last executing test programs: 17m44.095567822s ago: executing program 32 (id=2421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0x38}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0xf, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 16m44.819155473s ago: executing program 33 (id=2644): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='nilfs2_transaction_transition\x00', r0, 0x0, 0xc0b}, 0x18) mkdir(&(0x7f00000000c0)='./control\x00', 0x80) rmdir(&(0x7f0000000100)='./control\x00') 16m21.704581541s ago: executing program 34 (id=2716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 14m49.954522815s ago: executing program 35 (id=3080): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) 14m35.130251484s ago: executing program 36 (id=3141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) 14m5.685285185s ago: executing program 37 (id=3280): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6c5602, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r7, 0x1, 0x4}, 0x50) process_mrelease(r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x39000, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 13m47.009134973s ago: executing program 38 (id=3365): mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff007) 11m34.532273881s ago: executing program 39 (id=3930): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000e6850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x16, &(0x7f0000000180)={@local, @empty, @void, {@llc={0x4, {@snap={0x1, 0x0, "14", "70af8b", 0x8}}}}}, 0x0) 10m52.706132751s ago: executing program 40 (id=4123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10m41.107825426s ago: executing program 41 (id=4160): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) 10m11.041196944s ago: executing program 42 (id=4315): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x40, 0x8, 0x2, "be00"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9m53.984321158s ago: executing program 43 (id=4421): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 8m47.11351932s ago: executing program 44 (id=4719): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 8m21.494371701s ago: executing program 45 (id=4803): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000200)={0x1, 0x13e, 0x7c5}) close(0x3) 7m0.649858724s ago: executing program 46 (id=4936): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @remote, 0xb4a7}, 0x1c) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m49.48776104s ago: executing program 0 (id=5101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 5m47.682253405s ago: executing program 0 (id=5104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f0000000000)) 5m46.395643515s ago: executing program 0 (id=5109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000080)) 5m42.901980054s ago: executing program 0 (id=5110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000440), 0x0}, 0x20) 5m41.362560677s ago: executing program 0 (id=5113): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x28}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5m40.987887667s ago: executing program 0 (id=5115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000240)=r4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m25.596151844s ago: executing program 47 (id=5115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000240)=r4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m5.238813536s ago: executing program 1 (id=5169): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) pipe(&(0x7f0000000080)) timerfd_create(0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 5m4.120644244s ago: executing program 1 (id=5172): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_setup(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={0x0}) 5m2.404900156s ago: executing program 1 (id=5176): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m0.656798452s ago: executing program 1 (id=5178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, 0x0, 0x0}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x91, "9be619", "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"}}, 0x110) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4m58.890693173s ago: executing program 1 (id=5180): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55ad, &(0x7f0000009840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ftruncate(r3, 0x2007ffc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x40942, 0x0) 4m55.050191422s ago: executing program 1 (id=5183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000580), 0x2, 0xa202) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xfffffffb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, 0x0, 0xc8804) 4m38.103111595s ago: executing program 48 (id=5183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000580), 0x2, 0xa202) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xfffffffb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, 0x0, 0xc8804) 3m20.69193221s ago: executing program 4 (id=5302): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008100)='/sys/kernel/oops_count', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000200)={0x3, 0x2, 0x1, 0x3}) read$FUSE(r1, &(0x7f000000a3c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0xce, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 3m18.624811778s ago: executing program 4 (id=5303): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 3m16.802988414s ago: executing program 4 (id=5304): removexattr(&(0x7f00000004c0)='./file0\x00', 0x0) set_mempolicy(0x2002, 0x0, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x7, 0x9, 0x81, 0xd}, {0x80, 0xb, 0x3, 0x2}, {0x7, 0x3a, 0x2, 0x192}, {0x381, 0x9, 0x2, 0xfffeffff}, {0x1, 0x6, 0x80, 0x1}, {0xfe2a, 0x9, 0x14, 0xffffe44b}, {0xea, 0x2, 0x50, 0x603}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) dup3(r2, r0, 0x80000) 3m16.491481041s ago: executing program 4 (id=5306): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/7, &(0x7f0000000500)="009ea08f5fcedf5b802da89b010354498b8f118d233d6e235038ee90b259d2d92d14f1c676c553476371338707ac2d65e8a9c9617e15f8695c888172f73ee8cd3647a613fe583370b38b4747324f278e93", &(0x7f00000005c0)="1c0f4c2d9e466f707ad2aa6c44e3778bb62e2d77a78b3ff5824686b6455aebca6a84e7c401d6514a0f56a3365b96a14b6da2f52d8faef3b0db", 0x81, r7}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 3m11.211213726s ago: executing program 4 (id=5311): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000003c0)={0x3, 0x101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000400)) getpid() ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x15, 0x17, 0x10d, &(0x7f0000000540)}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3m6.255545682s ago: executing program 4 (id=5316): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171"], 0x28}}, 0x0) 2m50.784920099s ago: executing program 49 (id=5316): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171"], 0x28}}, 0x0) 34.820994897s ago: executing program 2 (id=5596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a000000000000109022400010000000009040100020300000009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) 32.211466382s ago: executing program 2 (id=5618): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) 32.072005728s ago: executing program 2 (id=5621): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 31.923678066s ago: executing program 2 (id=5624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) 30.717005882s ago: executing program 2 (id=5628): r0 = getpid() setresuid(0x0, 0xee01, 0x0) sched_setaffinity(r0, 0x0, 0x0) 30.136767969s ago: executing program 2 (id=5637): r0 = syz_clone(0x80080000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 28.756890342s ago: executing program 50 (id=5637): r0 = syz_clone(0x80080000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 9.044536855s ago: executing program 5 (id=5782): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.126323452s ago: executing program 5 (id=5804): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 4.898659234s ago: executing program 5 (id=5807): sync() syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x7}, 0xfd}}}, 0x7) creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x184) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.905657476s ago: executing program 5 (id=5820): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000580)={0x20, 0x8, 0x1, "d6"}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 3.571903397s ago: executing program 6 (id=5823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) fsopen(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x814, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3200000000615f666c7573682c6261636b67726f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c66c202748e327a69cd00"], 0x1, 0x556a, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x0) 2.883995992s ago: executing program 6 (id=5827): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0x2, 0x1, 0x0, 0x18}, 0x20) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x2, 0x2, 0x0, 0x2}, 0x20) dup2(r0, r1) 2.746863627s ago: executing program 6 (id=5830): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000040)) 2.678285679s ago: executing program 8 (id=5832): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2.601784776s ago: executing program 6 (id=5833): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) 2.443653836s ago: executing program 8 (id=5836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x3, 0x2, 0x8000c62) 2.375747875s ago: executing program 3 (id=5837): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x68}}, 0x0) 2.259487832s ago: executing program 7 (id=5838): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCDISCONN(r1, 0x7439) 2.139909127s ago: executing program 9 (id=5839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x338, 0x278, 0x0, 0xd0, 0x0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff, 0xffffff00, 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {}, 0xff, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x1, 0x6, 0x4, 0x4, 0x1], 0x2, 0x7}, {0xffffffffffffffff, [0x2, 0x3, 0x1, 0x5, 0x7, 0x2], 0x5, 0x5}}}}, {{@ip={@empty, @loopback, 0xff, 0xff000000, 'pimreg1\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0xc, 0x3, 0x8}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x81, 0x8}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xff000000, 0xff000000, 'batadv_slave_0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x1, 0x9c0c6caeed5607ed, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.888497468s ago: executing program 9 (id=5840): pipe(&(0x7f0000000280)={0xffffffffffffffff}) close_range(r0, r0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 1.864195264s ago: executing program 3 (id=5841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) 1.857381853s ago: executing program 8 (id=5842): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c040000000000200012800800010067747000140002800500050001000000080004000100000038af393c04"], 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 1.795197312s ago: executing program 7 (id=5843): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) sendmmsg$inet(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='A', 0x1}, {&(0x7f0000002700)='^', 0x1}], 0x2}}], 0x2, 0x48040) 1.622563008s ago: executing program 3 (id=5844): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 1.495069577s ago: executing program 9 (id=5845): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.494804688s ago: executing program 7 (id=5846): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x2) 1.433935283s ago: executing program 8 (id=5847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x175) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 1.375166294s ago: executing program 9 (id=5848): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) timer_create(0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 1.311904407s ago: executing program 6 (id=5849): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.311523443s ago: executing program 3 (id=5850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.269699944s ago: executing program 7 (id=5851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 1.20785729s ago: executing program 9 (id=5852): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xffffbffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) poll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x7981) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 1.135908093s ago: executing program 8 (id=5853): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file7\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRESDEC], 0x12, 0xc49, &(0x7f0000001cc0)="$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") ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000100)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) 1.135612726s ago: executing program 3 (id=5854): mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff007) 267.361461ms ago: executing program 9 (id=5855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) 267.250679ms ago: executing program 6 (id=5856): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 266.978569ms ago: executing program 7 (id=5857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r1, 0x405, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}]}, 0x58}}, 0x20004080) 256.788107ms ago: executing program 3 (id=5867): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x17) write$UHID_INPUT(r0, &(0x7f0000000480)={0x8, {"e6f431adb8d797eda4899067ad67efaab505c311c12f768c938e7a56a5585bea8e37d073fcc8589aa611270bcff609aec8ab8fba0bc6ddb5fa7d69b666cbe3fa65413576b58c8e41beb32432f7b4ff66e46bb190a6f838d6eef970e8602460dfd3cee8d7b4bf9fa6594499ce95418f89e502d41b93a99419b0becf743e6c9c0641a03436eb29c6996e6d190974c4ec9f07f60288cca5750904c77379ff2ddea9030f5c321903de5aa11947714d98509a9da6478f9e083e4c4ac77e308d7abe9a5e9507dbfd19d23d6e2e7ec5ea04a91378563206260af8d9090a163e613b49cb7297ab9eba6e4827c709ed06a1186513b31fa629f3e6c2a6e652b0df6df4c39ff39605a69481eca8c9d12a74f4c481cce8b4ab7e80c51374e552b29810a0facbfd51a7443ce6ec097284af26be9c42d6918adbf2431248d1c3c99840d54f776b87604e8b29318cd7a7a6d42a64fc2bc0cbde2734fee4734a799274561b8e0240cff4aa207a042a5d8d6fc004db9be06f56b6552ee6e17824b3dc1844e60748d04ad9f41e04e16827d3e48dcc4f609af57fd588a3e27446ef9e0e4a90bf5a0581f03d391fdb7498d2c41b144a5154c0881ff0427836999b417f37b40e09150a15b004eb0ab87a7c363e8d95f92e4c5f4150229ed19720db059ff5c4830c2e4a14f0e66f4d81367cb582b08ed2fd5eee364d1b902042c4c0d1ddbc2cc31058d17cdbbcd0e5c0ed0bd176aa3ad02d1ca7e77cd1c58777fe6f95df8964defb4832d97654199f8a5968dc4de980cd8eadb18782636af789cdb58d36f4db424a1f5c110f1d75acdacbf9d4b29288071339aed717d02dce0b4f1eb421b18e1e2e06fc11b5fd8ce00c95d217d409fa21bd0a39b74592056b50f090bdec07c5665c37856ea6272a52f73f7c1e36dbe7e73aefb5107cd99300e4e29663a43d9af498325b0036b44b3e2f70b605a2c3404244bec0e9eda1cddf18134b86cb3504756fb134935707c7f638d640f5851806494f989eef17851f7fb34c942df50e01d365cb52a0e1845989fb5eb94973b8fe3947f9ce520af36f3cf3f73f807cf52a8dffdb08f246a94ea924201e61ea252e7a5c61f36e22224c6fedfe3a5699f4dbc74becb6067c84adc3a04a3bddc35e4e4ee3a45baa30a95a40aa823372e66327e109d779231e2d022466d1f57c9723fa7d5baf331030b64768939d72e0276371f6fbd6d9a16d1c77c24ff8f7e7864b2583e2afd2e4c6617c0ca61f0ab76986a10ac2b8d63609edd742523dfa03419b2e84029f0d16f882196d6440113fe7ce1cbc37b25a3d71ca64bd3171b93e097867fef0c3f326de5ee84a22a2ba2f9716195cd147fe90de97c147e34271d8f58c39df104f218b4aac36aed8b0fbf4d19e5cec509869e9c90ca324601c73671182da503400c0d1756a283bfd424d5857bd48bd934c7abe8f43124ab08bc9039c91407be2c06327e288228543bf629d999e33378f6676a3730e2d04ea693479e32eee0914aa2d07291a5545e37b50dad288e15b7d2db84c909ff6dc762638b52374352440f70dc73fae4d44e826a2d339c3e60bd52d2c0fcc019b07559e6fe88a61349f12a3bd567333a3efc0be8ed771ea2a20cc15894839e00006660ffb57a0ea5430b8733f589a73e4601007ca30f81dde78a45fb01c346d2ff4395e15c3d16fd52ff6e589710d9f98700c5026daef98979504edd5a8246b3ef4dff5ba8f399238d7670afe4423e403123874ff5de0bbf2961795bec8b274ff2eed55ce31cfb98596db06a8e5c35d0c8806f77f18a4ab7773838f00f686c1a857abb347f01b98ff8d7b5436685f5d232a5dfb119439a006af2d1654ba2fa97f5a5c83b5e8b59fe883d02e558e28938ee1507e962a87e50253d5674b0e8b82a350a39dc5c393d1c128544b7fc34000dbead3b5a6b4ab4d0235ff49e954718d58716506888df8673d426cc99b4f311971880590f508dd6528808bc9a93ada20f74439fc9c5136c0380dc528bfb9f19320aa899982e2bbc8cc5d0732975d869c984a3205846153f39a3928d76fe1d27cd6c292ab3e3c274365d105d087f68e8562e8690438ac26141b7a44d7d19c09a077e514eaad2415da9cfb8f3d400831fb27564f337841f80e3ff53524acb74bcce2646efe94b5ffeb75bc4836431ab0281a3efabf3588910baa673776b6df546e0bcbfa66e2df0735f4d0d47ae515ff21a5076cced40720728016ff4fa19e676657580b57778686118c391b39171f9accb8effdc4e6a7ac623636549539c078b3bda093f1f61c80db8f5475cf090f07534a8c759cb94245ebc8e4f66370cbdc93129b31c7a4212c2b9fcca8e26c0f5e5f1e5bf23a0ad837cb6f3d2bb8d0d2543065dac08ad76fda171bb63b7e755058e87096d0c14fa557f1ec0c5515f9d60cd4e08071d4d8be253afe706655e73ce36d832c610194c99d5be27874c326fa2a327422a7f7dca9975135e790ce1f0b7c0aa6ddf410414d0e6a0a556fcf95da7b165b375d1963705ed687e354e641e1257bc01bc284c16625d51a6ca2d2a851ba4999278f209a242029a1af540c1fda4a9363ebc0b5f51b71400d5bdbd3be08f90333de7c6c2cb5c2130897acbe185413679444add988463f0ca8673fc41fdb7ca754bee67cdd8b5223d5b9c6548cbf82210b6853dae112b580690ba9ab37686c2a7da8888631f2e34c9bf6fb4a1ea0755cee6e1ee6af59c114ae6ffbfe7095a2ec406eda886491be391f44a476c75c55f8810977854d6a419b3f7001bb41b55134d2434c7776faf25a26ec553e696b6364464587f962d126627c6a3902a5185654f689bc5609712fc6dc6e421efd001b2176ad1f44491269cf5ffa104f87119e9cb4307776f2fd15dbc71287062d1c7713618e3ce27bb763f910b0bbc4c7135dfb3e53c701c0e9aa8ba7203c29c936d71c31022cc7cdc1393ca4e68626a8297ac17878d56dd90bf60d3b9d981bdbf00321598211f4ad24c302083ebc59756320f6cb0342428f8832b5c9f19e83dfcf0397e64e7e1c046f96fc8b0c307c33e12d8dec06cf36b9e947a9513d858ec137891231ea775c8d526563639a469ce88506ccb4fac5966d356b4d4dcaa8121d0b615bdc3d33c03011f4f56f73dadd374010129814fa6ea2ce46d0f0b5400aca49089cc047e006babce6bb3f1c4fc60a45fe7600780c2b1b8efcc52f254da611037774afe8c3c62f413c9f03072612f1523081fc3638f7b3232985859a7985a0e0f90e3385f1c61b4aee02e71c2781dd39f05794d26315a1a0f1616a7605a200aa81e1279f545bcb5e458c031ce46224f3684b3fd9fa087164126e2434b4a5312533219f6d8817bbe8750163aa6c2ef657065f58b79c74650cfb4be55d24fd3b9bdee1118e8704a8b45e4d226bc346d599189cbf756f1941259938abe01950577e749179adbbc4522b2955052c114497bb3abcf0ad57a31250666dfb10595ef1fcec9b1062d34eddad4114b58d8ec8ee9ab3b51ac3b9114b8335caaf36c7669cb9611b7beceedc80574eafdb996077733774864448ce11f89d0881b13a666d677fa2ede41e5fbc85dca3ab342a23be3bb4efb8e38a712858ee7a5be4a87dee6f464ab18a74bc8561f4be69f58756ba3af114cc5280fd67c10da415ee3d5b90ec419e379d1cccc5e6c7036ecca479aabb56ff786ae4f65ecdfb2521fb453ae1633f15dff95f1d431adb34716934843bb6d0c1e85116e37b14d1c33d14eab0994b6d6b67ed9599172cc8060bfba021ec1199961c34d99047ed523f056d5e958c7dacb64a9feb3d3dda7a623d1e3106c279d240ed094e1b95cf493964f29e47ed349bdc933f01a205c8d6526eacb769cfc111f2b89e53a463d70f630b0653116d97f132990498dfbe81e280c0d7dfb2fb48ca474e224a23a8c6c801a0ed612822affc49a571bca55c645d016b1cf7d74ff36d4c56e7aab5ccf2f02af075dd3d41ca9c0fccf5164aa1394ce3eacfbe85b52e7f58e2c585e25e54a8c5ae1e35922104438ed5143286b724a7c8e3313e0466d6ebb79eafaa47e854e38c3293194a8aae33caae602eaa269f099b282821582b3394c011163156d0664460ba0ce2ba241cb0dff56e43ddffc502d3ab593b6b8ed33cc5003a50aa3ab81d2a708201432296937abebc89355ca633df432151c1ba80e6f8f62399f3aea2ece98771d2d738e7adf3df5a9166d67e454b9c0f5fcc3e453bfa344bdc760711c32138cbd0b5a56aa0f2044725574c18355c8576c99ae607b08ef10f74b220e41a1b2ba0f0300a79bc5cc0fbdd0e76d3ef1d06ccffa5bfdde9b93a53c860b8adcacbfd7b7555c84be0095db9bbf9927a3304df7e04a52bdc7d52298fae2896246f1792209625226e8f9bd3cfb46262b5a357a0487fad055878c9d21ee3447e552c287a1d98ab6be679d89cbd0e66ccc4f78fc15db7d8853f9eebae39d15703141a657fd1a610c7727d454b85d2b7b8c525ae5541629df416307d31756bab9e0c6917c2e9b5cc57cf7273631c06169102bb8bf714fbacfe79950be5a2b3e80258cb54db895c3325f996c6f15540dc0e8ad65e53bbf50e8e08a99645f63e0d7aa842825f86bff818acb0a2e8c9e4f4a2d017cf1dd9edbcc73e01bd27ddd76d459f583bcae40c561893befb2ddc4cb18c9b4657395da7b3a9dcb9aa650f1673debf0d5410a414ecda5ab97df93bf6cd288eff3977b5e54417d93d98a7b05d1fd0a1dd3e0b328f723d1d0e1656c26e6da979a42fee72d3926decb6ddbd1ef35d282ab743450170a15c02a21d3b8fc43fa9dc57984572f5e89ed932d0c04772db58bdeee8059e9bf9a2214f6ae0c484739150f804343e565b3e47cb600bd067300b608bd4cc8bd483a138a5059264fb23cf45d54c4900ed1ca3428610230e64ee6a758eee1f115e865b3243446c134dd9880bf3f47dfce18867b9baa7dc22ab114353ea916a35751a2a3ee89f0488d33dd27d7ceddb9bf24ecc5472b1dd38741facbffa88511f1c0f535ab8bf7ab1123313787f9b5c1ca6c6d7ff8bb41ec7d0fb537984cdc80b35df9a57d09905f775edf1230aa9636f7152311555eec8d5b1fddfecb03805486a8aafb8cc42dfcd08aa3705fe62b5d4cd7679eeabff26cb748f51c394d0d0dea2dd0b2a4876d99a2c69301748bd0f44a7307f46bbdd7104f07cec73a85414bbc8bd347fe28f897c4004568cc2ce660944c6d51f7479f98fed1a9700678b24cb6478cacde29e30bf32cae6aeb82b1d4c38d9dc1902772375a97a78fc6e506ae2ac58031d1b23ce317431b361044f4bd6e9e4c5f91df17e3d6b51eea27173c5230da9fae4fe052daeda63d769013fd3ccd36a315abc1a147033714a3b943ed79167491d3ec7d5cee44e0621684bf29c4ccc1b88e9659d622d9a148bdfcc5a25b950cbc06dc57d095fa3df852ad7d789be1ac3e844ed158f4304ef9533a56930236889ffe2b83db8adc954cdf7bbce11f20531c9b075f41fb73b4d499040c947c12be50a38e9d9dc727c012a971ace2e78914cbac5d5ae85ef0e0b283d6b58622330818a39c4b51867d2180aecac2009f900df9772188a40e69c10a633cbcd00f57b82e4e436ca3b68fd96943c3055fef85dd26580ab9fbc231c5af59df1fd2d8ded94db7f373d07e8b45256cf94b4c25fcb4a3135eddc6a400dcdeea24909eee6d08c061563feb602b1fca1e7a7a6b11b7f4bf0c5450ad695dfe5c4623ececaa75074a2d6604e7f109402b71f88de3ec4ae0b8ca44feae432d3b97bb0566b03fbd2274dcc2e", 0x1000}}, 0x1006) 256.424335ms ago: executing program 5 (id=5858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 255.903393ms ago: executing program 8 (id=5859): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x8, 0x55610518, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 70.421686ms ago: executing program 7 (id=5860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x680c}], 0x1, 0x0, 0x0) 0s ago: executing program 5 (id=5861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = open(0x0, 0x149442, 0x0) ftruncate(r6, 0x200002) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) kernel console output (not intermixed with test programs): slaving as an active interface with an up link [ 1523.010658][ T30] audit: type=1326 audit(2000000937.299:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22514 comm="syz.1.5014" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635b38f749 code=0x0 [ 1523.196414][ T30] audit: type=1800 audit(2000000937.369:135): pid=22520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5012" name="nullb0" dev="tmpfs" ino=2618 res=0 errno=0 [ 1523.322590][T22371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.495551][T22371] team0: Port device team_slave_0 added [ 1523.539175][T21355] hsr_slave_0: left promiscuous mode [ 1523.577898][T21355] hsr_slave_1: left promiscuous mode [ 1523.585699][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1523.601353][T21355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.628268][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.640282][T21355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.684879][T21355] veth1_macvtap: left promiscuous mode [ 1523.714424][T21355] veth0_macvtap: left promiscuous mode [ 1523.723684][T21355] veth1_vlan: left promiscuous mode [ 1523.729339][T21355] veth0_vlan: left promiscuous mode [ 1524.315123][T22531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1527.359446][T22550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1530.100816][T21355] team0 (unregistering): Port device team_slave_1 removed [ 1530.188249][T21355] team0 (unregistering): Port device team_slave_0 removed [ 1536.555243][T22371] team0: Port device team_slave_1 added [ 1536.678255][T22564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.413958][T22371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.474582][T22371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.593214][T22371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.624239][T22371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.642567][T22371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.715694][T22371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.712667][T22644] delete_channel: no stack [ 1540.262853][T22371] hsr_slave_0: entered promiscuous mode [ 1540.374266][T22371] hsr_slave_1: entered promiscuous mode [ 1540.381289][T22371] debugfs: 'hsr0' already exists in 'hsr' [ 1540.387004][T22371] Cannot create hsr debugfs directory [ 1541.230918][T22660] netlink: 'syz.0.5052': attribute type 10 has an invalid length. [ 1541.295957][T22660] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1543.698046][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'. [ 1543.709400][T22672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5055'. [ 1547.576819][T22700] overlayfs: failed to clone upperpath [ 1547.630235][T21355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.418409][ T6012] IPVS: starting estimator thread 0... [ 1548.590814][T22713] IPVS: using max 31 ests per chain, 74400 per kthread [ 1548.713489][T21355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.188505][T21355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.332463][T21355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.909132][ T6006] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1555.190688][ T6006] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 1555.198898][ T6006] usb 5-1: config 0 has no interface number 0 [ 1555.224785][T21355] bridge_slave_1: left allmulticast mode [ 1555.239084][T21355] bridge_slave_1: left promiscuous mode [ 1555.244864][T21355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.290118][ T6006] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=a9.42 [ 1555.308184][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.326538][ T6006] usb 5-1: Product: syz [ 1555.619684][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.630408][T21355] bridge_slave_0: left allmulticast mode [ 1555.636073][T21355] bridge_slave_0: left promiscuous mode [ 1555.641662][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.648069][ T6006] usb 5-1: Manufacturer: syz [ 1555.658195][ T6006] usb 5-1: SerialNumber: syz [ 1555.665419][T21355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.678515][ T6006] usb 5-1: config 0 descriptor?? [ 1556.356343][ T6006] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1556.415290][T21355] bridge_slave_1: left allmulticast mode [ 1556.499341][T21355] bridge_slave_1: left promiscuous mode [ 1556.511748][T21355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.591012][T21355] bridge_slave_0: left allmulticast mode [ 1556.596672][T21355] bridge_slave_0: left promiscuous mode [ 1556.658175][T21355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.528017][T20550] usb 5-1: USB disconnect, device number 59 [ 1558.353650][T21355] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1558.362435][T21355] bridge0 (unregistering): left allmulticast mode [ 1558.387906][T21355] batman_adv: batadv0: Removing interface: macvtap1 [ 1559.892393][T21355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.978992][T21355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.496404][T21355] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1561.459320][T21355] bond0 (unregistering): Released all slaves [ 1562.561808][T18929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1562.719426][T18929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1562.729989][T18929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1562.830130][T18929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1562.837993][T18929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1563.307322][T22808] loop1: detected capacity change from 0 to 2048 [ 1563.867744][T22808] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1564.802086][T22811] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1564.920295][T18929] Bluetooth: hci2: command tx timeout [ 1566.841126][T21355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1566.865738][T21355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1566.891845][T21355] bond0 (unregistering): Released all slaves [ 1566.989517][T18929] Bluetooth: hci2: command tx timeout [ 1569.382919][T18929] Bluetooth: hci2: command tx timeout [ 1571.396020][T18929] Bluetooth: hci2: command tx timeout [ 1573.892707][T22876] loop4: detected capacity change from 0 to 40427 [ 1573.907808][T22876] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1573.915605][T22876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1573.937608][T22876] F2FS-fs (loop4): invalid crc value [ 1574.224030][T22876] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1574.250674][T22876] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1574.258155][T22876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1575.469225][ T30] audit: type=1800 audit(2000000989.109:136): pid=22888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5107" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1577.623688][ T30] audit: type=1800 audit(2000000991.849:137): pid=22888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5107" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1579.159204][T21355] hsr_slave_0: left promiscuous mode [ 1579.185296][T21355] hsr_slave_1: left promiscuous mode [ 1579.199905][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.217456][T21355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.249562][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.256944][T21355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.425499][T21355] hsr_slave_0: left promiscuous mode [ 1579.961928][T21355] hsr_slave_1: left promiscuous mode [ 1579.972264][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.008273][T21355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.027420][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.041060][T21355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.115547][T21355] veth1_macvtap: left promiscuous mode [ 1580.131297][T21355] veth0_macvtap: left promiscuous mode [ 1580.421936][T21355] veth1_vlan: left promiscuous mode [ 1580.439418][T21355] veth0_vlan: left promiscuous mode [ 1581.300465][T21355] veth1_macvtap: left promiscuous mode [ 1581.307125][T21355] veth0_macvtap: left promiscuous mode [ 1581.317509][T21355] veth1_vlan: left promiscuous mode [ 1581.324541][T21355] veth0_vlan: left promiscuous mode [ 1581.789615][T19499] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1581.960705][T19499] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.979259][T19499] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1582.003532][T19499] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1582.019214][T19499] usb 2-1: Product: syz [ 1582.028272][T19499] usb 2-1: Manufacturer: syz [ 1582.039280][T19499] usb 2-1: SerialNumber: syz [ 1582.055066][T19499] usb 2-1: config 0 descriptor?? [ 1582.152800][T19499] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1584.621656][ T5825] usb 2-1: USB disconnect, device number 64 [ 1586.084003][T21355] team0 (unregistering): Port device team_slave_1 removed [ 1586.609879][T21355] team0 (unregistering): Port device team_slave_0 removed [ 1593.477555][T21355] team0 (unregistering): Port device team_slave_1 removed [ 1593.526953][T21355] team0 (unregistering): Port device team_slave_0 removed [ 1594.720239][T22998] loop1: detected capacity change from 0 to 512 [ 1594.777413][T22998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.809605][T22998] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1595.211812][T19691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.199437][T21781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1597.219242][T21781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1597.230525][T21781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1597.263272][T21781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1597.279665][T21781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1597.527832][T22906] tipc: Enabling of bearer rejected, failed to enable media [ 1599.680171][T18929] Bluetooth: hci6: command tx timeout [ 1600.531114][T23048] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1601.709155][T18929] Bluetooth: hci6: command tx timeout [ 1603.291799][T23065] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1603.790140][T18929] Bluetooth: hci6: command tx timeout [ 1606.900819][T18929] Bluetooth: hci6: command tx timeout [ 1608.836543][T23087] loop4: detected capacity change from 0 to 64 [ 1608.901257][T23087] syz.4.5157: attempt to access beyond end of device [ 1608.901257][T23087] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1610.510457][T22802] chnl_net:caif_netlink_parms(): no params data found [ 1613.949135][T21781] Bluetooth: hci0: command 0x0406 tx timeout [ 1614.062449][T23123] tipc: Enabling of bearer rejected, failed to enable media [ 1614.509083][T23139] befs: (nullb0): invalid magic header [ 1615.281769][T22802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.309605][T22802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.318010][T22802] bridge_slave_0: entered allmulticast mode [ 1615.329832][T22802] bridge_slave_0: entered promiscuous mode [ 1615.368789][T22802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.088698][T22802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.096102][T22802] bridge_slave_1: entered allmulticast mode [ 1616.104141][T22802] bridge_slave_1: entered promiscuous mode [ 1616.247471][T21355] IPVS: stop unused estimator thread 0... [ 1616.919634][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.925965][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.042752][T22802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.490033][T22802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.255645][T21355] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.325131][T23021] chnl_net:caif_netlink_parms(): no params data found [ 1618.355672][T22802] team0: Port device team_slave_0 added [ 1618.441663][T23170] loop1: detected capacity change from 0 to 2048 [ 1618.449547][T22802] team0: Port device team_slave_1 added [ 1618.504087][T21355] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.527718][T23170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1619.802871][T23173] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1619.851913][T19691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.275369][T21355] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.451637][T22802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.459408][T22802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.769913][T22802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.051626][T23188] loop1: detected capacity change from 0 to 40427 [ 1622.094524][T23188] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1622.102342][T23188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1622.149575][T23188] F2FS-fs (loop1): invalid crc value [ 1622.253375][T23188] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1622.278127][T23188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1622.285331][T21355] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.295754][T23188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1623.567248][ T30] audit: type=1800 audit(2000001036.979:138): pid=23196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5180" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1624.315106][T21781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.327902][T21781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.335891][T21781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.344022][T21781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1624.351640][T21781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1625.349982][T23021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.357126][T23021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.408015][ T30] audit: type=1804 audit(2000001039.699:139): pid=23201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5182" name="/newroot/136/file1" dev="fuse" ino=1 res=1 errno=0 [ 1625.409288][T23021] bridge_slave_0: entered allmulticast mode [ 1625.468282][T23021] bridge_slave_0: entered promiscuous mode [ 1625.476867][T23021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.484442][T23021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.491614][T23021] bridge_slave_1: entered allmulticast mode [ 1625.499174][T23021] bridge_slave_1: entered promiscuous mode [ 1625.908100][T23021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.267452][T23021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.994825][T18929] Bluetooth: hci1: command tx timeout [ 1628.806318][T23225] loop4: detected capacity change from 0 to 2048 [ 1628.949363][T23021] team0: Port device team_slave_0 added [ 1629.079261][T18929] Bluetooth: hci1: command tx timeout [ 1629.426513][T23225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1630.000691][T23021] team0: Port device team_slave_1 added [ 1630.172313][T23021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.192343][T23021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.249039][T23021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.281004][T23021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.290335][T23021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.316448][T23021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.155685][T18929] Bluetooth: hci1: command tx timeout [ 1633.231705][T18929] Bluetooth: hci1: command tx timeout [ 1633.897754][T23021] hsr_slave_0: entered promiscuous mode [ 1633.920458][T23021] hsr_slave_1: entered promiscuous mode [ 1634.379401][T23260] loop4: detected capacity change from 0 to 65536 [ 1634.440465][T23021] debugfs: 'hsr0' already exists in 'hsr' [ 1635.109206][T23021] Cannot create hsr debugfs directory [ 1635.126522][T23260] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1636.067371][T23260] XFS (loop4): Ending clean mount [ 1636.084022][T23260] XFS (loop4): Quotacheck needed: Please wait. [ 1636.165030][T23205] chnl_net:caif_netlink_parms(): no params data found [ 1636.285598][T23260] XFS (loop4): Quotacheck: Done. [ 1636.854305][T20186] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1637.848195][T23205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.866634][T23205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.874015][T23205] bridge_slave_0: entered allmulticast mode [ 1638.652772][T23205] bridge_slave_0: entered promiscuous mode [ 1638.948637][T23205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.956052][T23205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.840790][T23205] bridge_slave_1: entered allmulticast mode [ 1639.850187][T23205] bridge_slave_1: entered promiscuous mode [ 1643.482525][T23205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.602190][T23205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.671480][T21355] bridge_slave_1: left allmulticast mode [ 1643.871646][T21355] bridge_slave_1: left promiscuous mode [ 1643.877975][T21355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.920843][T21355] bridge_slave_0: left allmulticast mode [ 1644.926526][T21355] bridge_slave_0: left promiscuous mode [ 1646.423836][T21355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.524240][T21355] bridge_slave_1: left allmulticast mode [ 1646.569068][T21355] bridge_slave_1: left promiscuous mode [ 1646.627365][T21355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.897806][T21355] bridge_slave_0: left allmulticast mode [ 1646.909056][T21355] bridge_slave_0: left promiscuous mode [ 1646.914816][T21355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.057710][T21781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1648.084080][T21781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1648.109550][T21781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1648.134444][T21781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1648.158410][T21781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1650.439149][T21781] Bluetooth: hci2: command tx timeout [ 1652.509224][T18929] Bluetooth: hci2: command tx timeout [ 1653.148012][T23362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1654.523850][T23364] loop4: detected capacity change from 0 to 65536 [ 1654.591028][T18929] Bluetooth: hci2: command tx timeout [ 1654.596978][T23364] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1654.605730][T23364] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1654.728209][T23364] XFS (loop4): Ending clean mount [ 1654.734785][T23364] XFS (loop4): Quotacheck needed: Please wait. [ 1654.750357][T21355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1654.776928][T21355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.810760][T23364] XFS (loop4): Quotacheck: Done. [ 1654.825817][T21355] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1654.857579][T21355] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1655.149702][T21355] bond0 (unregistering): Released all slaves [ 1655.865857][T21355] bond1 (unregistering): Released all slaves [ 1656.671703][T21781] Bluetooth: hci2: command tx timeout [ 1656.724704][T20186] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1657.417586][T21355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.443732][T21355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.475779][T21355] bond0 (unregistering): Released all slaves [ 1657.782306][T23205] team0: Port device team_slave_0 added [ 1657.953240][T23205] team0: Port device team_slave_1 added [ 1660.625310][T21781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1660.635895][T21781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1660.670666][T21781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1660.701520][T21781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1660.718428][T23397] loop4: detected capacity change from 0 to 256 [ 1660.733954][T21781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1660.865727][T23397] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1660.947157][T23397] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1660.995297][T23205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.029209][T23205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.167725][T23205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.336601][T23205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.374674][T23407] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1662.672456][T23205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.698506][T23205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.180750][T21781] Bluetooth: hci3: command tx timeout [ 1665.929093][T21781] Bluetooth: hci3: command tx timeout [ 1666.178357][T23205] hsr_slave_0: entered promiscuous mode [ 1666.199929][T23205] hsr_slave_1: entered promiscuous mode [ 1666.207870][T23205] debugfs: 'hsr0' already exists in 'hsr' [ 1666.220019][T23205] Cannot create hsr debugfs directory [ 1667.861447][T21355] hsr_slave_0: left promiscuous mode [ 1668.145991][T21781] Bluetooth: hci3: command tx timeout [ 1668.629105][T21355] hsr_slave_1: left promiscuous mode [ 1668.635434][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.128962][T21355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.137334][T21355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.147512][T21355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.177648][T21355] hsr_slave_0: left promiscuous mode [ 1669.183752][T21355] hsr_slave_1: left promiscuous mode [ 1669.216861][T21355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.337657][T21355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1670.200261][T21781] Bluetooth: hci3: command tx timeout [ 1670.209381][T21355] veth1_macvtap: left promiscuous mode [ 1670.215026][T21355] veth0_macvtap: left promiscuous mode [ 1677.255985][T23508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1677.266841][T23508] overlayfs: failed to set xattr on upper [ 1677.272614][T23508] overlayfs: ...falling back to redirect_dir=nofollow. [ 1677.279487][T23508] overlayfs: ...falling back to index=off. [ 1677.285286][T23508] overlayfs: ...falling back to uuid=null. [ 1677.354046][T23509] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1678.617375][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.659112][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.065197][T21355] team0 (unregistering): Port device team_slave_1 removed [ 1680.505366][T21355] team0 (unregistering): Port device team_slave_0 removed [ 1685.575125][T18929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1685.586032][T18929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1686.430188][T18929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1686.438322][T18929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1686.446069][T18929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1688.145724][T23577] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5262'. [ 1688.158289][T23577] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5262'. [ 1688.511420][T21781] Bluetooth: hci6: command tx timeout [ 1691.069077][T21781] Bluetooth: hci6: command tx timeout [ 1692.627033][T21355] team0 (unregistering): Port device team_slave_1 removed [ 1692.817359][T21355] team0 (unregistering): Port device team_slave_0 removed [ 1693.183514][T18929] Bluetooth: hci6: command tx timeout [ 1693.966684][T23328] chnl_net:caif_netlink_parms(): no params data found [ 1695.391224][T18929] Bluetooth: hci6: command tx timeout [ 1696.270208][T23619] loop4: detected capacity change from 0 to 32768 [ 1696.437030][T23619] JBD2: Ignoring recovery information on journal [ 1696.490344][T23619] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1696.531452][T23328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.539617][ T30] audit: type=1800 audit(2000001110.829:140): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5270" name="file1" dev="loop4" ino=17056 res=0 errno=0 [ 1696.583408][T23328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.740053][T23328] bridge_slave_0: entered allmulticast mode [ 1696.853362][ T30] audit: type=1800 audit(2000001110.829:141): pid=23618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5270" name="file1" dev="loop4" ino=17056 res=0 errno=0 [ 1696.882728][T23328] bridge_slave_0: entered promiscuous mode [ 1696.929800][T20186] ocfs2: Unmounting device (7,4) on (node local) [ 1696.970429][T23328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.977542][T23328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.999297][T23328] bridge_slave_1: entered allmulticast mode [ 1697.007117][T23328] bridge_slave_1: entered promiscuous mode [ 1698.130007][T23635] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1698.136919][T23635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1698.145945][T23635] vhci_hcd vhci_hcd.0: Device attached [ 1699.475311][T20550] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1699.550488][ T5967] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1699.966271][T23328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.194358][T23328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.363192][T23637] vhci_hcd: connection closed [ 1700.370372][ T60] vhci_hcd: stop threads [ 1700.398190][ T60] vhci_hcd: release socket [ 1700.427559][ T60] vhci_hcd: disconnect device [ 1700.447608][T23646] loop4: detected capacity change from 0 to 512 [ 1700.456738][T23646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1700.471443][T23646] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.5275: inode has both inline data and extents flags [ 1700.487218][T23646] EXT4-fs (loop4): Remounting filesystem read-only [ 1700.494190][T23646] EXT4-fs (loop4): get root inode failed [ 1700.500090][T23646] EXT4-fs (loop4): mount failed [ 1700.773810][T23328] team0: Port device team_slave_0 added [ 1700.790917][T23394] chnl_net:caif_netlink_parms(): no params data found [ 1700.857161][T23651] Bluetooth: MGMT ver 1.23 [ 1701.553044][T23328] team0: Port device team_slave_1 added [ 1701.656437][T23653] netlink: 'syz.4.5277': attribute type 10 has an invalid length. [ 1701.737266][T23653] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1701.748706][T23328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.756426][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.787510][T23328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.849566][T23328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.858052][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.884915][T23328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.904527][T23567] chnl_net:caif_netlink_parms(): no params data found [ 1701.971143][T23652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1702.604485][T23394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.636696][T23394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.661539][T23394] bridge_slave_0: entered allmulticast mode [ 1702.675733][T23394] bridge_slave_0: entered promiscuous mode [ 1703.866008][T23394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.873554][T23394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.880904][T23394] bridge_slave_1: entered allmulticast mode [ 1705.288446][T23394] bridge_slave_1: entered promiscuous mode [ 1705.899444][T20550] vhci_hcd: vhci_device speed not set [ 1706.018669][T21355] IPVS: stop unused estimator thread 0... [ 1707.090984][T21781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1707.100919][T21781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1707.112888][T21781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1707.121133][T21781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1707.130258][T21781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1707.186146][T23394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.213574][T23394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.189300][T18929] Bluetooth: hci1: command tx timeout [ 1709.238058][T23394] team0: Port device team_slave_0 added [ 1710.297919][T23709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5287'. [ 1710.450411][T23394] team0: Port device team_slave_1 added [ 1710.572257][T23567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.665931][T23567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.882707][T23567] bridge_slave_0: entered allmulticast mode [ 1710.894159][T23567] bridge_slave_0: entered promiscuous mode [ 1711.165284][T23567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.172557][T23567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.179795][T23567] bridge_slave_1: entered allmulticast mode [ 1711.187781][T23567] bridge_slave_1: entered promiscuous mode [ 1711.281509][T18929] Bluetooth: hci1: command tx timeout [ 1712.357918][T23714] loop4: detected capacity change from 0 to 512 [ 1712.393843][T23714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.406456][T23714] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1712.683957][T20186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.764696][T23567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.778299][T23567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.821937][T23394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.828882][T23394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1712.856280][T23394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.942888][ T1333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.109347][T23394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.126545][T23394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.176644][T23394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.520640][ T1333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.573403][T18929] Bluetooth: hci1: command tx timeout [ 1714.871559][T23567] team0: Port device team_slave_0 added [ 1714.893958][T23567] team0: Port device team_slave_1 added [ 1715.277445][ T1333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.314517][T23394] hsr_slave_0: entered promiscuous mode [ 1715.322321][T23394] hsr_slave_1: entered promiscuous mode [ 1716.659132][T23747] loop4: detected capacity change from 0 to 128 [ 1716.674010][T18929] Bluetooth: hci1: command tx timeout [ 1717.521181][ T1333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.479059][T23567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.486045][T23567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.872554][T23567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.886027][T23567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.893140][T23567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.929079][T23567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.045654][T23764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1719.052898][T23764] IPv6: NLM_F_CREATE should be set when creating new route [ 1721.863602][T21781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1721.890405][T21781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1721.908780][T21781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1721.917893][T21781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1722.219091][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5312'. [ 1722.441583][T21781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1723.822342][T23567] hsr_slave_0: entered promiscuous mode [ 1723.849545][T23567] hsr_slave_1: entered promiscuous mode [ 1723.909927][T23567] debugfs: 'hsr0' already exists in 'hsr' [ 1723.915677][T23567] Cannot create hsr debugfs directory [ 1724.307890][T23790] overlayfs: failed to clone upperpath [ 1725.054405][T18929] Bluetooth: hci2: command tx timeout [ 1725.376347][ T1333] bridge_slave_1: left allmulticast mode [ 1725.382688][ T1333] bridge_slave_1: left promiscuous mode [ 1725.389830][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.407182][ T1333] bridge_slave_0: left allmulticast mode [ 1725.439075][ T1333] bridge_slave_0: left promiscuous mode [ 1725.444855][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.506053][ T1333] bridge_slave_1: left allmulticast mode [ 1725.513125][ T1333] bridge_slave_1: left promiscuous mode [ 1725.529267][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.551209][ T1333] bridge_slave_0: left allmulticast mode [ 1725.556853][ T1333] bridge_slave_0: left promiscuous mode [ 1725.569211][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.590230][ T1333] bridge_slave_1: left allmulticast mode [ 1725.595880][ T1333] bridge_slave_1: left promiscuous mode [ 1725.602975][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.613032][ T1333] bridge_slave_0: left allmulticast mode [ 1725.618679][ T1333] bridge_slave_0: left promiscuous mode [ 1725.637192][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.889403][ T1333] bridge_slave_1: left allmulticast mode [ 1725.895075][ T1333] bridge_slave_1: left promiscuous mode [ 1725.903325][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.940070][ T1333] bridge_slave_0: left allmulticast mode [ 1727.282155][T18929] Bluetooth: hci2: command tx timeout [ 1727.679070][ T1333] bridge_slave_0: left promiscuous mode [ 1727.697299][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.282359][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1728.302690][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1728.342357][ T1333] bond0 (unregistering): Released all slaves [ 1728.776712][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1728.838201][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1728.874947][ T1333] bond0 (unregistering): Released all slaves [ 1729.310821][T18929] Bluetooth: hci2: command tx timeout [ 1731.459088][T18929] Bluetooth: hci2: command tx timeout [ 1731.840729][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1732.011955][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1732.031434][ T1333] bond0 (unregistering): (slave team0): Releasing backup interface [ 1732.049834][ T1333] bond0 (unregistering): Released all slaves [ 1732.087001][ T1333] bond1 (unregistering): Released all slaves [ 1732.430253][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1732.448384][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1732.468571][ T1333] bond0 (unregistering): Released all slaves [ 1734.015401][T23685] chnl_net:caif_netlink_parms(): no params data found [ 1736.008097][T23848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5316'. [ 1736.609178][ T1333] hsr_slave_0: left promiscuous mode [ 1736.671848][ T1333] hsr_slave_1: left promiscuous mode [ 1736.689825][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.725872][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.747313][ T1333] hsr_slave_0: left promiscuous mode [ 1736.753810][ T1333] hsr_slave_1: left promiscuous mode [ 1736.760154][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.768277][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.878998][ T1333] hsr_slave_0: left promiscuous mode [ 1737.886559][ T1333] hsr_slave_1: left promiscuous mode [ 1737.892682][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.901545][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.911068][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.918526][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1738.348187][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1738.462043][ T1333] veth1_macvtap: left promiscuous mode [ 1738.467596][ T1333] veth0_macvtap: left promiscuous mode [ 1738.473849][ T1333] veth1_vlan: left promiscuous mode [ 1738.483428][ T1333] veth0_vlan: left promiscuous mode [ 1738.813564][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1738.853659][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1739.829718][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.839271][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.571286][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1741.644038][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1746.021955][T23906] overlayfs: failed to clone lowerpath [ 1746.250863][T23907] overlayfs: failed to clone lowerpath [ 1747.051861][T23913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1747.062576][T23913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1747.078643][T23913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1747.120753][T23913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1747.128397][T23913] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1747.346852][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1747.395701][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1748.897173][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1749.061687][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1749.587039][T23913] Bluetooth: hci3: command tx timeout [ 1750.975471][T23771] chnl_net:caif_netlink_parms(): no params data found [ 1751.266262][T18929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1751.277051][T18929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1751.285664][T18929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1751.293910][T18929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1751.301808][T18929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1751.709280][T23940] Bluetooth: hci3: command tx timeout [ 1752.087679][T23685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.119079][T23685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.143541][T23685] bridge_slave_0: entered allmulticast mode [ 1752.167774][T23685] bridge_slave_0: entered promiscuous mode [ 1752.641323][T23685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.669750][T23685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.677009][T23685] bridge_slave_1: entered allmulticast mode [ 1752.685011][T23685] bridge_slave_1: entered promiscuous mode [ 1753.664257][T23913] Bluetooth: hci7: command tx timeout [ 1754.019139][T23913] Bluetooth: hci3: command tx timeout [ 1755.719254][T23913] Bluetooth: hci7: command tx timeout [ 1755.775501][T23771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.790027][T23771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.797206][T23771] bridge_slave_0: entered allmulticast mode [ 1755.812720][T23771] bridge_slave_0: entered promiscuous mode [ 1755.832828][T23685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.859278][T23685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.041056][T23913] Bluetooth: hci3: command tx timeout [ 1756.173888][T23771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.181781][T23771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.189126][T23771] bridge_slave_1: entered allmulticast mode [ 1756.197276][T23771] bridge_slave_1: entered promiscuous mode [ 1757.880499][T23913] Bluetooth: hci7: command tx timeout [ 1758.802719][T23685] team0: Port device team_slave_0 added [ 1758.812432][T23685] team0: Port device team_slave_1 added [ 1758.984150][T23771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.015469][T23771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1759.084625][T23685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.091688][T23685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.118736][T23685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.414790][T23685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.422070][T23685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.448124][T23685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.179089][T23913] Bluetooth: hci7: command tx timeout [ 1760.384378][T23771] team0: Port device team_slave_0 added [ 1760.592995][T23997] overlayfs: failed to clone upperpath [ 1760.714462][T23771] team0: Port device team_slave_1 added [ 1761.745930][T23771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1761.752964][T23771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1761.908131][T23771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1761.930766][T23685] hsr_slave_0: entered promiscuous mode [ 1761.959893][T23685] hsr_slave_1: entered promiscuous mode [ 1761.969490][T23685] debugfs: 'hsr0' already exists in 'hsr' [ 1761.975234][T23685] Cannot create hsr debugfs directory [ 1762.064043][T23771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1762.071414][T23771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1762.109267][T23771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1762.174138][T23909] chnl_net:caif_netlink_parms(): no params data found [ 1763.452683][T23771] hsr_slave_0: entered promiscuous mode [ 1763.459611][T23771] hsr_slave_1: entered promiscuous mode [ 1763.475241][T23771] debugfs: 'hsr0' already exists in 'hsr' [ 1763.509512][T23771] Cannot create hsr debugfs directory [ 1763.981135][T24025] overlayfs: failed to clone upperpath [ 1764.085796][T24026] overlay: Unknown parameter 'fowner>00000000000000016832' [ 1765.223283][T23909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.300564][T23940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1766.308118][T23909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.308390][T23909] bridge_slave_0: entered allmulticast mode [ 1766.323175][T23940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1766.332538][T23940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1766.341497][T23940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1766.349211][T23940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1766.350744][T23909] bridge_slave_0: entered promiscuous mode [ 1766.399568][T23938] chnl_net:caif_netlink_parms(): no params data found [ 1766.426890][T23909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.435033][T23909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.444531][T23909] bridge_slave_1: entered allmulticast mode [ 1766.455927][T23909] bridge_slave_1: entered promiscuous mode [ 1766.785182][T23909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.808319][ T1333] IPVS: stop unused estimator thread 0... [ 1766.822989][T23909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.971387][T23909] team0: Port device team_slave_0 added [ 1767.899492][T23938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.906782][T23938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.914189][T23938] bridge_slave_0: entered allmulticast mode [ 1767.922326][T23938] bridge_slave_0: entered promiscuous mode [ 1767.934373][T23938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.941659][T23938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.948839][T23938] bridge_slave_1: entered allmulticast mode [ 1767.957382][T23938] bridge_slave_1: entered promiscuous mode [ 1767.986891][T23909] team0: Port device team_slave_1 added [ 1768.125774][T23938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.143158][T23909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.150702][T23909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1768.373157][T23909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1768.391304][T23938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.989353][T23913] Bluetooth: hci5: command tx timeout [ 1769.042546][T23909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.054362][T23909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.084289][T23909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.154664][T23909] hsr_slave_0: entered promiscuous mode [ 1769.161828][T23909] hsr_slave_1: entered promiscuous mode [ 1769.168267][T23909] debugfs: 'hsr0' already exists in 'hsr' [ 1769.182966][T23909] Cannot create hsr debugfs directory [ 1770.117759][T23938] team0: Port device team_slave_0 added [ 1770.490387][T23938] team0: Port device team_slave_1 added [ 1770.598041][ T1333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.693373][T23938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.702987][T23938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.729233][T23938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.748654][T24034] chnl_net:caif_netlink_parms(): no params data found [ 1770.974820][ T1333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.062828][T24070] overlayfs: failed to clone upperpath [ 1771.699293][T23913] Bluetooth: hci5: command tx timeout [ 1771.848694][T23938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.855841][T23938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.882045][T23938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1772.160825][ T1333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.976820][T23771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1772.988776][T23771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1773.003696][T23771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1773.016654][T23771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1773.138895][T23771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.162355][T23771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.959109][T23913] Bluetooth: hci5: command tx timeout [ 1773.984942][ T1333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.042621][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.049795][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1774.082237][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.089403][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1774.161519][T23771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1774.174797][T23771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1775.081187][T23909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1775.203603][T24104] IPVS: set_ctl: invalid protocol: 11 100.1.1.0:20000 [ 1775.226419][T23938] hsr_slave_0: entered promiscuous mode [ 1775.250638][T23938] hsr_slave_1: entered promiscuous mode [ 1775.257052][T23938] debugfs: 'hsr0' already exists in 'hsr' [ 1775.279715][T23938] Cannot create hsr debugfs directory [ 1775.289381][T23909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1775.331327][T23909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1775.348897][T23909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1776.411679][T23913] Bluetooth: hci5: command tx timeout [ 1776.700583][T24034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.747455][T24034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.769193][T24034] bridge_slave_0: entered allmulticast mode [ 1776.801077][T24034] bridge_slave_0: entered promiscuous mode [ 1777.871617][T24034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.878776][T24034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.315035][T24034] bridge_slave_1: entered allmulticast mode [ 1778.327690][T24034] bridge_slave_1: entered promiscuous mode [ 1779.214702][T24034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.243262][T24034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.171835][T23909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1780.234712][T23940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1780.247655][T23940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1780.256848][T23940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1780.265986][T23940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1780.282863][T23940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1780.424951][T24034] team0: Port device team_slave_0 added [ 1780.452669][T24034] team0: Port device team_slave_1 added [ 1780.459120][ T1333] bridge_slave_1: left allmulticast mode [ 1780.464788][ T1333] bridge_slave_1: left promiscuous mode [ 1780.486824][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.514479][ T1333] bridge_slave_0: left allmulticast mode [ 1780.525015][ T1333] bridge_slave_0: left promiscuous mode [ 1780.532239][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.544225][ T1333] bridge_slave_1: left allmulticast mode [ 1780.550547][ T1333] bridge_slave_1: left promiscuous mode [ 1780.556374][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.572236][ T1333] bridge_slave_0: left allmulticast mode [ 1780.602449][ T1333] bridge_slave_0: left promiscuous mode [ 1780.612657][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.744481][ T1333] bridge_slave_1: left allmulticast mode [ 1780.750934][ T1333] bridge_slave_1: left promiscuous mode [ 1780.756660][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.512934][ T1333] bridge_slave_0: left allmulticast mode [ 1781.654411][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5382'. [ 1781.669086][ T1333] bridge_slave_0: left promiscuous mode [ 1781.674873][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.699319][ T1333] bridge_slave_1: left allmulticast mode [ 1781.705101][ T1333] bridge_slave_1: left promiscuous mode [ 1781.933921][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.943562][ T1333] bridge_slave_0: left allmulticast mode [ 1781.949283][ T1333] bridge_slave_0: left promiscuous mode [ 1781.955009][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.973554][ T1333] bridge_slave_1: left allmulticast mode [ 1781.979339][ T1333] bridge_slave_1: left promiscuous mode [ 1781.985276][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.996756][ T1333] bridge_slave_0: left allmulticast mode [ 1782.002548][ T1333] bridge_slave_0: left promiscuous mode [ 1782.008487][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.182450][T24161] overlayfs: failed to clone lowerpath [ 1782.288221][T24162] overlayfs: failed to clone lowerpath [ 1782.779724][T23913] Bluetooth: hci1: command tx timeout [ 1784.922168][T23913] Bluetooth: hci1: command tx timeout [ 1785.345872][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.360153][T24174] 9pnet_fd: Insufficient options for proto=fd [ 1785.382120][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.609432][ T1333] bond0 (unregistering): Released all slaves [ 1785.750001][T24176] ufs: You didn't specify the type of your ufs filesystem [ 1785.750001][T24176] [ 1785.750001][T24176] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1785.750001][T24176] [ 1785.750001][T24176] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1785.781258][T24176] ufs: ufstype=old is supported read-only [ 1786.999156][T23913] Bluetooth: hci1: command tx timeout [ 1787.012729][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.025455][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.039190][ T1333] bond0 (unregistering): (slave team0): Releasing backup interface [ 1787.051853][ T1333] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1787.064139][ T1333] bond0 (unregistering): Released all slaves [ 1787.184639][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.195741][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.205889][ T1333] bond0 (unregistering): Released all slaves [ 1787.310567][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.322275][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.332754][ T1333] bond0 (unregistering): Released all slaves [ 1787.457199][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.468624][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.482275][ T1333] bond0 (unregistering): Released all slaves [ 1787.790592][T24178] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1787.800052][T24178] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1787.809699][T24178] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1788.133966][T24034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.141098][T24034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.167539][T24034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.227876][T24034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.235384][T24034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.270859][T24034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.431454][ T1333] hsr_slave_0: left promiscuous mode [ 1788.440400][ T1333] hsr_slave_1: left promiscuous mode [ 1788.446562][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.456227][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.473142][ T1333] hsr_slave_0: left promiscuous mode [ 1788.479897][ T1333] hsr_slave_1: left promiscuous mode [ 1788.486188][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1788.494100][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.504442][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.527897][ T1333] hsr_slave_0: left promiscuous mode [ 1788.542707][ T1333] hsr_slave_1: left promiscuous mode [ 1788.549400][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.557536][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.571463][ T1333] hsr_slave_0: left promiscuous mode [ 1788.578284][ T1333] hsr_slave_1: left promiscuous mode [ 1788.584724][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.593390][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.606927][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.614842][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.649797][ T1333] veth1_macvtap: left promiscuous mode [ 1788.655550][ T1333] veth0_macvtap: left promiscuous mode [ 1788.661628][ T1333] veth1_vlan: left promiscuous mode [ 1788.677929][ T1333] veth0_vlan: left promiscuous mode [ 1788.746645][T24180] orangefs_mount: mount request failed with -4 [ 1789.069123][T23913] Bluetooth: hci1: command tx timeout [ 1789.211893][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1789.261433][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1790.040606][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1790.110145][T24195] /dev/nullb0: Can't lookup blockdev [ 1790.441401][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1792.225247][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1792.288397][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1792.579656][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1792.611752][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1792.819771][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1792.845771][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1793.022757][T23909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.080365][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.087511][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.097399][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.104548][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.151379][T24034] hsr_slave_0: entered promiscuous mode [ 1793.168464][T24034] hsr_slave_1: entered promiscuous mode [ 1793.430737][T23909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1793.441464][T23909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1794.615897][T24145] chnl_net:caif_netlink_parms(): no params data found [ 1794.773143][T23913] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1796.184843][T23909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1796.192891][T23938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1796.204322][T23938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1796.310772][T23938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1796.400646][T24145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.407796][T24145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.452101][T24145] bridge_slave_0: entered allmulticast mode [ 1796.470413][T24145] bridge_slave_0: entered promiscuous mode [ 1796.502292][T24145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.509510][T24145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.516656][T24145] bridge_slave_1: entered allmulticast mode [ 1796.524490][T24145] bridge_slave_1: entered promiscuous mode [ 1796.825921][T23938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1798.358381][T24145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.117626][T24145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.400062][T24145] team0: Port device team_slave_0 added [ 1799.422316][T24145] team0: Port device team_slave_1 added [ 1801.234396][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.240780][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.317857][T24145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.334749][T24145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.360922][T24145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.377039][T24145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.384063][T24145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.411992][T24145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.539316][T24263] netlink: 'syz.6.5404': attribute type 3 has an invalid length. [ 1802.547376][T24263] netlink: 'syz.6.5404': attribute type 3 has an invalid length. [ 1802.564856][T23909] veth0_vlan: entered promiscuous mode [ 1802.578092][T23909] veth1_vlan: entered promiscuous mode [ 1802.693351][T24034] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1802.732281][T24145] hsr_slave_0: entered promiscuous mode [ 1802.739801][T24145] hsr_slave_1: entered promiscuous mode [ 1802.752486][T24145] debugfs: 'hsr0' already exists in 'hsr' [ 1802.758261][T24145] Cannot create hsr debugfs directory [ 1802.865777][T24034] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1802.946595][T24034] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1802.964162][T23938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1802.982948][T23909] veth0_macvtap: entered promiscuous mode [ 1802.994625][T24034] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1803.041246][T23909] veth1_macvtap: entered promiscuous mode [ 1803.409273][T20546] libceph: connect (1)[c::]:6789 error -101 [ 1803.471014][T20546] libceph: mon0 (1)[c::]:6789 connect error [ 1803.674465][T24275] ceph: No mds server is up or the cluster is laggy [ 1803.934195][T23938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.953785][T23909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1804.026463][T21355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.033655][T21355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.136637][T23909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1804.160656][T21972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.167772][T21972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1804.375199][T21972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.411836][T21972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.436564][T21972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.439364][ T1333] IPVS: stop unused estimator thread 0... [ 1804.452027][T21972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.947720][ T1333] bridge_slave_1: left allmulticast mode [ 1804.954952][ T1333] bridge_slave_1: left promiscuous mode [ 1804.964026][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.973264][ T1333] bridge_slave_0: left allmulticast mode [ 1804.978886][ T1333] bridge_slave_0: left promiscuous mode [ 1804.990254][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.711876][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.725847][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.736599][ T1333] bond0 (unregistering): Released all slaves [ 1806.764207][T23940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1806.776407][T23940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1806.784747][T23940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1806.794031][T23940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1806.797355][T24034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1806.828738][T23940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1807.808508][ T1333] hsr_slave_0: left promiscuous mode [ 1807.823802][ T1333] hsr_slave_1: left promiscuous mode [ 1807.839982][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.050805][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.710982][T23913] Bluetooth: hci2: command tx timeout [ 1811.515708][T23940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1811.527655][T23940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1811.536043][T23940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1811.545056][T23940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1811.552962][T23940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1811.607273][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1811.652334][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1811.808849][T23913] Bluetooth: hci2: command tx timeout [ 1812.902885][T23913] Bluetooth: hci0: unexpected event for opcode 0x0008 [ 1813.267602][T24342] virtio-fs: tag not found [ 1813.636701][T23913] Bluetooth: hci3: command tx timeout [ 1813.869270][T23913] Bluetooth: hci2: command tx timeout [ 1813.974054][T24034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.400434][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.407641][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.556969][T24145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1814.591680][T21972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.598843][T21972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.649218][T24145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1814.708161][T24145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1815.077571][T24145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1815.332944][T24353] overlayfs: failed to clone lowerpath [ 1815.427173][T24354] overlayfs: failed to clone lowerpath [ 1815.835516][T23913] Bluetooth: hci3: command tx timeout [ 1815.949705][T23913] Bluetooth: hci2: command tx timeout [ 1816.656525][T24330] chnl_net:caif_netlink_parms(): no params data found [ 1816.875601][T24301] chnl_net:caif_netlink_parms(): no params data found [ 1817.005952][T24034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.289693][T24330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.296850][T24330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.315790][T24330] bridge_slave_0: entered allmulticast mode [ 1817.328777][T24330] bridge_slave_0: entered promiscuous mode [ 1817.373527][T24330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.383107][T24330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.393326][T24330] bridge_slave_1: entered allmulticast mode [ 1817.401424][T24330] bridge_slave_1: entered promiscuous mode [ 1817.431988][T24145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.486956][T24330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.510885][T24301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.518086][T24301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.525396][T24301] bridge_slave_0: entered allmulticast mode [ 1817.534156][T24301] bridge_slave_0: entered promiscuous mode [ 1817.544781][T24330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.613095][T24301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.623190][T24301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.631812][T24301] bridge_slave_1: entered allmulticast mode [ 1817.639365][T24301] bridge_slave_1: entered promiscuous mode [ 1817.662077][T24330] team0: Port device team_slave_0 added [ 1817.687910][T24330] team0: Port device team_slave_1 added [ 1817.738070][T24145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.764656][T24301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.822763][ T1333] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.849567][T24301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.861214][T24330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.868173][T24330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.894963][T24330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.907963][T23913] Bluetooth: hci3: command tx timeout [ 1817.935001][T24330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1817.943234][T24330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.972909][T24330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1817.987813][T21972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.994940][T21972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.004209][T21972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.011321][T21972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.038174][ T1333] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.072786][T24301] team0: Port device team_slave_0 added [ 1818.099574][T24301] team0: Port device team_slave_1 added [ 1818.202967][ T1333] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.226861][T24301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.234016][T24301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.260232][T24301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.273121][T24301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.280121][T24301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.306531][T24301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.323519][T24330] hsr_slave_0: entered promiscuous mode [ 1818.330073][T24330] hsr_slave_1: entered promiscuous mode [ 1818.336269][T24330] debugfs: 'hsr0' already exists in 'hsr' [ 1818.342125][T24330] Cannot create hsr debugfs directory [ 1818.371377][ T1333] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.463693][T24301] hsr_slave_0: entered promiscuous mode [ 1818.470758][T24301] hsr_slave_1: entered promiscuous mode [ 1818.476928][T24301] debugfs: 'hsr0' already exists in 'hsr' [ 1818.483361][T24301] Cannot create hsr debugfs directory [ 1818.495506][T24034] veth0_vlan: entered promiscuous mode [ 1818.618702][T24034] veth1_vlan: entered promiscuous mode [ 1818.868884][ T1333] bridge_slave_1: left allmulticast mode [ 1818.876212][ T1333] bridge_slave_1: left promiscuous mode [ 1818.889225][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.900109][ T1333] bridge_slave_0: left allmulticast mode [ 1818.905763][ T1333] bridge_slave_0: left promiscuous mode [ 1818.913333][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.926241][ T1333] bridge_slave_1: left allmulticast mode [ 1818.932234][ T1333] bridge_slave_1: left promiscuous mode [ 1818.937922][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.950132][ T1333] bridge_slave_0: left allmulticast mode [ 1818.955760][ T1333] bridge_slave_0: left promiscuous mode [ 1818.961546][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.329810][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1819.341463][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1819.351581][ T1333] bond0 (unregistering): Released all slaves [ 1819.657360][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1819.668590][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1819.678820][ T1333] bond0 (unregistering): Released all slaves [ 1819.721532][T24034] veth0_macvtap: entered promiscuous mode [ 1819.757628][T24034] veth1_macvtap: entered promiscuous mode [ 1819.790450][T24034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.807329][T24034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.897439][T17571] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.906829][T17571] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.942744][T17571] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.951909][T17571] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.960836][T23913] Bluetooth: hci3: command tx timeout [ 1820.001744][T24145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1820.019860][ T1333] hsr_slave_0: left promiscuous mode [ 1820.025769][ T1333] hsr_slave_1: left promiscuous mode [ 1820.038193][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1820.049871][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1820.061926][ T1333] hsr_slave_0: left promiscuous mode [ 1820.067853][ T1333] hsr_slave_1: left promiscuous mode [ 1820.074182][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1820.081581][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1820.089890][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1820.097264][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1820.129181][ T1333] veth1_macvtap: left promiscuous mode [ 1820.134698][ T1333] veth0_macvtap: left promiscuous mode [ 1820.140757][ T1333] veth1_vlan: left promiscuous mode [ 1820.146051][ T1333] veth0_vlan: left promiscuous mode [ 1820.461352][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1820.505218][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1821.164777][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 1821.200786][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 1821.749325][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.753344][T24145] veth0_vlan: entered promiscuous mode [ 1821.763214][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.824047][T24145] veth1_vlan: entered promiscuous mode [ 1821.858470][T24330] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1821.884426][T24330] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1821.904655][T21972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.918714][T21972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.936440][T24330] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1821.947400][T24330] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1822.131144][T24145] veth0_macvtap: entered promiscuous mode [ 1822.186908][T24145] veth1_macvtap: entered promiscuous mode [ 1822.290586][T24145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1822.458646][T24145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1822.546016][T24413] /dev/nullb0: Can't lookup blockdev [ 1823.399220][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.408435][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.564448][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.579850][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.762631][T24418] loop9: detected capacity change from 0 to 16 [ 1823.816979][T24418] erofs (device loop9): mounted with root inode @ nid 36. [ 1824.187483][T24422] overlayfs: failed to clone lowerpath [ 1824.451118][T24425] syz.9.5421: attempt to access beyond end of device [ 1824.451118][T24425] loop9: rw=0, sector=48, nr_sectors = 16 limit=16 [ 1824.470806][T24425] erofs (device loop9): read error -5 @ 43 of nid 36 [ 1824.682989][T24330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.713823][T21977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1824.727513][T21977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.901685][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1824.919581][T24330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.940059][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.048008][T21977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.055236][T21977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.388137][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.395372][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.226258][T24301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1826.266589][T24301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1826.527104][T24301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1826.544032][T24301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1827.746134][T24330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1830.462638][T24301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.493288][T24301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.553471][T21972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.560664][T21972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.622942][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.630165][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.058903][T24301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1831.549507][T24481] delete_channel: no stack [ 1832.364276][T24330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.441352][T24301] veth0_vlan: entered promiscuous mode [ 1838.669092][T24540] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5442'. [ 1838.893771][T24542] fuse: Bad value for 'fd' [ 1839.446075][T24301] veth1_vlan: entered promiscuous mode [ 1839.658714][T24301] veth0_macvtap: entered promiscuous mode [ 1839.769630][T24330] veth0_vlan: entered promiscuous mode [ 1839.789996][T23913] Bluetooth: hci0: Malformed Event: 0x02 [ 1839.810645][T24301] veth1_macvtap: entered promiscuous mode [ 1839.851573][T24330] veth1_vlan: entered promiscuous mode [ 1839.901275][T24301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1839.942924][T24301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1839.977712][T21972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.000101][T24330] veth0_macvtap: entered promiscuous mode [ 1840.007247][T21972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.022535][T24330] veth1_macvtap: entered promiscuous mode [ 1840.036515][T21972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.067880][T21972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.012789][T24330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1842.465085][T24330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.785296][T21977] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.873657][T21977] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.113948][T21980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.135396][T21980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.424954][T21972] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.449197][T21972] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.737603][T21980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.779717][T21980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.849616][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.858986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1845.330575][T24577] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5453'. [ 1847.284712][T21977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.332168][T21977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.746529][T24563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.893879][T24594] loop7: detected capacity change from 0 to 256 [ 1847.901507][T24594] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1847.915676][T24594] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1856.112489][T20545] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1856.501303][T20545] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1856.518995][T20545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.537431][T20545] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1856.553570][T20545] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1856.561707][T20545] usb 3-1: Manufacturer: syz [ 1856.578047][T20545] usb 3-1: config 0 descriptor?? [ 1856.590448][T20545] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1856.849037][T13512] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1857.095462][T24660] virtio-fs: tag not found [ 1857.255745][T13512] usb 6-1: Using ep0 maxpacket: 8 [ 1857.787200][T13512] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1857.855138][T13512] usb 6-1: config 179 has no interface number 0 [ 1857.869100][T13512] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1857.889205][ T5967] usb 3-1: USB disconnect, device number 66 [ 1857.910982][T13512] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1858.165801][T13512] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1858.176464][T13512] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1858.190992][T13512] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1858.197877][T13512] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1858.209542][T13512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.786824][ T5967] usb 6-1: USB disconnect, device number 69 [ 1859.958996][T23913] Bluetooth: hci3: command tx timeout [ 1861.322660][T24691] loop5: detected capacity change from 0 to 256 [ 1861.604743][T24691] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1862.676837][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.683503][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.828405][ T30] audit: type=1326 audit(2000001278.183:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24708 comm="syz.2.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5bd8f749 code=0x7ffc0000 [ 1863.939075][ T30] audit: type=1326 audit(2000001278.183:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24708 comm="syz.2.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5bd8f749 code=0x7ffc0000 [ 1864.000473][ T30] audit: type=1326 audit(2000001278.233:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24708 comm="syz.2.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fba5bd8f749 code=0x7ffc0000 [ 1864.118975][ T30] audit: type=1326 audit(2000001278.233:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24708 comm="syz.2.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5bd8f749 code=0x7ffc0000 [ 1864.182749][ T30] audit: type=1326 audit(2000001278.233:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24708 comm="syz.2.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5bd8f749 code=0x7ffc0000 [ 1865.537338][T24642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1866.582510][ T30] audit: type=1326 audit(2000001281.014:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24748 comm="syz.8.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d538f749 code=0x7ffc0000 [ 1866.658223][ T30] audit: type=1326 audit(2000001281.044:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24748 comm="syz.8.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f59d538f749 code=0x7ffc0000 [ 1866.680802][ T30] audit: type=1326 audit(2000001281.054:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24748 comm="syz.8.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d538f749 code=0x7ffc0000 [ 1866.735899][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5510'. [ 1866.822020][T23913] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1866.883583][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5515'. [ 1868.535256][T24789] vti0: entered promiscuous mode [ 1868.794085][T24756] loop5: detected capacity change from 0 to 32768 [ 1868.859094][T24756] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5511 (24756) [ 1869.074719][T24756] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1869.103039][T24756] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 1869.151463][T23913] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1869.166309][T23913] Bluetooth: hci2: Injecting HCI hardware error event [ 1869.177655][T23913] Bluetooth: hci2: hardware error 0x00 [ 1869.479744][T24756] BTRFS info (device loop5): rebuilding free space tree [ 1869.489191][T24815] netlink: 'syz.8.5530': attribute type 2 has an invalid length. [ 1869.514223][T24815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1869.522843][T24756] BTRFS info (device loop5): enabling ssd optimizations [ 1869.536420][T24756] BTRFS info (device loop5): turning on async discard [ 1869.543243][T24756] BTRFS info (device loop5): enabling free space tree [ 1869.550079][T24756] BTRFS info (device loop5): force clearing of disk cache [ 1870.131026][T24824] delete_channel: no stack [ 1870.166088][T24818] block device autoloading is deprecated and will be removed. [ 1870.323852][T24301] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1870.434713][ T30] audit: type=1326 audit(2000001284.864:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1870.557439][ T30] audit: type=1326 audit(2000001284.904:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1870.621612][ T30] audit: type=1326 audit(2000001284.914:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1870.645134][ T30] audit: type=1326 audit(2000001284.914:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1870.679831][ T30] audit: type=1326 audit(2000001284.914:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1870.702456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1870.802259][T24832] overlayfs: failed to clone lowerpath [ 1870.863863][T23940] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1870.875878][T23940] Bluetooth: hci0: Injecting HCI hardware error event [ 1870.890347][T21781] Bluetooth: hci0: hardware error 0x00 [ 1871.229330][T23913] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1871.292948][ T30] audit: type=1326 audit(2000001284.914:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1871.316154][ T30] audit: type=1326 audit(2000001284.914:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1871.338480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1871.349337][ T30] audit: type=1326 audit(2000001284.914:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24828 comm="syz.7.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1cd7f8f749 code=0x7ffc0000 [ 1873.633038][T21781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1874.785846][T24873] fuse: Bad value for 'fd' [ 1876.281015][T24890] tc_dump_action: action bad kind [ 1879.144636][T24910] overlayfs: overlapping lowerdir path [ 1883.774783][T24933] loop2: detected capacity change from 0 to 32768 [ 1883.836091][T24933] JBD2: Ignoring recovery information on journal [ 1884.013706][T24933] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1884.101874][T24933] (syz.2.5567,24933,0):ocfs2_inode_is_valid_to_delete:947 ERROR: Skipping delete of system file 22 [ 1884.151741][T24933] ocfs2: Unmounting device (7,2) on (node local) [ 1885.000898][T24986] loop2: detected capacity change from 0 to 1024 [ 1885.032403][ T30] audit: type=1800 audit(2000001299.464:158): pid=24986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5590" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1885.056701][T24986] syz.2.5590: attempt to access beyond end of device [ 1885.056701][T24986] loop2: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 1885.094664][T24986] syz.2.5590: attempt to access beyond end of device [ 1885.094664][T24986] loop2: rw=34817, sector=0, nr_sectors = 2046 limit=1024 [ 1885.184896][T24986] syz.2.5590: attempt to access beyond end of device [ 1885.184896][T24986] loop2: rw=34817, sector=2046, nr_sectors = 514 limit=1024 [ 1885.555905][T24994] delete_channel: no stack [ 1886.323831][T24993] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5593'. [ 1886.609051][ T6012] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1886.759328][T19499] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1886.777136][ T6012] usb 3-1: Using ep0 maxpacket: 16 [ 1886.788538][ T6012] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1886.798344][ T6012] usb 3-1: config 0 has no interface number 0 [ 1886.815433][ T6012] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.838370][ T6012] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1886.853042][ T6012] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1886.865982][ T6012] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 1886.875220][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.888325][ T6012] usb 3-1: config 0 descriptor?? [ 1886.930560][T19499] usb 6-1: Using ep0 maxpacket: 16 [ 1886.944977][T19499] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 1886.963485][T19499] usb 6-1: config 0 has no interface number 0 [ 1886.999040][T19499] usb 6-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.029031][T19499] usb 6-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.068668][T19499] usb 6-1: config 0 interface 238 has no altsetting 0 [ 1887.129644][T19499] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1887.138721][T19499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.151297][T19499] usb 6-1: config 0 descriptor?? [ 1887.639936][ T6012] holtek_mouse 0003:04D9:A072.006D: unknown main item tag 0x0 [ 1887.689634][ T6012] holtek_mouse 0003:04D9:A072.006D: unknown main item tag 0x0 [ 1887.719422][ T6012] holtek_mouse 0003:04D9:A072.006D: unknown main item tag 0x0 [ 1887.737269][ T6012] holtek_mouse 0003:04D9:A072.006D: unknown main item tag 0x0 [ 1887.748859][T19499] logitech-djreceiver 0003:046D:C513.006E: unknown main item tag 0x0 [ 1887.757010][T19499] logitech-djreceiver 0003:046D:C513.006E: unknown main item tag 0x0 [ 1887.778821][ T6012] holtek_mouse 0003:04D9:A072.006D: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.2-1/input1 [ 1887.802765][T19499] logitech-djreceiver 0003:046D:C513.006E: unknown main item tag 0x0 [ 1887.816409][ T6012] usb 3-1: USB disconnect, device number 67 [ 1887.822746][T19499] logitech-djreceiver 0003:046D:C513.006E: unknown main item tag 0x0 [ 1887.842200][T19499] logitech-djreceiver 0003:046D:C513.006E: unknown main item tag 0x0 [ 1887.885648][T19499] logitech-djreceiver 0003:046D:C513.006E: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.5-1/input238 [ 1887.937800][T19499] usb 6-1: USB disconnect, device number 70 [ 1888.174563][T25046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5616'. [ 1888.187681][T25046] veth0_macvtap: Device is already in use. [ 1890.079907][T25084] loop7: detected capacity change from 0 to 512 [ 1890.163658][T25084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1890.187288][T25091] loop5: detected capacity change from 0 to 512 [ 1890.253283][T25084] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1890.270744][T25091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1890.308264][T25091] ext4 filesystem being mounted at /25/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 1890.349089][T21781] Bluetooth: hci5: command 0x0406 tx timeout [ 1890.449779][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5638'. [ 1890.512957][T24330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1890.567055][T24301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1890.959238][T25103] fuse: Bad value for 'fd' [ 1891.831945][T21972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.864120][ T30] audit: type=1326 audit(2000001306.294:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.5640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56b58f749 code=0x0 [ 1892.110932][T21972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.312822][T21972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.521067][T21972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.653646][T21781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1892.668048][T21781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1892.684868][T21781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1892.696360][T21781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1892.709623][T21781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1893.038532][T21972] bridge_slave_1: left allmulticast mode [ 1893.055173][T21972] bridge_slave_1: left promiscuous mode [ 1893.078670][T21972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.121754][T21972] bridge_slave_0: left allmulticast mode [ 1893.132042][T21972] bridge_slave_0: left promiscuous mode [ 1893.141384][T21972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.459049][ T5828] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1893.610310][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 1893.626509][ T5828] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1893.659070][ T5828] usb 6-1: config 0 has no interface number 0 [ 1893.665199][ T5828] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1893.702549][ T5828] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1893.713399][ T5828] usb 6-1: config 0 interface 126 has no altsetting 0 [ 1893.736001][ T5828] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1893.751501][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.770986][ T5828] usb 6-1: Product: syz [ 1893.775155][ T5828] usb 6-1: Manufacturer: syz [ 1893.790120][ T5828] usb 6-1: SerialNumber: syz [ 1893.797836][ T5828] usb 6-1: config 0 descriptor?? [ 1893.829704][T25149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1893.836986][T25149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1894.078361][T21972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.102491][T21972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.123591][T21972] bond0 (unregistering): Released all slaves [ 1894.263628][ T5828] ir_usb 6-1:0.126: IR Dongle converter detected [ 1894.466200][ T5828] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 1894.668432][T24428] usb 6-1: USB disconnect, device number 71 [ 1894.694697][T24428] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1894.730833][T24428] ir_usb 6-1:0.126: device disconnected [ 1894.743829][T25136] chnl_net:caif_netlink_parms(): no params data found [ 1894.751814][T21781] Bluetooth: hci1: command tx timeout [ 1894.885035][T21972] hsr_slave_0: left promiscuous mode [ 1894.898447][T21972] hsr_slave_1: left promiscuous mode [ 1894.906954][T21972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1894.916643][T21972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.929892][T21972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1894.937276][T21972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1895.012583][T21972] veth1_macvtap: left promiscuous mode [ 1895.036999][T21972] veth0_macvtap: left promiscuous mode [ 1895.049316][T21972] veth1_vlan: left promiscuous mode [ 1895.059102][T21972] veth0_vlan: left promiscuous mode [ 1896.144549][T25204] loop7: detected capacity change from 0 to 32768 [ 1896.188563][T25204] find_entry called with index >= next_index [ 1896.644185][T21972] team0 (unregistering): Port device team_slave_1 removed [ 1896.756689][T21972] team0 (unregistering): Port device team_slave_0 removed [ 1896.829706][T21781] Bluetooth: hci1: command tx timeout [ 1897.436772][T25231] netlink: 'syz.5.5694': attribute type 6 has an invalid length. [ 1897.455009][T25240] netlink: 830 bytes leftover after parsing attributes in process `syz.8.5698'. [ 1897.724789][T25249] fuse: Bad value for 'fd' [ 1898.641623][T25136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.648837][T25136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.657561][T25136] bridge_slave_0: entered allmulticast mode [ 1898.670266][T25136] bridge_slave_0: entered promiscuous mode [ 1898.692512][T25136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.709799][T25136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.757319][T25136] bridge_slave_1: entered allmulticast mode [ 1898.912007][T21781] Bluetooth: hci1: command tx timeout [ 1899.022035][T25136] bridge_slave_1: entered promiscuous mode [ 1899.813558][T25136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1899.933126][T25136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1900.119254][T25136] team0: Port device team_slave_0 added [ 1900.137971][T25136] team0: Port device team_slave_1 added [ 1900.172053][T25277] loop5: detected capacity change from 0 to 4096 [ 1900.196305][T25277] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1900.253894][T25136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1900.282992][T25136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1900.324850][T25277] ntfs3(loop5): ino=19, mi_enum_attr [ 1900.338973][T25277] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1900.369198][T25136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1900.393684][T25136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1900.419324][T25136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1900.507303][T25136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.748801][T25136] hsr_slave_0: entered promiscuous mode [ 1900.776354][T25136] hsr_slave_1: entered promiscuous mode [ 1900.799369][T25136] debugfs: 'hsr0' already exists in 'hsr' [ 1900.821322][T25136] Cannot create hsr debugfs directory [ 1900.990228][T21781] Bluetooth: hci1: command tx timeout [ 1901.797174][T19499] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1902.009423][T19499] usb 6-1: Using ep0 maxpacket: 32 [ 1902.041474][T19499] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1902.062629][T19499] usb 6-1: config 0 has no interface number 0 [ 1902.107661][T19499] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1902.162037][T19499] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1902.187176][T19499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.232760][T19499] usb 6-1: Product: syz [ 1902.254640][T19499] usb 6-1: Manufacturer: syz [ 1902.287327][T19499] usb 6-1: SerialNumber: syz [ 1902.457852][T25136] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1902.479746][T19499] usb 6-1: config 0 descriptor?? [ 1902.500481][T25136] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1902.521796][T25136] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1902.551250][T25136] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1902.783628][T25136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1902.866031][T25136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1902.884283][T21976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.891429][T21976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.011415][T21976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.018570][T21976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1903.541947][T25334] syz.8.5731: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1903.576336][T19499] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1903.588965][T19499] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1903.596268][T19499] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1903.627750][T19499] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1903.635594][T25334] CPU: 0 UID: 0 PID: 25334 Comm: syz.8.5731 Not tainted syzkaller #0 PREEMPT(full) [ 1903.635640][T25334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1903.635663][T25334] Call Trace: [ 1903.635675][T25334] [ 1903.635688][T25334] dump_stack_lvl+0x16c/0x1f0 [ 1903.635741][T25334] warn_alloc+0x248/0x3a0 [ 1903.635794][T25334] ? __pfx_warn_alloc+0x10/0x10 [ 1903.635841][T25334] ? __pfx_stack_trace_save+0x10/0x10 [ 1903.635908][T25334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1903.635953][T25334] ? kasan_save_stack+0x42/0x60 [ 1903.636008][T25334] ? kasan_save_stack+0x33/0x60 [ 1903.636062][T25334] ? kasan_save_track+0x14/0x30 [ 1903.636117][T25334] ? xskq_create+0x52/0x1d0 [ 1903.636157][T25334] ? xsk_setsockopt+0x74e/0x9a0 [ 1903.636214][T25334] ? do_sock_setsockopt+0xf3/0x1d0 [ 1903.636261][T25334] ? xskq_create+0xfb/0x1d0 [ 1903.636300][T25334] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1903.636365][T25334] ? xskq_create+0xfb/0x1d0 [ 1903.636414][T25334] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1903.636473][T25334] ? xskq_create+0xfb/0x1d0 [ 1903.636511][T25334] vmalloc_user_noprof+0x9e/0xe0 [ 1903.636554][T25334] ? xskq_create+0xfb/0x1d0 [ 1903.636592][T25334] xskq_create+0xfb/0x1d0 [ 1903.636633][T25334] xsk_setsockopt+0x74e/0x9a0 [ 1903.636692][T25334] ? __pfx_aa_sk_perm+0x10/0x10 [ 1903.636732][T25334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1903.636792][T25334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1903.636834][T25334] ? find_held_lock+0x2b/0x80 [ 1903.636885][T25334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1903.636927][T25334] ? aa_sock_opt_perm+0xfd/0x1c0 [ 1903.636980][T25334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1903.637042][T25334] do_sock_setsockopt+0xf3/0x1d0 [ 1903.637091][T25334] __sys_setsockopt+0x1a0/0x230 [ 1903.637158][T25334] __x64_sys_setsockopt+0xbd/0x160 [ 1903.637215][T25334] ? do_syscall_64+0x91/0xfa0 [ 1903.637258][T25334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1903.637301][T25334] ? lockdep_hardirqs_on+0x7c/0x110 [ 1903.637351][T25334] do_syscall_64+0xcd/0xfa0 [ 1903.637401][T25334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.637443][T25334] RIP: 0033:0x7f59d538f749 [ 1903.637470][T25334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1903.637506][T25334] RSP: 002b:00007f59d6256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1903.637539][T25334] RAX: ffffffffffffffda RBX: 00007f59d55e5fa0 RCX: 00007f59d538f749 [ 1903.637564][T25334] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1903.637586][T25334] RBP: 00007f59d5413f91 R08: 0000000000000004 R09: 0000000000000000 [ 1903.637608][T25334] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1903.637631][T25334] R13: 00007f59d55e6038 R14: 00007f59d55e5fa0 R15: 00007ffc1031eae8 [ 1903.637682][T25334] [ 1903.647910][T25334] Mem-Info: [ 1903.667432][T19499] usb 6-1: USB disconnect, device number 72 [ 1903.783772][T25342] fuse: Bad value for 'fd' [ 1903.819244][T25334] active_anon:14015 inactive_anon:0 isolated_anon:0 [ 1903.819244][T25334] active_file:13094 inactive_file:51573 isolated_file:0 [ 1903.819244][T25334] unevictable:768 dirty:283 writeback:0 [ 1903.819244][T25334] slab_reclaimable:12997 slab_unreclaimable:109377 [ 1903.819244][T25334] mapped:39055 shmem:10226 pagetables:1311 [ 1903.819244][T25334] sec_pagetables:0 bounce:0 [ 1903.819244][T25334] kernel_misc_reclaimable:0 [ 1903.819244][T25334] free:1260698 free_pcp:12137 free_cma:0 [ 1904.045744][T25334] Node 0 active_anon:56260kB inactive_anon:0kB active_file:52376kB inactive_file:206088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156320kB dirty:1132kB writeback:0kB shmem:39368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12368kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1904.092055][T25334] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1904.214363][T25334] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1904.274957][T25334] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1904.282589][T25334] Node 0 DMA32 free:1133480kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45420kB inactive_anon:0kB active_file:52376kB inactive_file:206088kB unevictable:1536kB writepending:1292kB zspages:0kB present:3129332kB managed:2544980kB mlocked:0kB bounce:0kB free_pcp:37196kB local_pcp:18220kB free_cma:0kB [ 1904.317126][T25334] lowmem_reserve[]: 0 0 1 1 1 [ 1904.329341][T25136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1904.349682][T25334] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1904.396409][T25334] lowmem_reserve[]: 0 0 0 0 0 [ 1904.402352][T25334] Node 1 Normal free:3902004kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15328kB local_pcp:6944kB free_cma:0kB [ 1904.436269][T25334] lowmem_reserve[]: 0 0 0 0 0 [ 1904.442752][T25334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1904.457288][T25334] Node 0 DMA32: 849*4kB (UME) 590*8kB (UME) 610*16kB (UME) 467*32kB (UME) 316*64kB (UME) 441*128kB (UME) 168*256kB (UME) 68*512kB (UME) 16*1024kB (UME) 10*2048kB (UM) 222*4096kB (UM) = 1133492kB [ 1904.467479][T25136] veth0_vlan: entered promiscuous mode [ 1904.482846][T25334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1904.535010][T25334] Node 1 Normal: 197*4kB (U) 62*8kB (UME) 43*16kB (UME) 246*32kB (UME) 73*64kB (UME) 21*128kB (UME) 7*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3902004kB [ 1904.576770][T25334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1904.601238][T25334] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1904.625516][T25334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1904.631623][T25136] veth1_vlan: entered promiscuous mode [ 1904.640855][T25334] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1904.697061][T25334] 71915 total pagecache pages [ 1904.708358][T25334] 0 pages in swap cache [ 1904.731878][T25334] Free swap = 124996kB [ 1904.740331][T25334] Total swap = 124996kB [ 1904.744488][T25334] 2097051 pages RAM [ 1904.755412][T25136] veth0_macvtap: entered promiscuous mode [ 1904.762774][T25334] 0 pages HighMem/MovableOnly [ 1904.767449][T25334] 428716 pages reserved [ 1904.779243][T25334] 0 pages cma reserved [ 1904.790856][T25136] veth1_macvtap: entered promiscuous mode [ 1904.863645][T25136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1904.903177][T25136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.956049][T21972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.973967][T21972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.010087][T21972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.040505][T21972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.224954][T21976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.239700][T21976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.258666][T25374] fuse: Bad value for 'fd' [ 1906.794208][T24897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.849834][T24897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.036468][T25372] loop5: detected capacity change from 0 to 32768 [ 1908.751660][T25391] loop3: detected capacity change from 0 to 32768 [ 1909.089193][T24428] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1909.249078][T24428] usb 6-1: Using ep0 maxpacket: 16 [ 1909.275033][T24428] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1909.317361][T24428] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1909.347163][T24428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.380543][T24428] usb 6-1: config 0 descriptor?? [ 1909.415691][T24428] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input98 [ 1909.502915][T25420] netlink: 'syz.6.5766': attribute type 10 has an invalid length. [ 1909.539352][T25420] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5766'. [ 1909.592957][ T5178] bcm5974 6-1:0.0: could not read from device [ 1909.643908][T24428] bcm5974 6-1:0.0: could not read from device [ 1909.702446][ T5178] bcm5974 6-1:0.0: could not read from device [ 1909.764791][T24428] input: failed to attach handler mousedev to device input98, error: -5 [ 1909.829348][T24428] usb 6-1: USB disconnect, device number 73 [ 1909.830729][ T5178] bcm5974 6-1:0.0: could not read from device [ 1910.291365][ T30] audit: type=1800 audit(2000001324.664:160): pid=25407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5759" name="file1" dev="tmpfs" ino=1204 res=0 errno=0 [ 1910.649754][T25433] netlink: 'syz.5.5770': attribute type 2 has an invalid length. [ 1910.795363][T25427] loop3: detected capacity change from 0 to 32768 [ 1910.810468][T25427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5764 (25427) [ 1910.836653][T25427] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1910.889819][T25427] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1911.032858][T25427] BTRFS info (device loop3): rebuilding free space tree [ 1911.076067][T25427] BTRFS info (device loop3): enabling ssd optimizations [ 1911.118028][T25427] BTRFS info (device loop3): turning on async discard [ 1911.147335][T25427] BTRFS info (device loop3): enabling free space tree [ 1911.154266][T25427] BTRFS info (device loop3): force clearing of disk cache [ 1911.716996][T21976] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1911.799225][ T5967] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1911.904346][T25136] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1912.649092][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 1912.685150][ T5967] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1912.732140][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.775285][ T5967] usb 6-1: Product: syz [ 1912.798008][ T5967] usb 6-1: Manufacturer: syz [ 1912.865698][ T5967] usb 6-1: SerialNumber: syz [ 1912.893044][ T5967] usb 6-1: config 0 descriptor?? [ 1912.914436][ T5967] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1913.860004][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5790'. [ 1914.095484][ T5967] gspca_sonixj: reg_w err -71 [ 1914.106777][ T5967] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1914.137029][ T5967] usb 6-1: USB disconnect, device number 74 [ 1915.419210][T25536] netlink: 'syz.5.5804': attribute type 1 has an invalid length. [ 1915.443143][T25536] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.5804'. [ 1915.459921][T25535] fuse: Bad value for 'fd' [ 1915.499883][T25535] overlayfs: failed to clone upperpath [ 1915.611134][T25541] loop3: detected capacity change from 0 to 2048 [ 1915.666607][T25545] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1915.981931][T25554] overlayfs: failed to clone upperpath [ 1916.543093][ T5967] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1916.644598][T25568] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5818'. [ 1916.751135][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.772799][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.799098][ T5967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1916.822312][ T5967] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1916.842098][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.865946][ T5967] usb 4-1: config 0 descriptor?? [ 1916.899456][ T5828] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1917.286548][ T5967] plantronics 0003:047F:FFFF.006F: ignoring exceeding usage max [ 1917.300685][ T5967] plantronics 0003:047F:FFFF.006F: ignoring exceeding usage max [ 1917.319580][ T5967] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1917.444302][ T5967] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1917.500737][ T5967] usb 4-1: USB disconnect, device number 69 [ 1917.551523][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 1917.558566][ T5828] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1917.566876][ T5828] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1917.576723][ T5828] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1917.605872][ T5828] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1917.658941][ T5828] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1917.694125][ T5828] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1917.720542][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.848192][T25596] overlayfs: failed to clone upperpath [ 1917.968996][ T5828] usb 6-1: usb_control_msg returned -32 [ 1917.999006][ T5828] usbtmc 6-1:16.0: can't read capabilities [ 1918.705808][T25617] bridge1: entered promiscuous mode [ 1918.719315][T25617] bridge1: entered allmulticast mode [ 1918.741705][T25618] nbd: device at index 3 is going down [ 1919.081126][T25630] overlayfs: failed to clone upperpath [ 1919.731347][T13512] usb 6-1: USB disconnect, device number 75 [ 1920.287835][T25656] loop3: detected capacity change from 0 to 64 [ 1920.445924][T25656] ------------[ cut here ]------------ [ 1920.452230][T25656] WARNING: CPU: 1 PID: 25656 at fs/buffer.c:1183 mark_buffer_dirty+0x38b/0x410 [ 1920.461453][T25656] Modules linked in: [ 1920.466347][T25656] CPU: 1 UID: 0 PID: 25656 Comm: syz.3.5867 Not tainted syzkaller #0 PREEMPT(full) [ 1920.476407][T25656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1920.486619][T25656] RIP: 0010:mark_buffer_dirty+0x38b/0x410 [ 1920.492525][T25656] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 85 00 00 00 48 8b 3b be 40 00 00 00 e8 30 af fb ff e9 d9 fd ff ff e8 26 2c 72 ff 90 <0f> 0b 90 e9 a1 fc ff ff e8 18 2c 72 ff 90 0f 0b 90 e9 c3 fc ff ff [ 1920.512391][T25656] RSP: 0018:ffffc9000c9bf930 EFLAGS: 00010287 [ 1920.518479][T25656] RAX: 0000000000000c8b RBX: ffff8880533809f8 RCX: ffffc90012592000 [ 1920.526506][T25656] RDX: 0000000000080000 RSI: ffffffff824abb6a RDI: 0000000000000001 [ 1920.534679][T25656] RBP: ffff888056fb2000 R08: 0000000000000001 R09: 0000000000000000 [ 1920.542708][T25656] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000009 [ 1920.551036][T25656] R13: ffffed100adf642b R14: ffff8880533809f8 R15: ffff888053380570 [ 1920.559259][T25656] FS: 00007f5b38bee6c0(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000 [ 1920.568862][T25656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1920.576045][T25656] CR2: 000000110c37cfe7 CR3: 000000005c8d7000 CR4: 0000000000350ef0 [ 1920.584118][T25656] Call Trace: [ 1920.587404][T25656] [ 1920.590745][T25656] bfs_get_block+0x3eb/0xe70 [ 1920.595370][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.601168][T25656] ? __pfx_bfs_get_block+0x10/0x10 [ 1920.606298][T25656] __block_write_begin_int+0x4f4/0x16d0 [ 1920.611934][T25656] ? __pfx_bfs_get_block+0x10/0x10 [ 1920.617069][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.622767][T25656] ? __pfx___block_write_begin_int+0x10/0x10 [ 1920.628789][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.634489][T25656] ? __pfx_bfs_get_block+0x10/0x10 [ 1920.639656][T25656] block_write_begin+0x9a/0x1d0 [ 1920.644540][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.650240][T25656] bfs_write_begin+0x31/0xd0 [ 1920.655149][T25656] generic_perform_write+0x3c4/0x900 [ 1920.660691][T25656] ? __pfx_generic_perform_write+0x10/0x10 [ 1920.666531][T25656] ? inode_needs_update_time.part.0+0x191/0x270 [ 1920.673420][T25656] __generic_file_write_iter+0x1f7/0x240 [ 1920.679679][T25656] generic_file_write_iter+0xe1/0x3c0 [ 1920.685106][T25656] vfs_write+0x7d3/0x11d0 [ 1920.689496][T25656] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1920.695519][T25656] ? __pfx___mutex_lock+0x10/0x10 [ 1920.700638][T25656] ? __pfx_vfs_write+0x10/0x10 [ 1920.705467][T25656] ksys_write+0x12a/0x250 [ 1920.709881][T25656] ? __pfx_ksys_write+0x10/0x10 [ 1920.714778][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.720495][T25656] do_syscall_64+0xcd/0xfa0 [ 1920.725041][T25656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.731053][T25656] RIP: 0033:0x7f5b3a98f749 [ 1920.735483][T25656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1920.756026][T25656] RSP: 002b:00007f5b38bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1920.765116][T25656] RAX: ffffffffffffffda RBX: 00007f5b3abe5fa0 RCX: 00007f5b3a98f749 [ 1920.773567][T25656] RDX: 0000000000001006 RSI: 0000200000000480 RDI: 0000000000000004 [ 1920.782746][T25656] RBP: 00007f5b3aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1920.791481][T25656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1920.799498][T25656] R13: 00007f5b3abe6038 R14: 00007f5b3abe5fa0 R15: 00007ffe709460a8 [ 1920.807515][T25656] [ 1920.810580][T25656] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1920.817871][T25656] CPU: 1 UID: 0 PID: 25656 Comm: syz.3.5867 Not tainted syzkaller #0 PREEMPT(full) [ 1920.827264][T25656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1920.837329][T25656] Call Trace: [ 1920.840612][T25656] [ 1920.843546][T25656] dump_stack_lvl+0x3d/0x1f0 [ 1920.848178][T25656] vpanic+0x640/0x6f0 [ 1920.852208][T25656] ? mark_buffer_dirty+0x38b/0x410 [ 1920.857341][T25656] panic+0xca/0xd0 [ 1920.861111][T25656] ? __pfx_panic+0x10/0x10 [ 1920.865580][T25656] check_panic_on_warn+0xab/0xb0 [ 1920.870548][T25656] __warn+0xf6/0x3c0 [ 1920.874454][T25656] ? mark_buffer_dirty+0x38b/0x410 [ 1920.879582][T25656] report_bug+0x3c3/0x580 [ 1920.883923][T25656] ? mark_buffer_dirty+0x38b/0x410 [ 1920.889039][T25656] handle_bug+0x184/0x210 [ 1920.893395][T25656] exc_invalid_op+0x17/0x50 [ 1920.897919][T25656] asm_exc_invalid_op+0x1a/0x20 [ 1920.902776][T25656] RIP: 0010:mark_buffer_dirty+0x38b/0x410 [ 1920.908500][T25656] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 85 00 00 00 48 8b 3b be 40 00 00 00 e8 30 af fb ff e9 d9 fd ff ff e8 26 2c 72 ff 90 <0f> 0b 90 e9 a1 fc ff ff e8 18 2c 72 ff 90 0f 0b 90 e9 c3 fc ff ff [ 1920.928110][T25656] RSP: 0018:ffffc9000c9bf930 EFLAGS: 00010287 [ 1920.934181][T25656] RAX: 0000000000000c8b RBX: ffff8880533809f8 RCX: ffffc90012592000 [ 1920.942153][T25656] RDX: 0000000000080000 RSI: ffffffff824abb6a RDI: 0000000000000001 [ 1920.950123][T25656] RBP: ffff888056fb2000 R08: 0000000000000001 R09: 0000000000000000 [ 1920.958092][T25656] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000009 [ 1920.966059][T25656] R13: ffffed100adf642b R14: ffff8880533809f8 R15: ffff888053380570 [ 1920.974047][T25656] ? mark_buffer_dirty+0x38a/0x410 [ 1920.979178][T25656] bfs_get_block+0x3eb/0xe70 [ 1920.983800][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.989452][T25656] ? __pfx_bfs_get_block+0x10/0x10 [ 1920.994565][T25656] __block_write_begin_int+0x4f4/0x16d0 [ 1921.000133][T25656] ? __pfx_bfs_get_block+0x10/0x10 [ 1921.005248][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.010896][T25656] ? __pfx___block_write_begin_int+0x10/0x10 [ 1921.016898][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.022552][T25656] ? __pfx_bfs_get_block+0x10/0x10 [ 1921.027671][T25656] block_write_begin+0x9a/0x1d0 [ 1921.032539][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.038194][T25656] bfs_write_begin+0x31/0xd0 [ 1921.042788][T25656] generic_perform_write+0x3c4/0x900 [ 1921.048101][T25656] ? __pfx_generic_perform_write+0x10/0x10 [ 1921.053931][T25656] ? inode_needs_update_time.part.0+0x191/0x270 [ 1921.060192][T25656] __generic_file_write_iter+0x1f7/0x240 [ 1921.065855][T25656] generic_file_write_iter+0xe1/0x3c0 [ 1921.071260][T25656] vfs_write+0x7d3/0x11d0 [ 1921.075615][T25656] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1921.081622][T25656] ? __pfx___mutex_lock+0x10/0x10 [ 1921.086668][T25656] ? __pfx_vfs_write+0x10/0x10 [ 1921.091484][T25656] ksys_write+0x12a/0x250 [ 1921.095836][T25656] ? __pfx_ksys_write+0x10/0x10 [ 1921.100710][T25656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.106371][T25656] do_syscall_64+0xcd/0xfa0 [ 1921.110899][T25656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.116796][T25656] RIP: 0033:0x7f5b3a98f749 [ 1921.121216][T25656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1921.140829][T25656] RSP: 002b:00007f5b38bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1921.149250][T25656] RAX: ffffffffffffffda RBX: 00007f5b3abe5fa0 RCX: 00007f5b3a98f749 [ 1921.157222][T25656] RDX: 0000000000001006 RSI: 0000200000000480 RDI: 0000000000000004 [ 1921.165192][T25656] RBP: 00007f5b3aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1921.173168][T25656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1921.181139][T25656] R13: 00007f5b3abe6038 R14: 00007f5b3abe5fa0 R15: 00007ffe709460a8 [ 1921.189136][T25656] [ 1921.192432][T25656] Kernel Offset: disabled [ 1921.196748][T25656] Rebooting in 86400 seconds..