last executing test programs: 22m28.728448496s ago: executing program 32 (id=639): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 7m8.596798832s ago: executing program 33 (id=4340): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r3, 0x0, 0x0, 0xc2a) 6m2.612678229s ago: executing program 34 (id=4692): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000040)=[{0x6, 0x6, 0x38, 0x7fffffff}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 5m41.186864863s ago: executing program 35 (id=4787): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet6(r0, &(0x7f0000000200)="0600000000000000f29caeb5a780fe41926033afbae297b039", 0x19, 0x3b00, 0x0, 0x0) 5m33.181026867s ago: executing program 36 (id=4812): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x203}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e24, 0x407fff, @loopback, 0x6}, 0x1c, 0x0}, 0x54) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xe, 0x2a, 0x48000a4d, 0x6, 0xa, 0x2, 0xa9}, 0x9c) 5m24.088048551s ago: executing program 37 (id=4846): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='4', 0x1}], 0x1}}], 0x1, 0x4008041) writev(r0, &(0x7f0000002900)=[{&(0x7f0000000480)="7c173e", 0x3}], 0x1) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 5m19.656260789s ago: executing program 38 (id=4855): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4m51.758626291s ago: executing program 5 (id=4919): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m51.071178128s ago: executing program 5 (id=4920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 4m50.473870224s ago: executing program 5 (id=4922): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000940)) 4m49.739476494s ago: executing program 5 (id=4925): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 4m49.056115794s ago: executing program 5 (id=4926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 4m48.000699945s ago: executing program 5 (id=4929): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x45}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m45.735343817s ago: executing program 39 (id=4929): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x45}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m41.459840442s ago: executing program 8 (id=4946): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) 4m39.724469463s ago: executing program 8 (id=4952): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4m37.934280579s ago: executing program 8 (id=4957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000010140)={0x11, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xc}, @generic={0x1e, 0x0, 0xa, 0x1}, @initr0, @exit]}, &(0x7f0000010000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4m37.221408654s ago: executing program 8 (id=4960): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8094}, 0x40088dc) 4m36.253137098s ago: executing program 4 (id=4964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f8ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c0d41a7efd8acf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 4m35.916847355s ago: executing program 8 (id=4965): syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 4m35.486016933s ago: executing program 4 (id=4966): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4m35.031969779s ago: executing program 8 (id=4969): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000029) getdents64(r0, &(0x7f0000000600)=""/115, 0x73) 4m34.712223388s ago: executing program 4 (id=4970): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 4m33.84687311s ago: executing program 0 (id=4973): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 4m33.241688913s ago: executing program 4 (id=4975): unshare(0x20040600) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x1c0}], 0x1, 0x0, 0x0, 0x0) 4m33.056759492s ago: executing program 0 (id=4976): capset(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) 4m32.499049867s ago: executing program 4 (id=4978): syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 4m32.270351181s ago: executing program 0 (id=4979): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400), 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4m31.717398293s ago: executing program 4 (id=4980): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r1) socket$unix(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 4m31.383998732s ago: executing program 0 (id=4981): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0xb}}, {@shortname_mixed}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}]}, 0x0, 0x2aa, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 4m30.56342284s ago: executing program 0 (id=4983): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x801) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffffffffffffde, 0xfa00, {0xffffffffffffffff, 0x8000004}}, 0x39fab) 4m29.654153173s ago: executing program 0 (id=4985): r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) open_tree(0xffffffffffffffff, 0x0, 0x1101) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m26.915962403s ago: executing program 40 (id=4985): r0 = getpgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) open_tree(0xffffffffffffffff, 0x0, 0x1101) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m24.277221594s ago: executing program 9 (id=4989): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 4m23.863905387s ago: executing program 9 (id=4990): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x1fb, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4m23.232266751s ago: executing program 9 (id=4991): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000a5000000000800"], 0x28}}, 0x0) 4m22.025325712s ago: executing program 9 (id=4992): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0xb}}, {@shortname_mixed}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}]}, 0x0, 0x2aa, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 4m21.000859226s ago: executing program 9 (id=4993): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a835e02c0000000000000000000000000000000c200000000000000000000074000000000000000000000009"], 0x0, 0x96}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 4m20.338771297s ago: executing program 9 (id=4994): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x3, 0x4, 0x5, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4m17.719228949s ago: executing program 41 (id=4994): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xc}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x3, 0x4, 0x5, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4m17.537507332s ago: executing program 42 (id=4969): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000029) getdents64(r0, &(0x7f0000000600)=""/115, 0x73) 4m15.822691051s ago: executing program 43 (id=4980): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(r1) socket$unix(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 7.894056594s ago: executing program 3 (id=5913): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioprio_get$pid(0x3, 0xffffffffffffffff) 6.655570023s ago: executing program 1 (id=5918): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x120) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 5.519549127s ago: executing program 1 (id=5922): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r0, &(0x7f0000000840)=""/217, 0xd9) 5.344029862s ago: executing program 6 (id=5923): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r1, @ANYRES32=r1], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 4.71159028s ago: executing program 2 (id=5924): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101041, 0x0) r1 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0)=0x7, 0x9) 4.694829906s ago: executing program 6 (id=5925): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5d3, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000440)=""/192, 0xc0) 4.567307221s ago: executing program 1 (id=5926): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffffffffffffffff) 4.553197087s ago: executing program 7 (id=5927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000ffff000000000000001400030076657468305f74075f626f6e64000072"], 0x38}, 0x1, 0x0, 0x0, 0x4051}, 0x90) 4.085521134s ago: executing program 3 (id=5928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', &(0x7f0000002240)='\x00', 0x1) 3.89613299s ago: executing program 2 (id=5929): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r0) epoll_create1(0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.751855284s ago: executing program 7 (id=5930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.716050485s ago: executing program 6 (id=5931): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nelt trusted'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.162776142s ago: executing program 3 (id=5932): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x120) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 2.998329992s ago: executing program 2 (id=5933): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x0) 2.983558892s ago: executing program 1 (id=5934): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x417b, 0x40, 0x1, 0x3d7}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x50c}) io_setup(0x2ae1, &(0x7f0000000180)=0x0) eventfd2(0x10000, 0x801) io_submit(r2, 0x0, &(0x7f00000006c0)) close_range(r0, 0xffffffffffffffff, 0x0) 2.840101671s ago: executing program 7 (id=5935): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 2.739111228s ago: executing program 6 (id=5936): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r0, &(0x7f0000000840)=""/217, 0xd9) 2.26070054s ago: executing program 2 (id=5937): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.179602975s ago: executing program 3 (id=5938): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, 0x0) mkdirat(r2, &(0x7f0000000840)='./file0\x00', 0x4) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) dup3(r3, r0, 0x0) 1.961886136s ago: executing program 6 (id=5939): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x7, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8f, 0x100}}}}}}}, 0x0) socket(0x1d, 0x3, 0x7) 1.897948702s ago: executing program 7 (id=5940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0xeeee0000, 0x104000}) close_range(r0, 0xffffffffffffffff, 0x0) 1.699296313s ago: executing program 1 (id=5941): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5d3, &(0x7f0000000f80)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/192, 0xc0) 1.437167056s ago: executing program 2 (id=5942): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', &(0x7f0000002240)='\x00', 0x1) 1.073740912s ago: executing program 6 (id=5943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="d5f4", 0x2) 1.073482738s ago: executing program 7 (id=5944): pwritev(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x7ff, 0x5) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 1.067609721s ago: executing program 3 (id=5945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 600.843367ms ago: executing program 1 (id=5946): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nelt trusted'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 411.024916ms ago: executing program 2 (id=5947): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x8, 0x4080000) 178.704579ms ago: executing program 7 (id=5948): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x120) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 0s ago: executing program 3 (id=5949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): erface [ 1276.766093][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.786276][T16982] Bluetooth: hci2: command tx timeout [ 1276.814908][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.854739][ T5878] bond0 (unregistering): Released all slaves [ 1276.950365][ T5878] bond1 (unregistering): Released all slaves [ 1277.116787][T16980] team0: Port device team_slave_0 added [ 1277.664672][T16980] team0: Port device team_slave_1 added [ 1278.122317][T16980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.148897][T16980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.176172][T16980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.320164][T16980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.352432][T16980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.491304][T16980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.787960][T17108] fuse: Bad value for 'fd' [ 1278.867107][T16982] Bluetooth: hci2: command tx timeout [ 1279.413233][T16980] hsr_slave_0: entered promiscuous mode [ 1279.468407][T16980] hsr_slave_1: entered promiscuous mode [ 1279.478217][T16980] debugfs: 'hsr0' already exists in 'hsr' [ 1279.484100][T16980] Cannot create hsr debugfs directory [ 1279.695820][ T5878] hsr_slave_0: left promiscuous mode [ 1279.729557][ T5878] hsr_slave_1: left promiscuous mode [ 1279.767698][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.775269][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.810593][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.829115][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.917038][ T5878] veth1_macvtap: left promiscuous mode [ 1279.922752][ T5878] veth0_macvtap: left promiscuous mode [ 1279.957538][ T5878] veth1_vlan: left promiscuous mode [ 1279.963092][ T5878] veth0_vlan: left promiscuous mode [ 1281.580029][ T5878] team_slave_1 (unregistering): left allmulticast mode [ 1281.593567][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 1281.657925][ T5878] team_slave_0 (unregistering): left allmulticast mode [ 1281.691917][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 1284.725964][T16980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1284.832588][T16980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1284.931286][T16980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1285.017529][T16980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1286.589544][T16980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.804586][T16980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.923533][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.931163][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.083121][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.090744][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.622432][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1289.142448][ T29] audit: type=1800 audit(1770804084.144:90): pid=17246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4097" name="file1" dev="overlay" ino=1260 res=0 errno=0 [ 1289.894591][T16980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.020180][T17280] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1291.801934][T17297] netlink: 'syz.2.4113': attribute type 4 has an invalid length. [ 1292.384884][T16980] veth0_vlan: entered promiscuous mode [ 1292.487206][T16980] veth1_vlan: entered promiscuous mode [ 1293.043254][T16980] veth0_macvtap: entered promiscuous mode [ 1293.149640][T16980] veth1_macvtap: entered promiscuous mode [ 1293.321036][T16980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.387189][T16980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.566122][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.592549][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.652546][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.705950][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.449300][T17354] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1296.925542][T17377] loop3: detected capacity change from 0 to 256 [ 1297.073635][ T29] audit: type=1800 audit(1770804092.074:91): pid=17377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4136" name="file1" dev="loop3" ino=1048650 res=0 errno=0 [ 1298.976237][T17410] program syz.3.4146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1299.441203][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.473648][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.752166][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.813868][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.499287][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4253'. [ 1316.540461][T17692] netlink: 'syz.3.4253': attribute type 6 has an invalid length. [ 1316.565906][T17692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4253'. [ 1318.059473][T17715] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1318.808594][T17729] netlink: 'syz.5.4270': attribute type 1 has an invalid length. [ 1319.363370][T17738] netlink: 'syz.3.4272': attribute type 6 has an invalid length. [ 1319.406923][T17738] netlink: 'syz.3.4272': attribute type 7 has an invalid length. [ 1319.435922][T17738] netlink: 'syz.3.4272': attribute type 8 has an invalid length. [ 1320.381519][T17754] loop5: detected capacity change from 0 to 764 [ 1320.389257][T17753] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1321.234201][T17769] netlink: 'syz.3.4287': attribute type 6 has an invalid length. [ 1321.256059][T17769] netlink: 'syz.3.4287': attribute type 7 has an invalid length. [ 1321.286025][T17769] netlink: 'syz.3.4287': attribute type 8 has an invalid length. [ 1322.699312][T17793] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1323.763303][T17804] loop2: detected capacity change from 0 to 164 [ 1323.993170][T17804] Unsupported NM flag settings (240) [ 1324.047241][T17807] netlink: 'syz.5.4301': attribute type 6 has an invalid length. [ 1324.055927][T17807] netlink: 'syz.5.4301': attribute type 7 has an invalid length. [ 1324.095918][T17807] netlink: 'syz.5.4301': attribute type 8 has an invalid length. [ 1325.229349][T17820] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1326.531804][T17838] netlink: 'syz.3.4316': attribute type 6 has an invalid length. [ 1326.606275][T17838] netlink: 'syz.3.4316': attribute type 7 has an invalid length. [ 1326.614187][T17838] netlink: 'syz.3.4316': attribute type 8 has an invalid length. [ 1328.887226][T17878] netlink: 'syz.3.4332': attribute type 6 has an invalid length. [ 1328.895317][T17878] netlink: 'syz.3.4332': attribute type 7 has an invalid length. [ 1328.934708][T17878] netlink: 'syz.3.4332': attribute type 8 has an invalid length. [ 1330.418150][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.424853][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.433529][T17905] netlink: 'syz.2.4344': attribute type 6 has an invalid length. [ 1330.453447][T17905] netlink: 'syz.2.4344': attribute type 7 has an invalid length. [ 1330.501449][T17905] netlink: 'syz.2.4344': attribute type 8 has an invalid length. [ 1331.622856][T17921] loop2: detected capacity change from 0 to 512 [ 1332.608013][T17929] loop2: detected capacity change from 0 to 128 [ 1332.778172][ T29] audit: type=1800 audit(1770804127.784:92): pid=17929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4355" name="file1" dev="loop2" ino=1048657 res=0 errno=0 [ 1332.817949][T17929] syz.2.4355: attempt to access beyond end of device [ 1332.817949][T17929] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1336.752615][T17982] fuse: Bad value for 'fd' [ 1339.307808][T18017] fuse: Bad value for 'fd' [ 1346.253016][T18095] loop5: detected capacity change from 0 to 128 [ 1346.455666][ T29] audit: type=1800 audit(1770804141.466:93): pid=18095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4426" name="file1" dev="loop5" ino=1048658 res=0 errno=0 [ 1346.488436][T18095] syz.5.4426: attempt to access beyond end of device [ 1346.488436][T18095] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1346.577155][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1346.593213][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1346.604748][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1346.621860][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1346.634641][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1347.087658][ T29] audit: type=1326 audit(1770804142.076:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1347.186515][ T29] audit: type=1326 audit(1770804142.106:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1347.305709][ T29] audit: type=1326 audit(1770804142.106:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1347.425261][ T29] audit: type=1326 audit(1770804142.106:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1347.525697][ T29] audit: type=1326 audit(1770804142.106:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1347.645695][ T29] audit: type=1326 audit(1770804142.106:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf714572b code=0x7ffc0000 [ 1347.670902][ T29] audit: type=1326 audit(1770804142.106:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1347.697376][ T29] audit: type=1326 audit(1770804142.166:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf714572b code=0x7ffc0000 [ 1347.720099][ T29] audit: type=1326 audit(1770804142.176:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18099 comm="syz.2.4428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf714572b code=0x7ffc0000 [ 1348.706154][ T5787] Bluetooth: hci5: command tx timeout [ 1349.036032][T18097] chnl_net:caif_netlink_parms(): no params data found [ 1350.087475][T18129] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 1350.362395][T18137] loop2: detected capacity change from 0 to 1024 [ 1350.412726][T18129] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1350.524244][T18129] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 1350.618371][T18129] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 1350.724207][T18129] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 1350.786345][ T5787] Bluetooth: hci5: command tx timeout [ 1350.871348][T18145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4440'. [ 1350.943542][T18129] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 1350.997264][T18129] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 1351.098541][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.109717][T18129] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1351.148968][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.212537][T18097] bridge_slave_0: entered allmulticast mode [ 1351.252441][T18097] bridge_slave_0: entered promiscuous mode [ 1351.304928][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.342730][T18097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.416314][T18097] bridge_slave_1: entered allmulticast mode [ 1351.449347][T18097] bridge_slave_1: entered promiscuous mode [ 1351.742895][T18153] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4443'. [ 1351.939964][T18097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.263145][T18097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.873606][ T5787] Bluetooth: hci5: command tx timeout [ 1352.988511][T18097] team0: Port device team_slave_0 added [ 1353.224396][T18097] team0: Port device team_slave_1 added [ 1353.732336][T18097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.804722][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.896198][T18097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.951304][T18097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.995775][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.075703][T18097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.634331][T18097] hsr_slave_0: entered promiscuous mode [ 1354.687760][T18097] hsr_slave_1: entered promiscuous mode [ 1354.717450][T18097] debugfs: 'hsr0' already exists in 'hsr' [ 1354.723358][T18097] Cannot create hsr debugfs directory [ 1354.945716][ T5787] Bluetooth: hci5: command tx timeout [ 1355.550906][T18182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4453'. [ 1356.478023][T18188] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4455'. [ 1356.925189][T18097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1357.038375][T18097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1357.148862][T18097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1357.337183][T18097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1358.820737][T18217] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4465'. [ 1359.172320][T18220] program syz.2.4467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1359.500956][T18223] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4468'. [ 1359.802961][T18227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1359.883122][T18228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1360.351328][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.359873][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.713789][T18097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.039745][T18097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.228353][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.235971][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.409863][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.417574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.168996][T18248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1362.922444][T18256] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4480'. [ 1363.779243][T18268] overlayfs: failed to clone upperpath [ 1364.135153][T18097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.263531][T18272] kvm: requested 77942 ns i8254 timer period limited to 200000 ns [ 1364.276938][T18272] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 1364.310465][T18272] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 1364.378402][T18272] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 1364.535261][T18274] loop2: detected capacity change from 0 to 1024 [ 1366.177383][T18298] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4493'. [ 1367.944797][T18097] veth0_vlan: entered promiscuous mode [ 1368.348462][T18313] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1368.381525][T18313] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1368.427345][T18313] team0 (unregistering): Port device team_slave_0 removed [ 1368.493846][T18313] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1368.527792][T18313] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1368.532339][T18323] loop2: detected capacity change from 0 to 128 [ 1368.555204][T18313] team0 (unregistering): Port device team_slave_1 removed [ 1369.047088][T18097] veth1_vlan: entered promiscuous mode [ 1369.543011][T18097] veth0_macvtap: entered promiscuous mode [ 1369.699080][T18097] veth1_macvtap: entered promiscuous mode [ 1369.969549][T18097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.111248][T18097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.402993][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.462572][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.559233][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.598428][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.462970][T10931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.525613][T10931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.907241][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.950761][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.048484][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 1380.298463][T18451] bridge1: port 1(veth0_to_bond) entered blocking state [ 1380.342358][T18451] bridge1: port 1(veth0_to_bond) entered disabled state [ 1380.367365][T18451] veth0_to_bond: entered allmulticast mode [ 1380.416545][T18451] veth0_to_bond: entered promiscuous mode [ 1380.504487][T18456] loop6: detected capacity change from 0 to 256 [ 1381.222540][T18460] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1381.291630][T18460] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1381.334011][T18460] overlayfs: missing 'lowerdir' [ 1381.613550][T18470] loop6: detected capacity change from 0 to 128 [ 1382.570734][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1382.570816][ T29] audit: type=1326 audit(1770804177.586:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1382.713896][ T29] audit: type=1326 audit(1770804177.646:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1382.827618][ T29] audit: type=1326 audit(1770804177.646:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1382.922093][ T29] audit: type=1326 audit(1770804177.646:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1383.029299][ T29] audit: type=1326 audit(1770804177.656:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1383.139531][ T29] audit: type=1326 audit(1770804177.656:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1383.242857][ T29] audit: type=1326 audit(1770804177.676:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1383.368541][ T29] audit: type=1326 audit(1770804177.676:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1383.476527][ T29] audit: type=1326 audit(1770804177.676:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1383.597162][ T29] audit: type=1326 audit(1770804177.676:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18473 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1383.616170][T18484] program syz.6.4558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1385.193967][T18503] fuse: Bad value for 'user_id' [ 1385.236116][T18503] fuse: Bad value for 'user_id' [ 1385.439621][T18500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.449450][T18500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.146016][T18500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.216371][T18500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.558917][ T53] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.566861][T18516] program syz.5.4574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1387.590822][ T53] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.705655][ T53] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.754565][ T53] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.073753][T18532] fuse: Bad value for 'fd' [ 1389.802337][T18543] program syz.3.4587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1391.506670][T18560] fuse: Bad value for 'fd' [ 1391.848666][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.855278][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1393.315338][T18585] block device autoloading is deprecated and will be removed. [ 1393.906269][T16982] Bluetooth: hci2: command 0x0406 tx timeout [ 1393.970242][T18600] fuse: Bad value for 'fd' [ 1394.537018][T18607] loop3: detected capacity change from 0 to 16 [ 1394.605775][T18607] erofs (device loop3): mounted with root inode @ nid 36. [ 1394.639534][T18610] program syz.5.4614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1394.644624][T18607] syz.3.4612: attempt to access beyond end of device [ 1394.644624][T18607] loop3: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1394.711919][T18607] syz.3.4612: attempt to access beyond end of device [ 1394.711919][T18607] loop3: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1394.789018][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1394.789090][ T29] audit: type=1800 audit(1770804189.806:136): pid=18607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4612" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 1395.201686][ T29] audit: type=1326 audit(1770804190.216:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18616 comm="syz.5.4617" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdd539 code=0x0 [ 1401.219908][ T29] audit: type=1326 audit(1770804196.236:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.345979][ T29] audit: type=1326 audit(1770804196.236:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.445698][ T29] audit: type=1326 audit(1770804196.276:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.474894][ T29] audit: type=1326 audit(1770804196.276:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.500399][ T29] audit: type=1326 audit(1770804196.276:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.523977][ T29] audit: type=1326 audit(1770804196.276:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.636359][ T29] audit: type=1326 audit(1770804196.276:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.662222][ T29] audit: type=1326 audit(1770804196.276:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.686142][ T29] audit: type=1326 audit(1770804196.296:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1401.720427][ T29] audit: type=1326 audit(1770804196.296:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1402.774461][T18699] program syz.6.4652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1404.592828][T18727] loop6: detected capacity change from 0 to 16 [ 1404.690202][T18726] loop3: detected capacity change from 0 to 2048 [ 1404.698251][T18727] erofs (device loop6): mounted with root inode @ nid 36. [ 1404.778332][T18726] loop3: p2 < > p4 < > [ 1404.803286][T18727] syz.6.4660: attempt to access beyond end of device [ 1404.803286][T18727] loop6: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1404.819561][T18726] loop3: partition table partially beyond EOD, truncated [ 1404.846578][T18726] loop3: p2 start 4294902784 is beyond EOD, truncated [ 1404.902611][T18727] syz.6.4660: attempt to access beyond end of device [ 1404.902611][T18727] loop6: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1405.626211][T18735] program syz.3.4665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1408.285929][T18772] program syz.3.4680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1408.746672][T18782] loop3: detected capacity change from 0 to 128 [ 1409.334408][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1409.334477][ T29] audit: type=1326 audit(1770804204.346:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1409.465281][ T29] audit: type=1326 audit(1770804204.406:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1409.501776][ T29] audit: type=1326 audit(1770804204.406:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1409.567126][ T29] audit: type=1326 audit(1770804204.406:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1409.655988][ T29] audit: type=1326 audit(1770804204.406:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1409.755719][ T29] audit: type=1326 audit(1770804204.406:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=108 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1409.859897][ T29] audit: type=1326 audit(1770804204.406:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1409.893537][T18794] overlayfs: failed to clone upperpath [ 1409.945820][ T29] audit: type=1326 audit(1770804204.406:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.2.4688" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1411.836251][T16982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1411.849707][T16982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1411.864477][T16982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1411.886517][T16982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1411.911126][T16982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1413.208025][T18814] chnl_net:caif_netlink_parms(): no params data found [ 1413.256188][T18843] loop6: detected capacity change from 0 to 16 [ 1413.348632][T18843] erofs (device loop6): mounted with root inode @ nid 36. [ 1413.448267][T18843] syz.6.4708: attempt to access beyond end of device [ 1413.448267][T18843] loop6: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1413.636466][T18843] syz.6.4708: attempt to access beyond end of device [ 1413.636466][T18843] loop6: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1413.728690][ T29] audit: type=1800 audit(1770804208.746:159): pid=18843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4708" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1413.990433][T16982] Bluetooth: hci0: command tx timeout [ 1414.712433][T18814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.730924][T18814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.756487][T18814] bridge_slave_0: entered allmulticast mode [ 1414.779357][T18814] bridge_slave_0: entered promiscuous mode [ 1414.814806][T18814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.836992][T18814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.880591][T18814] bridge_slave_1: entered allmulticast mode [ 1414.906294][T18814] bridge_slave_1: entered promiscuous mode [ 1415.209881][T18814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.305690][T18814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.571075][T18814] team0: Port device team_slave_0 added [ 1415.618441][T18814] team0: Port device team_slave_1 added [ 1415.891821][T18814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.935911][T18814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.005753][T18814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.062406][T18814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.069937][T16982] Bluetooth: hci0: command tx timeout [ 1416.078192][T18814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.121960][T18814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.431031][T18814] hsr_slave_0: entered promiscuous mode [ 1416.461572][T18814] hsr_slave_1: entered promiscuous mode [ 1416.493638][T18814] debugfs: 'hsr0' already exists in 'hsr' [ 1416.517421][T18814] Cannot create hsr debugfs directory [ 1417.047012][T18886] overlayfs: failed to clone upperpath [ 1418.148087][T16982] Bluetooth: hci0: command tx timeout [ 1418.316863][T18814] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1418.420203][T18814] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1418.514975][T18814] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1418.603928][T18814] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1419.671401][T18814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.860218][T18814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.967809][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.975520][T18242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.137726][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.145258][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.226791][T16982] Bluetooth: hci0: command tx timeout [ 1420.738252][T18925] program syz.6.4738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1421.350040][T18931] overlayfs: failed to clone upperpath [ 1422.324533][T18814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.961393][T18954] fuse: Bad value for 'fd' [ 1423.338383][T18958] program syz.6.4751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1424.468854][T18814] veth0_vlan: entered promiscuous mode [ 1424.608733][T18814] veth1_vlan: entered promiscuous mode [ 1424.978639][T18814] veth0_macvtap: entered promiscuous mode [ 1425.110567][T18814] veth1_macvtap: entered promiscuous mode [ 1425.258886][T18814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.318176][T18814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.470550][ T5878] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.525246][ T5878] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.608892][ T5878] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.664434][ T5878] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.874293][T18984] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1425.948939][T18987] 8021q: VLANs not supported on ipvlan1 [ 1431.456489][T18242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.464493][T18242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.771887][ T5899] bridge_slave_1: left allmulticast mode [ 1431.788150][ T5899] bridge_slave_1: left promiscuous mode [ 1431.794759][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.831479][ T5899] bridge_slave_0: left allmulticast mode [ 1431.846607][ T5899] bridge_slave_0: left promiscuous mode [ 1431.853808][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.187175][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.203547][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.216578][ T5899] bond0 (unregistering): Released all slaves [ 1432.271120][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.300842][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.339445][ T5899] hsr_slave_0: left promiscuous mode [ 1433.451285][ T5899] hsr_slave_1: left promiscuous mode [ 1433.496007][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.531225][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1434.034362][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1434.043903][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1434.054370][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1434.073316][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1434.136546][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1434.810990][ T5899] team_slave_1 (unregistering): left allmulticast mode [ 1434.893208][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 1434.997458][ T5899] team_slave_0 (unregistering): left allmulticast mode [ 1435.021415][T19112] 9p: Bad value for 'rfdno' [ 1435.032879][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 1436.226972][T16982] Bluetooth: hci3: command tx timeout [ 1436.349422][T19128] loop7: detected capacity change from 0 to 128 [ 1437.429718][T19141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.462357][T19141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.494062][T19141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.534664][T19141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.572479][T19141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.607701][T19141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.684238][T19139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.003783][ T58] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.117098][T19099] chnl_net:caif_netlink_parms(): no params data found [ 1438.251658][ T58] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.305757][T16982] Bluetooth: hci3: command tx timeout [ 1438.501922][ T58] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.913706][ T58] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.608941][ T58] bridge_slave_1: left allmulticast mode [ 1439.614789][ T58] bridge_slave_1: left promiscuous mode [ 1439.646552][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.693735][ T58] bridge_slave_0: left allmulticast mode [ 1439.710094][ T58] bridge_slave_0: left promiscuous mode [ 1439.726586][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.386180][T16982] Bluetooth: hci3: command tx timeout [ 1440.720731][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1440.782587][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.851798][ T58] bond0 (unregistering): Released all slaves [ 1441.369492][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.426281][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.434093][T19099] bridge_slave_0: entered allmulticast mode [ 1441.489265][T19099] bridge_slave_0: entered promiscuous mode [ 1441.516464][T19179] loop6: detected capacity change from 0 to 512 [ 1441.602937][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.654556][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.686143][T19099] bridge_slave_1: entered allmulticast mode [ 1441.716393][T19099] bridge_slave_1: entered promiscuous mode [ 1441.888998][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1441.899201][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1441.912643][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1441.927366][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1441.938178][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1442.443773][T19187] netlink: 'syz.6.4821': attribute type 10 has an invalid length. [ 1442.465902][ T5787] Bluetooth: hci3: command tx timeout [ 1442.616649][T19191] trusted_key: encrypted_key: insufficient parameters specified [ 1442.650310][T19191] trusted_key: encrypted_key: insufficient parameters specified [ 1442.663219][ T58] hsr_slave_0: left promiscuous mode [ 1442.682950][ T58] hsr_slave_1: left promiscuous mode [ 1442.700903][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.739870][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.772601][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.784707][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.850460][ T58] veth1_macvtap: left promiscuous mode [ 1442.856315][ T58] veth0_macvtap: left promiscuous mode [ 1442.862150][ T58] veth1_vlan: left promiscuous mode [ 1442.899895][ T58] veth0_vlan: left promiscuous mode [ 1443.986765][ T5787] Bluetooth: hci0: command tx timeout [ 1444.582608][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1444.667591][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1445.192478][T19099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.292328][T19099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.608055][T19099] team0: Port device team_slave_0 added [ 1445.644314][T19099] team0: Port device team_slave_1 added [ 1446.069018][ T5787] Bluetooth: hci0: command tx timeout [ 1446.190089][T19099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.237049][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.315771][T19099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.451095][T19099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.473981][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.630015][T19099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.301483][T19099] hsr_slave_0: entered promiscuous mode [ 1447.359837][T19099] hsr_slave_1: entered promiscuous mode [ 1448.156165][ T5787] Bluetooth: hci0: command tx timeout [ 1448.371205][T19255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1448.459460][ T5899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.792444][ T5899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.238794][ T5899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.262812][T19180] chnl_net:caif_netlink_parms(): no params data found [ 1449.499231][ T5899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.225890][ T5787] Bluetooth: hci0: command tx timeout [ 1450.627032][ T5899] bridge_slave_1: left allmulticast mode [ 1450.632860][ T5899] bridge_slave_1: left promiscuous mode [ 1450.676974][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.690958][T16982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1450.705007][T16982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1450.717152][T16982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1450.732534][T16982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1450.744019][ T5899] bridge_slave_0: left allmulticast mode [ 1450.744761][T16982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1450.771933][ T5899] bridge_slave_0: left promiscuous mode [ 1450.778919][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.149387][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.170835][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.191858][ T5899] bond0 (unregistering): Released all slaves [ 1452.787676][ T5787] Bluetooth: hci1: command tx timeout [ 1452.932180][T19180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.961802][T19180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.980543][T19180] bridge_slave_0: entered allmulticast mode [ 1453.009290][T19180] bridge_slave_0: entered promiscuous mode [ 1453.041302][T19180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.062320][T19180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.077659][T19180] bridge_slave_1: entered allmulticast mode [ 1453.108218][T19180] bridge_slave_1: entered promiscuous mode [ 1453.143879][T19099] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1453.291775][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.298622][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.469508][T19099] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1453.503586][T19099] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1453.676156][T19180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.709044][T19180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.718693][T19099] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1453.809603][ T5899] hsr_slave_0: left promiscuous mode [ 1453.828665][ T5899] hsr_slave_1: left promiscuous mode [ 1453.838102][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.856326][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.888216][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.904888][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.930619][ T5899] veth1_macvtap: left promiscuous mode [ 1453.936949][ T5899] veth0_macvtap: left promiscuous mode [ 1453.942803][ T5899] veth1_vlan: left promiscuous mode [ 1453.950580][ T5899] veth0_vlan: left promiscuous mode [ 1454.624632][T16982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1454.660964][T16982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1454.677068][T16982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1454.691619][T16982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1454.711052][T16982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1454.873802][ T5787] Bluetooth: hci1: command tx timeout [ 1454.960340][ T5899] team_slave_1 (unregistering): left allmulticast mode [ 1455.006173][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 1455.041318][ T5899] team_slave_0 (unregistering): left allmulticast mode [ 1455.061687][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 1455.724455][T19180] team0: Port device team_slave_0 added [ 1455.811113][T19180] team0: Port device team_slave_1 added [ 1456.073230][T19180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.084318][T19180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.132003][T19180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.170563][T19180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.182181][T19180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.210024][T19180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.328160][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.430583][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.602747][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.788350][ T5787] Bluetooth: hci4: command tx timeout [ 1456.791987][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.950181][ T5787] Bluetooth: hci1: command tx timeout [ 1457.070686][T19180] hsr_slave_0: entered promiscuous mode [ 1457.090588][T19180] hsr_slave_1: entered promiscuous mode [ 1457.112165][T19180] debugfs: 'hsr0' already exists in 'hsr' [ 1457.126015][T19180] Cannot create hsr debugfs directory [ 1457.312030][T19271] chnl_net:caif_netlink_parms(): no params data found [ 1458.868156][ T5787] Bluetooth: hci4: command tx timeout [ 1458.874528][ T58] bridge_slave_1: left allmulticast mode [ 1458.889562][ T58] bridge_slave_1: left promiscuous mode [ 1458.900630][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.927158][ T58] bridge_slave_0: left allmulticast mode [ 1458.932992][ T58] bridge_slave_0: left promiscuous mode [ 1458.956454][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.032692][ T5787] Bluetooth: hci1: command tx timeout [ 1459.524980][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.543559][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.569291][ T58] bond0 (unregistering): Released all slaves [ 1459.691351][T19305] chnl_net:caif_netlink_parms(): no params data found [ 1459.951141][T19271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.968010][T19271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.976258][T19271] bridge_slave_0: entered allmulticast mode [ 1459.995782][T19271] bridge_slave_0: entered promiscuous mode [ 1460.125980][T19271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.148082][T19271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.169743][T19271] bridge_slave_1: entered allmulticast mode [ 1460.179773][T19271] bridge_slave_1: entered promiscuous mode [ 1460.461192][T19099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.509023][T19271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.559250][T19271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.695906][T19271] team0: Port device team_slave_0 added [ 1460.722626][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4877'. [ 1460.769634][T19271] team0: Port device team_slave_1 added [ 1460.947654][ T5787] Bluetooth: hci4: command tx timeout [ 1460.964484][ T58] hsr_slave_0: left promiscuous mode [ 1460.973476][ T58] hsr_slave_1: left promiscuous mode [ 1460.992534][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.000738][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.020677][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.028904][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.066148][ T58] veth1_macvtap: left promiscuous mode [ 1461.071873][ T58] veth0_macvtap: left promiscuous mode [ 1461.080578][ T58] veth1_vlan: left promiscuous mode [ 1461.086209][ T58] veth0_vlan: left promiscuous mode [ 1461.712543][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1461.794659][T19381] netlink: 'syz.5.4881': attribute type 4 has an invalid length. [ 1461.807366][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1462.306728][T19271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.314127][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.341940][T19271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.382381][T19305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.392001][T19305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.400222][T19305] bridge_slave_0: entered allmulticast mode [ 1462.409440][T19305] bridge_slave_0: entered promiscuous mode [ 1462.423366][T19305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.431585][T19305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.440807][T19305] bridge_slave_1: entered allmulticast mode [ 1462.450046][T19305] bridge_slave_1: entered promiscuous mode [ 1462.498332][T19271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.505909][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.532655][T19271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.578790][T19099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.705952][T19305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.729198][T19305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.743520][T19180] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1462.773088][T19180] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1462.942750][T19180] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1463.028033][ T5787] Bluetooth: hci4: command tx timeout [ 1463.068810][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.076326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.092263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.099798][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.161205][T19305] team0: Port device team_slave_0 added [ 1463.230137][T19180] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1463.369132][T19305] team0: Port device team_slave_1 added [ 1463.554456][T19271] hsr_slave_0: entered promiscuous mode [ 1463.564617][T19271] hsr_slave_1: entered promiscuous mode [ 1463.575305][T19271] debugfs: 'hsr0' already exists in 'hsr' [ 1463.581512][T19271] Cannot create hsr debugfs directory [ 1463.741752][T19305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.760500][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.792646][T19305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.816763][T19305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.823872][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.851711][T19305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.426454][T19305] hsr_slave_0: entered promiscuous mode [ 1464.441832][T19305] hsr_slave_1: entered promiscuous mode [ 1464.472257][T19305] debugfs: 'hsr0' already exists in 'hsr' [ 1464.485711][T19305] Cannot create hsr debugfs directory [ 1465.171219][T19405] ipvlan1: entered allmulticast mode [ 1465.184813][T19405] veth0_vlan: entered allmulticast mode [ 1465.203259][T19405] bridge0: port 3(ipvlan1) entered blocking state [ 1465.211538][T19405] bridge0: port 3(ipvlan1) entered disabled state [ 1465.962657][T19099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.085897][T19180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.448222][T19180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.558941][T19271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1466.646223][T19305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.725917][T19271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1466.775514][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.782956][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.848255][T19305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.882176][T19271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1466.952836][T19305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.009713][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.017243][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.084774][T19305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.119212][T19271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1467.922999][T19305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1468.055103][T19436] fuse: Bad value for 'fd' [ 1468.094771][T19305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1468.138710][T19305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1468.212896][T19099] veth0_vlan: entered promiscuous mode [ 1468.253031][T19305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1468.654291][T19099] veth1_vlan: entered promiscuous mode [ 1469.678331][T19271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.689352][T19099] veth0_macvtap: entered promiscuous mode [ 1469.745287][T19099] veth1_macvtap: entered promiscuous mode [ 1469.905324][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4897'. [ 1470.072289][T19271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.190753][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.198289][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.244069][T19099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.296215][T19099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.342703][T19180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.373091][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.380652][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.609047][T19305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.639448][ T3479] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.655151][ T3479] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.737684][ T3479] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.759931][ T3479] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.047228][T19469] fuse: Bad value for 'fd' [ 1471.180453][T19305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.241167][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.248743][T10931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.405617][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.413232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.839731][T19180] veth0_vlan: entered promiscuous mode [ 1472.972657][T19180] veth1_vlan: entered promiscuous mode [ 1473.533051][T19271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.704311][T19180] veth0_macvtap: entered promiscuous mode [ 1473.773937][T19180] veth1_macvtap: entered promiscuous mode [ 1473.801885][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4904'. [ 1474.154185][T19305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.192160][T19180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.321559][T19180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.486344][ T5899] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.504529][ T5899] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.654209][ T5899] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.683997][ T5899] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.981625][T19271] veth0_vlan: entered promiscuous mode [ 1475.094650][T19271] veth1_vlan: entered promiscuous mode [ 1475.642632][T19271] veth0_macvtap: entered promiscuous mode [ 1475.801762][T19271] veth1_macvtap: entered promiscuous mode [ 1476.074732][T19271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.241350][T19271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.428626][T18242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.455834][T18242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.464827][T18242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.503276][T19540] fuse: Bad value for 'fd' [ 1476.533325][T19005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.246027][T19305] veth0_vlan: entered promiscuous mode [ 1477.331914][T18242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.392476][T18242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.454300][T19305] veth1_vlan: entered promiscuous mode [ 1477.690470][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.738649][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.249851][T19305] veth0_macvtap: entered promiscuous mode [ 1478.300665][T19305] veth1_macvtap: entered promiscuous mode [ 1478.499674][T19567] overlayfs: failed to clone upperpath [ 1478.829789][T19305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.020871][T19305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.285583][T18242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.320088][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1479.383322][T18242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.423861][T18242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.482572][T19005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.027334][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.035340][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.325664][T19005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.374025][T19005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.897904][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1483.852018][ T5878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.910311][ T5878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.359730][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.417919][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.720615][T19673] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1485.827284][T19673] team0 (unregistering): Port device team_slave_0 removed [ 1485.969445][T19673] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1486.056626][T19673] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1486.087371][T19673] team0 (unregistering): Port device team_slave_1 removed [ 1486.128281][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4930'. [ 1486.209810][T19005] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.289148][T19677] syzkaller0: entered promiscuous mode [ 1486.315996][T19677] syzkaller0: entered allmulticast mode [ 1486.734463][T19005] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.971455][T19005] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.150900][T19005] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.367070][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.375073][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.720262][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.756472][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.879617][T19005] bridge_slave_1: left allmulticast mode [ 1487.895823][T19005] bridge_slave_1: left promiscuous mode [ 1487.902378][T19005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.992507][T19005] bridge_slave_0: left allmulticast mode [ 1488.025771][T19005] bridge_slave_0: left promiscuous mode [ 1488.032368][T19005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.364693][T16982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1489.416113][T16982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1489.446422][T16982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1489.470601][T16982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1489.483217][T16982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1490.054496][T19005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.158342][T19005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.253769][T19005] bond0 (unregistering): Released all slaves [ 1491.585901][T16982] Bluetooth: hci2: command tx timeout [ 1491.607696][T19732] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1491.623654][T19732] team0 (unregistering): Port device team_slave_0 removed [ 1491.658808][T19732] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1491.687132][T19732] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1491.701155][T19732] team0 (unregistering): Port device team_slave_1 removed [ 1491.893478][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4942'. [ 1492.513301][T19005] hsr_slave_0: left promiscuous mode [ 1492.586045][T19005] hsr_slave_1: left promiscuous mode [ 1492.602763][T19005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.636430][T19005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.678973][T19005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.717879][T19005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.817514][T19005] veth1_macvtap: left promiscuous mode [ 1492.843666][T19005] veth0_macvtap: left promiscuous mode [ 1492.884927][T19005] veth1_vlan: left promiscuous mode [ 1492.917815][T19005] veth0_vlan: left promiscuous mode [ 1493.667403][T16982] Bluetooth: hci2: command tx timeout [ 1494.708439][T19764] loop9: detected capacity change from 0 to 2048 [ 1495.435813][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1495.725148][T19771] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1495.751216][T16982] Bluetooth: hci2: command tx timeout [ 1495.788280][T19771] team0 (unregistering): Port device team_slave_0 removed [ 1495.926442][T19771] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1495.953110][T19771] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1496.005061][T19771] team0 (unregistering): Port device team_slave_1 removed [ 1497.084390][T19706] chnl_net:caif_netlink_parms(): no params data found [ 1497.825682][T16982] Bluetooth: hci2: command tx timeout [ 1499.289964][T19706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.377421][T19706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.385182][T19706] bridge_slave_0: entered allmulticast mode [ 1499.444804][T19706] bridge_slave_0: entered promiscuous mode [ 1499.659948][T19821] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1499.708382][T19821] team0 (unregistering): Port device team_slave_0 removed [ 1499.848598][T19821] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1499.898366][T19821] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1499.954945][T19821] team0 (unregistering): Port device team_slave_1 removed [ 1500.066515][T19706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.100007][T19706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.152762][T19706] bridge_slave_1: entered allmulticast mode [ 1500.190547][T19706] bridge_slave_1: entered promiscuous mode [ 1500.637887][T19706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.722577][T19706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.084273][T19706] team0: Port device team_slave_0 added [ 1501.216490][T19706] team0: Port device team_slave_1 added [ 1501.684764][T19706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.720087][T19706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.792939][T19706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.837200][T19706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.854992][T19706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.980016][T19706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.656496][T19706] hsr_slave_0: entered promiscuous mode [ 1502.658074][T19849] loop0: detected capacity change from 0 to 128 [ 1502.687042][T19706] hsr_slave_1: entered promiscuous mode [ 1502.716355][T19706] debugfs: 'hsr0' already exists in 'hsr' [ 1502.722255][T19706] Cannot create hsr debugfs directory [ 1504.105999][ T3479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.584064][ T3479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.869901][ T3479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.102178][ T3479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.249858][T19706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.444457][T19706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.771114][T19706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.002549][T19706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.165138][ T3479] bridge_slave_1: left allmulticast mode [ 1506.189338][ T3479] bridge_slave_1: left promiscuous mode [ 1506.202610][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.260107][ T3479] bridge_slave_0: left allmulticast mode [ 1506.294086][ T3479] bridge_slave_0: left promiscuous mode [ 1506.317928][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.678734][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.764298][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.811435][ T3479] bond0 (unregistering): Released all slaves [ 1507.850732][T19870] loop9: detected capacity change from 0 to 8192 [ 1508.141657][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1508.152576][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1508.164503][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1508.189409][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1508.214330][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1508.590798][T19180] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 1508.615675][T19180] FAT-fs (loop9): Filesystem has been set read-only [ 1509.228631][ T3479] hsr_slave_0: left promiscuous mode [ 1509.289218][ T3479] hsr_slave_1: left promiscuous mode [ 1509.316633][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.324200][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.377196][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.384772][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.453528][ T3479] veth1_macvtap: left promiscuous mode [ 1509.490431][ T3479] veth0_macvtap: left promiscuous mode [ 1509.497011][ T3479] veth1_vlan: left promiscuous mode [ 1509.502520][ T3479] veth0_vlan: left promiscuous mode [ 1510.308275][ T5787] Bluetooth: hci1: command tx timeout [ 1511.292781][T19706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1511.441230][T19706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1511.518017][T19706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1511.765325][T19706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1512.081397][T19887] loop9: detected capacity change from 0 to 128 [ 1512.386046][ T5787] Bluetooth: hci1: command tx timeout [ 1513.394043][ T5899] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.576912][T19874] chnl_net:caif_netlink_parms(): no params data found [ 1513.873986][ T5899] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.160601][ T5899] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.374451][T19706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.440411][ T5899] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.477052][ T5787] Bluetooth: hci1: command tx timeout [ 1514.738945][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.746325][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.821443][T19706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.102051][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.109631][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.483565][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.491167][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.764633][ T5899] bridge_slave_1: left allmulticast mode [ 1515.795902][ T5899] bridge_slave_1: left promiscuous mode [ 1515.802494][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.874665][ T5899] bridge_slave_0: left allmulticast mode [ 1515.908545][ T5899] bridge_slave_0: left promiscuous mode [ 1515.917891][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.547460][ T5787] Bluetooth: hci1: command tx timeout [ 1517.150170][T16982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1517.162515][T16982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1517.186477][T16982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1517.201756][T16982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1517.215957][T16982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1517.317631][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.343504][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.370826][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1517.375077][ T5899] bond0 (unregistering): Released all slaves [ 1517.386767][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1517.398246][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1517.417224][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1517.430840][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1517.675208][T19874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.706800][T19874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.714547][T19874] bridge_slave_0: entered allmulticast mode [ 1517.744629][T19874] bridge_slave_0: entered promiscuous mode [ 1517.798699][T19874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.817681][T19874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.836006][T19874] bridge_slave_1: entered allmulticast mode [ 1517.863131][T19874] bridge_slave_1: entered promiscuous mode [ 1518.372040][T19874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.598537][T19874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.657235][ T5787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1518.666311][ T5787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1518.675233][ T5787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1518.708615][ T5787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1518.725181][ T5787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1519.084910][T19874] team0: Port device team_slave_0 added [ 1519.137857][T19874] team0: Port device team_slave_1 added [ 1519.265990][ T5787] Bluetooth: hci0: command tx timeout [ 1519.278817][ T5899] hsr_slave_0: left promiscuous mode [ 1519.294475][ T5899] hsr_slave_1: left promiscuous mode [ 1519.305683][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1519.313407][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.324323][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1519.332655][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.358977][ T5899] veth1_macvtap: left promiscuous mode [ 1519.364689][ T5899] veth0_macvtap: left promiscuous mode [ 1519.371056][ T5899] veth1_vlan: left promiscuous mode [ 1519.377742][ T5899] veth0_vlan: left promiscuous mode [ 1519.585819][ T5787] Bluetooth: hci5: command tx timeout [ 1520.413388][T19874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1520.421844][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.450284][T19874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.540489][T19874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.549493][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.576913][T19874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.788168][ T5787] Bluetooth: hci6: command tx timeout [ 1521.043536][T19874] hsr_slave_0: entered promiscuous mode [ 1521.061543][T19874] hsr_slave_1: entered promiscuous mode [ 1521.080563][T19874] debugfs: 'hsr0' already exists in 'hsr' [ 1521.086615][T19874] Cannot create hsr debugfs directory [ 1521.165850][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.347473][ T5787] Bluetooth: hci0: command tx timeout [ 1521.365207][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.676355][ T5787] Bluetooth: hci5: command tx timeout [ 1521.731334][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.967360][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.205951][T19912] chnl_net:caif_netlink_parms(): no params data found [ 1522.319353][T19706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.866087][ T5787] Bluetooth: hci6: command tx timeout [ 1522.912194][T19914] chnl_net:caif_netlink_parms(): no params data found [ 1523.215832][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.272161][T19918] chnl_net:caif_netlink_parms(): no params data found [ 1523.425926][ T5787] Bluetooth: hci0: command tx timeout [ 1523.520634][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.612648][T19912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.620617][T19912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.633227][T19912] bridge_slave_0: entered allmulticast mode [ 1523.642097][T19912] bridge_slave_0: entered promiscuous mode [ 1523.655198][T19912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.662918][T19912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.670933][T19912] bridge_slave_1: entered allmulticast mode [ 1523.679818][T19912] bridge_slave_1: entered promiscuous mode [ 1523.745722][ T5787] Bluetooth: hci5: command tx timeout [ 1523.763892][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.891493][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.119146][T19912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.179631][T19914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.187844][T19914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.195985][T19914] bridge_slave_0: entered allmulticast mode [ 1524.211573][T19914] bridge_slave_0: entered promiscuous mode [ 1524.245079][T19912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.304272][T19914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.321191][T19914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.330574][T19914] bridge_slave_1: entered allmulticast mode [ 1524.339636][T19914] bridge_slave_1: entered promiscuous mode [ 1524.466260][T19912] team0: Port device team_slave_0 added [ 1524.642909][T19912] team0: Port device team_slave_1 added [ 1524.662491][T19914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.865143][T19914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.948434][ T5787] Bluetooth: hci6: command tx timeout [ 1524.960136][T19706] veth0_vlan: entered promiscuous mode [ 1524.968465][T19918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.976453][T19918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.984291][T19918] bridge_slave_0: entered allmulticast mode [ 1524.993288][T19918] bridge_slave_0: entered promiscuous mode [ 1525.006901][T19912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.014350][T19912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.044939][T19912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.096717][T19914] team0: Port device team_slave_0 added [ 1525.134010][ T13] bridge_slave_1: left allmulticast mode [ 1525.147799][ T13] bridge_slave_1: left promiscuous mode [ 1525.155312][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.169089][ T13] bridge_slave_0: left allmulticast mode [ 1525.174944][ T13] bridge_slave_0: left promiscuous mode [ 1525.182201][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.199569][ T13] bridge_slave_1: left allmulticast mode [ 1525.205309][ T13] bridge_slave_1: left promiscuous mode [ 1525.211647][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.225325][ T13] bridge_slave_0: left allmulticast mode [ 1525.232808][ T13] bridge_slave_0: left promiscuous mode [ 1525.245611][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.506310][ T5787] Bluetooth: hci0: command tx timeout [ 1525.661449][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.679574][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.693644][ T13] bond0 (unregistering): Released all slaves [ 1525.825864][ T5787] Bluetooth: hci5: command tx timeout [ 1525.894240][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.911767][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.931285][ T13] bond0 (unregistering): Released all slaves [ 1525.959919][T19918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.967414][T19918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.974928][T19918] bridge_slave_1: entered allmulticast mode [ 1525.984708][T19918] bridge_slave_1: entered promiscuous mode [ 1525.996975][T19912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.004083][T19912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.031415][T19912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.106026][T19914] team0: Port device team_slave_1 added [ 1526.250679][T19914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.258396][T19914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.285492][T19914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.374175][T19874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1526.400486][T19874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1526.429200][T19874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1526.449818][T19914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.457024][T19914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.485226][T19914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.504862][T19918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.542387][T19918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.603988][T19912] hsr_slave_0: entered promiscuous mode [ 1526.614375][T19912] hsr_slave_1: entered promiscuous mode [ 1526.623496][T19912] debugfs: 'hsr0' already exists in 'hsr' [ 1526.630307][T19912] Cannot create hsr debugfs directory [ 1526.651369][T19706] veth1_vlan: entered promiscuous mode [ 1526.663653][T19874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1527.026800][ T5787] Bluetooth: hci6: command tx timeout [ 1527.042127][T19918] team0: Port device team_slave_0 added [ 1527.058791][T19918] team0: Port device team_slave_1 added [ 1527.288583][T19914] hsr_slave_0: entered promiscuous mode [ 1527.298728][T19914] hsr_slave_1: entered promiscuous mode [ 1527.307264][T19914] debugfs: 'hsr0' already exists in 'hsr' [ 1527.313138][T19914] Cannot create hsr debugfs directory [ 1527.367691][T19918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.374811][T19918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.402071][T19918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.421283][T19918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.429720][T19918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.456479][T19918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.618614][ T13] hsr_slave_0: left promiscuous mode [ 1527.627585][ T13] hsr_slave_1: left promiscuous mode [ 1527.634576][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.642361][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.653764][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1527.661529][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.687735][ T13] hsr_slave_0: left promiscuous mode [ 1527.694980][ T13] hsr_slave_1: left promiscuous mode [ 1527.703182][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.712609][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.722646][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1527.731440][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.761987][ T13] veth1_macvtap: left promiscuous mode [ 1527.767750][ T13] veth0_macvtap: left promiscuous mode [ 1527.773488][ T13] veth1_vlan: left promiscuous mode [ 1527.780822][ T13] veth0_vlan: left promiscuous mode [ 1527.787661][ T13] veth1_macvtap: left promiscuous mode [ 1527.793239][ T13] veth0_macvtap: left promiscuous mode [ 1527.799784][ T13] veth1_vlan: left promiscuous mode [ 1527.805278][ T13] veth0_vlan: left promiscuous mode [ 1529.481607][T19918] hsr_slave_0: entered promiscuous mode [ 1529.491312][T19918] hsr_slave_1: entered promiscuous mode [ 1529.734769][T19706] veth0_macvtap: entered promiscuous mode [ 1529.860286][T19706] veth1_macvtap: entered promiscuous mode [ 1530.206988][T19706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.319612][T19706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.555727][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.614660][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.675318][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.694532][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.837993][T19874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.933212][T19912] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1530.986978][T19912] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1531.052355][T19912] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1531.139641][T19874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.167589][T19912] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1531.312778][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.320467][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.460867][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.468415][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.914251][T19914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1531.991844][T19914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1532.072754][T19914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1532.189096][T19914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1532.863377][T19912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.885092][T19918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1532.924169][T19918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1532.972834][T19918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1533.041730][T19918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1533.174979][T19912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.333302][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.340834][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.498091][T18242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.505742][T18242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.760294][T19874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.952650][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.971313][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.173748][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.184917][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.212362][T19914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.414491][T19914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1534.557301][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.564775][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.717638][T19918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.804243][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.811791][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.917446][T19874] veth0_vlan: entered promiscuous mode [ 1534.986758][T19918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.221527][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.229187][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.287312][T19874] veth1_vlan: entered promiscuous mode [ 1535.321208][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.328561][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.533317][T19912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.063465][T19874] veth0_macvtap: entered promiscuous mode [ 1536.193472][T19874] veth1_macvtap: entered promiscuous mode [ 1536.590868][T19874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1536.732284][T19874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.917368][ T151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.956136][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.018387][ T151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.043082][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.489977][T19914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.032709][T19912] veth0_vlan: entered promiscuous mode [ 1538.182686][T19912] veth1_vlan: entered promiscuous mode [ 1538.340981][T19918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.439632][T19914] veth0_vlan: entered promiscuous mode [ 1538.617385][T19914] veth1_vlan: entered promiscuous mode [ 1538.681600][T20025] ipvlan1: entered allmulticast mode [ 1538.696774][T20025] veth0_vlan: entered allmulticast mode [ 1538.873604][T19912] veth0_macvtap: entered promiscuous mode [ 1539.016735][T19912] veth1_macvtap: entered promiscuous mode [ 1539.324194][T19914] veth0_macvtap: entered promiscuous mode [ 1539.384692][T19912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.511971][T19914] veth1_macvtap: entered promiscuous mode [ 1539.567636][T19912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.802924][T18242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.872912][T19914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.908916][T18242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.927801][T18242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.042135][T19914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1540.058081][T18242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.273072][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.307459][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.376770][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.400044][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.714591][T19918] veth0_vlan: entered promiscuous mode [ 1540.927710][T19918] veth1_vlan: entered promiscuous mode [ 1541.443848][T19918] veth0_macvtap: entered promiscuous mode [ 1541.659991][T19918] veth1_macvtap: entered promiscuous mode [ 1541.952633][T19918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.122748][T19918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.400232][ T3479] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.420667][ T3479] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.505649][ T3479] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.555649][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.564112][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.594877][ T151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.876668][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.884693][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.816552][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.873606][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.052569][T18242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.081688][T18242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.284641][T10931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.329587][T10931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.688536][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.724860][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.368400][T20140] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1548.481532][T20140] team0 (unregistering): Port device team_slave_0 removed [ 1548.582894][T20140] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1548.672638][T20140] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1548.748477][T20140] team0 (unregistering): Port device team_slave_1 removed [ 1548.841540][T20142] ipvlan1: entered allmulticast mode [ 1548.850797][T20142] veth0_vlan: entered allmulticast mode [ 1549.681256][T20148] loop2: detected capacity change from 0 to 8192 [ 1550.094093][T10931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.185564][T10931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.191471][T19914] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 1550.266998][T19914] FAT-fs (loop2): Filesystem has been set read-only [ 1550.500530][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.573652][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.804357][T20179] loop2: detected capacity change from 0 to 256 [ 1553.351961][T20188] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1553.431466][T20188] team0 (unregistering): Port device team_slave_0 removed [ 1553.620998][T20188] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1553.658808][T20188] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1553.708237][T20188] team0 (unregistering): Port device team_slave_1 removed [ 1555.023888][T20215] loop6: detected capacity change from 0 to 2368 [ 1555.089914][T20215] iso9660: Unknown parameter 'ŠXðÓ-¥¤ô' [ 1557.243586][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1557.703726][T20247] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1557.705212][T20247] team0 (unregistering): Port device team_slave_0 removed [ 1557.814945][T20247] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1557.878507][T20247] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1557.880204][T20247] team0 (unregistering): Port device team_slave_1 removed [ 1560.401123][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5059'. [ 1562.444297][T20315] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1563.446105][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5073'. [ 1564.461829][T20343] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1564.508043][T20343] team0 (unregistering): Port device team_slave_0 removed [ 1564.639788][T20343] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1564.678111][T20343] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1564.721715][T20343] team0 (unregistering): Port device team_slave_1 removed [ 1567.242622][T20385] overlayfs: missing 'lowerdir' [ 1570.500866][T20432] overlayfs: missing 'workdir' [ 1573.969754][T20484] overlayfs: missing 'workdir' [ 1574.273954][T20488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1576.178547][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.187196][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.820090][ T29] audit: type=1326 audit(1770804371.836:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1576.858096][T20531] overlayfs: missing 'workdir' [ 1576.936407][ T29] audit: type=1326 audit(1770804371.876:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.002590][ T29] audit: type=1326 audit(1770804371.876:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.060570][ T29] audit: type=1326 audit(1770804371.876:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.093456][ T29] audit: type=1326 audit(1770804371.876:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.268593][ T29] audit: type=1326 audit(1770804371.886:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.415102][ T29] audit: type=1326 audit(1770804371.886:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.550590][ T29] audit: type=1326 audit(1770804371.886:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.691362][ T29] audit: type=1326 audit(1770804371.886:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1577.816005][ T29] audit: type=1326 audit(1770804371.886:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20523 comm="syz.3.5131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1593.836949][T20752] netlink: 'syz.2.5198': attribute type 4 has an invalid length. [ 1598.837354][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1598.837437][ T29] audit: type=1326 audit(1770804393.846:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.1.5217" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x0 [ 1599.380793][T20823] netlink: 'syz.3.5218': attribute type 4 has an invalid length. [ 1601.350458][T20855] fuse: Bad value for 'fd' [ 1601.926138][T20860] sctp: [Deprecated]: syz.1.5229 (pid 20860) Use of int in max_burst socket option deprecated. [ 1601.926138][T20860] Use struct sctp_assoc_value instead [ 1603.731446][T20890] dummy0: entered allmulticast mode [ 1603.771139][T20890] dummy0: left allmulticast mode [ 1604.251845][T20900] fuse: Unknown parameter 'group_id00000000000000000000' [ 1604.659265][T20906] netlink: 'syz.7.5243': attribute type 4 has an invalid length. [ 1605.268061][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5246'. [ 1606.313105][T20923] team0 (unregistering): Port device team_slave_0 removed [ 1606.430136][T20923] team0 (unregistering): Port device team_slave_1 removed [ 1607.571759][T20941] fuse: Unknown parameter 'group_id00000000000000000000' [ 1608.384821][T20954] netlink: 'syz.1.5258': attribute type 4 has an invalid length. [ 1608.716784][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5259'. [ 1609.179114][T20962] fuse: Bad value for 'group_id' [ 1609.245876][T20962] fuse: Bad value for 'group_id' [ 1611.448750][T20989] fuse: Unknown parameter 'group_id00000000000000000000' [ 1611.917427][T21003] netlink: 'syz.7.5270': attribute type 4 has an invalid length. [ 1612.117088][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5271'. [ 1612.936449][T21013] fuse: Bad value for 'group_id' [ 1612.962059][T21013] fuse: Bad value for 'group_id' [ 1614.004248][T21029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1614.065863][T21004] Bluetooth: hci2: command 0x0406 tx timeout [ 1615.032535][T21044] fuse: Bad value for 'user_id' [ 1615.056620][T21044] fuse: Bad value for 'user_id' [ 1615.142876][T21046] netlink: 'syz.2.5283': attribute type 4 has an invalid length. [ 1616.083387][T21060] fuse: Bad value for 'group_id' [ 1616.160089][T21060] fuse: Bad value for 'group_id' [ 1618.384376][T21090] fuse: Bad value for 'user_id' [ 1618.407939][T21090] fuse: Bad value for 'user_id' [ 1621.237633][T21128] fuse: Bad value for 'user_id' [ 1621.267401][T21128] fuse: Bad value for 'user_id' [ 1623.936290][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5321'. [ 1624.273855][T21172] fuse: Bad value for 'fd' [ 1629.593820][T21253] fuse: Bad value for 'fd' [ 1632.578119][T21301] fuse: Bad value for 'fd' [ 1634.545870][T21004] Bluetooth: hci1: command 0x0406 tx timeout [ 1634.720258][ T29] audit: type=1326 audit(1770804429.736:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21336 comm="syz.1.5377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1634.832284][ T29] audit: type=1326 audit(1770804429.766:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21336 comm="syz.1.5377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1634.951522][ T29] audit: type=1326 audit(1770804429.776:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21336 comm="syz.1.5377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1635.075946][ T29] audit: type=1326 audit(1770804429.776:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21336 comm="syz.1.5377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1635.182743][ T29] audit: type=1326 audit(1770804429.776:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21336 comm="syz.1.5377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 1635.394879][T21346] fuse: Bad value for 'fd' [ 1636.370723][T21358] fuse: Unknown parameter 'grou00000000000000000000' [ 1637.614310][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.622629][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1639.665719][T21383] Bluetooth: hci0: command 0x0406 tx timeout [ 1639.672871][T21383] Bluetooth: hci5: command 0x0406 tx timeout [ 1642.824686][T21449] trusted_key: encrypted_key: keyword 'nelt' not recognized [ 1644.764317][ T29] audit: type=1800 audit(1770804439.776:182): pid=21476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5418" name="bus" dev="tmpfs" ino=465 res=0 errno=0 [ 1644.788359][ T5787] Bluetooth: hci6: command 0x0406 tx timeout [ 1645.718598][T21489] trusted_key: encrypted_key: insufficient parameters specified [ 1647.765735][ T29] audit: type=1326 audit(1770804442.766:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1647.892417][ T29] audit: type=1326 audit(1770804442.816:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.016076][ T29] audit: type=1326 audit(1770804442.836:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.147553][ T29] audit: type=1326 audit(1770804442.876:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.281286][ T29] audit: type=1326 audit(1770804442.876:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.413735][ T29] audit: type=1326 audit(1770804442.876:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.546199][ T29] audit: type=1326 audit(1770804442.886:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.680419][ T29] audit: type=1326 audit(1770804442.886:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.803562][ T29] audit: type=1326 audit(1770804442.886:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.6.5431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1648.868951][T21533] trusted_key: encrypted_key: insufficient parameters specified [ 1651.625021][T21574] trusted_key: encrypted_key: insufficient parameters specified [ 1652.498026][T21591] ipvlan1: entered allmulticast mode [ 1652.503515][T21591] veth0_vlan: entered allmulticast mode [ 1653.276257][T21600] dummy0: entered allmulticast mode [ 1653.324292][T21597] dummy0: left allmulticast mode [ 1654.892627][T21616] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1655.835171][T21631] ipvlan1: entered allmulticast mode [ 1655.869802][T21631] veth0_vlan: entered allmulticast mode [ 1656.590605][T21643] dummy0: entered allmulticast mode [ 1656.634029][T21640] dummy0: left allmulticast mode [ 1657.466071][T21660] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1660.644608][T21698] dummy0: entered allmulticast mode [ 1660.695876][T21697] dummy0: left allmulticast mode [ 1660.816400][T21703] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1663.315565][ T29] audit: type=1326 audit(1770804458.296:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1663.423309][ T29] audit: type=1326 audit(1770804458.296:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1663.566219][ T29] audit: type=1326 audit(1770804458.326:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1663.736552][ T29] audit: type=1326 audit(1770804458.326:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1663.894137][ T29] audit: type=1326 audit(1770804458.326:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1664.030008][ T29] audit: type=1326 audit(1770804458.326:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1664.149229][ T29] audit: type=1326 audit(1770804458.366:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1664.275305][ T29] audit: type=1326 audit(1770804458.366:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1664.436683][ T29] audit: type=1326 audit(1770804458.366:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21734 comm="syz.7.5503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1665.271375][ T29] audit: type=1326 audit(1770804460.286:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21757 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1667.787697][T21796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 1673.665605][T21880] IPv6: addrconf: prefix option has invalid lifetime [ 1679.440573][T21953] loop7: detected capacity change from 0 to 16 [ 1679.512797][T21953] erofs (device loop7): mounted with root inode @ nid 36. [ 1679.531921][T21953] syz.7.5576: attempt to access beyond end of device [ 1679.531921][T21953] loop7: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1679.630725][T21953] syz.7.5576: attempt to access beyond end of device [ 1679.630725][T21953] loop7: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1679.717898][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1679.718617][ T29] audit: type=1800 audit(1770804474.736:230): pid=21953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5576" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1681.461258][T21979] fuse: Unknown parameter 'user_i00000000000000000000' [ 1682.646854][T22000] loop7: detected capacity change from 0 to 16 [ 1683.026638][T22000] erofs (device loop7): mounted with root inode @ nid 36. [ 1683.062715][T22000] syz.7.5590: attempt to access beyond end of device [ 1683.062715][T22000] loop7: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1683.239018][T22000] syz.7.5590: attempt to access beyond end of device [ 1683.239018][T22000] loop7: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1683.327085][ T29] audit: type=1800 audit(1770804478.346:231): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5590" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1685.504705][T22029] fuse: Unknown parameter 'user_i00000000000000000000' [ 1686.667273][T22050] loop7: detected capacity change from 0 to 16 [ 1686.767442][T22050] erofs (device loop7): mounted with root inode @ nid 36. [ 1686.810054][T22050] syz.7.5604: attempt to access beyond end of device [ 1686.810054][T22050] loop7: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1686.906569][T22050] syz.7.5604: attempt to access beyond end of device [ 1686.906569][T22050] loop7: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1687.031915][ T29] audit: type=1800 audit(1770804482.046:232): pid=22050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5604" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1688.987246][T22081] fuse: Unknown parameter 'user_id00000000000000000000' [ 1690.805183][T22107] loop2: detected capacity change from 0 to 16 [ 1690.902928][T22107] erofs (device loop2): mounted with root inode @ nid 36. [ 1690.988543][T22107] syz.2.5619: attempt to access beyond end of device [ 1690.988543][T22107] loop2: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1691.094169][T22107] syz.2.5619: attempt to access beyond end of device [ 1691.094169][T22107] loop2: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1691.184580][ T29] audit: type=1800 audit(1770804486.196:233): pid=22107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5619" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1695.163625][T22163] loop6: detected capacity change from 0 to 16 [ 1695.239245][T22163] erofs (device loop6): mounted with root inode @ nid 36. [ 1695.281178][T22163] syz.6.5636: attempt to access beyond end of device [ 1695.281178][T22163] loop6: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1695.376470][T22163] syz.6.5636: attempt to access beyond end of device [ 1695.376470][T22163] loop6: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1695.485685][ T29] audit: type=1800 audit(1770804490.486:234): pid=22163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5636" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1697.788576][T22199] loop3: detected capacity change from 0 to 128 [ 1698.758322][T22213] loop7: detected capacity change from 0 to 128 [ 1699.052425][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.059464][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1699.533854][T22224] loop1: detected capacity change from 0 to 16 [ 1699.658514][T22224] erofs (device loop1): mounted with root inode @ nid 36. [ 1699.798392][T22224] syz.1.5653: attempt to access beyond end of device [ 1699.798392][T22224] loop1: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1699.944661][T22224] syz.1.5653: attempt to access beyond end of device [ 1699.944661][T22224] loop1: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1700.027024][ T29] audit: type=1800 audit(1770804495.046:235): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5653" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1700.972918][T22241] trusted_key: encrypted_key: keyword 'nelt' not recognized [ 1703.657001][T22269] netlink: 'syz.3.5669': attribute type 4 has an invalid length. [ 1704.219161][T22278] trusted_key: encrypted_key: keyword 'nelt' not recognized [ 1704.857427][T22285] fuse: Bad value for 'fd' [ 1707.242237][T22315] trusted_key: encrypted_key: keyword 'nelt' not recognized [ 1707.683674][T22317] loop3: detected capacity change from 0 to 1764 [ 1708.686232][T22332] fuse: Bad value for 'fd' [ 1711.031745][T22358] loop6: detected capacity change from 0 to 128 [ 1711.048475][T22355] overlayfs: missing 'lowerdir' [ 1712.183977][T22375] loop1: detected capacity change from 0 to 128 [ 1712.199083][T22374] fuse: Unknown parameter '0x0000000000000003' [ 1713.505168][T19874] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 1713.555902][T19874] FAT-fs (loop1): Filesystem has been set read-only [ 1715.049865][T22411] overlayfs: missing 'lowerdir' [ 1715.924605][T22420] fuse: Unknown parameter '0x0000000000000003' [ 1718.690519][T22456] overlayfs: missing 'lowerdir' [ 1719.240267][T22464] fuse: Unknown parameter '0x0000000000000003' [ 1719.842469][T22471] loop2: detected capacity change from 0 to 512 [ 1720.022649][T22476] overlayfs: failed to set uuid (146/file0, err=-1); falling back to uuid=null. [ 1720.118321][T22476] overlayfs: failed to verify upper root origin [ 1720.307100][ T29] audit: type=1800 audit(1770804515.316:236): pid=22471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5735" name="file2" dev="loop2" ino=1048758 res=0 errno=0 [ 1720.316337][T22471] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 1720.469813][T22471] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 1720.540849][T22471] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 1720.755709][T22471] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 1720.898237][T22471] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 1722.526929][T22504] overlayfs: missing 'lowerdir' [ 1722.642600][T22507] loop6: detected capacity change from 0 to 128 [ 1722.742015][T22507] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1723.350347][ T151] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1723.759135][T22520] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1727.668945][T22558] overlayfs: missing 'lowerdir' [ 1728.504081][T22571] fuse: Bad value for 'fd' [ 1730.643210][T22596] program syz.6.5772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1731.489340][T22604] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1731.598300][T22604] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1732.777960][T22620] fuse: Bad value for 'fd' [ 1735.943837][T22659] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1735.991214][T22659] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1737.153171][T22679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5794'. [ 1737.354573][T22679] vlan2: entered promiscuous mode [ 1737.416059][T22679] erspan0: entered promiscuous mode [ 1737.551967][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5796'. [ 1740.834843][T22716] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1740.943446][T22716] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1742.124565][T22737] loop1: detected capacity change from 0 to 128 [ 1744.607954][T22764] overlayfs: missing 'lowerdir' [ 1745.526990][T22780] loop6: detected capacity change from 0 to 128 [ 1747.496924][T22803] netlink: 'syz.6.5834': attribute type 12 has an invalid length. [ 1748.379186][T22811] overlayfs: missing 'lowerdir' [ 1749.047513][T22824] loop7: detected capacity change from 0 to 128 [ 1756.104057][T22910] loop7: detected capacity change from 0 to 128 [ 1756.302885][ T29] audit: type=1800 audit(1770804551.316:237): pid=22910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5869" name="bus" dev="loop7" ino=1048767 res=0 errno=0 [ 1757.176970][T22923] loop7: detected capacity change from 0 to 128 [ 1757.299818][ T29] audit: type=1800 audit(1770804552.316:238): pid=22923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5874" name="file1" dev="loop7" ino=1048768 res=0 errno=0 [ 1757.312315][T22923] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1757.433636][T22923] FAT-fs (loop7): Filesystem has been set read-only [ 1757.585043][T22925] loop2: detected capacity change from 0 to 256 [ 1758.542252][T22925] FAT-fs (loop2): Directory bread(block 64) failed [ 1758.655792][T22925] FAT-fs (loop2): Directory bread(block 65) failed [ 1758.662744][T22925] FAT-fs (loop2): Directory bread(block 66) failed [ 1758.781436][T22925] FAT-fs (loop2): Directory bread(block 67) failed [ 1758.831446][T22925] FAT-fs (loop2): Directory bread(block 68) failed [ 1758.866638][T22925] FAT-fs (loop2): Directory bread(block 69) failed [ 1758.987379][T22925] FAT-fs (loop2): Directory bread(block 70) failed [ 1759.047675][T22925] FAT-fs (loop2): Directory bread(block 71) failed [ 1759.128031][T22925] FAT-fs (loop2): Directory bread(block 72) failed [ 1759.134770][T22925] FAT-fs (loop2): Directory bread(block 73) failed [ 1760.490863][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1760.497788][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1763.179975][T22997] dummy0: entered allmulticast mode [ 1763.254110][T22996] dummy0: left allmulticast mode [ 1764.196800][T23012] loop6: detected capacity change from 0 to 128 [ 1767.530233][T23053] loop1: detected capacity change from 0 to 128 [ 1769.428400][T23068] loop6: detected capacity change from 0 to 164 [ 1770.473026][T23081] trusted_key: encrypted_key: master key parameter 'trusteduser:syz' is invalid [ 1771.021763][T23086] loop3: detected capacity change from 0 to 128 [ 1772.449980][T23111] loop1: detected capacity change from 0 to 164 [ 1773.668025][T23126] trusted_key: encrypted_key: master key parameter 'trusteduser:syz' is invalid [ 1773.885967][T23132] loop7: detected capacity change from 0 to 128 [ 1774.134490][T23134] ===================================================== [ 1774.141928][T23134] BUG: KMSAN: uninit-value in eth_type_trans+0x7d5/0x9b0 [ 1774.149278][T23134] eth_type_trans+0x7d5/0x9b0 [ 1774.154132][T23134] bpf_prog_run_generic_xdp+0x11c6/0x1f60 [ 1774.160211][T23134] do_xdp_generic+0xd51/0x1690 [ 1774.165149][T23134] tun_get_user+0x525a/0x7830 [ 1774.170141][T23134] tun_chr_write_iter+0x3e9/0x5c0 [ 1774.175506][T23134] vfs_write+0xbe1/0x15c0 [ 1774.180014][T23134] ksys_write+0x1d9/0x470 [ 1774.184574][T23134] __ia32_sys_write+0x9a/0xf0 [ 1774.189471][T23134] ia32_sys_call+0x37a7/0x4360 [ 1774.194388][T23134] do_int80_emulation+0x15a/0x330 [ 1774.199749][T23134] asm_int80_emulation+0x1f/0x30 [ 1774.204854][T23134] [ 1774.207357][T23134] Uninit was stored to memory at: [ 1774.212736][T23134] pskb_expand_head+0x317/0x1900 [ 1774.217908][T23134] do_xdp_generic+0xa78/0x1690 [ 1774.222833][T23134] tun_get_user+0x525a/0x7830 [ 1774.227739][T23134] tun_chr_write_iter+0x3e9/0x5c0 [ 1774.232975][T23134] vfs_write+0xbe1/0x15c0 [ 1774.237624][T23134] ksys_write+0x1d9/0x470 [ 1774.242085][T23134] __ia32_sys_write+0x9a/0xf0 [ 1774.247000][T23134] ia32_sys_call+0x37a7/0x4360 [ 1774.251901][T23134] do_int80_emulation+0x15a/0x330 [ 1774.257177][T23134] asm_int80_emulation+0x1f/0x30 [ 1774.262273][T23134] [ 1774.264667][T23134] Uninit was created at: [ 1774.269371][T23134] __kmalloc_node_track_caller_noprof+0xb6e/0x1c70 [ 1774.276161][T23134] kmalloc_reserve+0x22f/0x4b0 [ 1774.281061][T23134] __alloc_skb+0x805/0x1030 [ 1774.285790][T23134] alloc_skb_with_frags+0xc5/0xa60 [ 1774.291052][T23134] sock_alloc_send_pskb+0xacb/0xc60 [ 1774.296582][T23134] tun_get_user+0xcfc/0x7830 [ 1774.301301][T23134] tun_chr_write_iter+0x3e9/0x5c0 [ 1774.306614][T23134] vfs_write+0xbe1/0x15c0 [ 1774.311066][T23134] ksys_write+0x1d9/0x470 [ 1774.315610][T23134] __ia32_sys_write+0x9a/0xf0 [ 1774.320417][T23134] ia32_sys_call+0x37a7/0x4360 [ 1774.325318][T23134] do_int80_emulation+0x15a/0x330 [ 1774.330612][T23134] asm_int80_emulation+0x1f/0x30 [ 1774.335788][T23134] [ 1774.338224][T23134] CPU: 0 UID: 0 PID: 23134 Comm: syz.3.5949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.349440][T23134] Tainted: [L]=SOFTLOCKUP [ 1774.353939][T23134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1774.364219][T23134] ===================================================== [ 1774.371331][T23134] Disabling lock debugging due to kernel taint [ 1774.377684][T23134] Kernel panic - not syncing: kmsan.panic set ... [ 1774.384211][T23134] CPU: 0 UID: 0 PID: 23134 Comm: syz.3.5949 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1774.395344][T23134] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1774.400990][T23134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1774.411178][T23134] Call Trace: [ 1774.414535][T23134] [ 1774.417541][T23134] __dump_stack+0x26/0x30 [ 1774.422036][T23134] dump_stack_lvl+0x50/0x1c0 [ 1774.426772][T23134] ? dump_stack+0x12/0x25 [ 1774.431247][T23134] dump_stack+0x1e/0x25 [ 1774.435541][T23134] vpanic+0x435/0xd40 [ 1774.439682][T23134] panic+0x15d/0x160 [ 1774.443768][T23134] kmsan_report+0x31a/0x320 [ 1774.448408][T23134] ? ksys_write+0x1d9/0x470 [ 1774.453030][T23134] ? __msan_warning+0x1b/0x30 [ 1774.457844][T23134] ? eth_type_trans+0x7d5/0x9b0 [ 1774.462836][T23134] ? bpf_prog_run_generic_xdp+0x11c6/0x1f60 [ 1774.468875][T23134] ? do_xdp_generic+0xd51/0x1690 [ 1774.473951][T23134] ? tun_get_user+0x525a/0x7830 [ 1774.478933][T23134] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1774.484310][T23134] ? vfs_write+0xbe1/0x15c0 [ 1774.488934][T23134] ? ksys_write+0x1d9/0x470 [ 1774.493556][T23134] ? __ia32_sys_write+0x9a/0xf0 [ 1774.498524][T23134] ? ia32_sys_call+0x37a7/0x4360 [ 1774.503573][T23134] ? do_int80_emulation+0x15a/0x330 [ 1774.508898][T23134] ? asm_int80_emulation+0x1f/0x30 [ 1774.514135][T23134] ? kmsan_get_metadata+0xf1/0x160 [ 1774.519397][T23134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1774.525362][T23134] ? bpf_xdp_adjust_head+0x2e2/0x390 [ 1774.530910][T23134] ? kmsan_get_metadata+0xf1/0x160 [ 1774.536172][T23134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1774.542159][T23134] ? ___bpf_prog_run+0xea23/0xeb60 [ 1774.547569][T23134] ? kmsan_get_metadata+0xf1/0x160 [ 1774.552930][T23134] __msan_warning+0x1b/0x30 [ 1774.557557][T23134] eth_type_trans+0x7d5/0x9b0 [ 1774.562409][T23134] bpf_prog_run_generic_xdp+0x11c6/0x1f60 [ 1774.568281][T23134] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1774.574302][T23134] do_xdp_generic+0xd51/0x1690 [ 1774.579265][T23134] ? tun_get_user+0x51dc/0x7830 [ 1774.584250][T23134] tun_get_user+0x525a/0x7830 [ 1774.589063][T23134] ? stack_depot_save_flags+0x35/0x790 [ 1774.594858][T23134] ? kmsan_get_metadata+0xf1/0x160 [ 1774.600180][T23134] ? kmsan_get_metadata+0xf1/0x160 [ 1774.605464][T23134] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1774.612039][T23134] ? kmsan_get_metadata+0x70/0x160 [ 1774.617359][T23134] tun_chr_write_iter+0x3e9/0x5c0 [ 1774.622593][T23134] vfs_write+0xbe1/0x15c0 [ 1774.627070][T23134] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1774.632800][T23134] ksys_write+0x1d9/0x470 [ 1774.637274][T23134] __ia32_sys_write+0x9a/0xf0 [ 1774.642096][T23134] ia32_sys_call+0x37a7/0x4360 [ 1774.646987][T23134] do_int80_emulation+0x15a/0x330 [ 1774.652142][T23134] ? clear_bhb_loop+0x50/0xa0 [ 1774.656962][T23134] ? clear_bhb_loop+0x50/0xa0 [ 1774.661888][T23134] asm_int80_emulation+0x1f/0x30 [ 1774.666990][T23134] RIP: 0023:0xf71f572b [ 1774.671163][T23134] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1774.690924][T23134] RSP: 002b:00000000f54b644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1774.699852][T23134] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 1774.708025][T23134] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.716099][T23134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1774.724259][T23134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1774.732341][T23134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1774.740459][T23134] [ 1774.743957][T23134] Kernel Offset: disabled [ 1774.748325][T23134] Rebooting in 86400 seconds..