last executing test programs: 2m36.84493456s ago: executing program 3 (id=6): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 2m31.423352898s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m28.068872083s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$unix(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x80044dff, 0x1000000000000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x5cb143, 0x1ff) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendfile(r4, r4, 0x0, 0xfffe82) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) 2m24.819771768s ago: executing program 3 (id=17): syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x20a, &(0x7f0000000480)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 2m17.307719701s ago: executing program 3 (id=20): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x480000, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 2m9.218656105s ago: executing program 3 (id=25): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 2m8.294248832s ago: executing program 4 (id=27): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) 2m0.806165829s ago: executing program 4 (id=37): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m59.308209452s ago: executing program 4 (id=41): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, 0x0, 0x0) 1m53.246917652s ago: executing program 32 (id=25): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 1m53.140843743s ago: executing program 4 (id=47): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d", 0x4}], 0x1) ioctl(r0, 0x1, &(0x7f0000000080)) 1m50.47320384s ago: executing program 4 (id=50): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 1m47.905148464s ago: executing program 4 (id=53): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x725da000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0x10f, {0x0, r1, 0x2}}, 0x18) 1m32.485292437s ago: executing program 33 (id=53): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x725da000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0x10f, {0x0, r1, 0x2}}, 0x18) 12.190768886s ago: executing program 1 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 9.870260265s ago: executing program 1 (id=199): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 8.314463362s ago: executing program 1 (id=202): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r0, 0x99, 0x6}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r1, 0x40, 0x1c}, 0xc) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, 0x0, 0x4004080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000010c0)={'security\x00', 0x0, [0x101, 0x4a3, 0x7ffffffe, 0x40004, 0xfffefffa]}, &(0x7f0000000240)=0x54) 6.478583485s ago: executing program 0 (id=206): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfd92}, @hci_rp_pin_code_neg_reply={{0x7}, {0x7, @none}}}}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 6.02684215s ago: executing program 0 (id=207): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4000854) 6.001695842s ago: executing program 2 (id=208): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x6, 0x0, 0xfffffffd}, {0x0, 0x9, 0xa, 0xe}, {0x6, 0x3, 0x0, 0xfffffffc}]}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c880}, 0x8000) 5.265080873s ago: executing program 0 (id=209): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0xcfeab749528c43bd) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 4.506682987s ago: executing program 0 (id=210): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) 4.303658447s ago: executing program 2 (id=211): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x8001, 0xa, 0x1, 0xffffffff, 0x0, 0xccb, 0x8, 0x7, 0xe, 0x2, 0x8, 0xe, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x1ae, 0xfffffff5]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000001280)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x412243, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000000)=0x1) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x85}) r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20fc, 0x8, 0xe, 0xd615, 0x9, 0x13, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x380, 0x200}}, {0x0, 0x13}}}, 0xa0) 3.642038645s ago: executing program 2 (id=212): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8010, &(0x7f00000000c0), 0xff, 0x57d, &(0x7f0000000100)="$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") mknod$loop(&(0x7f0000000780)='./bus\x00', 0x20, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 3.425212794s ago: executing program 1 (id=213): syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "a5", "c4b74a", 0x8847, "f4b30fdd7674d0345794245a0bc8c46960e8cdefc72c43219e4a44529a3707897d18236b8b93d560859bd7bf16c3"}}}}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 2.521155657s ago: executing program 1 (id=214): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) 2.020581694s ago: executing program 2 (id=215): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfd92}, @hci_rp_pin_code_neg_reply={{0x7}, {0x7, @none}}}}, 0x8) 1.04566349s ago: executing program 2 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 924.288393ms ago: executing program 1 (id=217): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 763.575369ms ago: executing program 0 (id=218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x2, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x7, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0xdddd0000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0xb2, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 158.645575ms ago: executing program 2 (id=219): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x6, 0x0, 0xfffffffd}, {0x0, 0x9, 0xa, 0xe}, {0x6, 0x3, 0x0, 0xfffffffc}]}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c880}, 0x8000) 0s ago: executing program 0 (id=220): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000003c0)={{0x2, 0x0, 0x6, 0xb, 0x6}, [{0xfffffffffffffff7, 0xe, 0xb, 0xe}, {0xfffffffffffffffc, 0x5, 0x0, 0xf7}, {0x3, 0x6, 0x1, 0x2}, {0x1, 0x6, 0x2, 0x4}, {0x4, 0xe007, 0xa1, 0x12}, {0x7, 0x10000, 0x3, 0xf0}, {0x1, 0x80000001, 0x0, 0x4}, {0x9, 0xffff, 0xd1, 0x2}, {0x4, 0x4, 0x2, 0x6}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 151.961128][ T5757] cgroup: Unknown subsys name 'net' [ 152.105470][ T5757] cgroup: Unknown subsys name 'cpuset' [ 152.119698][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 157.563531][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 161.779828][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.817036][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.825595][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.849985][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.862471][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.895275][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.909869][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.918870][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.943188][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.953884][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.993280][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.013873][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.022909][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.040234][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.051110][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.077716][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.106726][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.114451][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.127124][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.140198][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.155899][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.163951][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.174626][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.184583][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.215468][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.337506][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 163.456387][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 163.593236][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 163.939819][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 163.947283][ T5778] Bluetooth: hci0: command tx timeout [ 164.026550][ T5778] Bluetooth: hci1: command tx timeout [ 164.106830][ T5778] Bluetooth: hci2: command tx timeout [ 164.243866][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 164.266352][ T5778] Bluetooth: hci3: command tx timeout [ 164.266402][ T5782] Bluetooth: hci4: command tx timeout [ 164.280974][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.289482][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.297201][ T5781] bridge_slave_0: entered allmulticast mode [ 164.306631][ T5781] bridge_slave_0: entered promiscuous mode [ 164.340952][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.349395][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.357041][ T5781] bridge_slave_1: entered allmulticast mode [ 164.366427][ T5781] bridge_slave_1: entered promiscuous mode [ 164.647450][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.702944][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.816973][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.824422][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.833633][ T5776] bridge_slave_0: entered allmulticast mode [ 164.843123][ T5776] bridge_slave_0: entered promiscuous mode [ 164.926919][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.934540][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.943190][ T5776] bridge_slave_1: entered allmulticast mode [ 164.953544][ T5776] bridge_slave_1: entered promiscuous mode [ 165.004648][ T5781] team0: Port device team_slave_0 added [ 165.011445][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.019438][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.028153][ T5785] bridge_slave_0: entered allmulticast mode [ 165.036763][ T5785] bridge_slave_0: entered promiscuous mode [ 165.069948][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.077566][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.085020][ T5780] bridge_slave_0: entered allmulticast mode [ 165.094083][ T5780] bridge_slave_0: entered promiscuous mode [ 165.112987][ T5781] team0: Port device team_slave_1 added [ 165.119434][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.127640][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.134968][ T5780] bridge_slave_1: entered allmulticast mode [ 165.143444][ T5780] bridge_slave_1: entered promiscuous mode [ 165.153437][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.161159][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.169164][ T5785] bridge_slave_1: entered allmulticast mode [ 165.177684][ T5785] bridge_slave_1: entered promiscuous mode [ 165.327203][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.337478][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.345032][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.352950][ T5784] bridge_slave_0: entered allmulticast mode [ 165.361309][ T5784] bridge_slave_0: entered promiscuous mode [ 165.499911][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.536835][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.544269][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.553525][ T5784] bridge_slave_1: entered allmulticast mode [ 165.562118][ T5784] bridge_slave_1: entered promiscuous mode [ 165.572941][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.580274][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.606526][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.627618][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.643915][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.660998][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.715889][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.723162][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.749610][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.768870][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.808486][ T5776] team0: Port device team_slave_0 added [ 165.861816][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.921014][ T5776] team0: Port device team_slave_1 added [ 165.958138][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.996633][ T5785] team0: Port device team_slave_0 added [ 166.026868][ T5778] Bluetooth: hci0: command tx timeout [ 166.060143][ T5780] team0: Port device team_slave_0 added [ 166.074445][ T5785] team0: Port device team_slave_1 added [ 166.082459][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.089693][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.116482][ T5778] Bluetooth: hci1: command tx timeout [ 166.117911][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.181093][ T5780] team0: Port device team_slave_1 added [ 166.186902][ T5778] Bluetooth: hci2: command tx timeout [ 166.237230][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.244260][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.270721][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.310517][ T5784] team0: Port device team_slave_0 added [ 166.346364][ T5782] Bluetooth: hci3: command tx timeout [ 166.352305][ T5778] Bluetooth: hci4: command tx timeout [ 166.395038][ T5781] hsr_slave_0: entered promiscuous mode [ 166.403619][ T5781] hsr_slave_1: entered promiscuous mode [ 166.419434][ T5784] team0: Port device team_slave_1 added [ 166.427264][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.434330][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.460699][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.474628][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.482245][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.508598][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.524702][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.532167][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.558482][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.613461][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.620649][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.646931][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.770364][ T5776] hsr_slave_0: entered promiscuous mode [ 166.778783][ T5776] hsr_slave_1: entered promiscuous mode [ 166.786301][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 166.792162][ T5776] Cannot create hsr debugfs directory [ 166.824841][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.833060][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.859507][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.919649][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.926846][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.953043][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.098541][ T5780] hsr_slave_0: entered promiscuous mode [ 167.107672][ T5780] hsr_slave_1: entered promiscuous mode [ 167.114981][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 167.121826][ T5780] Cannot create hsr debugfs directory [ 167.215017][ T5785] hsr_slave_0: entered promiscuous mode [ 167.223574][ T5785] hsr_slave_1: entered promiscuous mode [ 167.232009][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 167.237929][ T5785] Cannot create hsr debugfs directory [ 167.488902][ T5784] hsr_slave_0: entered promiscuous mode [ 167.497607][ T5784] hsr_slave_1: entered promiscuous mode [ 167.505202][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 167.511392][ T5784] Cannot create hsr debugfs directory [ 168.106912][ T5778] Bluetooth: hci0: command tx timeout [ 168.199613][ T5778] Bluetooth: hci1: command tx timeout [ 168.266416][ T5778] Bluetooth: hci2: command tx timeout [ 168.402963][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.420469][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.427737][ T5778] Bluetooth: hci4: command tx timeout [ 168.427785][ T5782] Bluetooth: hci3: command tx timeout [ 168.462750][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.481915][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.564190][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.605695][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.639022][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.662704][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.849910][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.880911][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.899978][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.922239][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.233993][ T5780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.253688][ T5780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.293902][ T5780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.348737][ T5780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.611859][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.643935][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.675187][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.693726][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.733811][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.840228][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.874327][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.919754][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.970301][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.977821][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.038499][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.045770][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.111491][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.163435][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.170889][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.189658][ T5778] Bluetooth: hci0: command tx timeout [ 170.197206][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.243834][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.251261][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.270769][ T5778] Bluetooth: hci1: command tx timeout [ 170.346601][ T5778] Bluetooth: hci2: command tx timeout [ 170.361073][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.368413][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.499490][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.506993][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.510732][ T5778] Bluetooth: hci3: command tx timeout [ 170.519270][ T5782] Bluetooth: hci4: command tx timeout [ 170.594629][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.875286][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.048245][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.055891][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.100942][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.108445][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.171556][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.391012][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.506121][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.513550][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.613253][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.620887][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.902794][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.991113][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.301639][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.549261][ T5776] veth0_vlan: entered promiscuous mode [ 172.640453][ T5781] veth0_vlan: entered promiscuous mode [ 172.735194][ T5781] veth1_vlan: entered promiscuous mode [ 172.808262][ T5776] veth1_vlan: entered promiscuous mode [ 172.918581][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.124246][ T5785] veth0_vlan: entered promiscuous mode [ 173.312658][ T5785] veth1_vlan: entered promiscuous mode [ 173.353837][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.384874][ T5781] veth0_macvtap: entered promiscuous mode [ 173.487552][ T5781] veth1_macvtap: entered promiscuous mode [ 173.537303][ T5776] veth0_macvtap: entered promiscuous mode [ 173.594529][ T5776] veth1_macvtap: entered promiscuous mode [ 173.776837][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.849280][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.872279][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.933291][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.972606][ T5785] veth0_macvtap: entered promiscuous mode [ 173.989903][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.999680][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.042555][ T5785] veth1_macvtap: entered promiscuous mode [ 174.053542][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.063889][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.114747][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.130970][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.197143][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.245752][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.331482][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.356452][ T5780] veth0_vlan: entered promiscuous mode [ 174.369831][ T5784] veth0_vlan: entered promiscuous mode [ 174.441071][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.521815][ T5784] veth1_vlan: entered promiscuous mode [ 174.549032][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.576309][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.585390][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.652426][ T5780] veth1_vlan: entered promiscuous mode [ 174.674188][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.013894][ T5780] veth0_macvtap: entered promiscuous mode [ 175.145161][ T5780] veth1_macvtap: entered promiscuous mode [ 175.159924][ T5784] veth0_macvtap: entered promiscuous mode [ 175.238382][ T5784] veth1_macvtap: entered promiscuous mode [ 175.383693][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.464255][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.603959][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.651356][ T124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.662849][ T124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.713824][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.765414][ T124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.793847][ T124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.859180][ T124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.891914][ T124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.948560][ T124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.010537][ T124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.059835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.106210][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.396236][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.405024][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.615271][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.652452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.890420][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.910397][ T5776] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 179.939628][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.053999][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.131698][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.454412][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.514425][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.333358][ T11] Process accounting resumed [ 185.407938][ T5983] CUSE: unknown device info "" [ 185.413244][ T5983] CUSE: zero length info key specified [ 188.570768][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.641851][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.423826][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.447394][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.372510][ T5993] ======================================================= [ 190.372510][ T5993] WARNING: The mand mount option has been deprecated and [ 190.372510][ T5993] and is ignored by this kernel. Remove the mand [ 190.372510][ T5993] option from the mount to silence this warning. [ 190.372510][ T5993] ======================================================= [ 190.427054][ T5993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.686984][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.769111][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.795542][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.819533][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.929307][ T6018] loop3: detected capacity change from 0 to 16 [ 199.118319][ T6018] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 199.156944][ T6018] erofs (device loop3): mounted with root inode @ nid 36. [ 199.770980][ T6028] syz.3.17: attempt to access beyond end of device [ 199.770980][ T6028] loop3: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 199.788742][ T6028] syz.3.17: attempt to access beyond end of device [ 199.788742][ T6028] loop3: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 199.803925][ T6028] erofs (device loop3): read error -5 @ 0 of nid 36 [ 203.379685][ T6011] Process accounting resumed [ 204.118011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 204.487904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 204.796569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.047592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 207.356669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.457673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 207.766633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 207.867058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 207.969790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 208.176361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 211.378532][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.436867][ T29] audit: type=1800 audit(1774130433.032:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20" name="bus" dev="overlay" ino=54 res=0 errno=0 [ 211.465319][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 215.563982][ T6054] evm: overlay not supported [ 215.902722][ T6056] loop1: detected capacity change from 0 to 16 [ 216.027575][ T6056] erofs (device loop1): mounted with root inode @ nid 36. [ 216.524098][ T6056] syz.1.30: attempt to access beyond end of device [ 216.524098][ T6056] loop1: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 216.538356][ T6056] syz.1.30: attempt to access beyond end of device [ 216.538356][ T6056] loop1: rw=0, sector=301990400, nr_sectors = 1 limit=16 [ 216.552170][ T6056] erofs (device loop1): read error -5 @ 0 of nid 36 [ 220.649000][ T6078] input: syz0 as /devices/virtual/input/input5 [ 224.537528][ T6090] loop4: detected capacity change from 0 to 1024 [ 230.662617][ T6107] loop1: detected capacity change from 0 to 4096 [ 230.937712][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.947803][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.957400][ T5778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.977059][ T5778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.981888][ T1757] IPVS: starting estimator thread 0... [ 231.005029][ T5778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.186908][ T6119] IPVS: using max 240 ests per chain, 12000 per kthread [ 233.148691][ T5782] Bluetooth: hci5: command tx timeout [ 235.278134][ T5782] Bluetooth: hci5: command tx timeout [ 236.534455][ T6115] chnl_net:caif_netlink_parms(): no params data found [ 237.315900][ T5782] Bluetooth: hci5: command tx timeout [ 239.416513][ T5782] Bluetooth: hci5: command tx timeout [ 239.875613][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.891611][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.926744][ T6115] bridge_slave_0: entered allmulticast mode [ 239.959291][ T6115] bridge_slave_0: entered promiscuous mode [ 240.055324][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.086532][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.116453][ T6115] bridge_slave_1: entered allmulticast mode [ 240.175959][ T6115] bridge_slave_1: entered promiscuous mode [ 240.931309][ T6115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.217427][ T6115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.112396][ T1757] IPVS: starting estimator thread 0... [ 242.159269][ T6115] team0: Port device team_slave_0 added [ 242.251523][ T6167] IPVS: using max 240 ests per chain, 12000 per kthread [ 242.351068][ T6115] team0: Port device team_slave_1 added [ 242.851025][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.902456][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.016660][ T6115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.060764][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.085048][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.201380][ T6115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.345573][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.877242][ T6115] hsr_slave_0: entered promiscuous mode [ 246.943302][ T6115] hsr_slave_1: entered promiscuous mode [ 247.006853][ T6115] debugfs: 'hsr0' already exists in 'hsr' [ 247.012755][ T6115] Cannot create hsr debugfs directory [ 247.817700][ T1757] Process accounting resumed [ 247.861170][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.217149][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.577437][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.837456][ T57] bridge_slave_1: left allmulticast mode [ 249.843277][ T57] bridge_slave_1: left promiscuous mode [ 249.897534][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.947368][ T57] bridge_slave_0: left allmulticast mode [ 249.976999][ T57] bridge_slave_0: left promiscuous mode [ 249.983511][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.309180][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.324501][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.334663][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.353204][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.416693][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.863157][ T6205] Zero length message leads to an empty skb [ 251.170844][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.272031][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.345428][ T57] bond0 (unregistering): Released all slaves [ 252.508205][ T5782] Bluetooth: hci0: command tx timeout [ 253.602443][ T57] hsr_slave_0: left promiscuous mode [ 253.667092][ T57] hsr_slave_1: left promiscuous mode [ 253.674882][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.745582][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.769207][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.787788][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.958802][ T57] veth1_macvtap: left promiscuous mode [ 253.964491][ T57] veth0_macvtap: left promiscuous mode [ 254.006470][ T57] veth1_vlan: left promiscuous mode [ 254.011991][ T57] veth0_vlan: left promiscuous mode [ 254.590526][ T5782] Bluetooth: hci0: command tx timeout [ 256.148840][ T57] team0 (unregistering): Port device team_slave_1 removed [ 256.285729][ T57] team0 (unregistering): Port device team_slave_0 removed [ 256.669772][ T5782] Bluetooth: hci0: command tx timeout [ 257.142599][ T11] Process accounting resumed [ 258.294867][ T6115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.759809][ T5782] Bluetooth: hci0: command tx timeout [ 259.161621][ T6115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.417044][ T6115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.487493][ T6229] loop1: detected capacity change from 0 to 512 [ 260.527906][ T6115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.849062][ T6229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.910950][ T6229] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.737881][ T6229] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.80: corrupted inode contents [ 261.858732][ T6229] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.80: mark_inode_dirty error [ 262.029803][ T6229] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.80: corrupted inode contents [ 262.181774][ T162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.217832][ T6229] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.80: mark_inode_dirty error [ 262.780008][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.890197][ T162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.284926][ T162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.528723][ T162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.512489][ T6201] chnl_net:caif_netlink_parms(): no params data found [ 265.529811][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.85'. [ 266.217597][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.224180][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.578556][ T162] bridge_slave_1: left allmulticast mode [ 266.584394][ T162] bridge_slave_1: left promiscuous mode [ 266.653857][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.553717][ T162] bridge_slave_0: left allmulticast mode [ 267.645687][ T162] bridge_slave_0: left promiscuous mode [ 267.689855][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.927320][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.979185][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.997980][ T162] bond0 (unregistering): Released all slaves [ 271.133626][ T6115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.446855][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.475777][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.513007][ T6201] bridge_slave_0: entered allmulticast mode [ 271.567767][ T6201] bridge_slave_0: entered promiscuous mode [ 271.609005][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.641287][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.667013][ T6201] bridge_slave_1: entered allmulticast mode [ 271.692113][ T6201] bridge_slave_1: entered promiscuous mode [ 272.101300][ T6201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.139177][ T6201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.201500][ T6115] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.032048][ T6201] team0: Port device team_slave_0 added [ 273.130733][ T6201] team0: Port device team_slave_1 added [ 273.217215][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.224735][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.417111][ T162] hsr_slave_0: left promiscuous mode [ 273.460410][ T162] hsr_slave_1: left promiscuous mode [ 273.511614][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.561647][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.638907][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.676536][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.819417][ T162] veth1_macvtap: left promiscuous mode [ 273.896726][ T162] veth0_macvtap: left promiscuous mode [ 273.902581][ T162] veth1_vlan: left promiscuous mode [ 273.938364][ T162] veth0_vlan: left promiscuous mode [ 275.159138][ T162] team0 (unregistering): Port device team_slave_1 removed [ 275.251920][ T162] team0 (unregistering): Port device team_slave_0 removed [ 278.711006][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.718732][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.918201][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.997666][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.060586][ T6201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.108308][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.119959][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.221439][ T6201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.723964][ T6201] hsr_slave_0: entered promiscuous mode [ 279.755431][ T6201] hsr_slave_1: entered promiscuous mode [ 279.775934][ T6201] debugfs: 'hsr0' already exists in 'hsr' [ 279.826837][ T6201] Cannot create hsr debugfs directory [ 280.893198][ T6362] syzkaller0: entered promiscuous mode [ 280.899600][ T6362] syzkaller0: entered allmulticast mode [ 281.902444][ T6201] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.080596][ T6201] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.245548][ T6201] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.365076][ T6201] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.087571][ T6115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.647677][ T6383] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 283.943208][ T6201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.177106][ T6201] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.264356][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.272027][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.319242][ T6391] netlink: 48 bytes leftover after parsing attributes in process `syz.1.118'. [ 284.385232][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.392779][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.369342][ T6115] veth0_vlan: entered promiscuous mode [ 286.786727][ T6115] veth1_vlan: entered promiscuous mode [ 287.089033][ T5789] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 287.389475][ T6115] veth0_macvtap: entered promiscuous mode [ 287.588216][ T6115] veth1_macvtap: entered promiscuous mode [ 288.509496][ T6201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.748122][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 288.754405][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 289.747163][ T5778] Bluetooth: hci2: unexpected event for opcode 0x040e [ 290.609005][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.620911][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.630409][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.643951][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.658626][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.790487][ T5778] Bluetooth: hci1: command tx timeout [ 294.134855][ T6201] veth0_vlan: entered promiscuous mode [ 294.372550][ T6201] veth1_vlan: entered promiscuous mode [ 294.828380][ T5778] Bluetooth: hci1: command tx timeout [ 294.878907][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 296.091963][ T6201] veth0_macvtap: entered promiscuous mode [ 296.345881][ T6201] veth1_macvtap: entered promiscuous mode [ 296.769767][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.865361][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.927022][ T5778] Bluetooth: hci1: command tx timeout [ 297.329915][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.370839][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.430513][ T6440] bridge_slave_0: entered allmulticast mode [ 297.490010][ T6440] bridge_slave_0: entered promiscuous mode [ 297.528770][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.564908][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.627067][ T6440] bridge_slave_1: entered allmulticast mode [ 297.647805][ T6440] bridge_slave_1: entered promiscuous mode [ 297.728303][ T152] bridge_slave_1: left allmulticast mode [ 297.749868][ T152] bridge_slave_1: left promiscuous mode [ 297.766749][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.802654][ T152] bridge_slave_0: left allmulticast mode [ 297.823022][ T152] bridge_slave_0: left promiscuous mode [ 297.836237][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.722326][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.793469][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.830569][ T152] bond0 (unregistering): Released all slaves [ 298.989475][ T6016] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.993758][ T5778] Bluetooth: hci1: command tx timeout [ 299.044363][ T6016] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.249894][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.287603][ T6016] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.309646][ T5955] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.385829][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.971816][ T6440] team0: Port device team_slave_0 added [ 300.023187][ T6440] team0: Port device team_slave_1 added [ 300.117575][ T152] hsr_slave_0: left promiscuous mode [ 300.166397][ T152] hsr_slave_1: left promiscuous mode [ 300.174205][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.289274][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.319676][ T6527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 300.388305][ T152] veth1_macvtap: left promiscuous mode [ 300.398723][ T152] veth0_macvtap: left promiscuous mode [ 300.416843][ T152] veth1_vlan: left promiscuous mode [ 300.447049][ T152] veth0_vlan: left promiscuous mode [ 300.735822][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 300.941378][ T11] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 300.976312][ T11] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.006620][ T11] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.046378][ T11] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.066799][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.142155][ T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.177462][ T11] usb 2-1: invalid MIDI out EP 0 [ 301.895503][ T11] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 301.947006][ T11] usb 2-1: USB disconnect, device number 2 [ 302.019502][ T152] team0 (unregistering): Port device team_slave_1 removed [ 302.095620][ T152] team0 (unregistering): Port device team_slave_0 removed [ 302.822223][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.872601][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.972130][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.042877][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.078098][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.158126][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.722409][ T6440] hsr_slave_0: entered promiscuous mode [ 303.772570][ T6440] hsr_slave_1: entered promiscuous mode [ 303.801396][ T6440] debugfs: 'hsr0' already exists in 'hsr' [ 303.828035][ T6440] Cannot create hsr debugfs directory [ 306.832811][ T6440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.997827][ T6440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.133892][ T6440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.264961][ T6440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.426454][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 307.626265][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 307.650265][ T5830] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 307.679883][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.714308][ T5830] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.746211][ T5830] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.800644][ T5830] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.861708][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.966790][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.974784][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.157995][ T5830] usb 1-1: GET_CAPABILITIES returned 2f [ 308.163923][ T5830] usbtmc 1-1:16.0: can't read capabilities [ 308.385618][ T5833] usb 1-1: USB disconnect, device number 2 [ 308.443387][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.516534][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.263424][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.504818][ T6440] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.661693][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.669301][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.743467][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.751136][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.966366][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.976373][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.986693][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.000895][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.012923][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.106424][ T5786] Bluetooth: hci5: command tx timeout [ 312.144750][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.409626][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.189497][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.518455][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.846014][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 313.985667][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.188547][ T5786] Bluetooth: hci5: command tx timeout [ 314.489039][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 314.732791][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 314.752838][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 314.815088][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 314.828421][ T14] bridge_slave_1: left allmulticast mode [ 314.834231][ T14] bridge_slave_1: left promiscuous mode [ 314.838311][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.877090][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.883511][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.949919][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.023031][ T14] bridge_slave_0: left allmulticast mode [ 315.028484][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.042153][ T14] bridge_slave_0: left promiscuous mode [ 315.092268][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.343217][ T5830] usb 2-1: GET_CAPABILITIES returned f8 [ 315.360539][ T5830] usbtmc 2-1:16.0: can't read capabilities [ 315.789425][ T5830] usb 2-1: USB disconnect, device number 3 [ 316.332659][ T5786] Bluetooth: hci5: command tx timeout [ 317.254257][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.366732][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.502681][ T14] bond0 (unregistering): Released all slaves [ 318.348300][ T5786] Bluetooth: hci5: command tx timeout [ 318.757653][ T6692] loop6: detected capacity change from 0 to 524287919 [ 318.836594][ T14] hsr_slave_0: left promiscuous mode [ 318.878681][ T14] hsr_slave_1: left promiscuous mode [ 318.898900][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.927315][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.971297][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.016517][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.108830][ T14] veth1_macvtap: left promiscuous mode [ 319.114513][ T14] veth0_macvtap: left promiscuous mode [ 319.182074][ T14] veth1_vlan: left promiscuous mode [ 319.216557][ T14] veth0_vlan: left promiscuous mode [ 319.874283][ T6707] loop0: detected capacity change from 0 to 512 [ 320.168952][ T24] IPVS: starting estimator thread 0... [ 320.447525][ T6713] IPVS: using max 240 ests per chain, 12000 per kthread [ 320.955723][ T6707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.026597][ T6707] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.108672][ T6707] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.179: corrupted inode contents [ 321.264525][ T6707] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.179: mark_inode_dirty error [ 321.349474][ T6707] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.179: corrupted inode contents [ 321.457887][ T6707] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.179: mark_inode_dirty error [ 321.985429][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.877301][ T14] team0 (unregistering): Port device team_slave_1 removed [ 322.968154][ T14] team0 (unregistering): Port device team_slave_0 removed [ 323.282176][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.355614][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.390364][ T6613] bridge_slave_0: entered allmulticast mode [ 323.413659][ T6613] bridge_slave_0: entered promiscuous mode [ 323.434627][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.483614][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.510332][ T6613] bridge_slave_1: entered allmulticast mode [ 323.525926][ T6613] bridge_slave_1: entered promiscuous mode [ 323.875893][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.015879][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.264608][ T6613] team0: Port device team_slave_0 added [ 324.321166][ T6613] team0: Port device team_slave_1 added [ 324.379576][ T6746] syz.1.188 uses obsolete (PF_INET,SOCK_PACKET) [ 324.721546][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.746601][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.816330][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.860814][ T6751] loop0: detected capacity change from 0 to 512 [ 324.870723][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.888622][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.993950][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.008123][ T6751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.047133][ T6751] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.167590][ T6751] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.189: corrupted inode contents [ 325.218423][ T6751] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.189: mark_inode_dirty error [ 325.247921][ T6751] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.189: corrupted inode contents [ 325.313482][ T6751] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.189: mark_inode_dirty error [ 325.482438][ T6613] hsr_slave_0: entered promiscuous mode [ 325.514949][ T6613] hsr_slave_1: entered promiscuous mode [ 325.561254][ T6613] debugfs: 'hsr0' already exists in 'hsr' [ 325.588822][ T6613] Cannot create hsr debugfs directory [ 325.601296][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.658351][ T6440] veth0_vlan: entered promiscuous mode [ 327.513903][ T6440] veth1_vlan: entered promiscuous mode [ 327.645403][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.652775][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.905180][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 328.943611][ T6786] netlink: 'syz.0.195': attribute type 3 has an invalid length. [ 329.474067][ T6440] veth0_macvtap: entered promiscuous mode [ 329.798314][ T6440] veth1_macvtap: entered promiscuous mode [ 330.314158][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.599323][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.903564][ T6015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.954836][ T6015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.066343][ T6613] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.161924][ T6613] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.333047][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.510308][ T6613] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 332.250132][ T6613] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 332.503101][ T6015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.230474][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 334.373694][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.502678][ T5786] Bluetooth: hci3: unexpected cc 0x040e length: 2 < 7 [ 334.512086][ T5786] Bluetooth: hci3: unexpected event for opcode 0x040e [ 334.656367][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.799603][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.807119][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.006737][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.014172][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.939720][ T6613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.740793][ T6854] genirq: Flags mismatch irq 10. 00200000 (aio_iiro_16) vs. 00200080 (virtio2) [ 337.508561][ T6864] loop2: detected capacity change from 0 to 512 [ 337.805978][ T6864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.886910][ T6864] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.950948][ T6864] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.212: corrupted inode contents [ 337.980875][ T6864] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.212: mark_inode_dirty error [ 338.050798][ T6864] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.212: corrupted inode contents [ 338.144731][ T6864] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.212: mark_inode_dirty error [ 338.352342][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.769833][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.338368][ T5786] Bluetooth: hci4: unexpected cc 0x040e length: 2 < 7 [ 339.349910][ T5786] Bluetooth: hci4: unexpected event for opcode 0x040e [ 340.107616][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 340.997733][ T6917] ===================================================== [ 341.005253][ T6917] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 341.012704][ T6917] eth_type_trans+0x6a2/0x9b0 [ 341.017648][ T6917] __dev_forward_skb2+0x4b1/0x940 [ 341.022894][ T6917] dev_forward_skb_nomtu+0x3b/0xe0 [ 341.028324][ T6917] __bpf_redirect+0x14d7/0x1760 [ 341.033325][ T6917] bpf_clone_redirect+0x4a6/0x6c0 [ 341.038651][ T6917] ___bpf_prog_run+0x12af/0xeb60 [ 341.043828][ T6917] __bpf_prog_run512+0xc5/0x100 [ 341.049017][ T6917] bpf_test_run+0x493/0xdf0 [ 341.053691][ T6917] bpf_prog_test_run_skb+0x22a5/0x3050 [ 341.059443][ T6917] bpf_prog_test_run+0x5bb/0x9f0 [ 341.064535][ T6917] __sys_bpf+0x925/0xee0 [ 341.069049][ T6917] __x64_sys_bpf+0xa4/0xf0 [ 341.073600][ T6917] x64_sys_call+0x13d0/0x3ea0 [ 341.078655][ T6917] do_syscall_64+0x134/0xf80 [ 341.083519][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.089727][ T6917] [ 341.092120][ T6917] Uninit was created at: [ 341.096776][ T6917] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 341.102904][ T6917] pskb_expand_head+0x2ef/0x1fb0 [ 341.108160][ T6917] skb_ensure_writable+0x44e/0x510 [ 341.113469][ T6917] bpf_clone_redirect+0x301/0x6c0 [ 341.118773][ T6917] ___bpf_prog_run+0x12af/0xeb60 [ 341.123860][ T6917] __bpf_prog_run512+0xc5/0x100 [ 341.128993][ T6917] bpf_test_run+0x493/0xdf0 [ 341.133643][ T6917] bpf_prog_test_run_skb+0x22a5/0x3050 [ 341.139387][ T6917] bpf_prog_test_run+0x5bb/0x9f0 [ 341.144485][ T6917] __sys_bpf+0x925/0xee0 [ 341.149006][ T6917] __x64_sys_bpf+0xa4/0xf0 [ 341.153557][ T6917] x64_sys_call+0x13d0/0x3ea0 [ 341.158550][ T6917] do_syscall_64+0x134/0xf80 [ 341.163302][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.169494][ T6917] [ 341.171926][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(full) [ 341.181406][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.191806][ T6917] ===================================================== [ 341.198928][ T6917] Disabling lock debugging due to kernel taint [ 341.205190][ T6917] Kernel panic - not syncing: kmsan.panic set ... [ 341.211999][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.0.220 Tainted: G B syzkaller #0 PREEMPT(full) [ 341.222953][ T6917] Tainted: [B]=BAD_PAGE [ 341.227190][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.237377][ T6917] Call Trace: [ 341.240751][ T6917] [ 341.243767][ T6917] __dump_stack+0x26/0x30 [ 341.248275][ T6917] dump_stack_lvl+0x50/0x1c0 [ 341.253042][ T6917] ? dump_stack+0x12/0x25 [ 341.257581][ T6917] dump_stack+0x1e/0x25 [ 341.261942][ T6917] vpanic+0x7b4/0x1430 [ 341.266215][ T6917] panic+0x15d/0x160 [ 341.270348][ T6917] kmsan_report+0x31a/0x320 [ 341.275055][ T6917] ? __bpf_prog_run512+0xc5/0x100 [ 341.280240][ T6917] ? __msan_warning+0x1b/0x30 [ 341.285188][ T6917] ? eth_type_trans+0x6a2/0x9b0 [ 341.290201][ T6917] ? __dev_forward_skb2+0x4b1/0x940 [ 341.295589][ T6917] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 341.301080][ T6917] ? __bpf_redirect+0x14d7/0x1760 [ 341.306265][ T6917] ? bpf_clone_redirect+0x4a6/0x6c0 [ 341.311632][ T6917] ? ___bpf_prog_run+0x12af/0xeb60 [ 341.316904][ T6917] ? __bpf_prog_run512+0xc5/0x100 [ 341.322102][ T6917] ? bpf_test_run+0x493/0xdf0 [ 341.326942][ T6917] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 341.332753][ T6917] ? bpf_prog_test_run+0x5bb/0x9f0 [ 341.338132][ T6917] ? __sys_bpf+0x925/0xee0 [ 341.342702][ T6917] ? __x64_sys_bpf+0xa4/0xf0 [ 341.347431][ T6917] ? x64_sys_call+0x13d0/0x3ea0 [ 341.352462][ T6917] ? do_syscall_64+0x134/0xf80 [ 341.357411][ T6917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.363727][ T6917] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.369757][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.375073][ T6917] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.381100][ T6917] ? should_fail_ex+0x45/0x8c0 [ 341.386233][ T6917] ? stack_depot_save_flags+0x35/0x790 [ 341.391930][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.397253][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.402581][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.407903][ T6917] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 341.414442][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.419752][ T6917] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.425763][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.431101][ T6917] __msan_warning+0x1b/0x30 [ 341.435789][ T6917] eth_type_trans+0x6a2/0x9b0 [ 341.440663][ T6917] __dev_forward_skb2+0x4b1/0x940 [ 341.445894][ T6917] dev_forward_skb_nomtu+0x3b/0xe0 [ 341.451200][ T6917] __bpf_redirect+0x14d7/0x1760 [ 341.456218][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.461541][ T6917] bpf_clone_redirect+0x4a6/0x6c0 [ 341.466759][ T6917] ___bpf_prog_run+0x12af/0xeb60 [ 341.471894][ T6917] __bpf_prog_run512+0xc5/0x100 [ 341.476927][ T6917] ? kmsan_internal_poison_memory+0x78/0x90 [ 341.482996][ T6917] ? kmsan_internal_poison_memory+0x4a/0x90 [ 341.489053][ T6917] ? kmsan_slab_alloc+0xdc/0x160 [ 341.494162][ T6917] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 341.500010][ T6917] ? slab_build_skb+0x5c/0x5b0 [ 341.505142][ T6917] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 341.510850][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.516172][ T6917] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 341.522704][ T6917] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 341.528957][ T6917] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 341.535067][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.540363][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.545652][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.551032][ T6917] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 341.557539][ T6917] ? kmsan_get_metadata+0x146/0x160 [ 341.562920][ T6917] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.568928][ T6917] ? __pfx___bpf_prog_run512+0x10/0x10 [ 341.574559][ T6917] ? __pfx___bpf_prog_run512+0x10/0x10 [ 341.580165][ T6917] bpf_test_run+0x493/0xdf0 [ 341.584808][ T6917] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.590821][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.596111][ T6917] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.602120][ T6917] ? bpf_test_run+0x2f4/0xdf0 [ 341.606957][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.612290][ T6917] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.618299][ T6917] bpf_prog_test_run_skb+0x22a5/0x3050 [ 341.623902][ T6917] ? kmsan_get_metadata+0xf1/0x160 [ 341.629255][ T6917] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 341.635208][ T6917] bpf_prog_test_run+0x5bb/0x9f0 [ 341.640309][ T6917] __sys_bpf+0x925/0xee0 [ 341.644727][ T6917] __x64_sys_bpf+0xa4/0xf0 [ 341.649273][ T6917] x64_sys_call+0x13d0/0x3ea0 [ 341.654134][ T6917] do_syscall_64+0x134/0xf80 [ 341.659043][ T6917] ? clear_bhb_loop+0x50/0xa0 [ 341.663908][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.669980][ T6917] RIP: 0033:0x7fe63e99c799 [ 341.674511][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.694260][ T6917] RSP: 002b:00007fe63f937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.702827][ T6917] RAX: ffffffffffffffda RBX: 00007fe63ec15fa0 RCX: 00007fe63e99c799 [ 341.710919][ T6917] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 341.718997][ T6917] RBP: 00007fe63ea32c99 R08: 0000000000000000 R09: 0000000000000000 [ 341.727077][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.735244][ T6917] R13: 00007fe63ec16038 R14: 00007fe63ec15fa0 R15: 00007ffc71433ba8 [ 341.743366][ T6917] [ 341.746753][ T6917] Kernel Offset: disabled [ 341.751174][ T6917] Rebooting in 86400 seconds..