T14] usb 5-1: config 179 has no interface number 0 [ 353.862125][ T14] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 353.873275][ T14] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 353.884722][ T14] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.499113][ T14] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 354.510652][ T14] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 354.523956][ T14] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 354.619620][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.652471][T12808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.675210][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.706128][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.768929][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 354.800314][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.840658][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.928349][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.969606][ T4345] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 354.997759][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3126'. [ 355.119127][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.136275][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.534208][ T4267] usb 5-1: USB disconnect, device number 2 [ 355.540140][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 355.548436][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 355.644112][T12854] loop3: detected capacity change from 0 to 16 [ 355.672983][T12854] erofs: (device loop3): mounted with root inode @ nid 36. [ 356.592847][T12865] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 356.674133][T12869] device macvlan1 entered promiscuous mode [ 356.737968][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.746882][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.755322][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.763028][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.773464][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.788559][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.126451][ T7740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.247799][ T7740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.376062][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3144'. [ 357.434018][T12899] loop3: detected capacity change from 0 to 764 [ 357.451607][ T7740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.626299][ T7740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.727895][T12906] netlink: 'syz.4.3148': attribute type 1 has an invalid length. [ 357.902304][T12908] device netdevsim1 entered promiscuous mode [ 358.033181][T12872] chnl_net:caif_netlink_parms(): no params data found [ 358.874899][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 358.997298][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.011646][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.037572][T12872] device bridge_slave_0 entered promiscuous mode [ 359.152964][ T7740] bond2: (slave ip6gretap1): Releasing active interface [ 359.167912][ T7740] device ip6gretap1 left promiscuous mode [ 359.264797][T12872] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.271945][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.315686][T12872] device bridge_slave_1 entered promiscuous mode [ 359.564299][T12872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.600586][T12872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.642909][T12872] team0: Port device team_slave_0 added [ 359.764777][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 360.004862][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 360.017439][ T14] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 360.206421][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 360.273256][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 360.330101][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 360.379941][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.432734][T12872] team0: Port device team_slave_1 added [ 360.439890][ T14] usb 5-1: config 0 descriptor?? [ 360.766754][T12872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.824612][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.050967][T12872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.205048][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 361.268063][T12872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.297343][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.414656][T12872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.421809][T12955] loop4: detected capacity change from 0 to 512 [ 361.572483][T12955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 361.623738][ T14] wacom 0003:056A:0307.0001: item fetching failed at offset 0/7 [ 361.686106][ T14] wacom 0003:056A:0307.0001: parse failed [ 361.691890][ T14] wacom: probe of 0003:056A:0307.0001 failed with error -22 [ 361.860074][ T4267] usb 5-1: USB disconnect, device number 3 [ 361.877085][T12872] device hsr_slave_0 entered promiscuous mode [ 361.898036][T12872] device hsr_slave_1 entered promiscuous mode [ 361.912618][T12872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.929390][T12872] Cannot create hsr debugfs directory [ 363.274726][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 365.757714][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 365.764033][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 365.849286][T12160] EXT4-fs (loop4): unmounting filesystem. [ 366.215290][ T7740] device hsr_slave_0 left promiscuous mode [ 366.242447][ T7740] device hsr_slave_1 left promiscuous mode [ 366.261124][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.296464][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.319089][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.342771][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.385741][ T7740] device bridge_slave_1 left promiscuous mode [ 366.402173][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.414974][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.428422][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3189'. [ 366.503546][ T7740] device veth1_macvtap left promiscuous mode [ 366.540120][ T7740] device veth0_macvtap left promiscuous mode [ 366.563083][ T7740] device veth1_vlan left promiscuous mode [ 366.591537][ T7740] device veth0_vlan left promiscuous mode [ 367.701509][ T7740] bond8 (unregistering): Released all slaves [ 367.977172][ T7740] bond7 (unregistering): Released all slaves [ 368.115873][T13079] "syz.4.3197" (13079) uses obsolete ecb(arc4) skcipher [ 368.126977][T13079] syz.4.3197 sent an empty control message without MSG_MORE. [ 368.464763][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 368.645364][ T14] usb 5-1: device descriptor read/64, error -71 [ 368.813754][T13085] loop3: detected capacity change from 0 to 512 [ 368.826285][T13085] EXT4-fs: Ignoring removed oldalloc option [ 368.847328][T13085] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 368.857493][ T7740] bond6 (unregistering): Released all slaves [ 368.877996][T13085] EXT4-fs (loop3): invalid journal inode [ 368.891886][ T7740] bond5 (unregistering): (slave veth3): Releasing active interface [ 368.899882][ T7740] bond5 (unregistering): (slave veth3): the permanent HWaddr of slave - f6:0d:af:d4:1e:bd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 368.918800][T13085] EXT4-fs (loop3): can't get journal size [ 368.925954][ T7740] device dummy0 entered promiscuous mode [ 368.934081][T13085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 368.938693][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 368.957172][T13085] System zones: 1-12, 13-13 [ 369.005372][T13085] EXT4-fs (loop3): 1 truncate cleaned up [ 369.011097][T13085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 369.098237][T12543] EXT4-fs (loop3): unmounting filesystem. [ 369.110455][ T14] usb 5-1: device descriptor read/64, error -71 [ 369.126951][ T7740] bond5 (unregistering): (slave dummy0): Releasing active interface [ 369.163434][ T7740] device dummy0 left promiscuous mode [ 369.170173][ T7740] bond5 (unregistering): Released all slaves [ 369.173246][T13089] loop3: detected capacity change from 0 to 512 [ 369.241970][ T14] usb usb5-port1: attempt power cycle [ 369.292137][T13089] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 369.301378][T13089] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.351370][ T7740] bond4 (unregistering): Released all slaves [ 369.604299][ T7740] bond3 (unregistering): Released all slaves [ 369.664688][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 369.695182][ T14] usb 5-1: device descriptor read/8, error -71 [ 369.798378][ T7740] bond2 (unregistering): Released all slaves [ 369.976297][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 370.022830][ T14] usb 5-1: device descriptor read/8, error -71 [ 370.083729][ T7740] bond1 (unregistering): Released all slaves [ 370.105469][T12543] EXT4-fs (loop3): unmounting filesystem. [ 370.159295][ T14] usb usb5-port1: unable to enumerate USB device [ 370.160431][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 370.576744][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.617201][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.971437][ T7740] bond0 (unregistering): Released all slaves [ 371.051149][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 376.216420][T13141] loop4: detected capacity change from 0 to 128 [ 376.598742][T13154] loop3: detected capacity change from 0 to 16 [ 376.656557][T13154] erofs: (device loop3): mounted with root inode @ nid 36. [ 377.840738][T12872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.898424][T12872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.957502][T12872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.997173][T12872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.120993][T13194] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 378.153919][T13194] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 378.191934][T13194] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 378.264841][T13194] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 378.289909][T13194] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 378.317290][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.323615][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.346406][T13194] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 378.365703][T13194] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 378.576354][T12872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.634114][T12872] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.670510][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.685334][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.722161][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.748905][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.771745][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.778925][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.814975][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.840971][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.844663][ T5390] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 378.849809][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.863686][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.929759][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.939809][T13213] loop3: detected capacity change from 0 to 512 [ 378.952549][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.979183][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.982156][T13213] EXT4-fs: Ignoring removed i_version option [ 379.003611][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.033590][T13213] EXT4-fs: Ignoring removed bh option [ 379.040109][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.064821][ T5390] usb 5-1: Using ep0 maxpacket: 16 [ 379.072009][ T5390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.078233][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.119896][ T5390] usb 5-1: config 0 has no interfaces? [ 379.128956][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.134631][ T5390] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.157649][T13213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.165881][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.182183][ T5390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.282510][ T5390] usb 5-1: config 0 descriptor?? [ 379.294825][T13213] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.345432][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.354122][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.390917][T12872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.459768][T12872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.491215][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.510291][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.637359][T12543] EXT4-fs (loop3): unmounting filesystem. [ 379.738075][ T5390] usb 5-1: USB disconnect, device number 8 [ 379.862118][T13245] loop3: detected capacity change from 0 to 512 [ 379.912145][T13245] EXT4-fs: Ignoring removed nobh option [ 379.971138][T13245] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3243: iget: bad i_size value: 38620345925642 [ 380.114758][T13245] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3243: couldn't read orphan inode 15 (err -117) [ 380.221742][T13245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 380.370132][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.389307][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.426918][T13261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.3243: bg 0: block 5: invalid block bitmap [ 380.460565][T13261] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 380.475759][T12872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.520456][T13261] EXT4-fs (loop3): This should not happen!! Data will be lost [ 380.520456][T13261] [ 380.545090][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.564505][T13261] EXT4-fs (loop3): Total free blocks count 0 [ 380.570982][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.684838][T13261] EXT4-fs (loop3): Free/Dirty block details [ 380.697694][T13261] EXT4-fs (loop3): free_blocks=0 [ 380.748337][T13261] EXT4-fs (loop3): dirty_blocks=460 [ 380.763812][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.959603][T13261] EXT4-fs (loop3): Block reservation details [ 380.970573][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.894758][T13261] EXT4-fs (loop3): i_reserved_data_blocks=460 [ 381.908930][T12872] device veth0_vlan entered promiscuous mode [ 381.925478][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.936565][ T7789] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 444 with error 28 [ 381.955096][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.988373][T12872] device veth1_vlan entered promiscuous mode [ 382.056670][T13282] support for the xor transformation has been removed. [ 382.066515][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.125033][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.174442][T12872] device veth0_macvtap entered promiscuous mode [ 382.212712][T12872] device veth1_macvtap entered promiscuous mode [ 382.278336][T12872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.314763][T12872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.336905][T12872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.361613][T12872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.386944][T12872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.434218][T12872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.477314][T12872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.500419][T12872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.511392][T12872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.588069][T12872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.664547][T12872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.775750][T12872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.897530][T12872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.032976][T12872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.248560][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.303509][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.351217][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.382035][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.428798][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.481023][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.513206][T13315] binder: 13314:13315 ioctl c0306201 200000000480 returned -14 [ 383.515732][T12872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.562595][T12872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.595747][T12872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.623978][T12872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.868472][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.908317][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.934912][T13321] loop3: detected capacity change from 0 to 128 [ 383.958253][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.016946][ T9232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.071249][T13321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 384.079788][ T9232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.104731][T13321] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 384.143629][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.400235][T12543] EXT4-fs (loop3): unmounting filesystem. [ 385.770646][T13360] loop4: detected capacity change from 0 to 164 [ 385.939767][T13357] loop3: detected capacity change from 0 to 2048 [ 386.084864][ T26] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 386.289223][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.355261][T13357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 386.457212][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.663428][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 386.694130][ T27] audit: type=1800 audit(1764200266.571:871): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3275" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 386.776848][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.829383][ T26] usb 3-1: SerialNumber: syz [ 386.943466][ T26] usb 3-1: 0:2 : does not exist [ 387.971000][T13383] loop2: detected capacity change from 0 to 2048 [ 388.033422][T13383] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 388.197317][T12543] EXT4-fs (loop3): unmounting filesystem. [ 388.950144][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.959646][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.971395][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.979491][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.988019][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 388.995345][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.678641][ T4267] usb 3-1: USB disconnect, device number 2 [ 390.649185][T13399] chnl_net:caif_netlink_parms(): no params data found [ 390.706184][T13428] loop3: detected capacity change from 0 to 2048 [ 390.800985][T13428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 390.857589][T13399] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.866500][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.874488][T13399] device bridge_slave_0 entered promiscuous mode [ 390.914070][T13399] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.952672][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.977423][T13399] device bridge_slave_1 entered promiscuous mode [ 390.986794][T12543] EXT4-fs (loop3): unmounting filesystem. [ 391.034738][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 391.138994][T13399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.177207][T13399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.272399][T13399] team0: Port device team_slave_0 added [ 391.332243][T13399] team0: Port device team_slave_1 added [ 391.344797][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 391.404757][T13399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.411724][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.544146][T13399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.560451][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 391.568490][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.609328][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.628376][T13399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.659659][T13458] loop4: detected capacity change from 0 to 512 [ 391.664609][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.683141][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.731531][ T22] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.751753][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.764571][T13399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.770622][T13458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 391.795486][T13458] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.808225][ T22] usb 4-1: config 0 descriptor?? [ 391.983859][T13399] device hsr_slave_0 entered promiscuous mode [ 392.011626][T13399] device hsr_slave_1 entered promiscuous mode [ 392.082284][T12160] EXT4-fs (loop4): unmounting filesystem. [ 392.228027][ T22] HID 045e:07da: Invalid code 65791 type 1 [ 392.336653][T13473] input: syz0 as /devices/virtual/input/input8 [ 392.873415][ T22] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input7 [ 393.114928][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 393.145074][ T22] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 393.219705][ T22] usb 4-1: USB disconnect, device number 2 [ 393.500786][T13490] loop3: detected capacity change from 0 to 2048 [ 393.539672][ T5384] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 393.575707][T13487] fido_id[13487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 393.604180][T13490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.747026][ T5384] usb 5-1: Using ep0 maxpacket: 16 [ 393.757541][ T5384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.808848][ T5384] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.877558][ T5384] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 393.930890][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.970955][ T5384] usb 5-1: config 0 descriptor?? [ 394.111933][T13399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.151925][T13399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.182419][T13399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.218345][T13399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.955680][ T5384] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 394.964229][ T5384] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 394.976024][ T5384] microsoft 0003:045E:07DA.0003: no inputs found [ 394.982558][ T5384] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 395.160543][ T7] usb 5-1: USB disconnect, device number 9 [ 395.202063][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 395.258112][T13531] loop2: detected capacity change from 0 to 512 [ 395.258306][T13525] fido_id[13525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 395.292447][T13531] EXT4-fs: Ignoring removed i_version option [ 395.378556][T13527] team0: Port device team_slave_0 removed [ 395.390149][T13531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 395.413766][T13531] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.488454][T13399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.582929][T13531] EXT4-fs error (device loop2): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.2.3314: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 395.607328][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.620432][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.660713][T13399] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.683406][T13531] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: comm syz.2.3314: directory missing '.' [ 395.700119][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.723383][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.733402][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.740553][ T7789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.830920][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.857103][T12872] EXT4-fs (loop2): unmounting filesystem. [ 395.905525][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.934447][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.975384][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.982497][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.043136][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.063605][T13553] loop4: detected capacity change from 0 to 512 [ 396.093332][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.102980][T13553] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 396.134679][T13553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 396.165589][T13399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.188923][T13399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.202642][T13553] EXT4-fs (loop4): 1 truncate cleaned up [ 396.233081][T13553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 396.233559][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.320846][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.352921][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.401658][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.425276][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.444018][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.453838][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.463778][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.480084][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.490647][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.646899][T12160] EXT4-fs (loop4): unmounting filesystem. [ 397.130636][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.189891][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.223782][T13590] loop4: detected capacity change from 0 to 1024 [ 397.245724][T13399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.274668][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 397.329378][T13593] loop3: detected capacity change from 0 to 128 [ 397.365721][T13593] ext2: Bad value for 'barrier' [ 397.405693][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.424684][T13595] loop2: detected capacity change from 0 to 1024 [ 397.436313][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.483800][T13595] EXT4-fs: inline encryption not supported [ 397.533863][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.579299][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.596989][T13595] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 397.650900][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.699183][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.712577][T13399] device veth0_vlan entered promiscuous mode [ 397.732534][T13595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 397.840675][T13602] hfsplus: found bad thread record in catalog [ 397.847108][T13602] hfsplus: catalog searching failed [ 397.915968][T13399] device veth1_vlan entered promiscuous mode [ 398.224219][T13399] device veth0_macvtap entered promiscuous mode [ 398.242928][T12872] EXT4-fs (loop2): unmounting filesystem. [ 398.270465][T13399] device veth1_macvtap entered promiscuous mode [ 398.312775][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.349904][ T4310] hfsplus: found bad thread record in catalog [ 398.371500][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.390963][ T4310] hfsplus: found bad thread record in catalog [ 398.404470][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.438679][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.446272][ T4267] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 398.489943][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.544566][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.580255][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.604663][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.630659][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.654613][ T4267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.671254][ T4267] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.684596][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.694429][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.716041][ T4267] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 398.731899][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.744700][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.757329][ T4267] usb 4-1: SerialNumber: syz [ 398.775870][ T4267] usb 4-1: 0:2 : does not exist [ 398.783142][T13399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.822676][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.834365][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.912539][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.953859][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.977052][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.010081][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.078838][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.153157][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.163084][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.173570][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.195139][T13399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.342494][T13621] loop3: detected capacity change from 0 to 2048 [ 400.411087][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.435362][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.447297][T13621] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 400.544724][T13399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.554477][T13399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.564795][T13399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.573577][T13399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.658542][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3339'. [ 400.749596][ T8384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.795966][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.803407][ T8384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.804686][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.825112][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 400.852843][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.999645][T13635] loop2: detected capacity change from 0 to 512 [ 401.188271][T13635] syz.2.3343: attempt to access beyond end of device [ 401.188271][T13635] loop2: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 401.908154][T13635] syz.2.3343: attempt to access beyond end of device [ 401.908154][T13635] loop2: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 401.934977][ T27] audit: type=1800 audit(1764200281.821:872): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3343" name="file2" dev="loop2" ino=1048626 res=0 errno=0 [ 401.957486][T13635] syz.2.3343 (13635) used greatest stack depth: 19840 bytes left [ 402.044264][ T4267] usb 4-1: USB disconnect, device number 3 [ 403.654593][ T5384] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 403.856717][ T5384] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.884851][ T5384] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.945664][ T5384] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 403.978033][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 404.004884][ T5384] usb 5-1: SerialNumber: syz [ 404.043594][ T5384] usb 5-1: 0:2 : does not exist [ 404.177046][T13695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3360'. [ 405.032147][T13699] loop4: detected capacity change from 0 to 2048 [ 405.074311][T13699] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 406.303811][T13100] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.518560][ T4319] usb 5-1: USB disconnect, device number 10 [ 408.974859][ T4319] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 409.390828][ T4275] Bluetooth: Unexpected continuation frame (len 10) [ 409.494690][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 409.506819][ T4319] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.889158][ T4319] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.901117][ T4319] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 409.914689][ T4319] usb 4-1: config 0 interface 0 has no altsetting 0 [ 409.921494][ T4319] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 409.930799][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.961896][ T4319] usb 4-1: config 0 descriptor?? [ 410.915105][ T4319] hid (null): report_id 0 is invalid [ 410.929289][ T4319] hid (null): usage index exceeded [ 411.074801][ T4319] usb 4-1: USB disconnect, device number 4 [ 413.485625][T13796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3393'. [ 414.413747][T13804] loop0: detected capacity change from 0 to 2048 [ 414.637526][T13804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 414.686839][ T27] audit: type=1804 audit(1764200294.581:873): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3396" name="/newroot/12/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 414.887768][T13399] EXT4-fs (loop0): unmounting filesystem. [ 415.568843][T13826] loop2: detected capacity change from 0 to 1024 [ 417.191769][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 419.444789][T13894] tmpfs: Unknown parameter 'dont_appraise' [ 421.474032][T13918] support for the xor transformation has been removed. [ 426.187064][T13972] loop4: detected capacity change from 0 to 512 [ 426.216804][T13972] EXT4-fs: Ignoring removed i_version option [ 426.322357][T13972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 426.340873][T13972] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 426.646583][T12160] EXT4-fs (loop4): unmounting filesystem. [ 429.400654][T14016] loop0: detected capacity change from 0 to 128 [ 429.849930][T14025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.079952][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.105272][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.116252][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.133046][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.149544][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 432.159406][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.721270][T14065] chnl_net:caif_netlink_parms(): no params data found [ 432.984280][T14065] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.011727][T14065] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.041583][T14065] device bridge_slave_0 entered promiscuous mode [ 433.084399][T14065] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.099063][T14065] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.110269][T14095] loop3: detected capacity change from 0 to 256 [ 433.125638][T14065] device bridge_slave_1 entered promiscuous mode [ 433.148728][T14095] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.178336][T14095] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 433.212278][T14095] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 433.230036][T14092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.414681][T14096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3495'. [ 433.955318][T14065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.127536][T14065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.234816][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 434.241089][T14065] team0: Port device team_slave_0 added [ 434.273873][T14065] team0: Port device team_slave_1 added [ 434.332209][T14065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.349693][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.414683][T14065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.451455][T14065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.474643][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.553978][T14065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.674371][T14065] device hsr_slave_0 entered promiscuous mode [ 434.698073][T14065] device hsr_slave_1 entered promiscuous mode [ 434.718155][T14065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.760071][T14065] Cannot create hsr debugfs directory [ 434.921635][T14126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.004426][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3508'. [ 435.408226][T14065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 435.442284][T14065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 435.467832][T14065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.493070][T14065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.628360][T14065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.669201][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.693160][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.718278][T14065] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.747069][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.768028][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.797428][ T9332] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.804610][ T9332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.827776][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 436.866153][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 436.904497][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 436.914846][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.935026][ T9332] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.942127][ T9332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.967566][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.012024][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.099040][T14170] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.118543][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.145083][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.174035][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.200537][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.221884][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.241001][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.265745][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'. [ 437.288752][T14065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.313649][T14065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.328830][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.340898][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.353648][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.673177][T14188] loop2: detected capacity change from 0 to 2048 [ 437.754415][T14188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 437.995526][T12872] EXT4-fs (loop2): unmounting filesystem. [ 438.019804][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.035005][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.081641][T14065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.526542][T14209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.592998][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3534'. [ 438.885367][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 439.163306][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.175432][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.254200][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.269499][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.278935][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.288392][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.304096][T14065] device veth0_vlan entered promiscuous mode [ 439.323655][T14065] device veth1_vlan entered promiscuous mode [ 439.362622][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.379694][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.409183][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.427614][ T5998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.456011][T14065] device veth0_macvtap entered promiscuous mode [ 439.476979][T14065] device veth1_macvtap entered promiscuous mode [ 439.506576][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.528429][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.551153][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.574190][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.592554][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.613697][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.630413][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.671016][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.697739][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.709898][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.757560][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.763916][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.773527][T14065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.820575][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.833700][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 439.871778][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.975003][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.074121][T14255] netlink: 'syz.3.3551': attribute type 1 has an invalid length. [ 440.602483][T14261] device bond1 entered promiscuous mode [ 440.763502][T14261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.772971][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.824978][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.859445][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.878424][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.892103][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.980085][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.014354][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 441.030414][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.055522][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.075395][T14065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.112384][T14065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.156926][T14065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.202202][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.272045][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.304138][T14065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.320218][T14065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.361800][T14065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.387277][T14065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.408990][T14283] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.425641][T14283] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 441.456709][T14283] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 441.479221][T14283] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 441.497328][T14283] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 441.512686][T14283] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 441.530875][T14283] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 441.663567][ T5998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.766374][ T5998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.794077][ T5908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 441.828326][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.877321][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.918799][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 442.824862][T14311] loop6: detected capacity change from 0 to 1764 [ 443.008483][T14310] netlink: 'syz.6.3563': attribute type 12 has an invalid length. [ 443.016415][T14310] netlink: 'syz.6.3563': attribute type 29 has an invalid length. [ 443.024232][T14310] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3563'. [ 443.033345][T14310] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3563'. [ 443.127245][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 443.217475][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 443.317534][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 443.373740][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 443.415856][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 443.495147][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 443.550355][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 444.381401][T14358] netlink: 'syz.4.3582': attribute type 1 has an invalid length. [ 444.443525][T14358] device bond1 entered promiscuous mode [ 444.449657][T14358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.509340][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.518623][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 444.526262][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 444.533687][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 444.554869][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 444.562421][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 444.586921][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 447.215964][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 447.369457][T14399] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.415646][T14399] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 447.526291][T14399] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 447.563450][T14399] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 447.606050][T14399] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 447.651601][T14399] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 447.680358][T14399] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 448.013249][T14420] loop4: detected capacity change from 0 to 256 [ 448.015069][T14422] fuse: Bad value for 'fd' [ 448.079353][T14420] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 449.516194][T14444] netlink: 'syz.3.3615': attribute type 1 has an invalid length. [ 449.598376][T14447] device bond2 entered promiscuous mode [ 449.604294][T14447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.716661][T14455] fuse: Bad value for 'fd' [ 451.123965][T14473] loop7: detected capacity change from 0 to 7 [ 451.145603][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.154778][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.201261][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.210473][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.353976][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.363191][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.449950][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.459197][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.546786][T14492] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 451.565305][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.574484][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.601340][T14494] fuse: Bad value for 'fd' [ 451.684749][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.693906][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.754264][T14499] device bond2 entered promiscuous mode [ 451.775444][T14499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.790789][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.799969][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 451.814741][T13100] ldm_validate_partition_table(): Disk read failed. [ 452.007807][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.017047][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.171792][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.181047][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.304538][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.313729][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.491457][T13100] Dev loop7: unable to read RDB block 0 [ 452.528281][T13100] loop7: unable to read partition table [ 452.611994][T13100] loop7: partition table beyond EOD, truncated [ 454.334695][T14539] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 454.952826][ C1] ------------[ cut here ]------------ [ 454.958651][ C1] WARNING: CPU: 1 PID: 14540 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50 [ 454.968815][ C1] Modules linked in: [ 454.972739][ C1] CPU: 1 PID: 14540 Comm: syz.3.3649 Not tainted syzkaller #0 [ 454.980242][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 454.990351][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 454.996747][ C1] Code: ff ff ff e8 40 d3 e3 f7 0f 0b 48 8b 7c 24 20 e8 04 90 7f fe e9 dd e9 ff ff e8 2a d3 e3 f7 0f 0b e9 f1 ee ff ff e8 1e d3 e3 f7 <0f> 0b e9 61 f2 ff ff e8 12 d3 e3 f7 48 c7 c7 f0 73 fa 8d 4c 89 f6 [ 455.016417][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 455.022504][ C1] RAX: ffffffff899d0342 RBX: 0000000000000000 RCX: ffff888051985940 [ 455.030518][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.038533][ C1] RBP: ffffc900001e0aa8 R08: ffff888051985940 R09: 0000000000000003 [ 455.046582][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 455.054973][ C1] R13: dffffc0000000000 R14: ffff888049e92258 R15: ffff88802daa5e00 [ 455.062981][ C1] FS: 00007f3bd71da6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 455.071983][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.078624][ C1] CR2: 00007f98180abf98 CR3: 00000000655a8000 CR4: 00000000003506e0 [ 455.086681][ C1] Call Trace: [ 455.089978][ C1] [ 455.092842][ C1] ? verify_lock_unused+0x140/0x140 [ 455.098113][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 455.103692][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 455.109778][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 455.115305][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 455.120897][ C1] ? read_lock_is_recursive+0x10/0x10 [ 455.126371][ C1] __iterate_interfaces+0x243/0x500 [ 455.131603][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 455.137930][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 455.145182][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 455.151455][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 455.158560][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 455.163783][ C1] __hrtimer_run_queues+0x554/0xd60 [ 455.169053][ C1] ? hw_scan_work+0xf30/0xf30 [ 455.173760][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 455.178932][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 455.185052][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 455.190372][ C1] handle_softirqs+0x2a1/0x920 [ 455.195221][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 455.200111][ C1] ? do_softirq+0x200/0x200 [ 455.204691][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 455.209930][ C1] __irq_exit_rcu+0x12f/0x220 [ 455.214687][ C1] ? irq_exit_rcu+0x20/0x20 [ 455.219231][ C1] irq_exit_rcu+0x5/0x20 [ 455.223497][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 455.229200][ C1] [ 455.232162][ C1] [ 455.235153][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.238359][T14542] device bond5 entered promiscuous mode [ 455.241151][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 455.253300][ C1] Code: 74 05 e8 ce 48 65 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 cd 35 f7 65 8b 05 77 85 e0 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 455.272973][ C1] RSP: 0018:ffffc900037075a0 EFLAGS: 00000206 [ 455.279088][ C1] RAX: 276e44cc9b362600 RBX: 0000000000000a06 RCX: 276e44cc9b362600 [ 455.287108][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0580 RDI: 0000000000000001 [ 455.295131][ C1] RBP: ffffc90003707630 R08: dffffc0000000000 R09: fffffbfff215c45e [ 455.303125][ C1] R10: fffffbfff215c45e R11: 1ffffffff215c45d R12: dffffc0000000000 [ 455.311188][ C1] R13: 0000000000000000 R14: ffff888072c746c0 R15: 1ffff920006e0eb4 [ 455.319226][ C1] ? _raw_spin_unlock+0x40/0x40 [ 455.324109][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 455.329221][ C1] __wake_up_sync_key+0x11b/0x180 [ 455.329615][T14542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.334258][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 455.334292][ C1] ? sock_load_diag_module+0x130/0x130 [ 455.352406][ C1] __unix_dgram_recvmsg+0x498/0xd70 [ 455.357690][ C1] ? unix_unhash+0x10/0x10 [ 455.362157][ C1] ? mark_lock+0x94/0x320 [ 455.366580][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 455.371639][ C1] ? unix_dgram_sendmsg+0x16c0/0x16c0 [ 455.377087][ C1] ____sys_recvmsg+0x292/0x580 [ 455.381903][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 455.387025][ C1] ? import_iovec+0x6f/0xa0 [ 455.391568][ C1] ___sys_recvmsg+0x1b2/0x510 [ 455.396337][ C1] ? __sys_recvmsg+0x270/0x270 [ 455.401167][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 455.406285][ C1] ? __might_fault+0xc2/0x120 [ 455.410982][ C1] ? __might_fault+0xa6/0x120 [ 455.415717][ C1] do_recvmmsg+0x359/0x7d0 [ 455.420171][ C1] ? __sys_recvmmsg+0x280/0x280 [ 455.425092][ C1] ? do_futex+0x310/0x320 [ 455.429471][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 455.434548][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 455.440123][ C1] ? __se_sys_futex+0x14a/0x440 [ 455.445063][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 455.450132][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 455.454801][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 455.460034][ C1] do_syscall_64+0x4c/0xa0 [ 455.464541][ C1] ? clear_bhb_loop+0x60/0xb0 [ 455.469263][ C1] ? clear_bhb_loop+0x60/0xb0 [ 455.473993][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.479962][ C1] RIP: 0033:0x7f3bd638f749 [ 455.484412][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.504086][ C1] RSP: 002b:00007f3bd71da038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 455.512584][ C1] RAX: ffffffffffffffda RBX: 00007f3bd65e6090 RCX: 00007f3bd638f749 [ 455.520620][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 455.528654][ C1] RBP: 00007f3bd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.536702][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 455.544718][ C1] R13: 00007f3bd65e6128 R14: 00007f3bd65e6090 R15: 00007fffb76872e8 [ 455.552726][ C1] [ 455.555811][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 455.563099][ C1] CPU: 1 PID: 14540 Comm: syz.3.3649 Not tainted syzkaller #0 [ 455.570581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.580642][ C1] Call Trace: [ 455.583922][ C1] [ 455.586761][ C1] dump_stack_lvl+0x168/0x22e [ 455.591441][ C1] ? memcpy+0x3c/0x60 [ 455.595430][ C1] ? show_regs_print_info+0x12/0x12 [ 455.600627][ C1] ? load_image+0x3b0/0x3b0 [ 455.605142][ C1] panic+0x2c9/0x710 [ 455.609041][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 455.613556][ C1] __warn+0x2f8/0x4f0 [ 455.617540][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 455.623264][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 455.628999][ C1] report_bug+0x2ba/0x4f0 [ 455.633338][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 455.639074][ C1] handle_bug+0x3a/0x70 [ 455.643230][ C1] exc_invalid_op+0x16/0x40 [ 455.647730][ C1] asm_exc_invalid_op+0x16/0x20 [ 455.652593][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 455.658925][ C1] Code: ff ff ff e8 40 d3 e3 f7 0f 0b 48 8b 7c 24 20 e8 04 90 7f fe e9 dd e9 ff ff e8 2a d3 e3 f7 0f 0b e9 f1 ee ff ff e8 1e d3 e3 f7 <0f> 0b e9 61 f2 ff ff e8 12 d3 e3 f7 48 c7 c7 f0 73 fa 8d 4c 89 f6 [ 455.678531][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 455.684596][ C1] RAX: ffffffff899d0342 RBX: 0000000000000000 RCX: ffff888051985940 [ 455.692573][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.700541][ C1] RBP: ffffc900001e0aa8 R08: ffff888051985940 R09: 0000000000000003 [ 455.708509][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 455.716473][ C1] R13: dffffc0000000000 R14: ffff888049e92258 R15: ffff88802daa5e00 [ 455.724446][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 455.730184][ C1] ? verify_lock_unused+0x140/0x140 [ 455.735384][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 455.740926][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 455.746926][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 455.752388][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 455.757926][ C1] ? read_lock_is_recursive+0x10/0x10 [ 455.763304][ C1] __iterate_interfaces+0x243/0x500 [ 455.768512][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 455.774750][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 455.781965][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 455.788206][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 455.795662][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 455.800856][ C1] __hrtimer_run_queues+0x554/0xd60 [ 455.806054][ C1] ? hw_scan_work+0xf30/0xf30 [ 455.810732][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 455.815836][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 455.821907][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 455.827022][ C1] handle_softirqs+0x2a1/0x920 [ 455.831797][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 455.836661][ C1] ? do_softirq+0x200/0x200 [ 455.841186][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 455.846398][ C1] __irq_exit_rcu+0x12f/0x220 [ 455.851095][ C1] ? irq_exit_rcu+0x20/0x20 [ 455.855622][ C1] irq_exit_rcu+0x5/0x20 [ 455.859861][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 455.865506][ C1] [ 455.868432][ C1] [ 455.871364][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.877346][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 455.883848][ C1] Code: 74 05 e8 ce 48 65 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 cd 35 f7 65 8b 05 77 85 e0 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 455.903797][ C1] RSP: 0018:ffffc900037075a0 EFLAGS: 00000206 [ 455.909878][ C1] RAX: 276e44cc9b362600 RBX: 0000000000000a06 RCX: 276e44cc9b362600 [ 455.917849][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0580 RDI: 0000000000000001 [ 455.925815][ C1] RBP: ffffc90003707630 R08: dffffc0000000000 R09: fffffbfff215c45e [ 455.933779][ C1] R10: fffffbfff215c45e R11: 1ffffffff215c45d R12: dffffc0000000000 [ 455.941751][ C1] R13: 0000000000000000 R14: ffff888072c746c0 R15: 1ffff920006e0eb4 [ 455.949737][ C1] ? _raw_spin_unlock+0x40/0x40 [ 455.954590][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 455.959616][ C1] __wake_up_sync_key+0x11b/0x180 [ 455.964638][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 455.970617][ C1] ? sock_load_diag_module+0x130/0x130 [ 455.976077][ C1] __unix_dgram_recvmsg+0x498/0xd70 [ 455.981297][ C1] ? unix_unhash+0x10/0x10 [ 455.985727][ C1] ? mark_lock+0x94/0x320 [ 455.990057][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 455.995077][ C1] ? unix_dgram_sendmsg+0x16c0/0x16c0 [ 456.000442][ C1] ____sys_recvmsg+0x292/0x580 [ 456.005227][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 456.010260][ C1] ? import_iovec+0x6f/0xa0 [ 456.014769][ C1] ___sys_recvmsg+0x1b2/0x510 [ 456.019445][ C1] ? __sys_recvmsg+0x270/0x270 [ 456.024221][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 456.029246][ C1] ? __might_fault+0xc2/0x120 [ 456.033926][ C1] ? __might_fault+0xa6/0x120 [ 456.038599][ C1] do_recvmmsg+0x359/0x7d0 [ 456.043019][ C1] ? __sys_recvmmsg+0x280/0x280 [ 456.047865][ C1] ? do_futex+0x310/0x320 [ 456.052209][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 456.057237][ C1] ? rcu_read_lock_sched_held+0x86/0xf0 [ 456.062785][ C1] ? __se_sys_futex+0x14a/0x440 [ 456.067639][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 456.072664][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 456.077252][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 456.082456][ C1] do_syscall_64+0x4c/0xa0 [ 456.086867][ C1] ? clear_bhb_loop+0x60/0xb0 [ 456.091545][ C1] ? clear_bhb_loop+0x60/0xb0 [ 456.096223][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.102117][ C1] RIP: 0033:0x7f3bd638f749 [ 456.106536][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.126131][ C1] RSP: 002b:00007f3bd71da038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 456.134541][ C1] RAX: ffffffffffffffda RBX: 00007f3bd65e6090 RCX: 00007f3bd638f749 [ 456.142503][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 456.150480][ C1] RBP: 00007f3bd6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.158454][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 456.166418][ C1] R13: 00007f3bd65e6128 R14: 00007f3bd65e6090 R15: 00007fffb76872e8 [ 456.174401][ C1] [ 456.177721][ C1] Kernel Offset: disabled [ 456.182106][ C1] Rebooting in 86400 seconds..