last executing test programs: 22m55.434287785s ago: executing program 32 (id=24): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r1 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1022000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14, 0x0, 0xc32, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) pread64(r5, &(0x7f0000000480)=""/209, 0xd1, 0x2) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r1, 0x1, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r8, &(0x7f0000000340), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4225a}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 14m23.44206396s ago: executing program 33 (id=1124): socket(0x15, 0x5, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0xc9cae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 13m10.870292883s ago: executing program 5 (id=1352): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300"], 0x64}}, 0x0) 13m9.840554657s ago: executing program 5 (id=1354): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) 13m8.540470914s ago: executing program 5 (id=1357): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f000000c980), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079100800000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setresuid(0xee00, 0x0, 0x0) 13m6.211682646s ago: executing program 5 (id=1361): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r5 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x0, r5, 0x180, 0x1}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x578}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x7, 0x1, {{0xc, 0x4, 0x1, 0x26, 0x30, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x14, 0x3b, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @rr={0x7, 0x3, 0x65}, @ssrr={0x89, 0x3, 0x8f}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000008094000100f3ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 13m2.604584964s ago: executing program 3 (id=1370): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 13m2.420020853s ago: executing program 3 (id=1371): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) connect$inet6(r0, &(0x7f0000000040), 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x8008af00, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0) 13m0.460522805s ago: executing program 3 (id=1374): syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000fed000/0x10000)=nil, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0xb, 0x2001) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x11) syz_emit_ethernet(0x50, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{}]}}}}}}, 0x0) 13m0.120618623s ago: executing program 4 (id=1376): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m59.262215658s ago: executing program 5 (id=1377): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) syz_emit_vhci(&(0x7f0000001ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{}, {0x9, 0xc8}}}, 0x102) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12m58.968715523s ago: executing program 3 (id=1378): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) 12m58.435622911s ago: executing program 4 (id=1380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004084}, 0x4001844) 12m58.156417396s ago: executing program 4 (id=1382): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) connect$inet6(r0, &(0x7f0000000040), 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x8008af00, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0) 12m58.017217983s ago: executing program 5 (id=1383): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x206420, 0x0, 0x7, 0x0, &(0x7f0000006380)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 12m56.447337775s ago: executing program 3 (id=1384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=@newtaction={0x27c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x268, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x0, 0x200000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0xa8, 0x17, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffff7}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x98, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x18, 0x6, "b0c788834491db917a9a992c9833c17cff3b4363"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xb0, 0xa, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xf, 0x10000000, 0x101, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x60e}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x81, 0x9, 0x5, 0xe9, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6b8, 0x5, 0x10000000, 0x2, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c3}]}, {0x9, 0x6, "2e8a9ae58e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x27c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 12m56.14951637s ago: executing program 4 (id=1385): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r5 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x0, r5, 0x180, 0x1}, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x578}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x7, 0x1, {{0xc, 0x4, 0x1, 0x26, 0x30, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x14, 0x3b, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @rr={0x7, 0x3, 0x65}, @ssrr={0x89, 0x3, 0x8f}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000008094000100f3ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 12m53.192562054s ago: executing program 4 (id=1387): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 12m51.879331723s ago: executing program 4 (id=1389): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @reserved}}) 12m51.816533766s ago: executing program 3 (id=1390): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth1_virt_wifi\x00', {0x2, 0x4e1f, @local}}) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000000100)="8e64673b4f957f17dcc60b5f96", 0xd}], 0x1) 12m35.370568443s ago: executing program 34 (id=1388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000", @ANYRES32=0x1, @ANYBLOB="faffffff0000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="030000000400"/20], 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1) 12m35.168578683s ago: executing program 35 (id=1389): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000240)={0x40, 0x0, '\x00', {0x0, @reserved}}) 12m35.104053117s ago: executing program 36 (id=1383): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x206420, 0x0, 0x7, 0x0, &(0x7f0000006380)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 12m34.969324414s ago: executing program 37 (id=1390): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth1_virt_wifi\x00', {0x2, 0x4e1f, @local}}) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000000100)="8e64673b4f957f17dcc60b5f96", 0xd}], 0x1) 11m57.707841796s ago: executing program 7 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0xba) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYRES8], 0x3f9, 0x0) msgrcv(r1, &(0x7f00000002c0), 0x8, 0x0, 0x800) 11m56.375287276s ago: executing program 7 (id=1435): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[], 0xfeffffff) 11m56.004400985s ago: executing program 7 (id=1439): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_connect$cdc_ecm(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x8, 0x40, 0x82, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x7, 0x24, 0x6, 0x0, 0x0, 'oN'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4ec4, 0x2852, 0x6}, [@country_functional={0x6, 0x24, 0x7, 0x80, 0xcd5e}, @country_functional={0x6, 0x24, 0x7, 0x7}, @obex={0x5, 0x24, 0x15, 0xd}, @obex={0x5, 0x24, 0x15, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x10, 0x2, 0x5, 0x1, 0xf9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0xf1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x40, 0xcf}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) socket$netlink(0x10, 0x3, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 11m45.73390144s ago: executing program 7 (id=1455): futex(&(0x7f0000000000), 0x5, 0x1, 0x0, 0x0, 0x92000005) 11m44.501434574s ago: executing program 7 (id=1457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=@newtaction={0x260, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x24c, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x0, 0x200000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x88, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x9c, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x19, 0x6, "b0c788834491db917a9a992c9833c17cff3b436365"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xb0, 0xa, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xf, 0x10000000, 0x101, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x60e}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x81, 0x9, 0x5, 0xe9, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6b8, 0x5, 0x10000000, 0x2, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c3}]}, {0x9, 0x6, "2e8a9ae58e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x260}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 11m42.700263148s ago: executing program 7 (id=1461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x0, 0x0, 0xa43, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0) waitid(0x2, r0, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") 11m27.617786914s ago: executing program 38 (id=1461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x0, 0x0, 0xa43, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0) waitid(0x2, r0, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") 10m37.80576919s ago: executing program 9 (id=1615): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000100)) 10m30.90038467s ago: executing program 9 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 10m29.816417716s ago: executing program 9 (id=1629): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) sysfs$2(0x2, 0x7ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004045, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x204000) 10m28.125099545s ago: executing program 9 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 10m27.704197266s ago: executing program 9 (id=1636): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000ac0)="0058de8c145b", 0x6}], 0x1) 10m26.452304372s ago: executing program 9 (id=1640): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x6}, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 10m25.164917299s ago: executing program 39 (id=1640): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x6}, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 54.66948592s ago: executing program 1 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents64(r4, &(0x7f0000000240)=""/157, 0x9d) getdents(r4, 0x0, 0x0) 53.197515407s ago: executing program 1 (id=3356): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 53.024406766s ago: executing program 1 (id=3358): setuid(0xee01) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) 52.910169922s ago: executing program 1 (id=3360): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000006c0)='htcp', 0x4) shutdown(r4, 0x1) shutdown(0xffffffffffffffff, 0x1) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = gettid() ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) tkill(r5, 0xb) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xdb3, 0x0, 0xa190, 0x1, 0x6}) 51.112540656s ago: executing program 1 (id=3365): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@sndinfo={0x20, 0x84, 0x2, {0xfff, 0x200, 0xcaaa, 0x7}}], 0x20, 0x2000c840}, 0x0) 50.947359174s ago: executing program 1 (id=3366): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@minixdf}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") write$sndseq(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 35.416200664s ago: executing program 40 (id=3366): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@minixdf}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") write$sndseq(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 5.688142403s ago: executing program 2 (id=3455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00006000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc67}, {&(0x7f0000000b00)="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", 0x162}, {&(0x7f0000000880)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}, {&(0x7f0000000500)="1cd2cf486bb5a90a257eaca10edd9b4dcc13b0dbd20235a98d552ebee1ac91839173dfc5f022ad537cc60d1fc4ff85bed2d5e46cc0d63d47961969cc34c20ba95b9725e125b645dc47237efd9a6e4364a7b74190e664459b62b388a83180797b03706fe3", 0x64}, {&(0x7f0000000980)="2a4ae9592dde05637fe851abd378a2061c4aaa35178cd1429038a4020f7c215e54928a5bb10dc587198d3610a58a8c", 0x2f}], 0x6}, 0x8bb3a301eb080b) 4.564212822s ago: executing program 2 (id=3462): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.792092682s ago: executing program 0 (id=3470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) 2.878208779s ago: executing program 0 (id=3473): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) fsopen(0x0, 0x1) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x40a9, &(0x7f00000002c0)="$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") ioctl$FITRIM(r1, 0x40e8662e, &(0x7f0000000080)={0xae, 0xd000007}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400e70000000000000000000000000000000000000000000000000000006f000000633d8bae493412756229a4e4d43fcf5ded5637655a19d1078a381fd2d064528c4bcecbb21cf381c0a5ad3c7cfeff06425fabf3e47aa3d035437c03822cb16ecaef048daec4ecaf159104c6777256005b148270c7ec31ab7f78def5a289464e3383781c5568340a9d8903793c26e7b3"], &(0x7f00000001c0)=0x93) 2.661712771s ago: executing program 8 (id=3474): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xd396, 0x44}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001240)="cc5fd2518c506ebf347763559129e729164723d0e47c59f1b71a169d2bf45153816f628ff44cbe57e3b69377793663b2d7f0c39319dd2d25cf661253e80493fe43d4bd2521579cc80e15640e30cfedcde5be166f87dd93bc68ac7b179df08a08b19ec17b48e6ffa0026287ca02ae", 0x6e}], 0x1}}], 0x1, 0x2090) 2.224258673s ago: executing program 6 (id=3476): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="9bb6b982b1f7eba58f7caf1a0142e943805e78c8360f9a36", 0x18}, {&(0x7f0000000240)="9da68b6d67e052961198aa891aab9cf268e4f9c89695e06f0bd93778463f25cf66", 0x21}], 0x2) 2.012573755s ago: executing program 6 (id=3477): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000316000900"], 0x0, 0x0}, 0x0) 1.838464864s ago: executing program 2 (id=3478): socket$unix(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9782bbd7000ffdbdf250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.807938745s ago: executing program 0 (id=3479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x390, 0x0, 0xffffffff, 0x438, 0x390, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'bond0\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7, 0x2, [0x22, 0x6, 0x18, 0x38, 0x8, 0x1d, 0x39, 0x31, 0x15, 0x6, 0x37, 0x11, 0x15, 0x30, 0xc, 0x21], 0x0, 0x9, 0x9}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x66, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x4}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 1.615843395s ago: executing program 8 (id=3480): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000001080)) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.615093025s ago: executing program 2 (id=3481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newrule={0x24, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents64(r4, &(0x7f0000000240)=""/157, 0x9d) getdents(r4, 0x0, 0x0) 1.436589865s ago: executing program 8 (id=3482): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) 1.436283135s ago: executing program 0 (id=3483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r5, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00006000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc67}, {&(0x7f0000000b00)="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", 0x162}, {&(0x7f0000000880)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}, {&(0x7f0000000500)="1cd2cf486bb5a90a257eaca10edd9b4dcc13b0dbd20235a98d552ebee1ac91839173dfc5f022ad537cc60d1fc4ff85bed2d5e46cc0d63d47961969cc34c20ba95b9725e125b645dc47237efd9a6e4364a7b74190e664459b62b388a83180797b03706fe3", 0x64}, {&(0x7f0000000980)="2a4ae9592dde05637fe851abd378a2061c4aaa35178cd1429038a4020f7c215e54928a5bb10dc587198d3610a58a8c", 0x2f}], 0x6}, 0x8bb3a301eb080b) 1.307059351s ago: executing program 6 (id=3484): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 432.908877ms ago: executing program 8 (id=3485): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="9bb6b982b1f7eba58f7caf1a0142e943805e78c8360f9a36", 0x18}, {&(0x7f0000000240)="9da68b6d67e052961198aa891aab9cf268e4f9c89695e06f0bd93778463f25cf66", 0x21}], 0x2) 431.925657ms ago: executing program 2 (id=3486): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004", 0x4d}], 0x1) 376.57733ms ago: executing program 6 (id=3487): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{}, {0x1, 0x1, 0x0, 0x1}}], 0x8) 344.919501ms ago: executing program 2 (id=3488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) recvmmsg(r0, &(0x7f0000002f00)=[{{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000003100)=""/145, 0x91}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f00000004c0)=""/61, 0x3d}, {&(0x7f0000000500)=""/29, 0x1d}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000780)=""/161, 0xa1}], 0x8, &(0x7f00000008c0)=""/4, 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000001980), 0x0, &(0x7f00000019c0)=""/82, 0x52}}], 0x2, 0x40000120, 0x0) 257.649216ms ago: executing program 6 (id=3489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x80082102, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 208.526819ms ago: executing program 8 (id=3490): socket$unix(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9782bbd7000ffdbdf250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 205.590809ms ago: executing program 0 (id=3491): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x400c044) 141.715122ms ago: executing program 6 (id=3492): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000316000900"], 0x0, 0x0}, 0x0) 111.345314ms ago: executing program 8 (id=3493): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000006c0)='htcp', 0x4) shutdown(r4, 0x1) shutdown(0xffffffffffffffff, 0x1) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = gettid() ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) tkill(r5, 0xb) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xdb3, 0x0, 0xa190, 0x1, 0x6}) 0s ago: executing program 0 (id=3494): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): out [ 626.967265][T10222] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.989244][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.011203][T10222] bridge_slave_0: entered allmulticast mode [ 627.018750][T10222] bridge_slave_0: entered promiscuous mode [ 627.069315][T10258] overlayfs: failed to clone upperpath [ 627.080040][T10222] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.098328][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.106531][T10222] bridge_slave_1: entered allmulticast mode [ 627.116393][T10222] bridge_slave_1: entered promiscuous mode [ 627.173034][T10222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.285306][ T9704] Bluetooth: hci2: unexpected event 0x30 length: 255 > 3 [ 627.325803][T10222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.427295][T10222] team0: Port device team_slave_0 added [ 627.463826][T10222] team0: Port device team_slave_1 added [ 627.577918][T10222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.585040][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.617281][T10222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.633051][T10222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.645780][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.741365][T10222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.960172][ T9] libceph: connect (1)[c::]:6789 error -101 [ 627.989558][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 628.160900][T10273] ceph: No mds server is up or the cluster is laggy [ 628.194012][T10276] loop3: detected capacity change from 0 to 40427 [ 628.224999][T10276] F2FS-fs (loop3): invalid crc value [ 628.268964][T10276] F2FS-fs (loop3): Found nat_bits in checkpoint [ 628.352492][T10276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 628.634490][ T9704] Bluetooth: hci4: command tx timeout [ 628.656146][ T7869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.496834][ T5774] syz-executor: attempt to access beyond end of device [ 629.496834][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 629.516779][T10222] hsr_slave_0: entered promiscuous mode [ 629.540397][T10222] hsr_slave_1: entered promiscuous mode [ 629.549520][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 629.563875][T10222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.589831][T10222] Cannot create hsr debugfs directory [ 629.638521][ T7869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.808409][ T7869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.948309][ T7869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.164576][ T9704] Bluetooth: hci0: unexpected event 0x30 length: 255 > 3 [ 630.434397][ T7869] tipc: Left network mode [ 630.483793][T10222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 630.661719][T10222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.221983][ T9704] Bluetooth: hci4: command tx timeout [ 633.139588][T10222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 633.270802][ T9704] Bluetooth: hci4: command tx timeout [ 633.279278][T10222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 633.930939][T10333] PKCS7: Unknown OID: [4] 0.0 [ 633.935710][T10333] PKCS7: Only support pkcs7_signedData type [ 634.651080][ T23] IPVS: starting estimator thread 0... [ 634.751682][ T9704] Bluetooth: hci0: unexpected event 0x30 length: 255 > 3 [ 634.770700][T10335] IPVS: using max 16 ests per chain, 38400 per kthread [ 634.878457][ T23] libceph: connect (1)[c::]:6789 error -101 [ 634.915879][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 634.968826][T10341] ceph: No mds server is up or the cluster is laggy [ 636.687256][T10222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.804092][ T9704] Bluetooth: hci2: unexpected event 0x30 length: 255 > 3 [ 636.919942][T10222] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.006012][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.014379][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.149128][T10373] PKCS7: Unknown OID: [4] 0.0 [ 638.154130][T10373] PKCS7: Only support pkcs7_signedData type [ 638.440324][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.447620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.112543][ T9704] Bluetooth: hci2: unexpected event 0x30 length: 255 > 3 [ 640.976198][ T1203] IPVS: starting estimator thread 0... [ 641.071159][T10384] IPVS: using max 17 ests per chain, 40800 per kthread [ 641.156275][ T9704] Bluetooth: hci0: unexpected event 0x30 length: 255 > 3 [ 641.342525][ T9704] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 641.359783][ T9704] CPU: 1 PID: 9704 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 641.367393][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.377514][ T9704] Workqueue: hci3 hci_rx_work [ 641.382265][ T9704] Call Trace: [ 641.385594][ T9704] [ 641.388573][ T9704] dump_stack_lvl+0x18c/0x250 [ 641.393326][ T9704] ? show_regs_print_info+0x20/0x20 [ 641.398601][ T9704] ? load_image+0x420/0x420 [ 641.403189][ T9704] sysfs_create_dir_ns+0x26e/0x2a0 [ 641.408361][ T9704] ? sysfs_warn_dup+0xa0/0xa0 [ 641.413112][ T9704] ? do_raw_spin_unlock+0x121/0x230 [ 641.418393][ T9704] kobject_add_internal+0x61c/0xcc0 [ 641.423671][ T9704] kobject_add+0x164/0x240 [ 641.428161][ T9704] ? __rwlock_init+0x150/0x150 [ 641.432997][ T9704] ? kobject_init+0x1e0/0x1e0 [ 641.437754][ T9704] ? _raw_spin_unlock+0x28/0x40 [ 641.442671][ T9704] ? get_device_parent+0x366/0x390 [ 641.447838][ T9704] device_add+0x408/0xc20 [ 641.452218][ T9704] hci_conn_add_sysfs+0xd5/0x1e0 [ 641.457194][ T9704] le_conn_complete_evt+0xf5d/0x1540 [ 641.462523][ T9704] ? hci_event_packet+0x4cb/0x1270 [ 641.467676][ T9704] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 641.473949][ T9704] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 641.479628][ T9704] ? skb_pull_data+0xfb/0x200 [ 641.484338][ T9704] hci_le_conn_complete_evt+0x187/0x440 [ 641.489918][ T9704] ? hci_remote_host_features_evt+0x150/0x150 [ 641.496023][ T9704] hci_event_packet+0x7ba/0x1270 [ 641.501003][ T9704] ? bis_list+0x290/0x290 [ 641.505369][ T9704] ? lockdep_hardirqs_on+0x98/0x150 [ 641.510607][ T9704] ? hci_send_to_monitor+0xd7/0x4f0 [ 641.515851][ T9704] hci_rx_work+0x43a/0xd60 [ 641.520322][ T9704] ? process_scheduled_works+0x96f/0x15d0 [ 641.526082][ T9704] process_scheduled_works+0xa5d/0x15d0 [ 641.531686][ T9704] ? worker_attach_to_pool+0x380/0x380 [ 641.537189][ T9704] ? assign_work+0x3d2/0x5d0 [ 641.541827][ T9704] worker_thread+0xa55/0xfc0 [ 641.546451][ T9704] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 641.552383][ T9704] ? _raw_spin_unlock+0x40/0x40 [ 641.557266][ T9704] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 641.563211][ T9704] kthread+0x2fa/0x390 [ 641.567309][ T9704] ? pr_cont_work+0x560/0x560 [ 641.572022][ T9704] ? kthread_blkcg+0xd0/0xd0 [ 641.576647][ T9704] ret_from_fork+0x48/0x80 [ 641.581097][ T9704] ? kthread_blkcg+0xd0/0xd0 [ 641.585714][ T9704] ret_from_fork_asm+0x11/0x20 [ 641.590522][ T9704] [ 641.595104][ T9704] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 641.609241][ T9704] Bluetooth: hci3: failed to register connection device [ 641.790859][ T7869] hsr_slave_0: left promiscuous mode [ 641.823998][ T7869] hsr_slave_1: left promiscuous mode [ 641.853372][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.890723][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.911643][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.926367][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.935438][ T7869] bridge_slave_1: left allmulticast mode [ 641.947654][ T7869] bridge_slave_1: left promiscuous mode [ 642.007090][T10416] PKCS7: Unknown OID: [4] 0.0 [ 642.011930][T10416] PKCS7: Only support pkcs7_signedData type [ 642.046050][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.209118][ T7869] bridge_slave_0: left allmulticast mode [ 642.339424][ T7869] bridge_slave_0: left promiscuous mode [ 642.484107][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.966054][ T7869] veth1_macvtap: left promiscuous mode [ 643.019845][ T7869] veth0_macvtap: left promiscuous mode [ 643.062797][ T9704] Bluetooth: hci2: unexpected event 0x30 length: 255 > 3 [ 643.062917][ T7869] veth1_vlan: left promiscuous mode [ 643.104400][ T7869] veth0_vlan: left promiscuous mode [ 643.274415][ T9] libceph: connect (1)[c::]:6789 error -101 [ 643.312477][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 643.575683][T10429] ceph: No mds server is up or the cluster is laggy [ 643.611125][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 643.628616][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 643.671193][ T9704] Bluetooth: hci3: command 0x0406 tx timeout [ 644.880918][ T9704] Bluetooth: hci3: unexpected event 0x30 length: 255 > 3 [ 644.895287][ T7869] bond1 (unregistering): Released all slaves [ 647.274203][ T9704] Bluetooth: hci0: unexpected event 0x30 length: 255 > 3 [ 647.556994][T10468] x_tables: duplicate underflow at hook 1 [ 649.242803][ T9] libceph: connect (1)[c::]:6789 error -101 [ 649.274021][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 649.544358][ T9704] Bluetooth: hci0: unexpected event 0x30 length: 255 > 3 [ 649.666762][T10478] ceph: No mds server is up or the cluster is laggy [ 649.689193][ T9] libceph: connect (1)[c::]:6789 error -101 [ 649.741736][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 651.470164][ T7869] team0 (unregistering): Port device team_slave_1 removed [ 651.654358][ T7869] team0 (unregistering): Port device team_slave_0 removed [ 652.351956][ T7869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.599514][T10504] fuse: Bad value for 'fd' [ 652.632077][ T7869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.758701][ T9704] Bluetooth: hci0: unexpected event 0x30 length: 255 > 3 [ 654.711846][T10522] fuse: Bad value for 'fd' [ 656.068826][ T7869] bond0 (unregistering): Released all slaves [ 657.334535][T10222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.671644][T10549] fuse: Unknown parameter 'fd0x0000000000000003' [ 658.173585][ T7869] IPVS: stop unused estimator thread 0... [ 658.551976][T10222] veth0_vlan: entered promiscuous mode [ 658.586814][T10222] veth1_vlan: entered promiscuous mode [ 658.719812][T10222] veth0_macvtap: entered promiscuous mode [ 658.953334][T10222] veth1_macvtap: entered promiscuous mode [ 659.576091][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.634778][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.690721][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.711140][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.730895][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.779897][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.803616][T10222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.960904][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.976477][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.987179][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.008233][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.039764][T10222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.065422][T10222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.077667][T10222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.118096][T10222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.167811][T10222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.184997][T10222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.210680][T10222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.222555][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.282063][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.439065][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.454112][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.950060][T10615] fuse: Unknown parameter 'fd0x0000000000000003' [ 665.278501][T10608] loop5: detected capacity change from 0 to 1024 [ 670.221783][T10678] tipc: Started in network mode [ 670.250752][T10678] tipc: Node identity 84e, cluster identity 4711 [ 670.301439][T10678] tipc: Node number set to 2126 [ 670.843340][T10682] loop3: detected capacity change from 0 to 40427 [ 670.914345][T10682] F2FS-fs (loop3): invalid crc value [ 670.955214][T10682] F2FS-fs (loop3): Found nat_bits in checkpoint [ 671.102170][ T2132] libceph: connect (1)[c::]:6789 error -101 [ 671.109501][ T2132] libceph: mon0 (1)[c::]:6789 connect error [ 671.277085][T10682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 671.556924][T10693] ceph: No mds server is up or the cluster is laggy [ 672.410675][ T2132] libceph: connect (1)[c::]:6789 error -101 [ 672.416794][ T2132] libceph: mon0 (1)[c::]:6789 connect error [ 672.663059][ T5774] syz-executor: attempt to access beyond end of device [ 672.663059][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 672.764700][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 673.969555][T10715] loop3: detected capacity change from 0 to 512 [ 674.275779][ T6052] hfsplus: b-tree write err: -5, ino 25 [ 674.306050][ T6052] hfsplus: b-tree write err: -5, ino 4 [ 674.323732][ T6052] hfsplus: b-tree write err: -5, ino 2 [ 674.727700][T10732] x_tables: duplicate underflow at hook 1 [ 676.951349][ T9704] Bluetooth: hci4: command tx timeout [ 677.493747][T10756] loop5: detected capacity change from 0 to 512 [ 679.062743][T10780] x_tables: duplicate underflow at hook 1 [ 681.415687][T10796] loop5: detected capacity change from 0 to 512 [ 684.546731][T10833] x_tables: duplicate underflow at hook 1 [ 685.058365][T10848] loop3: detected capacity change from 0 to 512 [ 686.041358][T10874] netlink: 'syz.4.1321': attribute type 4 has an invalid length. [ 686.059545][T10874] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1321'. [ 686.118831][T10874] .`: renamed from bond0 (while UP) [ 686.168428][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.175258][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.520058][T10882] overlayfs: missing 'lowerdir' [ 688.108514][T10903] x_tables: duplicate underflow at hook 1 [ 691.822256][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1336'. [ 692.082824][T10956] x_tables: duplicate underflow at hook 1 [ 692.655840][T10967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1341'. [ 692.687247][T10967] netlink: del zone limit has 8 unknown bytes [ 695.707981][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'. [ 695.726612][T11007] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1352'. [ 695.822179][T11010] x_tables: duplicate underflow at hook 1 [ 700.370654][T11057] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 701.334227][T11073] x_tables: duplicate underflow at hook 1 [ 703.468595][T11091] 8021q: adding VLAN 0 to HW filter on device .` [ 703.564330][T11091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.481964][T11107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1373'. [ 706.555255][ T5082] Bluetooth: hci4: unexpected event 0x30 length: 255 > 3 [ 731.976942][ T9704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 731.988278][ T9704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 731.999529][ T9704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.011489][ T9704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.021859][ T9704] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 732.029309][ T9704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.220403][T11210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.232612][T11210] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 732.245129][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.247336][T11210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 732.256717][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.270484][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 732.279056][T11210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.287066][T11210] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 732.296558][T11210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 732.308120][T11210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 732.341338][T11213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 732.349167][T11213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 732.370043][ T9704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 732.397450][T11213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 732.421179][T11213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 732.441489][T11213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 732.452775][T11213] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 732.460360][T11213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 732.714956][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.857921][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.005603][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.154474][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.811210][ T12] tipc: Left network mode [ 733.838518][T11207] chnl_net:caif_netlink_parms(): no params data found [ 734.066848][T11204] chnl_net:caif_netlink_parms(): no params data found [ 734.150949][T11213] Bluetooth: hci0: command tx timeout [ 734.391930][T11213] Bluetooth: hci1: command tx timeout [ 734.481052][T11213] Bluetooth: hci3: command tx timeout [ 734.489323][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.509772][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.520293][T11204] bridge_slave_0: entered allmulticast mode [ 734.551022][T11213] Bluetooth: hci4: command tx timeout [ 734.554591][T11204] bridge_slave_0: entered promiscuous mode [ 734.592561][T11214] chnl_net:caif_netlink_parms(): no params data found [ 734.633477][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.643895][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.656646][T11204] bridge_slave_1: entered allmulticast mode [ 734.678135][T11204] bridge_slave_1: entered promiscuous mode [ 734.702352][T11207] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.709637][T11207] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.729010][T11207] bridge_slave_0: entered allmulticast mode [ 734.742151][T11207] bridge_slave_0: entered promiscuous mode [ 734.753730][T11207] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.763801][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.772551][T11207] bridge_slave_1: entered allmulticast mode [ 734.780128][T11207] bridge_slave_1: entered promiscuous mode [ 734.918363][T11208] chnl_net:caif_netlink_parms(): no params data found [ 734.999815][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.012848][T11207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.027582][T11207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.066365][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.181647][T11204] team0: Port device team_slave_0 added [ 735.239357][T11204] team0: Port device team_slave_1 added [ 735.279068][T11207] team0: Port device team_slave_0 added [ 735.293732][T11207] team0: Port device team_slave_1 added [ 735.315497][T11214] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.325033][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.332848][T11214] bridge_slave_0: entered allmulticast mode [ 735.341740][T11214] bridge_slave_0: entered promiscuous mode [ 735.399563][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.406802][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.435339][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.477918][T11214] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.485565][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.493530][T11214] bridge_slave_1: entered allmulticast mode [ 735.503475][T11214] bridge_slave_1: entered promiscuous mode [ 735.510384][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.518063][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.525595][T11208] bridge_slave_0: entered allmulticast mode [ 735.533138][T11208] bridge_slave_0: entered promiscuous mode [ 735.545462][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.560176][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.568781][T11208] bridge_slave_1: entered allmulticast mode [ 735.580816][T11208] bridge_slave_1: entered promiscuous mode [ 735.588637][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.596004][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.624836][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.775928][T11207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.791604][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.826224][T11207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.857804][ T12] hsr_slave_0: left promiscuous mode [ 735.871780][ T12] hsr_slave_1: left promiscuous mode [ 735.879791][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.900184][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.909815][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.926666][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.935172][ T12] bridge_slave_1: left allmulticast mode [ 735.950610][ T12] bridge_slave_1: left promiscuous mode [ 735.956430][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.975286][ T12] bridge_slave_0: left allmulticast mode [ 735.988897][ T12] bridge_slave_0: left promiscuous mode [ 735.997654][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.048395][ T12] veth1_macvtap: left promiscuous mode [ 736.054816][ T12] veth0_macvtap: left promiscuous mode [ 736.060572][ T12] veth1_vlan: left promiscuous mode [ 736.065954][ T12] veth0_vlan: left promiscuous mode [ 736.240999][T11213] Bluetooth: hci0: command tx timeout [ 736.489616][T11213] Bluetooth: hci1: command tx timeout [ 736.552497][T11213] Bluetooth: hci3: command tx timeout [ 736.633526][T11213] Bluetooth: hci4: command tx timeout [ 736.960351][ T12] team0 (unregistering): Port device team_slave_1 removed [ 737.016426][ T12] team0 (unregistering): Port device team_slave_0 removed [ 737.071092][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.130367][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.557106][ T12] bond0 (unregistering): Released all slaves [ 737.652678][T11214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.680281][T11204] hsr_slave_0: entered promiscuous mode [ 737.692725][T11204] hsr_slave_1: entered promiscuous mode [ 737.711304][T11204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.718934][T11204] Cannot create hsr debugfs directory [ 737.727740][T11207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.735380][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.762073][T11207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.815849][T11214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.831941][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.917753][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.974350][T11208] team0: Port device team_slave_0 added [ 737.986332][T11207] hsr_slave_0: entered promiscuous mode [ 737.993448][T11207] hsr_slave_1: entered promiscuous mode [ 738.000494][T11207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.008982][T11207] Cannot create hsr debugfs directory [ 738.036429][T11214] team0: Port device team_slave_0 added [ 738.064074][T11214] team0: Port device team_slave_1 added [ 738.092235][T11208] team0: Port device team_slave_1 added [ 738.173459][T11214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.180480][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.217180][T11214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.276339][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.283530][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.314447][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.325532][T11213] Bluetooth: hci0: command tx timeout [ 738.357818][T11214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.365629][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.399788][T11214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.441203][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.448266][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.476373][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.550635][T11213] Bluetooth: hci1: command tx timeout [ 738.632124][T11213] Bluetooth: hci3: command tx timeout [ 738.644998][ T12] IPVS: stop unused estimator thread 0... [ 738.710991][T11213] Bluetooth: hci4: command tx timeout [ 738.723318][T11208] hsr_slave_0: entered promiscuous mode [ 738.730187][T11208] hsr_slave_1: entered promiscuous mode [ 738.736878][T11208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.744681][T11208] Cannot create hsr debugfs directory [ 738.759779][T11214] hsr_slave_0: entered promiscuous mode [ 738.774487][T11214] hsr_slave_1: entered promiscuous mode [ 738.785440][T11214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.793406][T11214] Cannot create hsr debugfs directory [ 739.120739][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.281503][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.322765][T11204] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 739.340003][T11204] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 739.352849][T11204] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 739.369969][T11204] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 739.417935][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.518717][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.631889][T11207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 739.668538][T11207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 739.740337][T11207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 739.841824][T11207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 739.954820][T11208] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 740.020035][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.054180][T11208] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 740.074552][T11208] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 740.139484][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.165650][T11208] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 740.285499][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.366386][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.391034][T11213] Bluetooth: hci0: command tx timeout [ 740.444422][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.490840][T11214] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 740.519869][T11214] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 740.558024][T11204] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.593408][T11214] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 740.621142][T11214] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 740.631032][T11213] Bluetooth: hci1: command tx timeout [ 740.655072][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.662301][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.722104][T11213] Bluetooth: hci3: command tx timeout [ 740.801187][T11213] Bluetooth: hci4: command tx timeout [ 740.872904][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.883690][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.890932][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.965280][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.977488][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.079509][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.098167][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.136881][T11207] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.207882][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.227842][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.248822][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.256068][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.318435][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.325687][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.359568][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.371500][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.535566][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.594020][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.654374][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.661649][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.723943][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.731295][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.819796][T11214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.043575][T11214] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.110384][ T12] tipc: Left network mode [ 742.145592][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.153118][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.254383][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.261675][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.678826][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.975762][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.649196][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.080269][T11204] veth0_vlan: entered promiscuous mode [ 744.247244][T11204] veth1_vlan: entered promiscuous mode [ 744.265939][T11207] veth0_vlan: entered promiscuous mode [ 744.548084][T11207] veth1_vlan: entered promiscuous mode [ 744.567817][T11214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.653604][T11204] veth0_macvtap: entered promiscuous mode [ 744.792258][T11204] veth1_macvtap: entered promiscuous mode [ 744.812961][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.824581][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.838831][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.859520][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.869870][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.890650][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.910289][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.945013][T11208] veth0_vlan: entered promiscuous mode [ 744.983834][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.996854][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.009155][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.019909][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.029954][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.041145][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.058900][T11204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.123861][T11207] veth0_macvtap: entered promiscuous mode [ 745.142744][T11208] veth1_vlan: entered promiscuous mode [ 745.170117][T11204] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.181003][T11204] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.189784][T11204] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.202357][T11204] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.289624][T11207] veth1_macvtap: entered promiscuous mode [ 745.407688][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.455301][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.466662][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.485669][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.496054][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.518869][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.529504][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.551090][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.572847][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.689738][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.711357][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.728769][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.739699][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.754511][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.765631][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.775670][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.786710][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.799844][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.826632][T11208] veth0_macvtap: entered promiscuous mode [ 745.922452][T11208] veth1_macvtap: entered promiscuous mode [ 745.945829][T11207] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.958757][T11207] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.976775][T11207] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.990317][T11207] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.055387][T11214] veth0_vlan: entered promiscuous mode [ 746.097929][ T12] hsr_slave_0: left promiscuous mode [ 746.104690][ T12] hsr_slave_1: left promiscuous mode [ 746.118309][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.140859][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.150019][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.166816][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.176387][ T12] bridge_slave_1: left allmulticast mode [ 746.189775][ T12] bridge_slave_1: left promiscuous mode [ 746.197104][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.209868][ T12] bridge_slave_0: left allmulticast mode [ 746.216087][ T12] bridge_slave_0: left promiscuous mode [ 746.222562][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.249215][ T12] hsr_slave_0: left promiscuous mode [ 746.255705][ T12] hsr_slave_1: left promiscuous mode [ 746.262483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.269956][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.278142][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.290424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.307538][ T12] bridge_slave_1: left allmulticast mode [ 746.316610][ T12] bridge_slave_1: left promiscuous mode [ 746.333504][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.345709][ T12] bridge_slave_0: left allmulticast mode [ 746.361198][ T12] bridge_slave_0: left promiscuous mode [ 746.366994][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.405021][ T12] hsr_slave_0: left promiscuous mode [ 746.416918][ T12] hsr_slave_1: left promiscuous mode [ 746.426033][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.434883][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.444249][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.452250][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.460408][ T12] vlan2: left allmulticast mode [ 746.465862][ T12] geneve0: left allmulticast mode [ 746.472776][ T12] vlan2: left promiscuous mode [ 746.477609][ T12] geneve0: left promiscuous mode [ 746.483413][ T12] bridge0: port 3(vlan2) entered disabled state [ 746.492182][ T12] bridge_slave_1: left allmulticast mode [ 746.497870][ T12] bridge_slave_1: left promiscuous mode [ 746.504214][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.513875][ T12] bridge_slave_0: left allmulticast mode [ 746.519558][ T12] bridge_slave_0: left promiscuous mode [ 746.525725][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.596859][ T12] veth1_macvtap: left promiscuous mode [ 746.602674][ T12] veth0_macvtap: left promiscuous mode [ 746.608320][ T12] veth1_vlan: left promiscuous mode [ 746.615529][ T12] veth0_vlan: left promiscuous mode [ 746.624087][ T12] veth1_macvtap: left promiscuous mode [ 746.629652][ T12] veth0_macvtap: left promiscuous mode [ 746.637330][ T12] veth1_vlan: left promiscuous mode [ 746.642783][ T12] veth0_vlan: left promiscuous mode [ 746.652859][ T12] veth1_macvtap: left promiscuous mode [ 746.659587][ T12] veth0_macvtap: left promiscuous mode [ 746.666535][ T12] veth1_vlan: left promiscuous mode [ 746.672143][ T12] veth0_vlan: left promiscuous mode [ 747.614778][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.621753][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.661995][ T12] team0 (unregistering): Port device team_slave_1 removed [ 747.716031][ T12] team0 (unregistering): Port device team_slave_0 removed [ 747.777926][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.836385][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.273682][ T12] .` (unregistering): Released all slaves [ 749.058484][ T12] team0 (unregistering): Port device team_slave_1 removed [ 749.118375][ T12] team0 (unregistering): Port device team_slave_0 removed [ 749.189627][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.249373][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.663251][ T12] bond0 (unregistering): Released all slaves [ 750.382180][ T12] team0 (unregistering): Port device team_slave_1 removed [ 750.438139][ T12] team0 (unregistering): Port device team_slave_0 removed [ 750.493837][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.548262][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.972824][ T12] bond0 (unregistering): Released all slaves [ 751.080676][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.088578][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.145191][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.185007][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.210032][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.228810][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.241416][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.306557][T11214] veth1_vlan: entered promiscuous mode [ 751.327441][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.338322][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.349567][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.360937][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.391878][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.445394][T11208] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.465785][T11208] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.476265][T11208] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.485403][T11208] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.525006][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.535151][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.660004][T11214] veth0_macvtap: entered promiscuous mode [ 751.713913][T11214] veth1_macvtap: entered promiscuous mode [ 751.731374][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.739272][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.917096][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.963237][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.990227][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.001660][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.018899][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.029793][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.043199][T11214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.056488][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.068586][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.078808][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.098751][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.111024][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.127854][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.139730][T11214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.148447][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.167474][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.232872][T11214] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.260652][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 752.271729][T11214] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.282672][T11214] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.291518][T11214] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.400668][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.430225][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.517203][ T9] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 752.535944][ T9] usb 7-1: config 0 has no interface number 0 [ 752.568499][ T9] usb 7-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 12592, setting to 64 [ 752.580419][ T9] usb 7-1: config 0 interface 41 has no altsetting 0 [ 752.609359][ T9] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 752.640939][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.649692][ T5872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.685048][ T9] usb 7-1: Product: syz [ 752.689305][ T9] usb 7-1: Manufacturer: syz [ 752.698963][ T5872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.739896][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.756114][ T9] usb 7-1: SerialNumber: syz [ 752.768471][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.831290][ T9] usb 7-1: config 0 descriptor?? [ 752.840137][T11431] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 753.003832][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.034052][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.077056][T11431] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 753.170773][ T12] IPVS: stop unused estimator thread 0... [ 753.226897][ T12] IPVS: stop unused estimator thread 0... [ 753.572263][ T23] IPVS: starting estimator thread 0... [ 753.751426][T11455] IPVS: using max 17 ests per chain, 40800 per kthread [ 753.908026][ T9] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 755.470817][ T9] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 755.485955][ T9] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 755.502188][ T9] CoreChips: probe of 7-1:0.41 failed with error -71 [ 755.517143][ T9] usb 7-1: USB disconnect, device number 2 [ 756.940564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 757.647033][T11213] Bluetooth: hci1: Malformed LE Event: 0x0d [ 759.353428][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1407'. [ 761.938915][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 762.526657][ T9] usb 9-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.543298][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 762.569059][ T9] usb 9-1: string descriptor 0 read error: -22 [ 762.580776][ T9] usb 9-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.40 [ 762.612390][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.891385][ T9] usbhid 9-1:1.0: can't add hid device: -71 [ 763.910724][ T9] usbhid: probe of 9-1:1.0 failed with error -71 [ 763.932661][ T9] usb 9-1: USB disconnect, device number 2 [ 763.942924][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1417'. [ 767.671009][T11213] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 767.705667][T11598] syz.6.1425 (11598) used greatest stack depth: 16496 bytes left [ 767.924937][ T28] audit: type=1326 audit(1777107319.913:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.9.1430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fd32fb96b57 code=0x0 [ 773.402525][T11653] netlink: 468 bytes leftover after parsing attributes in process `syz.6.1437'. [ 773.930608][T10377] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 774.150838][T10377] usb 8-1: Using ep0 maxpacket: 8 [ 774.969213][T10377] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 774.977588][T10377] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 774.989171][T10377] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 775.001159][T10377] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 775.013830][T10377] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 775.027545][T10377] usb 8-1: config 168 interface 0 has no altsetting 0 [ 775.060779][T10377] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 775.083073][T10377] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 775.106489][T10377] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 775.135683][T10377] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 775.175501][T10377] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 775.217685][T10377] usb 8-1: config 168 interface 0 has no altsetting 0 [ 775.238749][T10377] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 775.246921][T10377] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 775.340650][T10377] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 776.090746][T10377] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 776.101774][T10377] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 776.118148][T10377] usb 8-1: config 168 interface 0 has no altsetting 0 [ 776.179092][T10377] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 776.211029][T10377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.227583][T10377] usb 8-1: Product: syz [ 776.248785][T10377] usb 8-1: Manufacturer: syz [ 776.258481][T10377] usb 8-1: SerialNumber: syz [ 776.383905][T11693] bad cache= option: l [ 776.383905][T11693] [ 776.392827][T11693] CIFS: VFS: bad cache= option: l [ 776.542225][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.576004][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.976901][T10377] adutux 8-1:168.0: interrupt endpoints not found [ 780.038681][T10377] usb 8-1: USB disconnect, device number 2 [ 783.231878][T11754] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1462'. [ 784.457405][T11773] loop7: detected capacity change from 0 to 1024 [ 785.173497][T11786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 785.182562][T11786] overlayfs: missing 'lowerdir' [ 788.893690][T11821] Bluetooth: MGMT ver 1.22 [ 788.959102][T11810] loop9: detected capacity change from 0 to 131072 [ 789.042701][T11810] F2FS-fs (loop9): invalid crc value [ 789.108391][T11810] F2FS-fs (loop9): Found nat_bits in checkpoint [ 789.180199][T11810] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 789.598585][ T6052] hfsplus: b-tree write err: -5, ino 25 [ 789.756375][ T6052] hfsplus: b-tree write err: -5, ino 4 [ 795.804424][ T1086] hfsplus: b-tree write err: -5, ino 2 [ 798.070407][T11913] netlink: 'syz.9.1495': attribute type 4 has an invalid length. [ 800.694648][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 800.708694][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 800.718563][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 800.727138][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 800.735123][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 800.743226][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 801.860681][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.144740][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.845744][T11213] Bluetooth: hci1: command tx timeout [ 803.018419][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.164129][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.735320][T11946] chnl_net:caif_netlink_parms(): no params data found [ 804.880112][T11213] Bluetooth: hci1: command tx timeout [ 805.162758][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.198006][T11946] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.224329][T11946] bridge_slave_0: entered allmulticast mode [ 805.247664][T11946] bridge_slave_0: entered promiscuous mode [ 805.316060][T11946] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.328842][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.344886][T11946] bridge_slave_1: entered allmulticast mode [ 805.354134][T11946] bridge_slave_1: entered promiscuous mode [ 805.417782][T12009] netlink: 468 bytes leftover after parsing attributes in process `syz.6.1518'. [ 806.348401][T11946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.387540][T11946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.640679][T11946] team0: Port device team_slave_0 added [ 806.673455][T11946] team0: Port device team_slave_1 added [ 806.925069][T11946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.950703][ T51] Bluetooth: hci1: command tx timeout [ 806.951908][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.215637][T11946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.826285][T11946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.835840][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.862774][T11946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.116121][T11946] hsr_slave_0: entered promiscuous mode [ 808.126042][T11946] hsr_slave_1: entered promiscuous mode [ 808.358200][ T34] hsr_slave_0: left promiscuous mode [ 808.374421][ T34] hsr_slave_1: left promiscuous mode [ 808.381779][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.389253][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.415558][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.423835][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.432532][ T34] bridge_slave_1: left allmulticast mode [ 808.438349][ T34] bridge_slave_1: left promiscuous mode [ 808.445102][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.459211][ T34] bridge_slave_0: left allmulticast mode [ 808.479443][ T34] bridge_slave_0: left promiscuous mode [ 808.485822][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.559643][ T34] veth1_macvtap: left promiscuous mode [ 808.567293][ T34] veth0_macvtap: left promiscuous mode [ 808.579193][ T34] veth1_vlan: left promiscuous mode [ 808.591138][ T34] veth0_vlan: left promiscuous mode [ 809.032476][ T51] Bluetooth: hci1: command tx timeout [ 809.041541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.057575][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.113494][T12056] netlink: 468 bytes leftover after parsing attributes in process `syz.8.1532'. [ 811.771535][T12070] x_tables: duplicate underflow at hook 1 [ 812.045063][ T23] libceph: connect (1)[c::]:6789 error -101 [ 812.059350][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 812.187498][T12071] ceph: No mds server is up or the cluster is laggy [ 812.210349][ T34] team0 (unregistering): Port device team_slave_1 removed [ 812.357037][ T34] team0 (unregistering): Port device team_slave_0 removed [ 812.464312][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.603079][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.755269][ T51] Bluetooth: hci1: command tx timeout [ 813.897776][ T34] bond0 (unregistering): Released all slaves [ 814.024554][T12083] netlink: 'syz.8.1540': attribute type 1 has an invalid length. [ 814.287798][T12085] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.901298][T12104] x_tables: duplicate underflow at hook 1 [ 818.898488][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1553'. [ 819.504841][T12126] Can't find ip_set type hash:i [ 819.837438][T11946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 819.882654][T11946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 819.918623][T11946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 819.939075][T11946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 820.263712][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.402882][T11946] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.472127][T12141] loop9: detected capacity change from 0 to 40427 [ 820.488883][T12141] F2FS-fs (loop9): invalid crc value [ 820.512592][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.519828][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.609540][T12141] F2FS-fs (loop9): Found nat_bits in checkpoint [ 820.661586][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.668854][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.739772][T12141] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 822.087828][T11214] syz-executor: attempt to access beyond end of device [ 822.087828][T11214] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 822.314398][T11214] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 825.446648][T11946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.493685][T11946] veth0_vlan: entered promiscuous mode [ 825.573193][T11946] veth1_vlan: entered promiscuous mode [ 825.684651][T11946] veth0_macvtap: entered promiscuous mode [ 825.796744][T11946] veth1_macvtap: entered promiscuous mode [ 826.334730][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.532871][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.162323][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.197525][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.240737][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.394132][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.450069][T11946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.474660][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.519796][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.541977][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.559076][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.570397][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.588680][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.616124][T11946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.655829][T11946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.679712][T11946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.704645][T11946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.723162][T11946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.958220][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.979446][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.064272][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.079808][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.948902][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1589'. [ 839.920932][T11323] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 840.517382][T12319] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 840.644199][T12319] VFS: Can't find a romfs filesystem on dev nullb0. [ 840.644199][T12319] [ 843.011623][ T27] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 843.270701][T11323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 843.322627][T11323] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 843.330286][T11323] usb 2-1: can't read configurations, error -71 [ 843.380610][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 843.416574][ T27] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.443124][T12335] loop6: detected capacity change from 0 to 131072 [ 843.477221][T12335] F2FS-fs (loop6): invalid crc value [ 843.519655][ T27] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.595714][T12335] F2FS-fs (loop6): Found nat_bits in checkpoint [ 843.649018][T12335] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 843.755537][ T27] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 843.768663][ T27] usb 9-1: config 0 interface 0 has no altsetting 0 [ 843.776266][ T27] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 843.786952][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.806898][ T27] usb 9-1: config 0 descriptor?? [ 844.079779][T11323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 844.711752][T11323] usb 2-1: Using ep0 maxpacket: 16 [ 844.781282][T11323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.809910][ T27] hid (null): nested delimiters [ 844.829550][T11323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 844.864522][ T27] hid (null): nested delimiters [ 844.869560][ T27] hid (null): nested delimiters [ 844.893592][T11323] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 844.928666][T11323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.969321][T11323] usb 2-1: Product: syz [ 844.984373][T11323] usb 2-1: Manufacturer: syz [ 844.989070][T11323] usb 2-1: SerialNumber: syz [ 845.000615][ T27] usb 9-1: USB disconnect, device number 3 [ 845.326186][T11323] usb 2-1: 0:2 : does not exist [ 845.364448][T11323] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 845.571780][T11323] usb 2-1: USB disconnect, device number 3 [ 847.353366][T11717] udevd[11717]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.962869][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 848.074988][T10377] libceph: connect (1)[c::]:6789 error -101 [ 848.093385][T10377] libceph: mon0 (1)[c::]:6789 connect error [ 848.153905][T12377] ceph: No mds server is up or the cluster is laggy [ 848.463878][T10377] libceph: connect (1)[c::]:6789 error -101 [ 848.470115][T10377] libceph: mon0 (1)[c::]:6789 connect error [ 851.042690][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 851.097211][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 851.116652][ T9] usb 2-1: can't read configurations, error -71 [ 852.398735][T12421] loop1: detected capacity change from 0 to 131072 [ 852.411108][T12431] netlink: 468 bytes leftover after parsing attributes in process `syz.6.1618'. [ 852.481754][T12421] F2FS-fs (loop1): invalid crc value [ 852.643370][T12421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 852.750322][T12421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 854.225271][T12461] x_tables: duplicate underflow at hook 1 [ 854.544252][T12466] fuse: Unknown parameter 'user_id00000000000000000000' [ 854.820756][ T27] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 855.196443][T12477] bridge0: entered promiscuous mode [ 855.202596][T12477] macsec1: entered promiscuous mode [ 857.170498][ C1] hrtimer: interrupt took 42280 ns [ 857.205152][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 857.214639][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 857.239874][ T5082] Bluetooth: hci4: command 0x0406 tx timeout [ 857.607093][ T27] usb 7-1: unable to get BOS descriptor or descriptor too short [ 857.628081][ T27] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 857.690690][ T27] usb 7-1: can't read configurations, error -71 [ 857.808602][T12502] fuse: Unknown parameter 'user_id00000000000000000000' [ 860.070893][ T1067] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.407875][ T1067] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.546605][ T1067] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.621670][T12539] fuse: Bad value for 'fd' [ 860.795500][ T1067] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.487946][T12495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.501042][T12495] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.509644][T12495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.553613][T12495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.580944][T12495] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 863.588619][T12495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.717177][T12573] mmap: syz.8.1649 (12573) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 863.962756][T12580] fuse: Bad value for 'fd' [ 864.306621][T12581] team0 (unregistering): Port device team_slave_0 removed [ 864.356231][T12581] team0 (unregistering): Port device team_slave_1 removed [ 865.672363][T12495] Bluetooth: hci2: command tx timeout [ 865.851419][T12614] fuse: Bad value for 'fd' [ 867.780602][T12495] Bluetooth: hci2: command tx timeout [ 868.423465][T12636] loop6: detected capacity change from 0 to 40427 [ 868.503071][T12636] F2FS-fs (loop6): invalid crc value [ 868.637535][T12636] F2FS-fs (loop6): Found nat_bits in checkpoint [ 868.700618][T12636] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 869.454849][T12568] chnl_net:caif_netlink_parms(): no params data found [ 869.548126][T11204] syz-executor: attempt to access beyond end of device [ 869.548126][T11204] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 869.599368][T11204] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 869.719416][ T1067] hsr_slave_0: left promiscuous mode [ 869.776305][ T1067] hsr_slave_1: left promiscuous mode [ 869.791070][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.811791][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.835115][T12495] Bluetooth: hci2: command tx timeout [ 869.850900][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.887776][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.941338][ T1067] bridge_slave_1: left allmulticast mode [ 869.947067][ T1067] bridge_slave_1: left promiscuous mode [ 869.986192][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.041000][ T1067] bridge_slave_0: left allmulticast mode [ 870.046746][ T1067] bridge_slave_0: left promiscuous mode [ 870.071576][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.131244][T12495] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 870.184897][ T1067] bridge0: left promiscuous mode [ 870.282860][ T1067] veth1_macvtap: left promiscuous mode [ 870.288486][ T1067] veth0_macvtap: left promiscuous mode [ 870.345296][ T1067] veth1_vlan: left promiscuous mode [ 870.365471][ T1067] veth0_vlan: left promiscuous mode [ 870.506085][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.513137][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.910860][T12495] Bluetooth: hci2: command tx timeout [ 872.820631][T12698] netlink: 468 bytes leftover after parsing attributes in process `syz.6.1675'. [ 873.804855][T12495] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 874.156034][T12495] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 874.170915][T12495] Bluetooth: hci3: Injecting HCI hardware error event [ 874.181812][T12495] Bluetooth: hci3: hardware error 0x00 [ 875.035121][ T1067] team0 (unregistering): Port device team_slave_1 removed [ 875.325115][ T1067] team0 (unregistering): Port device team_slave_0 removed [ 875.469144][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.794068][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.285271][T12495] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 876.684192][T12495] Bluetooth: hci0: unexpected event for opcode 0x000e [ 880.316320][ T1067] bond0 (unregistering): Released all slaves [ 880.709556][ T5869] IPVS: starting estimator thread 0... [ 880.931169][T12775] IPVS: using max 15 ests per chain, 36000 per kthread [ 881.680178][T12789] fuse: Unknown parameter '00000000000000000003' [ 881.695463][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.730970][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.743084][T12568] bridge_slave_0: entered allmulticast mode [ 881.782341][T12568] bridge_slave_0: entered promiscuous mode [ 881.822213][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.832643][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.839977][T12568] bridge_slave_1: entered allmulticast mode [ 881.935081][T12568] bridge_slave_1: entered promiscuous mode [ 882.603534][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.697841][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.828366][T12568] team0: Port device team_slave_0 added [ 882.887452][T12568] team0: Port device team_slave_1 added [ 882.989475][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.007557][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.089188][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.143134][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.165848][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.230306][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.381408][T12568] hsr_slave_0: entered promiscuous mode [ 883.410284][T12568] hsr_slave_1: entered promiscuous mode [ 883.914641][T12568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.002697][T12568] Cannot create hsr debugfs directory [ 886.074758][T12835] fuse: Unknown parameter '00000000000000000003' [ 886.516748][T10648] libceph: connect (1)[c::]:6789 error -101 [ 886.539290][T10648] libceph: mon0 (1)[c::]:6789 connect error [ 886.634992][T12828] ceph: No mds server is up or the cluster is laggy [ 889.125487][ T787] IPVS: starting estimator thread 0... [ 889.511036][T12869] IPVS: using max 16 ests per chain, 38400 per kthread [ 889.615249][T12873] fuse: Unknown parameter 'fd00000000000000000003' [ 893.938450][T12568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.128637][T12568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 894.194934][T12568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 894.234403][T12568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.223030][T12568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.344419][T12568] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.410174][T12117] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.417515][T12117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.487930][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.495202][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.464120][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.163237][T12568] veth0_vlan: entered promiscuous mode [ 897.233689][T12568] veth1_vlan: entered promiscuous mode [ 897.299935][T10377] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 897.367689][T12568] veth0_macvtap: entered promiscuous mode [ 897.379124][T12568] veth1_macvtap: entered promiscuous mode [ 897.400346][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.411142][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.421383][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.432053][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.442754][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.453489][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.465719][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.477224][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.512518][T10377] usb 7-1: unable to get BOS descriptor or descriptor too short [ 897.535741][T10377] usb 7-1: not running at top speed; connect to a high speed hub [ 897.554152][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.580843][T10377] usb 7-1: config 3 has an invalid interface number: 65 but max is 0 [ 897.609546][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.630574][T10377] usb 7-1: config 3 has an invalid interface descriptor of length 5, skipping [ 897.662037][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.672213][T10377] usb 7-1: config 3 has an invalid descriptor of length 4, skipping remainder of the config [ 897.702687][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.713814][T10377] usb 7-1: config 3 has no interface number 0 [ 897.719992][T10377] usb 7-1: config 3 interface 65 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 897.771025][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.820753][T10377] usb 7-1: config 3 interface 65 has no altsetting 0 [ 897.832127][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.854412][T12954] loop1: detected capacity change from 0 to 40427 [ 897.879387][T10377] usb 7-1: New USB device found, idVendor=0403, idProduct=f06c, bcdDevice=d2.9c [ 897.889170][T12954] F2FS-fs (loop1): invalid crc value [ 897.934833][T12954] F2FS-fs (loop1): Found nat_bits in checkpoint [ 897.940069][T10377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.966590][T12568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.991840][T10377] usb 7-1: Product: syz [ 897.996103][T10377] usb 7-1: Manufacturer: syz [ 898.014450][T12568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.026365][T12954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 898.050121][T10377] usb 7-1: SerialNumber: syz [ 898.070239][T12568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.121037][T12568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.637545][T12078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.652117][T10377] ftdi_sio 7-1:3.65: FTDI USB Serial Device converter detected [ 898.659262][T11946] syz-executor: attempt to access beyond end of device [ 898.659262][T11946] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 898.684549][T12078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.697281][T10377] ftdi_sio ttyUSB0: unknown device type: 0xd29c [ 898.710912][T11946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 898.720933][T10377] usb 7-1: USB disconnect, device number 5 [ 898.729949][T10377] ftdi_sio 7-1:3.65: device disconnected [ 898.749248][ T5872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.805136][ T5872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.924540][T11323] libceph: connect (1)[c::]:6789 error -101 [ 899.944243][T11323] libceph: mon0 (1)[c::]:6789 connect error [ 900.039467][T12972] ceph: No mds server is up or the cluster is laggy [ 901.015266][T13003] loop1: detected capacity change from 0 to 40427 [ 901.068047][T13003] F2FS-fs (loop1): invalid crc value [ 901.126994][T13003] F2FS-fs (loop1): Found nat_bits in checkpoint [ 901.225238][T13003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 901.959823][T11946] syz-executor: attempt to access beyond end of device [ 901.959823][T11946] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 902.021699][T13022] syz_tun: entered allmulticast mode [ 902.398022][T11946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 906.422008][T13049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1748'. [ 907.478978][T13060] loop2: detected capacity change from 0 to 40427 [ 907.819577][T13060] F2FS-fs (loop2): invalid crc value [ 908.593340][T13060] F2FS-fs (loop2): Found nat_bits in checkpoint [ 908.672362][T13060] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 911.209855][T12568] syz-executor: attempt to access beyond end of device [ 911.209855][T12568] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 911.289409][T12568] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 913.584864][T13111] loop1: detected capacity change from 0 to 131072 [ 913.891246][T13111] F2FS-fs (loop1): invalid crc value [ 913.965356][T13111] F2FS-fs (loop1): Found nat_bits in checkpoint [ 914.035583][T13111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 918.122380][T13153] block nbd0: server does not support multiple connections per device. [ 918.227009][T13153] block nbd0: shutting down sockets [ 919.818055][T13166] loop1: detected capacity change from 0 to 131072 [ 919.842100][T13166] F2FS-fs (loop1): invalid crc value [ 919.879528][T13166] F2FS-fs (loop1): Found nat_bits in checkpoint [ 919.945966][T13166] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 920.140831][T11323] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 920.897462][T13189] netlink: 'syz.8.1777': attribute type 8 has an invalid length. [ 920.930602][T11323] usb 7-1: Using ep0 maxpacket: 16 [ 920.938314][T11323] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.980724][T11323] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 921.035177][T11323] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 921.090591][T11323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.098673][T11323] usb 7-1: Product: syz [ 921.141800][T11323] usb 7-1: Manufacturer: syz [ 921.146503][T11323] usb 7-1: SerialNumber: syz [ 921.190223][T11323] usb 7-1: config 0 descriptor?? [ 921.224806][T11323] appledisplay 7-1:0.0: Could not find int-in endpoint [ 921.261836][T11323] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 922.943312][T11323] usb 7-1: USB disconnect, device number 6 [ 924.058530][T13228] loop6: detected capacity change from 0 to 131072 [ 924.102109][T13228] F2FS-fs (loop6): invalid crc value [ 924.117911][T13228] F2FS-fs (loop6): Found nat_bits in checkpoint [ 924.193879][T13228] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 926.248031][T13265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'. [ 926.288646][T13265] ip6tnl1: entered promiscuous mode [ 926.481622][T13269] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 930.167027][T13314] hub 8-0:1.0: USB hub found [ 930.177392][T13314] hub 8-0:1.0: 1 port detected [ 930.944480][T13322] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 931.217264][T13324] loop1: detected capacity change from 0 to 40427 [ 931.265142][T13324] F2FS-fs (loop1): invalid crc value [ 931.278530][T13322] overlayfs: failed to look up (tracing) for ino (-66) [ 931.317578][T13324] F2FS-fs (loop1): Found nat_bits in checkpoint [ 931.397430][T13324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 931.459912][T13334] fuse: Bad value for 'fd' [ 932.014843][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.022227][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.798131][T11946] syz-executor: attempt to access beyond end of device [ 932.798131][T11946] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 932.854358][T11946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 933.659317][T13351] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1819'. [ 934.624191][T13362] overlayfs: failed to clone lowerpath [ 938.787948][T13391] loop1: detected capacity change from 0 to 131072 [ 938.837499][T13391] F2FS-fs (loop1): invalid crc value [ 938.856267][T13400] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 938.882313][T13391] F2FS-fs (loop1): Found nat_bits in checkpoint [ 938.928462][T13391] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 938.962101][T13400] overlayfs: failed to look up (tracing) for ino (-66) [ 940.415480][T13424] netlink: 'syz.8.1840': attribute type 8 has an invalid length. [ 947.587095][T13489] netlink: 'syz.2.1855': attribute type 8 has an invalid length. [ 948.603961][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 951.690575][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 951.763036][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 951.810734][ T9] usb 2-1: can't read configurations, error -71 [ 954.633351][T13565] netlink: 468 bytes leftover after parsing attributes in process `syz.6.1872'. [ 954.751594][T13571] netlink: 'syz.1.1874': attribute type 8 has an invalid length. [ 961.116982][ T23] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 963.011004][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 963.032517][ T23] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 963.071242][ T23] usb 7-1: can't read configurations, error -71 [ 963.537041][T13656] loop6: detected capacity change from 0 to 40427 [ 963.561213][T13656] F2FS-fs (loop6): invalid crc value [ 963.610785][T13656] F2FS-fs (loop6): Found nat_bits in checkpoint [ 963.677288][T13656] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 964.686398][T11204] syz-executor: attempt to access beyond end of device [ 964.686398][T11204] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 964.760857][T11204] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 969.482073][T13714] loop6: detected capacity change from 0 to 131072 [ 969.506962][T13714] F2FS-fs (loop6): invalid crc value [ 969.547869][T13714] F2FS-fs (loop6): Found nat_bits in checkpoint [ 969.594185][T13714] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 970.209128][T13742] fuse: Bad value for 'fd' [ 970.471008][T13739] loop6: detected capacity change from 0 to 40427 [ 970.496210][T13739] F2FS-fs (loop6): invalid crc value [ 970.511929][T13739] F2FS-fs (loop6): Found nat_bits in checkpoint [ 970.760603][T13739] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 971.584421][T11204] syz-executor: attempt to access beyond end of device [ 971.584421][T11204] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 971.640752][T11204] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 980.110698][T12495] Bluetooth: hci1: command 0x0406 tx timeout [ 981.380535][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 983.850037][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 983.870836][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 983.878680][ T23] usb 2-1: can't read configurations, error -71 [ 984.356736][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1943'. [ 985.015739][T13926] fuse: Bad value for 'fd' [ 986.995188][T13948] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 991.198367][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 993.041088][T14005] fuse: Bad value for 'fd' [ 993.357440][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.364011][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.778661][T14276] overlayfs: failed to clone lowerpath [ 1012.105102][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2042'. [ 1012.540694][T14320] udevd[14320]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1012.738038][T14319] udevd[14319]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1017.630803][T14383] autofs4:pid:14383:autofs_fill_super: called with bogus options [ 1019.163653][T14376] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2056'. [ 1020.473462][T14394] udevd[14394]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1021.627210][T14388] udevd[14388]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1035.990249][ T28] audit: type=1326 audit(1777107487.977:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1036.050878][ T28] audit: type=1326 audit(1777107488.007:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1036.149692][ T28] audit: type=1326 audit(1777107488.007:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1036.206744][ T28] audit: type=1326 audit(1777107488.007:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1037.831099][ T28] audit: type=1326 audit(1777107488.007:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1038.132760][ T28] audit: type=1326 audit(1777107488.007:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1038.155669][ T28] audit: type=1326 audit(1777107488.007:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1038.178700][ T28] audit: type=1326 audit(1777107488.007:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1038.202519][ T28] audit: type=1326 audit(1777107488.007:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1038.226952][ T28] audit: type=1326 audit(1777107488.007:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f460e59cdd9 code=0x7ffc0000 [ 1046.374826][T14683] netlink: 'syz.6.2136': attribute type 8 has an invalid length. [ 1054.797057][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.807072][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.706780][T14821] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1060.088913][T14833] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2171'. [ 1063.155874][T14849] udevd[14849]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1063.226594][T14848] udevd[14848]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1065.805448][T12495] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1066.721067][T14908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2187'. [ 1067.208749][T14920] udevd[14920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1067.244352][T14920] udevd[14920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1068.225893][T14952] overlayfs: failed to clone lowerpath [ 1068.321522][T14953] overlayfs: failed to clone lowerpath [ 1069.517757][T14970] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2201'. [ 1069.986910][T14920] udevd[14920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1076.957665][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2224'. [ 1079.273517][T15108] overlayfs: failed to clone upperpath [ 1079.295017][T15108] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1079.336375][T15108] overlayfs: missing 'lowerdir' [ 1081.550855][T15140] overlayfs: failed to clone lowerpath [ 1082.482705][T15141] overlayfs: failed to clone lowerpath [ 1083.090640][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.098891][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.156387][T15155] bridge_slave_1: left allmulticast mode [ 1083.179089][T15155] bridge_slave_1: left promiscuous mode [ 1083.199615][T15155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.244165][T15155] bridge_slave_0: left allmulticast mode [ 1083.249979][T15155] bridge_slave_0: left promiscuous mode [ 1083.266875][T15155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.304061][T15224] autofs4:pid:15224:autofs_fill_super: called with bogus options [ 1088.321504][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2262'. [ 1088.396865][T15236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2264'. [ 1093.075468][T15317] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2281'. [ 1116.240457][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.246997][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.518397][T15629] overlayfs: failed to clone upperpath [ 1129.308195][T15650] tipc: Started in network mode [ 1129.313382][T15650] tipc: Node identity ac14140f, cluster identity 4711 [ 1129.321280][T15650] tipc: New replicast peer: 255.255.255.255 [ 1129.330225][T15650] tipc: Enabled bearer , priority 10 [ 1130.444665][T10377] tipc: Node number set to 2886997007 [ 1130.943853][T15674] overlayfs: failed to clone upperpath [ 1131.240332][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1131.260066][ T28] audit: type=1800 audit(1777107308.227:57): pid=15660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2359" name="bus" dev="ramfs" ino=40678 res=0 errno=0 [ 1133.623095][T15710] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.2372'. [ 1135.529362][T15757] overlayfs: failed to clone upperpath [ 1139.390059][T15825] overlayfs: failed to clone upperpath [ 1139.452134][T15824] netlink: 'syz.1.2400': attribute type 10 has an invalid length. [ 1139.608680][T15824] team0: Port device dummy0 added [ 1142.196774][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2406'. [ 1142.814670][T15791] udevd[15791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1145.136605][T15913] overlayfs: failed to clone upperpath [ 1146.100317][T15920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1157.479635][T16111] netlink: 'syz.2.2461': attribute type 8 has an invalid length. [ 1168.162901][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.240803][T16258] batadv_slave_0: entered promiscuous mode [ 1178.272587][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.279074][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1196.433921][T16623] overlayfs: failed to clone upperpath [ 1203.862163][T16669] overlayfs: failed to clone upperpath [ 1205.471385][T16705] overlayfs: failed to clone upperpath [ 1209.632950][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2630'. [ 1209.805254][T16781] overlayfs: failed to clone upperpath [ 1212.071687][T16823] overlayfs: failed to clone upperpath [ 1218.837472][T16961] overlayfs: failed to clone upperpath [ 1239.130946][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.137505][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.464907][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2749'. [ 1246.505438][T17405] udevd[17405]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1246.559292][T17404] udevd[17404]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1247.002150][T17433] netlink: 'syz.8.2755': attribute type 1 has an invalid length. [ 1247.046330][T17433] gretap1: entered allmulticast mode [ 1247.056315][T17433] bond1: (slave gretap1): making interface the new active one [ 1247.065711][T17433] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1250.095560][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 1250.189688][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 1257.989090][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1258.009612][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1260.350861][T17601] overlayfs: failed to clone upperpath [ 1260.484718][T17578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.492293][T17578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.926826][T17578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.108749][T17578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.483306][T17616] overlayfs: failed to clone upperpath [ 1264.017142][T17578] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.026499][T17578] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.035638][T17578] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.045243][T17578] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.801632][T17675] overlayfs: failed to clone upperpath [ 1268.009317][T17686] overlayfs: failed to clone upperpath [ 1282.659550][T17909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2868'. [ 1282.883775][T17919] udevd[17919]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1282.942023][T17919] udevd[17919]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1287.542963][T18016] overlayfs: missing 'workdir' [ 1292.920936][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2915'. [ 1294.290535][T18117] kernel read not supported for file /bus (pid: 18117 comm: syz.1.2923) [ 1294.314985][ T28] audit: type=1800 audit(1777106946.311:58): pid=18117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2923" name="bus" dev="mqueue" ino=44870 res=0 errno=0 [ 1297.235713][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2935'. [ 1300.662114][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.670149][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.491267][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2995'. [ 1326.452891][T12495] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1330.838704][T18616] netlink: 'syz.8.3050': attribute type 9 has an invalid length. [ 1335.048447][T18659] team0: Port device ip6gretap1 added [ 1340.691828][T18717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3082'. [ 1341.842890][T18727] udevd[18727]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1341.881130][T18727] udevd[18727]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1343.763974][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1343.784284][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1344.237954][T18762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.245537][T18762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.875854][T18762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.700461][T18762] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.709639][T18762] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.719713][T18762] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.728693][T18762] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.590108][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3119'. [ 1354.638769][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'. [ 1355.423554][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.470155][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.112373][T18856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.403994][T18856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.600527][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3124'. [ 1356.609597][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3124'. [ 1359.708269][T18863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.855396][T18863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.507866][T18863] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.517029][T18863] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.526027][T18863] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.535002][T18863] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.366914][T18917] IPv6: syztnl0: Disabled Multicast RS [ 1362.106352][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.112788][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.072475][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3147'. [ 1363.092058][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3147'. [ 1364.938283][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.946827][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.254976][T18940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.312204][T18940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.956498][T18975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3154'. [ 1366.126375][T18978] udevd[18978]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1366.136658][T18940] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.145736][T18940] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.154672][T18940] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.163588][T18940] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.186637][T18977] udevd[18977]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1367.901726][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1367.931884][T19024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1372.053861][T19070] IPv6: syztnl0: Disabled Multicast RS [ 1372.310076][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3173'. [ 1372.478152][T19071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3173'. [ 1374.260954][T19080] 9pnet_fd: Insufficient options for proto=fd [ 1375.833468][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3183'. [ 1375.853068][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3183'. [ 1376.494582][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3185'. [ 1376.577233][ T28] audit: type=1326 audit(1777107028.571:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19114 comm="syz.2.3186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f460e59cdd9 code=0x0 [ 1379.802032][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3195'. [ 1379.821346][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3195'. [ 1383.376919][T19201] ptrace attach of "./syz-executor exec"[12568] was attempted by "./syz-executor exec"[19201] [ 1384.025307][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 1384.044688][T19202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 1389.059663][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3217'. [ 1389.079159][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3217'. [ 1396.474135][T19308] overlayfs: failed to clone upperpath [ 1401.411837][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3249'. [ 1401.423804][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3249'. [ 1406.132939][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3260'. [ 1406.152959][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3260'. [ 1409.959394][T19470] overlayfs: failed to clone upperpath [ 1411.505902][T19481] overlayfs: failed to clone upperpath [ 1414.617028][T19548] overlayfs: failed to clone upperpath [ 1417.799681][T19597] overlayfs: failed to clone upperpath [ 1421.278677][T19647] overlayfs: failed to clone upperpath [ 1423.473577][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.480418][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.765219][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3319'. [ 1424.383546][T19699] overlayfs: failed to clone upperpath [ 1427.441569][T19746] overlayfs: failed to clone upperpath [ 1430.434723][T19786] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 1430.461294][T19786] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1431.708965][T19806] overlayfs: failed to clone upperpath [ 1432.615397][T19823] netlink: 'syz.2.3357': attribute type 3 has an invalid length. [ 1434.938988][T19859] overlayfs: failed to clone upperpath [ 1435.741029][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3367'. [ 1435.750091][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3367'. [ 1440.116578][T19915] overlayfs: failed to clone upperpath [ 1441.024117][T19856] syz.1.3366: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1441.043256][T19856] CPU: 1 PID: 19856 Comm: syz.1.3366 Not tainted syzkaller #0 [ 1441.050789][T19856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1441.060893][T19856] Call Trace: [ 1441.064302][T19856] [ 1441.067286][T19856] dump_stack_lvl+0x18c/0x250 [ 1441.072027][T19856] ? show_regs_print_info+0x20/0x20 [ 1441.077295][T19856] ? load_image+0x420/0x420 [ 1441.081856][T19856] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1441.088325][T19856] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1441.094888][T19856] warn_alloc+0x246/0x340 [ 1441.099304][T19856] ? zone_watermark_ok_safe+0x230/0x230 [ 1441.104915][T19856] ? _raw_spin_unlock+0x28/0x40 [ 1441.109826][T19856] __vmalloc_node_range+0x662/0x1330 [ 1441.115194][T19856] ? free_vm_area+0x50/0x50 [ 1441.119758][T19856] ? _raw_spin_unlock+0x28/0x40 [ 1441.124659][T19856] ? __kasan_kmalloc+0x8f/0xa0 [ 1441.129483][T19856] __vmalloc_node_range+0x568/0x1330 [ 1441.134820][T19856] ? hash_netiface_create+0x361/0xfe0 [ 1441.140246][T19856] ? __asan_memset+0x22/0x40 [ 1441.144923][T19856] ? free_vm_area+0x50/0x50 [ 1441.149605][T19856] ? kvmalloc_node+0x70/0x180 [ 1441.154357][T19856] ? rcu_is_watching+0x15/0xb0 [ 1441.159186][T19856] ? kvmalloc_node+0x70/0x180 [ 1441.163922][T19856] ? trace_kmalloc+0x1f/0x90 [ 1441.168567][T19856] kvmalloc_node+0x13f/0x180 [ 1441.173288][T19856] ? hash_netiface_create+0x361/0xfe0 [ 1441.178728][T19856] hash_netiface_create+0x361/0xfe0 [ 1441.183993][T19856] ? __lock_acquire+0x7d40/0x7d40 [ 1441.189102][T19856] ? __nla_parse+0x40/0x50 [ 1441.193765][T19856] ? hash_netport6_gc+0x560/0x560 [ 1441.198862][T19856] ip_set_create+0xad3/0x1970 [ 1441.203604][T19856] ? ip_set_create+0x4fe/0x1970 [ 1441.208532][T19856] ? ip_set_protocol+0x5b0/0x5b0 [ 1441.213545][T19856] ? trace_contention_end+0x39/0xe0 [ 1441.218845][T19856] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 1441.224038][T19856] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 1441.229329][T19856] ? nfnetlink_unbind+0x160/0x160 [ 1441.234461][T19856] ? mark_lock+0x94/0x320 [ 1441.238856][T19856] ? __lock_acquire+0x1347/0x7d40 [ 1441.243943][T19856] netlink_rcv_skb+0x241/0x4d0 [ 1441.248813][T19856] ? nfnetlink_unbind+0x160/0x160 [ 1441.253892][T19856] ? netlink_ack+0x1180/0x1180 [ 1441.258704][T19856] ? apparmor_capable+0x137/0x1a0 [ 1441.263766][T19856] ? bpf_lsm_capable+0x9/0x10 [ 1441.268480][T19856] ? security_capable+0x89/0xb0 [ 1441.273414][T19856] nfnetlink_rcv+0x2c9/0x24a0 [ 1441.278136][T19856] ? mark_lock+0x94/0x320 [ 1441.282500][T19856] ? mark_lock+0x94/0x320 [ 1441.286872][T19856] ? __lock_acquire+0x1273/0x7d40 [ 1441.291947][T19856] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1441.297535][T19856] ? kmalloc_reserve+0x95/0x240 [ 1441.302418][T19856] ? verify_lock_unused+0x140/0x140 [ 1441.307657][T19856] ? verify_lock_unused+0x140/0x140 [ 1441.312913][T19856] ? __netlink_lookup+0xc7/0x820 [ 1441.317937][T19856] ? netlink_deliver_tap+0x2e/0x1b0 [ 1441.323176][T19856] ? __lock_acquire+0x7d40/0x7d40 [ 1441.328230][T19856] ? net_generic+0x1e/0x240 [ 1441.332778][T19856] ? netlink_deliver_tap+0x2e/0x1b0 [ 1441.338020][T19856] netlink_unicast+0x751/0x8d0 [ 1441.342833][T19856] netlink_sendmsg+0x8d0/0xbf0 [ 1441.347641][T19856] ? netlink_getsockopt+0x590/0x590 [ 1441.352877][T19856] ? aa_sock_msg_perm+0x94/0x150 [ 1441.357854][T19856] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1441.363263][T19856] ? security_socket_sendmsg+0x80/0xa0 [ 1441.368843][T19856] ? netlink_getsockopt+0x590/0x590 [ 1441.374117][T19856] ____sys_sendmsg+0x5ba/0x960 [ 1441.378917][T19856] ? __asan_memset+0x22/0x40 [ 1441.383560][T19856] ? __sys_sendmsg_sock+0x30/0x30 [ 1441.388616][T19856] ? __import_iovec+0x5f2/0x850 [ 1441.393504][T19856] ? import_iovec+0x73/0xa0 [ 1441.398037][T19856] ___sys_sendmsg+0x2a6/0x360 [ 1441.402757][T19856] ? __sys_sendmsg+0x2a0/0x2a0 [ 1441.407567][T19856] ? debug_mutex_init+0x38/0x70 [ 1441.412491][T19856] __se_sys_sendmsg+0x1c2/0x2b0 [ 1441.417371][T19856] ? __x64_sys_sendmsg+0x80/0x80 [ 1441.422349][T19856] ? lockdep_hardirqs_on+0x98/0x150 [ 1441.427588][T19856] do_syscall_64+0x55/0xa0 [ 1441.432026][T19856] ? clear_bhb_loop+0x40/0x90 [ 1441.436731][T19856] ? clear_bhb_loop+0x40/0x90 [ 1441.441441][T19856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.447377][T19856] RIP: 0033:0x7f0cdc99cdd9 [ 1441.451828][T19856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.471477][T19856] RSP: 002b:00007f0cdd776028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.479971][T19856] RAX: ffffffffffffffda RBX: 00007f0cdcc15fa0 RCX: 00007f0cdc99cdd9 [ 1441.488008][T19856] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000004 [ 1441.496022][T19856] RBP: 00007f0cdca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1441.504026][T19856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.512030][T19856] R13: 00007f0cdcc16038 R14: 00007f0cdcc15fa0 R15: 00007ffd53cce068 [ 1441.520158][T19856] [ 1441.561623][T19856] Mem-Info: [ 1441.564829][T19856] active_anon:9072 inactive_anon:0 isolated_anon:0 [ 1441.564829][T19856] active_file:18097 inactive_file:40483 isolated_file:0 [ 1441.564829][T19856] unevictable:768 dirty:89 writeback:0 [ 1441.564829][T19856] slab_reclaimable:11624 slab_unreclaimable:97828 [ 1441.564829][T19856] mapped:25397 shmem:1580 pagetables:930 [ 1441.564829][T19856] sec_pagetables:0 bounce:0 [ 1441.564829][T19856] kernel_misc_reclaimable:0 [ 1441.564829][T19856] free:1290363 free_pcp:11532 free_cma:0 [ 1441.654039][T19856] Node 0 active_anon:36188kB inactive_anon:0kB active_file:72388kB inactive_file:161724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101588kB dirty:356kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12860kB pagetables:3820kB sec_pagetables:0kB all_unreclaimable? no [ 1441.709541][T19856] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1441.751237][T19856] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.798924][T19856] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1441.849699][T19856] Node 0 DMA32 free:1250044kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:42748kB inactive_anon:0kB active_file:72388kB inactive_file:160904kB unevictable:1536kB writepending:356kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:23856kB local_pcp:15688kB free_cma:0kB [ 1441.959411][T19856] lowmem_reserve[]: 0 0 0 0 0 [ 1441.965028][T19856] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1441.992101][T19856] lowmem_reserve[]: 0 0 0 0 0 [ 1442.010861][T19856] Node 1 Normal free:3895320kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16240kB local_pcp:6432kB free_cma:0kB [ 1442.040777][T19856] lowmem_reserve[]: 0 0 0 0 0 [ 1442.350516][T19856] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1442.381834][T19856] Node 0 DMA32: 27*4kB (UE) 5*8kB (UME) 291*16kB (UME) 578*32kB (UME) 424*64kB (UME) 152*128kB (UME) 123*256kB (UM) 79*512kB (M) 30*1024kB (UM) 12*2048kB (ME) 257*4096kB (M) = 1249796kB [ 1442.419657][T19856] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1442.469071][T19856] Node 1 Normal: 264*4kB (UM) 61*8kB (UME) 33*16kB (UME) 194*32kB (UME) 51*64kB (UME) 8*128kB (UM) 3*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3895320kB [ 1442.512426][T19856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.525923][T19856] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1442.538270][T19856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.568834][T19856] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.589394][T19856] 61950 total pagecache pages [ 1442.600257][T19856] 0 pages in swap cache [ 1442.609643][T19856] Free swap = 124440kB [ 1442.629336][T19856] Total swap = 124996kB [ 1442.670284][T19856] 2097051 pages RAM [ 1442.674191][T19856] 0 pages HighMem/MovableOnly [ 1442.678936][T19856] 416927 pages reserved [ 1442.700077][T19856] 0 pages cma reserved [ 1445.555228][T19968] overlayfs: failed to clone upperpath [ 1447.142012][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3392'. [ 1451.109022][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1451.120823][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1451.141916][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1451.170916][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1451.181405][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1451.192420][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1451.315108][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 1453.270974][ T51] Bluetooth: hci1: command tx timeout [ 1453.301951][T20031] chnl_net:caif_netlink_parms(): no params data found [ 1454.849308][T12117] team0: Port device ip6gretap1 removed [ 1455.321573][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3408'. [ 1455.354694][ T51] Bluetooth: hci1: command tx timeout [ 1455.408293][T20031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.552467][T20031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.586160][T20031] bridge_slave_0: entered allmulticast mode [ 1455.598007][T20031] bridge_slave_0: entered promiscuous mode [ 1455.607288][T20031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.620719][T20031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.646249][T20031] bridge_slave_1: entered allmulticast mode [ 1455.661749][T20031] bridge_slave_1: entered promiscuous mode [ 1455.729520][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3410'. [ 1455.782503][T20031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.823015][T20031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.964201][T20031] team0: Port device team_slave_0 added [ 1455.992251][T20031] team0: Port device team_slave_1 added [ 1456.066053][T20031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.077614][T20031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.109925][T20031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.131580][T20031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.138615][T20031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.218944][T20031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.365307][T20031] hsr_slave_0: entered promiscuous mode [ 1456.381539][T20031] hsr_slave_1: entered promiscuous mode [ 1456.388148][T20031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1456.410275][T20031] Cannot create hsr debugfs directory [ 1457.440285][ T51] Bluetooth: hci1: command tx timeout [ 1459.511297][ T51] Bluetooth: hci1: command tx timeout [ 1460.123761][T20031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1460.167585][T20031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1460.182345][T20031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1460.206658][T20031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1460.898616][T12117] hsr_slave_0: left promiscuous mode [ 1466.360740][T12117] hsr_slave_1: left promiscuous mode [ 1466.423851][T12117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.499925][T12117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.535869][T12117] bridge_slave_1: left allmulticast mode [ 1466.553822][T12117] bridge_slave_1: left promiscuous mode [ 1466.567035][T12117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.593496][T12117] bridge_slave_0: left allmulticast mode [ 1466.599230][T12117] bridge_slave_0: left promiscuous mode [ 1466.607951][T12117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.245064][T12117] team0 (unregistering): Port device team_slave_1 removed [ 1468.322629][T12117] team0 (unregistering): Port device team_slave_0 removed [ 1468.409291][T12117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.517291][T12117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.046810][T12117] team0 (unregistering): Port device dummy0 removed [ 1469.137450][T12117] bond0 (unregistering): Released all slaves [ 1469.669831][T20031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.831882][T20031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.866777][T16929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.874249][T16929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.902074][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.910786][T16949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.731566][T12117] IPVS: stop unused estimator thread 0... [ 1471.079851][T20193] xt_hashlimit: size too large, truncated to 1048576 [ 1473.631460][T20031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.794671][T20031] veth0_vlan: entered promiscuous mode [ 1473.852656][T20031] veth1_vlan: entered promiscuous mode [ 1473.975661][T20031] veth0_macvtap: entered promiscuous mode [ 1474.022288][T20031] veth1_macvtap: entered promiscuous mode [ 1474.110534][T20031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.146688][T20031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.203483][T20031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.231845][T20031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.260633][T20031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.269424][T20031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.091036][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.348049][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.429972][T16949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.466357][T16949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.998679][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 1479.033735][T20300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1481.873255][T20370] 9pnet_fd: Insufficient options for proto=fd [ 1482.855163][T20382] loop0: detected capacity change from 0 to 512 [ 1482.957605][T20382] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.3473: corrupted in-inode xattr: invalid ea_ino [ 1483.025413][T20382] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.3473: couldn't read orphan inode 15 (err -117) [ 1483.045036][T20382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1483.835293][T20031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.891274][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.897881][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.081149][T20427] syzkaller0: entered promiscuous mode [ 1485.761328][T20458] ------------[ cut here ]------------ [ 1485.767735][T20458] WARNING: CPU: 0 PID: 20458 at security/landlock/fs.c:748 collect_domain_accesses+0x7b6/0x820 [ 1485.778608][T20458] Modules linked in: [ 1485.783102][T20458] CPU: 0 PID: 20458 Comm: syz.0.3494 Not tainted syzkaller #0 [ 1485.790710][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1485.801386][T20458] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 1485.807712][T20458] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef f6 97 fd 31 ed eb dd e8 e6 f6 97 fd 0f 0b 40 b5 01 eb da e8 da f6 97 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 1485.827661][T20458] RSP: 0018:ffffc900041b7ab0 EFLAGS: 00010287 [ 1485.834047][T20458] RAX: ffffffff83ef2b26 RBX: ffff8880582cc178 RCX: 0000000000080000 [ 1485.842382][T20458] RDX: ffffc900189ab000 RSI: 00000000000004fe RDI: 00000000000004ff [ 1485.850554][T20458] RBP: 1ffff1100b264bb5 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 1485.858604][T20458] R10: dffffc0000000000 R11: fffffbfff1d162be R12: 0000000000000001 [ 1485.866756][T20458] R13: 0000000000000000 R14: ffff8880582cc178 R15: 0000000000002004 [ 1485.874844][T20458] FS: 00007eff111c86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1485.884227][T20458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1485.890952][T20458] CR2: 000000110c312e77 CR3: 0000000060fd5000 CR4: 00000000003506f0 [ 1485.899008][T20458] Call Trace: [ 1485.902403][T20458] [ 1485.905413][T20458] current_check_refer_path+0x566/0xc50 [ 1485.911193][T20458] ? hook_file_truncate+0xc0/0xc0 [ 1485.916293][T20458] ? _raw_spin_unlock+0x28/0x40 [ 1485.921271][T20458] ? d_set_d_op+0x25f/0x370 [ 1485.925860][T20458] security_path_rename+0x16c/0x200 [ 1485.931195][T20458] do_renameat2+0x6be/0xce0 [ 1485.935766][T20458] ? __lock_acquire+0x7d40/0x7d40 [ 1485.940940][T20458] ? fsnotify_move+0x4e0/0x4e0 [ 1485.946000][T20458] ? __check_object_size+0x506/0xa20 [ 1485.951484][T20458] ? getname_flags+0x20a/0x500 [ 1485.956374][T20458] __x64_sys_renameat2+0xd2/0xe0 [ 1485.961478][T20458] do_syscall_64+0x55/0xa0 [ 1485.965961][T20458] ? clear_bhb_loop+0x40/0x90 [ 1485.970802][T20458] ? clear_bhb_loop+0x40/0x90 [ 1485.975550][T20458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1485.981639][T20458] RIP: 0033:0x7eff1039cdd9 [ 1485.986129][T20458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.006688][T20458] RSP: 002b:00007eff111c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1486.015249][T20458] RAX: ffffffffffffffda RBX: 00007eff10615fa0 RCX: 00007eff1039cdd9 [ 1486.023452][T20458] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 1486.031736][T20458] RBP: 00007eff10432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1486.039793][T20458] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 1486.048155][T20458] R13: 00007eff10616038 R14: 00007eff10615fa0 R15: 00007ffc3dae5ed8 [ 1486.056411][T20458] [ 1486.059517][T20458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1486.066934][T20458] CPU: 0 PID: 20458 Comm: syz.0.3494 Not tainted syzkaller #0 [ 1486.074442][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1486.084542][T20458] Call Trace: [ 1486.087914][T20458] [ 1486.090893][T20458] dump_stack_lvl+0x18c/0x250 [ 1486.095682][T20458] ? show_regs_print_info+0x20/0x20 [ 1486.100933][T20458] ? load_image+0x420/0x420 [ 1486.105486][T20458] panic+0x2dc/0x730 [ 1486.109417][T20458] ? bpf_jit_dump+0xd0/0xd0 [ 1486.113966][T20458] __warn+0x2e0/0x470 [ 1486.117987][T20458] ? collect_domain_accesses+0x7b6/0x820 [ 1486.123664][T20458] ? collect_domain_accesses+0x7b6/0x820 [ 1486.129331][T20458] report_bug+0x2be/0x4f0 [ 1486.133738][T20458] ? collect_domain_accesses+0x7b6/0x820 [ 1486.139424][T20458] ? collect_domain_accesses+0x7b6/0x820 [ 1486.145096][T20458] ? collect_domain_accesses+0x7b8/0x820 [ 1486.150770][T20458] handle_bug+0xcf/0x120 [ 1486.155062][T20458] exc_invalid_op+0x1a/0x50 [ 1486.159604][T20458] asm_exc_invalid_op+0x1a/0x20 [ 1486.164493][T20458] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 1486.170768][T20458] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef f6 97 fd 31 ed eb dd e8 e6 f6 97 fd 0f 0b 40 b5 01 eb da e8 da f6 97 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 1486.190609][T20458] RSP: 0018:ffffc900041b7ab0 EFLAGS: 00010287 [ 1486.196725][T20458] RAX: ffffffff83ef2b26 RBX: ffff8880582cc178 RCX: 0000000000080000 [ 1486.204736][T20458] RDX: ffffc900189ab000 RSI: 00000000000004fe RDI: 00000000000004ff [ 1486.212750][T20458] RBP: 1ffff1100b264bb5 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 1486.220842][T20458] R10: dffffc0000000000 R11: fffffbfff1d162be R12: 0000000000000001 [ 1486.228876][T20458] R13: 0000000000000000 R14: ffff8880582cc178 R15: 0000000000002004 [ 1486.236893][T20458] ? collect_domain_accesses+0x7b6/0x820 [ 1486.242592][T20458] current_check_refer_path+0x566/0xc50 [ 1486.248277][T20458] ? hook_file_truncate+0xc0/0xc0 [ 1486.253351][T20458] ? _raw_spin_unlock+0x28/0x40 [ 1486.258238][T20458] ? d_set_d_op+0x25f/0x370 [ 1486.262780][T20458] security_path_rename+0x16c/0x200 [ 1486.268021][T20458] do_renameat2+0x6be/0xce0 [ 1486.272555][T20458] ? __lock_acquire+0x7d40/0x7d40 [ 1486.277636][T20458] ? fsnotify_move+0x4e0/0x4e0 [ 1486.282440][T20458] ? __check_object_size+0x506/0xa20 [ 1486.287790][T20458] ? getname_flags+0x20a/0x500 [ 1486.292601][T20458] __x64_sys_renameat2+0xd2/0xe0 [ 1486.297573][T20458] do_syscall_64+0x55/0xa0 [ 1486.302020][T20458] ? clear_bhb_loop+0x40/0x90 [ 1486.306731][T20458] ? clear_bhb_loop+0x40/0x90 [ 1486.311450][T20458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.317379][T20458] RIP: 0033:0x7eff1039cdd9 [ 1486.321819][T20458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.341468][T20458] RSP: 002b:00007eff111c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1486.349916][T20458] RAX: ffffffffffffffda RBX: 00007eff10615fa0 RCX: 00007eff1039cdd9 [ 1486.357918][T20458] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 1486.365923][T20458] RBP: 00007eff10432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1486.373967][T20458] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 1486.381974][T20458] R13: 00007eff10616038 R14: 00007eff10615fa0 R15: 00007ffc3dae5ed8 [ 1486.390009][T20458] [ 1486.393622][T20458] Kernel Offset: disabled [ 1486.398065][T20458] Rebooting in 86400 seconds..