last executing test programs: 2.987408052s ago: executing program 2 (id=3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x20, 0x0, &(0x7f0000000600)='\x00'/32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.736591598s ago: executing program 0 (id=1): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0xa) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:20000\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='source\x00', &(0x7f0000000900)='127.0.0.1:20000:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept4$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @loopback}, &(0x7f0000000c00)=0x10, 0x0) sendto$inet(r2, &(0x7f0000000a00)="636570682076320a10000100"/26, 0x1a, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000d00)=""/128, 0x80, 0x0, 0x0, 0x0) 2.658042459s ago: executing program 2 (id=6): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='mon_addr\x00', &(0x7f0000000080)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='osd_request_timeout\x00', &(0x7f0000000100)='1\x00', 0x0) 2.561561872s ago: executing program 1 (id=2): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x10604bd, 0x0) open(0x0, 0x8000, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000002000100"], 0x0) 2.442594254s ago: executing program 2 (id=8): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000200)}) 1.510861956s ago: executing program 0 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 1.176197444s ago: executing program 1 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x40}}, 0x0) 966.441298ms ago: executing program 3 (id=15): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401000000"], 0x7) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0128200700000000000000"], 0xb) nanosleep(&(0x7f0000000340)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0401282000"], 0x7) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0401282000"], 0x7) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) 728.857364ms ago: executing program 0 (id=16): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0xc9, 0x1, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10, 0x0, 0x64}}}}, 0x16) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x3e8}, 0x10) connect(r1, &(0x7f0000000180)=@generic={0x1f, "0000000000000100"}, 0xa) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e151b0000000000000000000000000001c800"], 0x18) nanosleep(&(0x7f0000000240)={0x0, 0x5f5e100}, 0x0) bind(r1, &(0x7f0000000300)=@generic={0x1f, "0000000000000100aaaaaaaaaa110101010100"}, 0x32) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) close(r1) 648.002325ms ago: executing program 1 (id=17): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5, 0x103, 0x0, {0x0, 0xa}, {}, {0x1}, 0x1, @can={{0x1}}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5, 0x103, 0x0, {0x0, 0x1e}, {}, {0x2}, 0x1, @can={{0x2}}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x5, 0x103, 0x0, {0x0, 0x32}, {}, {0x3}, 0x1, @can={{0x3}}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x5, 0x103, 0x0, {0x0, 0x64}, {}, {0x4}, 0x1, @can={{0x4}}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x5, 0x103, 0x0, {0x0, 0xc8}, {}, {0x5}, 0x1, @can={{0x5}}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x5, 0x103, 0x0, {0x0, 0x1f4}, {}, {0x6}, 0x1, @can={{0x6}}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x5, 0x103, 0x0, {0x0, 0x3e8}, {}, {0x7}, 0x1, @can={{0x7}}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x5, 0x103, 0x0, {0x0, 0x7d0}, {}, {0x8}, 0x1, @can={{0x8}}}, 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980), 0x100}], 0x1}, 0x40) recvmsg$can_bcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80), 0x100}], 0x1}, 0x40) recvmsg$can_bcm(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80), 0x100}], 0x1}, 0x40) recvmsg$can_bcm(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80), 0x100}], 0x1}, 0x40) sched_yield() getpid() sched_yield() getpid() sched_yield() getpid() sched_yield() getpid() sched_yield() getpid() recvmsg$can_bcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80), 0x100}], 0x1}, 0x40) 559.282867ms ago: executing program 3 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) 476.2201ms ago: executing program 1 (id=19): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x1}, {0x0, '\x00\x00\x00\x00@\x00'}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xe}, @hci_rp_read_local_ext_features={{0x1}, {0x0, 0x1, 0x2, "0200"}}}}, 0x11) nanosleep(&(0x7f00000000c0)={0x0, 0x2faf080}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="0d000000010001", 0x7}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c01", 0x17}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="59000000180000000000000000000000000000000000ff050102030405", 0x1e}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='X\x00\x00\x00\x00\x00', 0x6}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="59000000180000000000000000000000000000000000ff050102030405", 0x1e}], 0x1}, 0x0) 453.9666ms ago: executing program 3 (id=20): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620af0ff7f000001620af4ff7f000001620af8ff12344e20620ad8ff12344e20620adcff00000000620ae0ff00000000620ae4ff50021000620ae8ff00000000620ac0ff45000028620ac4ff00000000620ac8ff40060000620accff7f000001620ad0ff7f000001bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffffb705000014000000850000006e000000bf710000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x20, 0x0, &(0x7f0000000600)='\x00'/32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 344.029482ms ago: executing program 3 (id=21): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="bf16000000000000620af0ff7f000001620af4ff7f000001620af8ff12344e20620ad8ff12344e20620adcff00000000620ae0ff00000000620ae4ff50021000620ae8ff00000000620ac0ff45000028620ac4ff00000000620ac8ff40060000620accff7f000001620ad0ff7f000001bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb705000000000000850000005400000015000b0000000000bf07000000000000bf71000000000000bfa200000000000007020000c0ffffffb703000014000000bfa400000000000007040000d8ffffffb705000014000000850000006e000000bf710000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x20, 0x0, &(0x7f0000000600)='\x00'/32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 291.064554ms ago: executing program 0 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(r0, &(0x7f0000000900)='\x00'/136, 0x8c) 191.467306ms ago: executing program 3 (id=23): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x15e, [0x200000000140, 0x0, 0x0, 0x200000000240, 0x200000000270], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x1, 0x0, 0x8100, '\x00', '\x00', '\x00', '\x00', @empty, [], @empty, [], 0x9e, 0x9e, 0xce, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x1, 0x0, 0x800, 0x1}}}], [], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x1d6) 110.563208ms ago: executing program 1 (id=24): timer_getoverrun(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="de6896034bbcb6b7f2b1c08f13ea12f568e87ef55137e9c51acb300b4edd91b1430000dde8c74e5e406c38ef268a449faf90815ace6dddc52cb0d615e995ad59f786e0364789eee5ae6229968a8b188a1f5f0c9c5ce25e0a8639bbc061572b83781ebd7104617ca7f6e45e2cddd81f777a5f5bd885d55bc10b76d87ad6dc7ea6e19ca9891f062c91bc42940cbc35608d8bbe197ba80fb6405c56660c5124d37690fac67816", @ANYRES64=0x0], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000500000003e7bdad5800000000000200000034aa000000000000000f0200000003740000005f00"], &(0x7f00000003c0)=""/143, 0x45, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, 0x0) io_setup(0x4, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) dup(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'veth0_to_bond\x00', &(0x7f00000006c0)=@ethtool_perm_addr={0x20, 0xbb, "02a7646fb6f080ec47fe5e1e48ecc8ebfa32858effe2791588ebafc8740b2d073f125ac573130531cbaff626a67ca64d0c71cba83001d6c625086b060415eb316ec83ac1840a5c6318b69a527e6adad2eaee620324d2abbac417ec20082330efb8de997dc67049067d7c255f114f6add1f99f87239912f2f0ba9b073b2cc0b394cb851fe2fe607db294393995b05a8c44a7b071c574813f35b1d3c48331b9ac5ea5ff288756705d9e8e21009b33b2a4b957ab98d3970ae56bdc163"}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x20, 0x80, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x8, 0x131, 0xff, 0x80, 0x0, [0x0, 0xfffffffe]}}) socket$netlink(0x10, 0x3, 0x2) 172.711µs ago: executing program 3 (id=25): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='secret\x00', &(0x7f0000000700)='AQAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA==\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='mount_timeout\x00', &(0x7f0000000900)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) write(r2, &(0x7f0000000a00)='ceph v2\n\x00\x00', 0xa) 0s ago: executing program 0 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}, @TCA_TBF_RATE64={0xc, 0x4, 0xa1998c3793c5815e}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 61.342463][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.377343][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. syzkaller login: [ 83.459239][ T5761] cgroup: Unknown subsys name 'net' [ 83.596658][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.346523][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.043901][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.055992][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.067777][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.075773][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.127706][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.144232][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.152192][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.161308][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.169368][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.178118][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.186059][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.195193][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.203451][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.211216][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.236333][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.244716][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.253003][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.261085][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.282609][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.290136][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.300052][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.307385][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.314878][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.315104][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.895454][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.014846][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 88.145610][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.153732][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.161823][ T5775] bridge_slave_0: entered allmulticast mode [ 88.169227][ T5775] bridge_slave_0: entered promiscuous mode [ 88.183401][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.213224][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.223118][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.230691][ T5775] bridge_slave_1: entered allmulticast mode [ 88.240128][ T5775] bridge_slave_1: entered promiscuous mode [ 88.272018][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.348439][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.362125][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.409214][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.416483][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.424108][ T5771] bridge_slave_0: entered allmulticast mode [ 88.433087][ T5771] bridge_slave_0: entered promiscuous mode [ 88.451764][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.460022][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.467472][ T5771] bridge_slave_1: entered allmulticast mode [ 88.475373][ T5771] bridge_slave_1: entered promiscuous mode [ 88.571988][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.584855][ T5775] team0: Port device team_slave_0 added [ 88.605395][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.613023][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.620824][ T5779] bridge_slave_0: entered allmulticast mode [ 88.628543][ T5779] bridge_slave_0: entered promiscuous mode [ 88.638386][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.661481][ T5775] team0: Port device team_slave_1 added [ 88.680453][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.687884][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.695604][ T5782] bridge_slave_0: entered allmulticast mode [ 88.703465][ T5782] bridge_slave_0: entered promiscuous mode [ 88.711843][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.719551][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.727064][ T5779] bridge_slave_1: entered allmulticast mode [ 88.734748][ T5779] bridge_slave_1: entered promiscuous mode [ 88.766471][ T5771] team0: Port device team_slave_0 added [ 88.773524][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.781262][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.789514][ T5782] bridge_slave_1: entered allmulticast mode [ 88.797488][ T5782] bridge_slave_1: entered promiscuous mode [ 88.830198][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.837591][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.864337][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.878411][ T5771] team0: Port device team_slave_1 added [ 88.884931][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.892408][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.918851][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.998478][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.011075][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.034722][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.074196][ T5775] hsr_slave_0: entered promiscuous mode [ 89.081866][ T5775] hsr_slave_1: entered promiscuous mode [ 89.091727][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.113598][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.121100][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.147366][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.160065][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.167167][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.193325][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.219636][ T5782] team0: Port device team_slave_0 added [ 89.241068][ T5782] team0: Port device team_slave_1 added [ 89.281303][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.288456][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.316057][ T5788] Bluetooth: hci3: command tx timeout [ 89.322198][ T5778] Bluetooth: hci0: command tx timeout [ 89.324972][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.344455][ T5779] team0: Port device team_slave_0 added [ 89.353695][ T5779] team0: Port device team_slave_1 added [ 89.384399][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.387268][ T5788] Bluetooth: hci2: command tx timeout [ 89.392540][ T5778] Bluetooth: hci1: command tx timeout [ 89.403946][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.430359][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.505846][ T5771] hsr_slave_0: entered promiscuous mode [ 89.513067][ T5771] hsr_slave_1: entered promiscuous mode [ 89.519785][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.527789][ T5771] Cannot create hsr debugfs directory [ 89.534303][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.542182][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.568883][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.582080][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.589484][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.615739][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.786539][ T5779] hsr_slave_0: entered promiscuous mode [ 89.794182][ T5779] hsr_slave_1: entered promiscuous mode [ 89.801120][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.808965][ T5779] Cannot create hsr debugfs directory [ 89.823577][ T5782] hsr_slave_0: entered promiscuous mode [ 89.830473][ T5782] hsr_slave_1: entered promiscuous mode [ 89.837868][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.845476][ T5782] Cannot create hsr debugfs directory [ 90.154772][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.174336][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.211409][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.252778][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.338127][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.358597][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.371585][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.402514][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.472845][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.485220][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.508340][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.520584][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.614140][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.642705][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.654543][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.665933][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.753396][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.832109][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.859561][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.867044][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.884402][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.919388][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.926641][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.948254][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.005233][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.022519][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.029715][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.040511][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.047911][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.065336][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.154931][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.192723][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.212615][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.261094][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.268383][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.282448][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.289784][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.341566][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.348874][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.365097][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.372502][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.388554][ T5778] Bluetooth: hci3: command tx timeout [ 91.394090][ T5778] Bluetooth: hci0: command tx timeout [ 91.476992][ T5778] Bluetooth: hci1: command tx timeout [ 91.479597][ T5788] Bluetooth: hci2: command tx timeout [ 91.744835][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.875487][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.909655][ T5775] veth0_vlan: entered promiscuous mode [ 91.976568][ T5775] veth1_vlan: entered promiscuous mode [ 91.990529][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.059635][ T5771] veth0_vlan: entered promiscuous mode [ 92.086294][ T5771] veth1_vlan: entered promiscuous mode [ 92.109733][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.130923][ T5775] veth0_macvtap: entered promiscuous mode [ 92.155235][ T5775] veth1_macvtap: entered promiscuous mode [ 92.175102][ T5782] veth0_vlan: entered promiscuous mode [ 92.223301][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.252045][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.261641][ T5782] veth1_vlan: entered promiscuous mode [ 92.284338][ T5771] veth0_macvtap: entered promiscuous mode [ 92.299486][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.309277][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.318775][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.327622][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.350847][ T5771] veth1_macvtap: entered promiscuous mode [ 92.364947][ T5779] veth0_vlan: entered promiscuous mode [ 92.434438][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.446066][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.459562][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.472729][ T5779] veth1_vlan: entered promiscuous mode [ 92.495915][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.509615][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.525861][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.547851][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.556632][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.568902][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.577852][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.623484][ T5782] veth0_macvtap: entered promiscuous mode [ 92.664001][ T5782] veth1_macvtap: entered promiscuous mode [ 92.695223][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.705009][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.762844][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.774642][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.785125][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.796224][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.808643][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.818618][ T5779] veth0_macvtap: entered promiscuous mode [ 92.870029][ T5779] veth1_macvtap: entered promiscuous mode [ 92.878928][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.888892][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.905640][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.920248][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.930227][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.940805][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.956091][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.012509][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.027813][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.036684][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.048609][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.065217][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.082128][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.092979][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.103635][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.114093][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.130285][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.160046][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.181011][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.182567][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.201539][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.213660][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.224221][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.225271][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.250941][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.261882][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.273948][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.316603][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.347427][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.356517][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.388294][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.431488][ T5840] Bluetooth: ISO socket layer initialized [ 93.467532][ T5774] Bluetooth: hci3: command tx timeout [ 93.467532][ T5788] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 93.473177][ T5778] Bluetooth: hci0: command tx timeout [ 93.515230][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.533092][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.547621][ T5778] Bluetooth: hci2: command tx timeout [ 93.604490][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.622112][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.705513][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.725691][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.846561][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.868538][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.994642][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.003833][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.341940][ T5859] syz.1.2[5859]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.691192][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.703163][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.712569][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.727192][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.747819][ T5816] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.913411][ T5859] loop1: detected capacity change from 0 to 40427 [ 94.936965][ T5859] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 94.947085][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 94.962735][ T5859] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.969832][ T5816] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 94.996108][ T5816] usb 3-1: config 0 has no interface number 0 [ 95.012614][ T5816] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 95.026257][ T5816] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 95.029753][ T5838] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_HELLO) [ 95.049736][ T5816] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 95.062126][ T5851] ceph: No mds server is up or the cluster is laggy [ 95.067371][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.084859][ T5859] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.102679][ T5816] usb 3-1: Product: syz [ 95.111376][ T5816] usb 3-1: Manufacturer: syz [ 95.123367][ T5816] usb 3-1: SerialNumber: syz [ 95.163580][ T5816] usb 3-1: config 0 descriptor?? [ 95.186695][ T5863] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.217369][ T5863] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.297390][ T5859] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.311654][ T5859] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.437505][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.453867][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.464438][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.487358][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.547474][ T5774] Bluetooth: hci0: command tx timeout [ 95.553147][ T5774] Bluetooth: hci3: command tx timeout [ 95.637769][ T5778] Bluetooth: hci2: command tx timeout [ 96.193966][ T5778] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 96.498744][ T5816] asix: probe of 3-1:0.34 failed with error -71 [ 96.549652][ T5894] Bluetooth: MGMT ver 1.22 [ 96.565453][ T5816] usb 3-1: USB disconnect, device number 2 [ 96.931915][ T56] ------------[ cut here ]------------ [ 96.938746][ T56] WARNING: CPU: 1 PID: 56 at net/ceph/messenger_v2.c:3168 ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 96.949658][ T56] Modules linked in: [ 96.953769][ T56] CPU: 1 PID: 56 Comm: kworker/1:2 Not tainted syzkaller #0 [ 96.961203][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.971412][ T56] Workqueue: ceph-msgr ceph_con_workfn [ 96.977114][ T56] RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 96.983358][ T56] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7e 39 37 f7 48 c7 c7 a0 5b e6 8b 44 89 f6 e8 2f 06 01 f7 0f 0b e9 57 ff ff ff e8 63 39 37 f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 51 39 37 f7 0f 0b 41 bd [ 97.003753][ T56] RSP: 0018:ffffc9000131f560 EFLAGS: 00010293 [ 97.010300][ T56] RAX: ffffffff8a50490d RBX: ffff8880271f86c8 RCX: ffff888018aa8000 [ 97.018755][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.026926][ T56] RBP: ffffc9000131fb38 R08: 0000000000000004 R09: 0000000000000004 [ 97.034964][ T56] R10: ffff8880271f86b4 R11: ffffed1004e3f0d8 R12: fffff52000263efc [ 97.043964][ T56] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 97.052363][ T56] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 97.061757][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.069171][ T56] CR2: 00007f62f7424ff8 CR3: 0000000075e06000 CR4: 00000000003506e0 [ 97.077305][ T56] Call Trace: [ 97.080648][ T56] [ 97.083797][ T56] ? prepare_write_message_footer+0x4b0/0x4b0 [ 97.090003][ T56] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 97.095830][ T56] ? __mutex_trylock_common+0x160/0x270 [ 97.101736][ T56] ? trace_raw_output_contention_end+0xd0/0xd0 [ 97.108261][ T56] ? rcu_is_watching+0x15/0xb0 [ 97.113466][ T56] ? trace_contention_end+0x39/0xe0 [ 97.118788][ T56] ? __mutex_lock+0x30d/0xc80 [ 97.123828][ T56] ? ceph_con_workfn+0x39/0x1250 [ 97.129034][ T56] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 97.135119][ T56] ? __lock_acquire+0x7d80/0x7d80 [ 97.141037][ T56] ceph_con_workfn+0x1f1/0x1250 [ 97.146089][ T56] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.151987][ T56] ? process_scheduled_works+0x975/0x1600 [ 97.158076][ T56] ? process_scheduled_works+0x975/0x1600 [ 97.163895][ T56] process_scheduled_works+0xa60/0x1600 [ 97.169641][ T56] ? worker_attach_to_pool+0x370/0x370 [ 97.175199][ T56] ? assign_work+0x3cc/0x5d0 [ 97.179959][ T56] worker_thread+0xa5e/0xfe0 [ 97.184676][ T56] ? _raw_spin_unlock+0x40/0x40 [ 97.189726][ T56] ? __kthread_parkme+0x71/0x1c0 [ 97.194795][ T56] kthread+0x2fa/0x390 [ 97.199282][ T56] ? pr_cont_work+0x550/0x550 [ 97.204140][ T56] ? kthread_blkcg+0xd0/0xd0 [ 97.208962][ T56] ret_from_fork+0x48/0x80 [ 97.213475][ T56] ? kthread_blkcg+0xd0/0xd0 [ 97.218212][ T56] ret_from_fork_asm+0x11/0x20 [ 97.223074][ T56] [ 97.226145][ T56] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.233660][ T56] CPU: 1 PID: 56 Comm: kworker/1:2 Not tainted syzkaller #0 [ 97.241027][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.251667][ T56] Workqueue: ceph-msgr ceph_con_workfn [ 97.257195][ T56] Call Trace: [ 97.261317][ T56] [ 97.264284][ T56] dump_stack_lvl+0x18c/0x250 [ 97.269293][ T56] ? show_regs_print_info+0x20/0x20 [ 97.274657][ T56] ? load_image+0x420/0x420 [ 97.279503][ T56] panic+0x2ca/0x720 [ 97.283478][ T56] ? bpf_jit_dump+0xd0/0xd0 [ 97.288149][ T56] ? ret_from_fork_asm+0x11/0x20 [ 97.293237][ T56] __warn+0x2e0/0x470 [ 97.297277][ T56] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 97.302882][ T56] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 97.308489][ T56] report_bug+0x2be/0x4f0 [ 97.312881][ T56] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 97.318673][ T56] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 97.324465][ T56] ? ceph_con_v2_try_read+0x7d1f/0x7ea0 [ 97.330086][ T56] handle_bug+0xcf/0x120 [ 97.334398][ T56] exc_invalid_op+0x1a/0x50 [ 97.338964][ T56] asm_exc_invalid_op+0x1a/0x20 [ 97.343846][ T56] RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 97.350328][ T56] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7e 39 37 f7 48 c7 c7 a0 5b e6 8b 44 89 f6 e8 2f 06 01 f7 0f 0b e9 57 ff ff ff e8 63 39 37 f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 51 39 37 f7 0f 0b 41 bd [ 97.370159][ T56] RSP: 0018:ffffc9000131f560 EFLAGS: 00010293 [ 97.376718][ T56] RAX: ffffffff8a50490d RBX: ffff8880271f86c8 RCX: ffff888018aa8000 [ 97.384743][ T56] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.393100][ T56] RBP: ffffc9000131fb38 R08: 0000000000000004 R09: 0000000000000004 [ 97.402141][ T56] R10: ffff8880271f86b4 R11: ffffed1004e3f0d8 R12: fffff52000263efc [ 97.410237][ T56] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 97.418331][ T56] ? ceph_con_v2_try_read+0x7d1d/0x7ea0 [ 97.423992][ T56] ? prepare_write_message_footer+0x4b0/0x4b0 [ 97.430582][ T56] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 97.436389][ T56] ? __mutex_trylock_common+0x160/0x270 [ 97.441984][ T56] ? trace_raw_output_contention_end+0xd0/0xd0 [ 97.448308][ T56] ? rcu_is_watching+0x15/0xb0 [ 97.453181][ T56] ? trace_contention_end+0x39/0xe0 [ 97.458599][ T56] ? __mutex_lock+0x30d/0xc80 [ 97.463343][ T56] ? ceph_con_workfn+0x39/0x1250 [ 97.468358][ T56] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 97.474387][ T56] ? __lock_acquire+0x7d80/0x7d80 [ 97.479470][ T56] ceph_con_workfn+0x1f1/0x1250 [ 97.484380][ T56] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.489630][ T56] ? process_scheduled_works+0x975/0x1600 [ 97.495398][ T56] ? process_scheduled_works+0x975/0x1600 [ 97.501706][ T56] process_scheduled_works+0xa60/0x1600 [ 97.507324][ T56] ? worker_attach_to_pool+0x370/0x370 [ 97.512854][ T56] ? assign_work+0x3cc/0x5d0 [ 97.517599][ T56] worker_thread+0xa5e/0xfe0 [ 97.522607][ T56] ? _raw_spin_unlock+0x40/0x40 [ 97.527602][ T56] ? __kthread_parkme+0x71/0x1c0 [ 97.532596][ T56] kthread+0x2fa/0x390 [ 97.536728][ T56] ? pr_cont_work+0x550/0x550 [ 97.541459][ T56] ? kthread_blkcg+0xd0/0xd0 [ 97.546122][ T56] ret_from_fork+0x48/0x80 [ 97.550592][ T56] ? kthread_blkcg+0xd0/0xd0 [ 97.555253][ T56] ret_from_fork_asm+0x11/0x20 [ 97.560081][ T56] [ 97.563729][ T56] Kernel Offset: disabled [ 97.568233][ T56] Rebooting in 86400 seconds..