last executing test programs: 24m52.634797305s ago: executing program 32 (id=536): open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x49) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r0, &(0x7f00000041c0)=""/4111, 0x100f) 22m23.136134765s ago: executing program 1 (id=806): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0x7, 0x9, 0x3ff}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="100000000000f8"], 0x10}, 0x24004004) 22m13.147935097s ago: executing program 1 (id=818): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000001d01000003000000000000009fc48411efcb9c012ed00f000000000000"], 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r4) chdir(&(0x7f0000000100)='./file0\x00') 22m11.029227901s ago: executing program 1 (id=821): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000500), 0x1a1000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000580)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x940) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x0) quotactl_fd$Q_SETINFO(r3, 0x7fffffffc0000303, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 22m7.923887144s ago: executing program 1 (id=826): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x110, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x48, r7, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22m5.123564957s ago: executing program 1 (id=829): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x10040c05, &(0x7f0000000300)={0x11, 0x888e, 0x0, 0x1, 0xb, 0x6, @random="0afc8bef4a64"}, 0x14) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)='p', 0x1, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 22m3.839920879s ago: executing program 1 (id=831): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$inet(0x2, 0x2, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x649c, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x4c844) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 21m46.804252485s ago: executing program 33 (id=831): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$inet(0x2, 0x2, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x649c, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x4c844) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 14m50.938263296s ago: executing program 0 (id=3356): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f00000000c0)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m49.969888026s ago: executing program 0 (id=3358): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'lblcr\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'none\x00', 0x4, 0x6, 0x51}, {@rand_addr=0x64010100, 0x4e20, 0x10002, 0xcd, 0x4004000, 0xd}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 14m49.835024413s ago: executing program 0 (id=3361): r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702000000000000000f2d00000000000100"}, 0x80, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)) 14m48.595234987s ago: executing program 0 (id=3365): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) 14m46.92150237s ago: executing program 0 (id=3373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0x13}, @NL80211_ATTR_FRAME={0x25, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @broadcast, @random="036862554fc1", {0x6, 0x2}}, @addba_resp={0x3, 0x1, {0x3, 0x32, {0x0, 0x1, 0x6, 0x81}, 0x6}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8016}, 0xc000004) 14m45.634238s ago: executing program 0 (id=3377): getpeername(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x31, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10003}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 14m28.595173784s ago: executing program 34 (id=3377): getpeername(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x31, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10003}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 10m30.30810288s ago: executing program 4 (id=3842): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf21", 0x43, 0x5e, 0x0, 0x0) 10m24.375385188s ago: executing program 4 (id=3852): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, 0x0, 0x40044c4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 10m20.587320911s ago: executing program 4 (id=3860): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0x7) 10m18.790928822s ago: executing program 4 (id=3862): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b664", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c00018008000300010000007400018014000200776732000000000000000000000000000800", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m13.131286082s ago: executing program 4 (id=3869): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4e182abcb84a055144161b976c65b4311965f25af5d54b69147c01f8e2432df626027d535025a09754e80caf76e4a857163cbf5f0eb1cb4439f50ed55557be8a", 0x2c}, 0x48, r5) request_key(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80)={'syz', 0x1}, 0x0, r6) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) 10m9.631359471s ago: executing program 4 (id=3872): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @loopback}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket(0x28, 0x1, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000040) 9m50.803738352s ago: executing program 35 (id=3872): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @loopback}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket(0x28, 0x1, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000040) 7m36.786468619s ago: executing program 2 (id=4035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x2, 0x0, 0x4003) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x2, 0x1e053c45963db87c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r4, r3, 0x0, 0x40001) 7m33.765708221s ago: executing program 2 (id=4036): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r4, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002df8001c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) 7m31.320445703s ago: executing program 2 (id=4047): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x40008000) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 7m28.667357095s ago: executing program 2 (id=4041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3b}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0x5, 0x6, 0xb, 0x0, 0x10}]}, 0x0, 0x7fffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0xc030128a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m26.64307262s ago: executing program 2 (id=4043): socket$nl_route(0x10, 0x3, 0x0) r0 = timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x408100) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000540)={{}, {0x77359400}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 7m24.519420666s ago: executing program 2 (id=4046): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 7m8.250985209s ago: executing program 36 (id=4046): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4m44.458890212s ago: executing program 5 (id=4204): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) r3 = socket(0xa, 0x1, 0x0) listen(r3, 0x7f) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) ioctl$BLKDISCARD(0xffffffffffffffff, 0x800812a0, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x40000000008d, 0x20001) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 4m42.347780982s ago: executing program 5 (id=4206): lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, 0x0, 0x0) write$sndseq(r6, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 4m38.914449494s ago: executing program 5 (id=4208): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) fsopen(0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="31a1b1bb81a6", 'wlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 4m8.369334869s ago: executing program 5 (id=4217): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) semget$private(0x0, 0x4, 0xe15) sendmmsg$alg(r5, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) 4m5.021457836s ago: executing program 5 (id=4210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4) 3m58.246537888s ago: executing program 5 (id=4212): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002000010027bd7000000000000a00004000000000000000000500150003000000dcdbde6cfa3605339c8ebb4bc878c6ea2a6cb0e02581495fe91d5beb88c2bad4f0e55642017f21418b9c3135bbf9c42c6ea7d814574d03c053176ea257aec14006e1257a578700446f3bcfd7f40e35df049195ee8e1805cd2b8299939055725cedc7c3345e4e4a97a66046f8fa"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) 3m45.88685247s ago: executing program 9 (id=4223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)="5fdb", 0x2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x4}, 0x8) r4 = geteuid() r5 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@barrier}, {@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@norecovery}, {@bsdgroups}, {@jqfmt_vfsv0}, {@debug}], [{@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0xa}}, {@fowner_lt={'fowner<', r4}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@measure}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(r5, &(0x7f0000000180)='./file1\x00', 0x441, 0x104) 3m41.84506956s ago: executing program 37 (id=4212): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002000010027bd7000000000000a00004000000000000000000500150003000000dcdbde6cfa3605339c8ebb4bc878c6ea2a6cb0e02581495fe91d5beb88c2bad4f0e55642017f21418b9c3135bbf9c42c6ea7d814574d03c053176ea257aec14006e1257a578700446f3bcfd7f40e35df049195ee8e1805cd2b8299939055725cedc7c3345e4e4a97a66046f8fa"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) 3m38.503753423s ago: executing program 9 (id=4228): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) getdents(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) 3m37.12142439s ago: executing program 9 (id=4230): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) semget$private(0x0, 0x4, 0xe15) sendmmsg$alg(r5, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) 3m32.521888486s ago: executing program 9 (id=4233): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff9", 0xed, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb77519", 0x40, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f", 0xdd, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m31.979928017s ago: executing program 9 (id=4234): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0xd}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$uid(0x3, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000000000008000000050800", @ANYRES32, @ANYBLOB='\x00'/17, @ANYBLOB='\x00\x00\x00'], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) listen(r2, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x2) preadv(r1, 0x0, 0x0, 0x7, 0x20000000) io_destroy(r0) 3m29.913925345s ago: executing program 9 (id=4235): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', 'KZ\'\a', "a1090054c94c4aff"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000280)={0x15, 0x3178, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0xc041) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r6, 0xc0185502, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 3m13.219433782s ago: executing program 38 (id=4235): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', 'KZ\'\a', "a1090054c94c4aff"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000280)={0x15, 0x3178, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0xc041) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r6, 0xc0185502, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 12.775282461s ago: executing program 3 (id=4333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffed5, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/60, 0x37, 0x0, 0x17}, @fda={0x66646185, 0x6, 0x2, 0x36}, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x82f49000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000005c0)={0x0, 0x7, 0x81, 0x40, 0x90, 0x5, &(0x7f0000000500)="96691e945c106d0b61b87abfa7df0a70dd78a8f906fbe258ab4ad78faea4f6d3f9ca8f9b88d3cdd07fe32d240d660c2da8af0ca29c6919b4d7746da0cda7003a27a73a684a7d1d4b567f20f6fd8fee55d893632666cf202bda1ddf5c7e1533ae8d5783dfdb9154ee5220aaa1b5042448233a79af64334080791c9bacb6a46913d6a1e5ed6adc1179a52181a2cbeeba8c"}) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) 11.498498766s ago: executing program 3 (id=4334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e28, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) 10.999385381s ago: executing program 6 (id=4336): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10040, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x24006041}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x80}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 10.383904617s ago: executing program 6 (id=4337): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lstat(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, 0x0, 0x0, 0x4001) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) 9.523953564s ago: executing program 6 (id=4338): r0 = socket$inet(0x2, 0x802, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x8014}}], 0x1, 0x2000c810) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850) write(r0, &(0x7f0000000080)="08008edf773c80", 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 9.251081415s ago: executing program 6 (id=4339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x7, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) ptrace(0x10, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r1, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000880}, 0x20004010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r7, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0xb8, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x885a}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7615}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x32b}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaac508aaaabb08060001080006"], 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}]}, &(0x7f00000000c0)=0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 7.591018513s ago: executing program 3 (id=4340): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') lseek(r0, 0x1000000, 0x0) recvmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000480)=""/225, 0xe1}], 0x3, &(0x7f00000005c0)}}], 0x1, 0x40, &(0x7f0000000640)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x44001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000100)=0x8001, 0x4) bind$tipc(r4, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200010000"], 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) 4.15640782s ago: executing program 3 (id=4341): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xfa255bb5a183eba4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x55e, 0x4) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008140000001100"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) 3.948621269s ago: executing program 6 (id=4342): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101040, 0x0) write$tun(r5, &(0x7f00000001c0)=ANY=[], 0x19) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x40000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e000000080003", @ANYRES32=0x0], 0x1c}}, 0x4000054) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 759.607833ms ago: executing program 6 (id=4343): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x6020400) r1 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0), 0x400000000000181, 0x20004050) ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r2, 0xbd1db000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe"], 0x28}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000001180)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) r4 = epoll_create1(0x80000) listen(r0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x5}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x129, 0x100000001, 0x81, 0x803, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x5, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 441.201418ms ago: executing program 3 (id=4344): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10040, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x24006041}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x80}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 3 (id=4345): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000700)={0x2, 0x0, {&(0x7f0000000440)=""/93, 0x5d, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x4}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/274, 0x112, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/200, 0xc8, 0x0, 0x2, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x12}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000200), 0x400, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x3, 0x5, 0x8, 0xe, 0x5, 0x79, 0x3, 0x8000a, 0x2, 0x5, 0x11, 0x7, 0x1, 0x2, 0xfc, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x8b, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x1, 0xffffffff]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) kernel console output (not intermixed with test programs): stream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7ce839ce59 code=0x7ffc0000 [ 1240.229093][ T38] audit: type=1326 audit(1160.085:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce839ce59 code=0x7ffc0000 [ 1240.229137][ T38] audit: type=1326 audit(1160.085:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ce839ce59 code=0x7ffc0000 [ 1240.229181][ T38] audit: type=1326 audit(1160.085:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce839ce59 code=0x7ffc0000 [ 1240.229225][ T38] audit: type=1326 audit(1160.085:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ce835d68e code=0x7ffc0000 [ 1240.229270][ T38] audit: type=1326 audit(1160.103:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7ce839e157 code=0x7ffc0000 [ 1240.229314][ T38] audit: type=1326 audit(1160.103:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ce839ce59 code=0x7ffc0000 [ 1240.229357][ T38] audit: type=1326 audit(1160.103:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7ce839e157 code=0x7ffc0000 [ 1240.229400][ T38] audit: type=1326 audit(1160.113:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18611 comm="syz.6.4040" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ce835d68e code=0x7ffc0000 [ 1240.967662][T18631] fuse: fd is not a fuse device [ 1241.010465][T11900] hsr_slave_0: left promiscuous mode [ 1241.692435][T11900] hsr_slave_1: left promiscuous mode [ 1241.695200][T11900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.845989][T11900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.198527][ T60] Bluetooth: hci0: command tx timeout [ 1243.063249][T11900] hsr_slave_0: left promiscuous mode [ 1243.321799][T11900] hsr_slave_1: left promiscuous mode [ 1243.322943][T11900] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 1243.322969][T11900] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 1243.370122][T11900] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 1243.624586][T11900] veth1_macvtap: left promiscuous mode [ 1243.624661][T11900] veth0_macvtap: left promiscuous mode [ 1243.636861][T11900] veth1_vlan: left promiscuous mode [ 1243.637018][T11900] veth0_vlan: left promiscuous mode [ 1244.439861][ T60] Bluetooth: hci0: command tx timeout [ 1250.744784][T18687] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.4055'. [ 1255.393986][T11900] team0 (unregistering): Port device team_slave_1 removed [ 1255.493863][T11900] team0 (unregistering): Port device team_slave_0 removed [ 1258.325147][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1258.325245][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1258.457378][T11900] macvlan1 (unregistering): left promiscuous mode [ 1258.495281][T11900] team0 (unregistering): Port device macvlan1 removed [ 1258.737959][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1258.743133][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1258.811498][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1258.845064][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1258.876022][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1259.051188][T11900] team_slave_1 (unregistering): left promiscuous mode [ 1259.207708][T11900] team0 (unregistering): Port device team_slave_1 removed [ 1259.225028][T11900] team_slave_0 (unregistering): left promiscuous mode [ 1259.278043][T11900] team0 (unregistering): Port device team_slave_0 removed [ 1261.521488][ T60] Bluetooth: hci3: command tx timeout [ 1261.549434][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1262.289664][ T60] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1263.776282][ T60] Bluetooth: hci3: command tx timeout [ 1266.556405][ T60] Bluetooth: hci3: command tx timeout [ 1268.933338][ T60] Bluetooth: hci3: command tx timeout [ 1269.362714][T18480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.363056][T18480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.363393][T18480] bridge_slave_0: entered allmulticast mode [ 1269.371226][T18480] bridge_slave_0: entered promiscuous mode [ 1269.429883][T18480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.430233][T18480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.430463][T18480] bridge_slave_1: entered allmulticast mode [ 1269.435721][T18480] bridge_slave_1: entered promiscuous mode [ 1269.708465][T18480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.737169][T18480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.091266][T18480] team0: Port device team_slave_0 added [ 1272.355045][T18480] team0: Port device team_slave_1 added [ 1273.323385][T18816] Invalid ELF header magic: != ELF [ 1274.535901][T18480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.535915][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.535936][T18480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.858470][T18480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.858488][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.858518][T18480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.440591][T11900] IPVS: stop unused estimator thread 0... [ 1279.674444][T18480] hsr_slave_0: entered promiscuous mode [ 1279.692049][T18480] hsr_slave_1: entered promiscuous mode [ 1281.164022][T18865] overlayfs: failed to clone upperpath [ 1282.789660][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1282.847605][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1282.880031][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1282.903485][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1282.906583][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1284.230760][T11900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1284.230796][T11900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.365728][ T60] Bluetooth: hci2: command tx timeout [ 1288.755022][ T60] Bluetooth: hci2: command tx timeout [ 1291.026760][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 1291.026782][ T38] audit: type=1804 audit(1206.423:736): pid=18930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4094" name="bus" dev="ramfs" ino=53756 res=1 errno=0 [ 1291.406275][ T60] Bluetooth: hci2: command tx timeout [ 1293.828712][T11900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.828749][T11900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.902601][ T60] Bluetooth: hci2: command tx timeout [ 1294.968423][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.968893][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.012121][T18590] bridge_slave_0: entered allmulticast mode [ 1295.035899][T18590] bridge_slave_0: entered promiscuous mode [ 1295.116296][T18720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.116500][T18720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.116778][T18720] bridge_slave_0: entered allmulticast mode [ 1295.149024][T18720] bridge_slave_0: entered promiscuous mode [ 1296.375317][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.376177][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.376549][T18590] bridge_slave_1: entered allmulticast mode [ 1296.386879][T18590] bridge_slave_1: entered promiscuous mode [ 1296.392936][T18720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.393241][T18720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.393509][T18720] bridge_slave_1: entered allmulticast mode [ 1296.445603][T18720] bridge_slave_1: entered promiscuous mode [ 1296.951975][T11900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.952003][T11900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.409955][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1297.590176][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1297.592884][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1297.594330][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1297.656501][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1298.055727][T18720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.114100][T18720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.475631][ T5633] Bluetooth: hci5: command tx timeout [ 1300.948071][T11900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.948102][T11900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.426705][ T5633] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1302.812956][ T5633] Bluetooth: hci5: command 0x041b tx timeout [ 1303.607548][T18720] team0: Port device team_slave_0 added [ 1304.768905][T18720] team0: Port device team_slave_1 added [ 1305.649867][ T60] Bluetooth: hci5: command 0x041b tx timeout [ 1307.590297][T18720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.590315][T18720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.590344][T18720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.834847][T18720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.834859][T18720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.834896][T18720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.920036][ T60] Bluetooth: hci5: command 0x041b tx timeout [ 1310.587341][ T60] Bluetooth: hci5: command 0x041b tx timeout [ 1313.136916][ T60] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1314.123073][T18720] hsr_slave_0: entered promiscuous mode [ 1314.136161][T18720] hsr_slave_1: entered promiscuous mode [ 1314.143638][T18720] debugfs: 'hsr0' already exists in 'hsr' [ 1314.143705][T18720] Cannot create hsr debugfs directory [ 1317.882111][ T60] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1317.910255][T11900] vxlan1: left allmulticast mode [ 1317.910282][T11900] vxlan1: left promiscuous mode [ 1317.910505][T11900] bridge0: port 3(vxlan1) entered disabled state [ 1318.040129][T11900] bridge_slave_1: left allmulticast mode [ 1318.040156][T11900] bridge_slave_1: left promiscuous mode [ 1318.040405][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.370535][T11900] bridge_slave_0: left allmulticast mode [ 1318.370572][T11900] bridge_slave_0: left promiscuous mode [ 1318.370840][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.969312][T11900] bridge_slave_1: left allmulticast mode [ 1318.969353][T11900] bridge_slave_1: left promiscuous mode [ 1318.969645][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.367450][T11900] bridge_slave_0: left allmulticast mode [ 1319.367486][T11900] bridge_slave_0: left promiscuous mode [ 1319.367740][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.680036][ T60] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1321.852346][T11900] bridge_slave_1: left allmulticast mode [ 1321.852386][T11900] bridge_slave_1: left promiscuous mode [ 1321.852655][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.984680][T11900] bridge_slave_0: left allmulticast mode [ 1321.985240][T11900] bridge_slave_0: left promiscuous mode [ 1321.985571][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.025750][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.026474][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1325.552253][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1325.839838][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1325.850317][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1326.085823][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1326.105759][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1326.315325][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880249d2c00: rx timeout, send abort [ 1326.319918][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880249d2c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1328.830646][ T60] Bluetooth: hci0: command tx timeout [ 1331.293094][ T60] Bluetooth: hci0: command tx timeout [ 1334.161839][ T60] Bluetooth: hci0: command tx timeout [ 1336.447428][ T60] Bluetooth: hci0: command tx timeout [ 1337.388682][T11900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.697195][T17387] smbdirect: ib_dev[syz1] removed [ 1337.724764][T11900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.787820][T11900] bond0 (unregistering): Released all slaves [ 1338.113499][T11900] bond0 (unregistering): Released all slaves [ 1338.464727][T11900] bond0 (unregistering): Released all slaves [ 1338.954883][T11900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.042132][T11900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.108105][T11900] bond0 (unregistering): Released all slaves [ 1339.421109][T11900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.616930][T11900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.893715][T11900] bond0 (unregistering): Released all slaves [ 1343.773167][ T38] audit: type=1326 audit(1255.760:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.773218][ T38] audit: type=1326 audit(1255.760:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.817505][ T38] audit: type=1326 audit(1255.787:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.817558][ T38] audit: type=1326 audit(1255.787:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.857563][ T38] audit: type=1326 audit(1255.806:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.858763][ T38] audit: type=1326 audit(1255.843:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.858875][ T38] audit: type=1326 audit(1255.843:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.858988][ T38] audit: type=1326 audit(1255.843:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.859093][ T38] audit: type=1326 audit(1255.843:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1343.861411][ T38] audit: type=1326 audit(1255.843:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19213 comm="syz.5.4147" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30531ace59 code=0x7ffc0000 [ 1344.512302][T19214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1347.304338][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1348.622200][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4151'. [ 1348.723937][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4151'. [ 1349.566842][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.567089][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.567383][T18979] bridge_slave_0: entered allmulticast mode [ 1349.569925][T18979] bridge_slave_0: entered promiscuous mode [ 1351.328155][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1351.498722][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1351.511780][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1351.539784][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1351.608497][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1351.619636][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1351.621040][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.621346][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.621654][T18979] bridge_slave_1: entered allmulticast mode [ 1351.628840][T18979] bridge_slave_1: entered promiscuous mode [ 1354.811076][ T5633] Bluetooth: hci3: command tx timeout [ 1357.632756][ T5633] Bluetooth: hci3: command tx timeout [ 1360.231995][ T5633] Bluetooth: hci3: command tx timeout [ 1360.505127][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.981538][ T5633] Bluetooth: hci3: command tx timeout [ 1363.222963][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.934680][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1363.975664][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1364.218546][T11900] hsr_slave_0: left promiscuous mode [ 1364.824071][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1364.866928][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1364.914634][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1365.038399][T11900] hsr_slave_1: left promiscuous mode [ 1365.056034][T11900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.197041][T11900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.216596][T11900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.216624][T11900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.429252][ T5633] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1366.663152][T11900] hsr_slave_0: left promiscuous mode [ 1366.698798][T11900] hsr_slave_1: left promiscuous mode [ 1366.699950][T11900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.798708][T11900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.135826][ T5633] Bluetooth: hci2: command tx timeout [ 1368.161957][ T5633] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1368.291915][T11900] hsr_slave_0: left promiscuous mode [ 1368.313641][T11900] hsr_slave_1: left promiscuous mode [ 1368.314432][T11900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.259783][T11900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.497354][ T5633] Bluetooth: hci2: command tx timeout [ 1369.575804][T11900] veth1_macvtap: left promiscuous mode [ 1369.575879][T11900] veth0_macvtap: left promiscuous mode [ 1369.576079][T11900] veth1_vlan: left promiscuous mode [ 1369.576221][T11900] veth0_vlan: left promiscuous mode [ 1372.438215][ T5633] Bluetooth: hci2: command tx timeout [ 1374.644797][T19406] loop6: detected capacity change from 0 to 1024 [ 1374.678357][T19406] ext4: Unknown parameter 'context' [ 1374.688814][ T5633] Bluetooth: hci2: command tx timeout [ 1377.227970][T11900] team0 (unregistering): Port device team_slave_1 removed [ 1378.205758][T11900] team0 (unregistering): Port device team_slave_0 removed [ 1378.257011][T19424] binder: 19417:19424 unknown command 0 [ 1378.257042][T19424] binder: 19417:19424 ioctl c0306201 200000000080 returned -22 [ 1380.009844][T11900] team0 (unregistering): Port device team_slave_1 removed [ 1380.051582][T11900] team0 (unregistering): Port device team_slave_0 removed [ 1380.495942][T11900] team0 (unregistering): Port device team_slave_1 removed [ 1380.529095][T11900] team0 (unregistering): Port device team_slave_0 removed [ 1381.306049][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1384.655390][ T5633] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1384.853677][T19129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.854125][T19129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.854462][T19129] bridge_slave_0: entered allmulticast mode [ 1384.858214][T19129] bridge_slave_0: entered promiscuous mode [ 1384.875652][T19129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.876012][T19129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.876350][T19129] bridge_slave_1: entered allmulticast mode [ 1384.880244][T19129] bridge_slave_1: entered promiscuous mode [ 1385.422756][T19129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.453658][T19129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.601176][T19129] team0: Port device team_slave_0 added [ 1385.633059][T19129] team0: Port device team_slave_1 added [ 1385.726487][T19129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.726506][T19129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.726536][T19129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.776505][T19129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.776522][T19129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.776552][T19129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.911237][T19129] hsr_slave_0: entered promiscuous mode [ 1385.913629][T19129] hsr_slave_1: entered promiscuous mode [ 1385.927401][T19129] debugfs: 'hsr0' already exists in 'hsr' [ 1385.927430][T19129] Cannot create hsr debugfs directory [ 1387.359134][T19499] overlayfs: failed to clone upperpath [ 1389.851107][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1389.883161][T19502] PKCS8: Unsupported PKCS#8 version [ 1391.755032][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.755141][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.776208][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1391.824617][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1391.828338][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1391.970663][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1392.006782][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1392.784119][T19267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.784485][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.785919][T19267] bridge_slave_0: entered allmulticast mode [ 1392.802988][T19267] bridge_slave_0: entered promiscuous mode [ 1393.952062][T19545] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4197'. [ 1393.952166][T19545] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4197'. [ 1394.601574][ T60] Bluetooth: hci5: command tx timeout [ 1394.660968][T19267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.661299][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.661652][T19267] bridge_slave_1: entered allmulticast mode [ 1394.665637][T19267] bridge_slave_1: entered promiscuous mode [ 1397.571707][ T60] Bluetooth: hci5: command tx timeout [ 1398.846796][T19267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.340524][T19267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.400053][ T60] Bluetooth: hci5: command tx timeout [ 1402.807248][ T60] Bluetooth: hci5: command tx timeout [ 1404.098196][T19267] team0: Port device team_slave_0 added [ 1404.145035][T19267] team0: Port device team_slave_1 added [ 1404.732550][T19343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.732891][T19343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.733256][T19343] bridge_slave_0: entered allmulticast mode [ 1404.763429][T19343] bridge_slave_0: entered promiscuous mode [ 1405.254665][T19267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.254684][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.254717][T19267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.255883][T19343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.256216][T19343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.256545][T19343] bridge_slave_1: entered allmulticast mode [ 1405.697494][T19613] sctp: [Deprecated]: syz.6.4207 (pid 19613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1405.697494][T19613] Use struct sctp_sack_info instead [ 1406.881663][T19343] bridge_slave_1: entered promiscuous mode [ 1407.444570][T19267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.444589][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.444619][T19267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.888590][T19343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.917844][T19343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.133459][T19343] team0: Port device team_slave_0 added [ 1409.152255][T19267] hsr_slave_0: entered promiscuous mode [ 1409.154622][T19267] hsr_slave_1: entered promiscuous mode [ 1409.157830][T19267] debugfs: 'hsr0' already exists in 'hsr' [ 1409.157857][T19267] Cannot create hsr debugfs directory [ 1409.163115][T19343] team0: Port device team_slave_1 added [ 1409.298800][T19343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.298819][T19343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.298847][T19343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.435593][T19343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.435609][T19343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.435632][T19343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.796501][T19343] hsr_slave_0: entered promiscuous mode [ 1409.798363][T19343] hsr_slave_1: entered promiscuous mode [ 1409.799940][T19343] debugfs: 'hsr0' already exists in 'hsr' [ 1409.799960][T19343] Cannot create hsr debugfs directory [ 1410.672225][T19520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.672656][T19520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.672978][T19520] bridge_slave_0: entered allmulticast mode [ 1410.676221][T19520] bridge_slave_0: entered promiscuous mode [ 1410.751900][T19520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.752212][T19520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.752517][T19520] bridge_slave_1: entered allmulticast mode [ 1410.757363][T19520] bridge_slave_1: entered promiscuous mode [ 1410.860425][T19520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.875283][T19520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.981363][T19520] team0: Port device team_slave_0 added [ 1410.993863][T19520] team0: Port device team_slave_1 added [ 1411.180089][T11900] IPVS: stop unused estimator thread 0... [ 1411.312091][T19520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.312110][T19520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.312143][T19520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.313835][T19267] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1411.418008][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1411.423045][T19520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.423063][T19520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.423094][T19520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.689747][T19267] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1411.735461][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1411.769103][T19267] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1411.800106][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1412.104353][T19267] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1412.149652][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1412.451742][T19520] hsr_slave_0: entered promiscuous mode [ 1412.453584][T19520] hsr_slave_1: entered promiscuous mode [ 1412.455174][T19520] debugfs: 'hsr0' already exists in 'hsr' [ 1412.455202][T19520] Cannot create hsr debugfs directory [ 1412.857010][T17387] bridge_slave_1: left allmulticast mode [ 1412.857047][T17387] bridge_slave_1: left promiscuous mode [ 1412.865101][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.016040][T17387] bridge_slave_0: left allmulticast mode [ 1413.016078][T17387] bridge_slave_0: left promiscuous mode [ 1413.018085][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.290480][T17387] bridge_slave_1: left allmulticast mode [ 1413.290509][T17387] bridge_slave_1: left promiscuous mode [ 1413.290712][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.399784][T17387] bridge_slave_0: left allmulticast mode [ 1413.399811][T17387] bridge_slave_0: left promiscuous mode [ 1413.400008][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.615573][T17387] bridge_slave_1: left allmulticast mode [ 1413.615613][T17387] bridge_slave_1: left promiscuous mode [ 1413.615914][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.725833][T17387] bridge_slave_0: left allmulticast mode [ 1413.725863][T17387] bridge_slave_0: left promiscuous mode [ 1413.726094][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.984052][T17387] bridge_slave_1: left allmulticast mode [ 1413.984081][T17387] bridge_slave_1: left promiscuous mode [ 1413.984282][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.093478][T17387] bridge_slave_0: left allmulticast mode [ 1414.093504][T17387] bridge_slave_0: left promiscuous mode [ 1414.093688][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.330839][T17387] bridge_slave_1: left allmulticast mode [ 1414.330867][T17387] bridge_slave_1: left promiscuous mode [ 1414.331069][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.441241][T17387] bridge_slave_0: left allmulticast mode [ 1414.441270][T17387] bridge_slave_0: left promiscuous mode [ 1414.441495][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.887594][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.038465][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.069447][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1415.169744][T17387] bond0 (unregistering): Released all slaves [ 1415.173359][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1415.186449][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1415.211919][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1415.212706][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1415.643140][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.741208][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.806370][T17387] bond0 (unregistering): Released all slaves [ 1416.126360][T17387] bond0 (unregistering): Released all slaves [ 1416.377760][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.477320][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.544079][T17387] bond0 (unregistering): Released all slaves [ 1416.777292][T17387] bond0 (unregistering): Released all slaves [ 1417.040849][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.129210][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.215424][T17387] bond0 (unregistering): Released all slaves [ 1417.545085][T19343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1417.631078][ T60] Bluetooth: hci0: command tx timeout [ 1417.699777][T19343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1417.734771][T19343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1418.082234][T19343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1418.119271][T19343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1418.237457][T19343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1418.267243][T19343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1418.301525][T19343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1419.838191][ T60] Bluetooth: hci0: command tx timeout [ 1420.746850][T17387] hsr_slave_0: left promiscuous mode [ 1420.768509][T17387] hsr_slave_1: left promiscuous mode [ 1420.769612][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.813307][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.928352][T17387] hsr_slave_0: left promiscuous mode [ 1420.963898][T17387] hsr_slave_1: left promiscuous mode [ 1420.965943][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.987229][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.093528][T17387] hsr_slave_0: left promiscuous mode [ 1421.137001][T17387] hsr_slave_1: left promiscuous mode [ 1421.138392][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.159760][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.711971][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1421.766440][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1422.103885][ T60] Bluetooth: hci0: command tx timeout [ 1422.365308][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1422.416500][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1422.936566][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1422.990919][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1423.212174][T19520] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1423.248456][T19520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1423.264274][T19343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.300319][T19520] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1423.344784][T19520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1423.365386][T19520] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1423.416796][T19520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1423.434165][T19520] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1423.596106][T19520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1424.036063][T19343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.116711][T19681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.127361][T19681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.127665][T19681] bridge_slave_0: entered allmulticast mode [ 1424.159185][T19681] bridge_slave_0: entered promiscuous mode [ 1424.266651][T19681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.266925][T19681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.267209][T19681] bridge_slave_1: entered allmulticast mode [ 1424.324141][T19681] bridge_slave_1: entered promiscuous mode [ 1424.372601][ T60] Bluetooth: hci0: command tx timeout [ 1424.428101][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.428251][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.631734][T19681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.646790][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.658838][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.756735][T19681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.963057][T19681] team0: Port device team_slave_0 added [ 1424.970286][T19681] team0: Port device team_slave_1 added [ 1425.253729][T19681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.253747][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.253773][T19681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.327760][T19681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.327774][T19681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.327796][T19681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.688103][T19681] hsr_slave_0: entered promiscuous mode [ 1425.725205][T19681] hsr_slave_1: entered promiscuous mode [ 1426.178683][T19520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.411962][T19520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.580908][T11900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.581097][T11900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.616891][T11900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.617072][T11900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.411519][T19343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.301104][T19520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.900218][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1430.996980][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1431.180499][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1431.199759][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1431.209433][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1432.424890][T19681] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1432.466816][T19681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1432.480462][T19520] veth0_vlan: entered promiscuous mode [ 1432.491961][T19681] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1432.546957][T19681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1432.561646][T19681] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1432.596219][T19681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1432.839506][T19681] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1432.899981][T19681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.969846][T19520] veth1_vlan: entered promiscuous mode [ 1433.260238][T19520] veth0_macvtap: entered promiscuous mode [ 1433.296546][T19520] veth1_macvtap: entered promiscuous mode [ 1433.496629][T19520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.529769][T19740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.530055][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.530281][T19740] bridge_slave_0: entered allmulticast mode [ 1433.532740][T19740] bridge_slave_0: entered promiscuous mode [ 1433.577031][T19740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.577330][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.577602][T19740] bridge_slave_1: entered allmulticast mode [ 1433.584792][T19740] bridge_slave_1: entered promiscuous mode [ 1433.600851][T19520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.703484][T19740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.737932][T19740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.738962][ T41] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.772477][ T41] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.811645][ T41] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.847998][T19681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.863311][T19740] team0: Port device team_slave_0 added [ 1433.863419][ T41] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.870701][T19740] team0: Port device team_slave_1 added [ 1433.905401][ T60] Bluetooth: hci3: command tx timeout [ 1434.309063][T19740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.309079][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.309099][T19740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.796540][T19740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.796554][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.796574][T19740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.243086][T19681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.695627][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.695809][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.761645][T19740] hsr_slave_0: entered promiscuous mode [ 1435.779860][T19740] hsr_slave_1: entered promiscuous mode [ 1435.797585][T19740] debugfs: 'hsr0' already exists in 'hsr' [ 1435.797614][T19740] Cannot create hsr debugfs directory [ 1436.163486][ T60] Bluetooth: hci3: command tx timeout [ 1436.837757][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.837943][ T808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.942263][ T808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.942284][ T808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.561425][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.561448][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.511276][ T60] Bluetooth: hci3: command tx timeout [ 1439.170033][T19778] loop6: detected capacity change from 0 to 4096 [ 1440.740331][ T5633] Bluetooth: hci3: command tx timeout [ 1441.175998][T17387] bridge_slave_1: left allmulticast mode [ 1441.176110][T17387] bridge_slave_1: left promiscuous mode [ 1441.176403][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.373180][T17387] bridge_slave_0: left allmulticast mode [ 1441.373209][T17387] bridge_slave_0: left promiscuous mode [ 1441.373958][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.498836][T19811] loop6: detected capacity change from 0 to 256 [ 1451.415437][T17387] bridge_slave_1: left allmulticast mode [ 1451.415475][T17387] bridge_slave_1: left promiscuous mode [ 1451.415751][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.062381][T17387] bridge_slave_0: left allmulticast mode [ 1453.062411][T17387] bridge_slave_0: left promiscuous mode [ 1453.062642][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.346088][T19852] Bluetooth: MGMT ver 1.23 [ 1458.079461][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.079539][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.214187][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.311324][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.358340][T17387] bond0 (unregistering): Released all slaves [ 1459.818603][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.082313][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.127574][T17387] bond0 (unregistering): Released all slaves [ 1460.184228][T19827] geneve2: entered promiscuous mode [ 1460.184278][T19827] geneve2: entered allmulticast mode [ 1460.366793][T19860] qrtr: Invalid version 0 [ 1461.476501][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1461.517030][ T91] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1463.003591][T19874] loop6: detected capacity change from 0 to 512 [ 1463.152923][T19874] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1463.370378][T19874] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1463.507137][T19874] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.4225: Allocating blocks 41-42 which overlap fs metadata [ 1463.507224][T19874] loop6: lost filesystem error report for type 5 error -117 [ 1463.519331][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1463.519382][ C1] EXT4-fs (loop6): initial error at time 1366: ext4_mb_mark_diskspace_used:4222 [ 1463.519453][ C1] EXT4-fs (loop6): last error at time 1366: ext4_mb_mark_diskspace_used:4222 [ 1463.899162][T19874] __quota_error: 122 callbacks suppressed [ 1463.899182][T19874] Quota error (device loop6): write_blk: dquota write failed [ 1463.899198][T19874] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1463.899433][T19874] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.4225: Allocating blocks 41-42 which overlap fs metadata [ 1463.899462][T19874] loop6: lost filesystem error report for type 5 error -117 [ 1463.936599][T19874] Quota error (device loop6): write_blk: dquota write failed [ 1463.937226][T19874] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1463.937678][T19874] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4225: Failed to acquire dquot type 1 [ 1463.937728][T19874] loop6: lost filesystem error report for type 5 error -117 [ 1464.074848][T19874] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1464.082825][T19874] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4225: corrupted inode contents [ 1464.082858][T19874] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1464.136605][T19874] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.4225: mark_inode_dirty error [ 1464.136638][T19874] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1464.140152][T19874] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4225: corrupted inode contents [ 1464.140183][T19874] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1464.140756][T19874] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.4225: mark_inode_dirty error [ 1464.140803][T19874] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1464.241197][T19874] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4225: corrupted inode contents [ 1464.241233][T19874] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1464.300506][T19874] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1464.300533][T19874] loop6: lost filesystem error report for type 5 error -117 [ 1464.344803][T19874] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4225: corrupted inode contents [ 1464.344909][T19874] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1464.363460][T19874] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.4225: mark_inode_dirty error [ 1464.363493][T19874] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1464.422825][T19874] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1464.422855][T19874] loop6: lost filesystem error report for type 5 error -117 [ 1464.466664][T19874] EXT4-fs (loop6): 1 truncate cleaned up [ 1464.470266][T19874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1464.752089][ T9893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.309897][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1465.417314][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1465.447006][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1465.448430][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1465.449860][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1465.982030][ T91] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1466.009947][ T91] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1466.749929][T19889] loop9: detected capacity change from 0 to 1024 [ 1466.765746][T19889] ext4: Unknown parameter 'context' [ 1467.749616][T19681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.760147][T11902] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1467.878836][ T5633] Bluetooth: hci2: command tx timeout [ 1468.041279][T17387] hsr_slave_0: left promiscuous mode [ 1468.291925][T17387] hsr_slave_1: left promiscuous mode [ 1468.293111][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.335961][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.168696][ T5633] Bluetooth: hci2: command tx timeout [ 1470.174917][T17387] hsr_slave_0: left promiscuous mode [ 1470.289341][T17387] hsr_slave_1: left promiscuous mode [ 1470.290497][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.332042][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.378879][ T5633] Bluetooth: hci2: command tx timeout [ 1473.982065][T19912] loop6: detected capacity change from 0 to 32768 [ 1473.983440][T19912] btrfs: Deprecated parameter 'usebackuproot' [ 1473.983461][T19912] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1474.023538][T19912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4232 (19912) [ 1474.108207][T19912] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1474.108242][T19912] BTRFS info (device loop6): using crc32c checksum algorithm [ 1474.227056][ T57] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1474.228421][T19912] BTRFS error (device loop6): failed to load root extent [ 1474.228458][T19912] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1474.267638][ T1234] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1474.311387][T19912] BTRFS warning (device loop6): couldn't read tree root [ 1474.311412][T19912] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1474.313846][T11900] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1474.313994][T19912] BTRFS warning (device loop6): couldn't read tree root [ 1474.314014][T19912] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1474.500362][T19912] BTRFS info (device loop6): rebuilding free space tree [ 1474.540277][T19934] loop9: detected capacity change from 0 to 512 [ 1474.645987][ T5633] Bluetooth: hci2: command tx timeout [ 1474.761038][T19912] BTRFS info (device loop6): checking UUID tree [ 1474.783748][T19912] BTRFS info (device loop6): enabling ssd optimizations [ 1474.783796][T19912] BTRFS info (device loop6): turning on async discard [ 1474.783814][T19912] BTRFS info (device loop6): enabling free space tree [ 1474.783852][T19912] BTRFS info (device loop6): force clearing of disk cache [ 1474.783869][T19912] BTRFS info (device loop6): enabling auto defrag [ 1474.783896][T19912] BTRFS info (device loop6): trying to use backup root at mount time [ 1474.783972][T19912] BTRFS info (device loop6): use zstd compression, level 3 [ 1474.875482][T19934] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1474.942334][T19934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1474.942491][T19934] System zones: 1-12 [ 1474.985650][T19934] EXT4-fs (loop9): 1 truncate cleaned up [ 1475.101714][T19934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.503726][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1476.620718][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1476.750089][T19520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.770725][ T9893] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1485.315484][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1485.811116][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1487.962400][T19966] overlayfs: failed to resolve './file0': -2 [ 1489.044957][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1489.511048][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1489.650114][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1489.739312][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1489.746230][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1490.771699][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4239'. [ 1492.059129][ T5633] Bluetooth: hci1: command tx timeout [ 1494.896856][ T5633] Bluetooth: hci1: command tx timeout [ 1495.897958][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1496.666231][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1496.700995][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1496.702673][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1496.751942][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1497.091912][ T5633] Bluetooth: hci1: command tx timeout [ 1498.011914][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1499.038889][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1499.104270][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1499.132527][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1499.139868][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1499.171861][ T5633] Bluetooth: hci6: command tx timeout [ 1499.441129][ T60] Bluetooth: hci1: command tx timeout [ 1503.753661][T20034] loop6: detected capacity change from 0 to 40427 [ 1503.791992][T20034] f2fs: Unexpected value for 'prjquota' [ 1503.894446][ T5633] Bluetooth: hci6: command tx timeout [ 1503.909647][ T5633] Bluetooth: hci0: command tx timeout [ 1505.653032][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1505.902586][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1505.902618][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.902639][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1505.902711][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.995231][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1505.995262][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1505.995282][ T9] usb 7-1: Product: syz [ 1505.995296][ T9] usb 7-1: Manufacturer: syz [ 1506.105052][ T60] Bluetooth: hci0: command tx timeout [ 1506.105085][ T60] Bluetooth: hci6: command tx timeout [ 1506.458454][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1506.458475][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1506.490575][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1506.827170][ T5948] usb 7-1: USB disconnect, device number 22 [ 1508.651107][ T5633] Bluetooth: hci6: command tx timeout [ 1508.651142][ T5633] Bluetooth: hci0: command tx timeout [ 1510.184605][T20091] evm: overlay not supported [ 1512.164029][ T60] Bluetooth: hci0: command tx timeout [ 1513.007289][T19877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.007680][T19877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.008044][T19877] bridge_slave_0: entered allmulticast mode [ 1513.064779][T19877] bridge_slave_0: entered promiscuous mode [ 1513.271215][T19877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.271630][T19877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.271952][T19877] bridge_slave_1: entered allmulticast mode [ 1513.278373][T19877] bridge_slave_1: entered promiscuous mode [ 1513.525506][T19963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.525948][T19963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.526315][T19963] bridge_slave_0: entered allmulticast mode [ 1513.576607][T19963] bridge_slave_0: entered promiscuous mode [ 1513.622615][T19963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.622887][T19963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.623136][T19963] bridge_slave_1: entered allmulticast mode [ 1513.625683][T19963] bridge_slave_1: entered promiscuous mode [ 1513.681367][T19877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.060459][T20121] loop6: detected capacity change from 0 to 512 [ 1514.982588][T20121] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1515.077327][T20121] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1515.078859][T20121] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.4251: Allocating blocks 41-42 which overlap fs metadata [ 1515.078884][T20121] loop6: lost filesystem error report for type 5 error -117 [ 1515.089211][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1515.089231][ C1] EXT4-fs (loop6): initial error at time 1413: ext4_mb_mark_diskspace_used:4222 [ 1515.089253][ C1] EXT4-fs (loop6): last error at time 1413: ext4_mb_mark_diskspace_used:4222 [ 1515.138021][T20121] Quota error (device loop6): write_blk: dquota write failed [ 1515.138035][T20121] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1515.138124][T20121] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.4251: Allocating blocks 41-42 which overlap fs metadata [ 1515.138142][T20121] loop6: lost filesystem error report for type 5 error -117 [ 1515.140438][T20121] Quota error (device loop6): write_blk: dquota write failed [ 1515.140544][T20121] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1515.140593][T20121] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4251: Failed to acquire dquot type 1 [ 1515.140613][T20121] loop6: lost filesystem error report for type 5 error -117 [ 1515.141559][T20121] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1515.141656][T20121] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4251: corrupted inode contents [ 1515.141678][T20121] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1515.171287][T19877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.266703][T20121] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.4251: mark_inode_dirty error [ 1515.266734][T20121] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1515.281945][T20121] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4251: corrupted inode contents [ 1515.281978][T20121] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1515.303561][T20121] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.4251: mark_inode_dirty error [ 1515.303596][T20121] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1515.332075][T20121] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4251: corrupted inode contents [ 1515.332110][T20121] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1515.342420][T20121] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1515.342448][T20121] loop6: lost filesystem error report for type 5 error -117 [ 1515.343426][T20121] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.4251: corrupted inode contents [ 1515.343456][T20121] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1515.344405][T20121] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.4251: mark_inode_dirty error [ 1515.344434][T20121] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1515.345350][T20121] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1515.345373][T20121] loop6: lost filesystem error report for type 5 error -117 [ 1515.346612][T20121] EXT4-fs (loop6): 1 truncate cleaned up [ 1515.349752][T20121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1515.624481][ T9893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.704842][T19963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.766967][T19963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.910026][T19877] team0: Port device team_slave_0 added [ 1515.946430][T19877] team0: Port device team_slave_1 added [ 1515.982393][T19963] team0: Port device team_slave_0 added [ 1516.027238][T19963] team0: Port device team_slave_1 added [ 1516.121318][T19877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.121338][T19877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.121368][T19877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.343396][T19877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.343415][T19877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.343446][T19877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.365917][T19963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.365936][T19963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.365966][T19963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.528911][T19963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.528930][T19963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.528961][T19963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.387600][T19877] hsr_slave_0: entered promiscuous mode [ 1518.389389][T19877] hsr_slave_1: entered promiscuous mode [ 1518.390774][T19877] debugfs: 'hsr0' already exists in 'hsr' [ 1518.390796][T19877] Cannot create hsr debugfs directory [ 1518.894695][T19963] hsr_slave_0: entered promiscuous mode [ 1518.896546][T19963] hsr_slave_1: entered promiscuous mode [ 1518.897849][T19963] debugfs: 'hsr0' already exists in 'hsr' [ 1518.897870][T19963] Cannot create hsr debugfs directory [ 1518.984695][T20139] loop6: detected capacity change from 0 to 128 [ 1520.874261][T20003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.874642][T20003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.874853][T20003] bridge_slave_0: entered allmulticast mode [ 1520.881880][T20003] bridge_slave_0: entered promiscuous mode [ 1521.607019][T20149] Process accounting resumed [ 1522.165299][T20003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.165645][T20003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.166079][T20003] bridge_slave_1: entered allmulticast mode [ 1522.194252][ T5349] IPVS: starting estimator thread 0... [ 1522.230038][T20003] bridge_slave_1: entered promiscuous mode [ 1522.280408][T20153] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1522.319857][T20157] IPVS: using max 12 ests per chain, 28800 per kthread [ 1522.407387][T20020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.407879][T20020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.408131][T20020] bridge_slave_0: entered allmulticast mode [ 1522.410736][T20020] bridge_slave_0: entered promiscuous mode [ 1522.758870][T20003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.763891][T20020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.766464][T20020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.767368][T20020] bridge_slave_1: entered allmulticast mode [ 1522.789869][T20020] bridge_slave_1: entered promiscuous mode [ 1522.849350][T20003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.154089][T20020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.249515][T20003] team0: Port device team_slave_0 added [ 1523.258156][T20020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.401726][T20003] team0: Port device team_slave_1 added [ 1524.662998][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1524.663104][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1526.268805][T20171] loop6: detected capacity change from 0 to 512 [ 1526.303831][T20171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1527.158625][T20171] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4259: iget: bad i_size value: 38620345925642 [ 1527.158667][T20171] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1527.162629][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1527.162652][ C1] EXT4-fs (loop6): initial error at time 1424: ext4_orphan_get:1397: inode 15 [ 1527.162684][ C1] EXT4-fs (loop6): last error at time 1424: ext4_orphan_get:1397: inode 15 [ 1527.162928][T20171] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4259: couldn't read orphan inode 15 (err -117) [ 1527.162957][T20171] loop6: lost filesystem error report for type 5 error -117 [ 1527.282027][T20171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.676962][ T1364] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 1527.947358][ T1364] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1527.947393][ T1364] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1527.947393][ T1364] [ 1527.947409][ T1364] EXT4-fs (loop6): Total free blocks count 0 [ 1527.947423][ T1364] EXT4-fs (loop6): Free/Dirty block details [ 1527.947458][ T1364] EXT4-fs (loop6): free_blocks=0 [ 1527.947507][ T1364] EXT4-fs (loop6): dirty_blocks=2668 [ 1527.947520][ T1364] EXT4-fs (loop6): Block reservation details [ 1527.947532][ T1364] EXT4-fs (loop6): i_reserved_data_blocks=2668 [ 1528.181619][ T1234] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 612 with error 28 [ 1528.256461][ T9893] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1528.573455][T20020] team0: Port device team_slave_0 added [ 1528.579120][T20003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.579132][T20003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.579152][T20003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.810112][ T821] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1528.844713][T20020] team0: Port device team_slave_1 added [ 1528.847106][T20003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.847117][T20003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.847139][T20003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.983363][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1528.985330][ T821] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.987786][ T821] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1528.987821][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.987844][ T821] usb 7-1: Product: syz [ 1528.987859][ T821] usb 7-1: Manufacturer: syz [ 1528.987874][ T821] usb 7-1: SerialNumber: syz [ 1529.033973][ T821] usb 7-1: config 0 descriptor?? [ 1529.215175][ T821] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1530.984601][ T821] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1531.078609][T20124] udevd[20124]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1531.362001][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1531.367203][T20020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.367220][T20020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1531.367246][T20020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1531.450190][T20020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.450205][T20020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1531.450228][T20020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.466757][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1531.481683][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1531.578575][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1531.581960][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1531.980554][ T821] usb 7-1: USB disconnect, device number 23 [ 1533.745249][T20003] hsr_slave_0: entered promiscuous mode [ 1533.749810][T20003] hsr_slave_1: entered promiscuous mode [ 1533.769082][T20003] debugfs: 'hsr0' already exists in 'hsr' [ 1533.769161][T20003] Cannot create hsr debugfs directory [ 1534.283713][ T60] Bluetooth: hci3: command tx timeout [ 1534.823304][T20020] hsr_slave_0: entered promiscuous mode [ 1534.830810][T20020] hsr_slave_1: entered promiscuous mode [ 1534.833152][T20020] debugfs: 'hsr0' already exists in 'hsr' [ 1534.833180][T20020] Cannot create hsr debugfs directory [ 1535.030936][T17387] bridge_slave_1: left allmulticast mode [ 1535.030974][T17387] bridge_slave_1: left promiscuous mode [ 1535.035173][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.162530][T17387] bridge_slave_0: left allmulticast mode [ 1535.162560][T17387] bridge_slave_0: left promiscuous mode [ 1535.162774][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.637890][T17387] bridge_slave_1: left allmulticast mode [ 1535.637925][T17387] bridge_slave_1: left promiscuous mode [ 1535.638181][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.537238][ T60] Bluetooth: hci3: command tx timeout [ 1536.563336][T17387] bridge_slave_0: left allmulticast mode [ 1536.563369][T17387] bridge_slave_0: left promiscuous mode [ 1536.563626][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.202392][ T60] Bluetooth: hci3: command tx timeout [ 1539.394396][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.518700][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.607239][T17387] bond0 (unregistering): Released all slaves [ 1541.829959][ T60] Bluetooth: hci3: command tx timeout [ 1545.131704][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.208367][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.253374][T17387] bond0 (unregistering): Released all slaves [ 1547.450975][T17387] hsr_slave_0: left promiscuous mode [ 1547.494198][T17387] hsr_slave_1: left promiscuous mode [ 1547.495138][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.518024][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.710944][T17387] hsr_slave_0: left promiscuous mode [ 1547.754378][T17387] hsr_slave_1: left promiscuous mode [ 1547.755272][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.779170][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.343735][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1548.395606][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1548.910911][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1548.968950][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1549.223558][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1550.359439][T20208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.359857][T20208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.360168][T20208] bridge_slave_0: entered allmulticast mode [ 1550.363875][T20208] bridge_slave_0: entered promiscuous mode [ 1550.879296][T20208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.880288][T20208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.880663][T20208] bridge_slave_1: entered allmulticast mode [ 1550.883983][T20208] bridge_slave_1: entered promiscuous mode [ 1551.072750][T20208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.200115][T20208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.376419][T20208] team0: Port device team_slave_0 added [ 1551.382373][T20208] team0: Port device team_slave_1 added [ 1551.854665][T20208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1551.854679][T20208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.854700][T20208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.962688][T20208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.962702][T20208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.962724][T20208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.769619][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1552.897645][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1552.899484][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1552.931394][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1552.950589][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1553.389171][T20003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.146325][T20003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.231643][T20208] hsr_slave_0: entered promiscuous mode [ 1554.241081][T20208] hsr_slave_1: entered promiscuous mode [ 1554.818764][T20003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.354292][ T5633] Bluetooth: hci2: command tx timeout [ 1555.418584][T17387] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.962707][T17387] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.324926][T20003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.625275][T17387] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.121423][T17387] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.606319][ T5633] Bluetooth: hci2: command tx timeout [ 1558.061454][T20003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1558.092879][T20003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1558.341375][T20003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1558.368965][T20003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1558.400279][T20003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1558.571911][T20003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1558.916428][T20003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1558.949261][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1559.055107][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1559.058112][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1559.082417][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1559.084809][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1559.334778][T20003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1559.602976][T20341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.603308][T20341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.603641][T20341] bridge_slave_0: entered allmulticast mode [ 1559.618185][T20341] bridge_slave_0: entered promiscuous mode [ 1559.662382][T20341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.662744][T20341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.663116][T20341] bridge_slave_1: entered allmulticast mode [ 1559.696601][T20341] bridge_slave_1: entered promiscuous mode [ 1559.862464][ T5633] Bluetooth: hci2: command tx timeout [ 1559.876647][T17387] bridge_slave_1: left allmulticast mode [ 1559.876680][T17387] bridge_slave_1: left promiscuous mode [ 1559.876968][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.052232][T17387] bridge_slave_0: left allmulticast mode [ 1560.052259][T17387] bridge_slave_0: left promiscuous mode [ 1560.052474][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.488868][T17387] bridge_slave_1: left allmulticast mode [ 1560.488896][T17387] bridge_slave_1: left promiscuous mode [ 1560.489090][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.663821][T17387] bridge_slave_0: left allmulticast mode [ 1560.663857][T17387] bridge_slave_0: left promiscuous mode [ 1560.664131][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.966134][T17387] bridge_slave_1: left allmulticast mode [ 1560.966162][T17387] bridge_slave_1: left promiscuous mode [ 1560.966369][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.096830][T17387] bridge_slave_0: left allmulticast mode [ 1561.096858][T17387] bridge_slave_0: left promiscuous mode [ 1561.097099][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.518421][ T5633] Bluetooth: hci1: command tx timeout [ 1561.703222][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.812263][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.877950][T17387] bond0 (unregistering): Released all slaves [ 1562.116033][ T5633] Bluetooth: hci2: command tx timeout [ 1562.130386][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.213234][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.279546][T17387] bond0 (unregistering): Released all slaves [ 1562.982623][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.069233][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.114123][T17387] bond0 (unregistering): Released all slaves [ 1563.795285][ T5633] Bluetooth: hci1: command tx timeout [ 1563.838687][T20341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.943866][T20341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.205539][T20341] team0: Port device team_slave_0 added [ 1564.330202][T20341] team0: Port device team_slave_1 added [ 1564.591720][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1564.644696][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1564.686892][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1564.703336][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1564.739950][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1564.809706][T20341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.809723][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.809749][T20341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1564.889588][T20341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.889604][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.889632][T20341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.016020][ T60] Bluetooth: hci1: command tx timeout [ 1566.186147][T20341] hsr_slave_0: entered promiscuous mode [ 1566.187971][T20341] hsr_slave_1: entered promiscuous mode [ 1566.201334][T20341] debugfs: 'hsr0' already exists in 'hsr' [ 1566.201359][T20341] Cannot create hsr debugfs directory [ 1566.593608][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1567.328464][ T60] Bluetooth: hci5: command tx timeout [ 1567.512102][T20208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1567.560867][T20208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1567.626328][T20208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1567.657198][T20208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1567.718356][T20208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1567.766581][T20208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1567.989004][T17387] hsr_slave_0: left promiscuous mode [ 1568.032063][T17387] hsr_slave_1: left promiscuous mode [ 1568.033228][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.077712][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.270657][ T60] Bluetooth: hci1: command tx timeout [ 1568.292022][T17387] hsr_slave_0: left promiscuous mode [ 1568.314501][T17387] hsr_slave_1: left promiscuous mode [ 1568.318209][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.358201][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.531020][T17387] hsr_slave_0: left promiscuous mode [ 1568.552009][T17387] hsr_slave_1: left promiscuous mode [ 1568.553209][T17387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.553236][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.596593][T17387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.596615][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.676473][T17387] veth1_macvtap: left promiscuous mode [ 1568.676548][T17387] veth0_macvtap: left promiscuous mode [ 1568.676777][T17387] veth1_vlan: left promiscuous mode [ 1568.676932][T17387] veth0_vlan: left promiscuous mode [ 1569.376473][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1569.430352][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1569.570799][ T60] Bluetooth: hci5: command tx timeout [ 1569.962364][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1570.026529][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1570.798040][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1570.863425][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1571.069431][T20208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1571.101785][T20208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1571.144937][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1571.825336][ T60] Bluetooth: hci5: command tx timeout [ 1573.338162][T20424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.338514][T20424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.338816][T20424] bridge_slave_0: entered allmulticast mode [ 1573.374799][T20424] bridge_slave_0: entered promiscuous mode [ 1573.477129][T20341] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1573.592669][T20341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1573.595196][T20424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.595624][T20424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.596003][T20424] bridge_slave_1: entered allmulticast mode [ 1573.599823][T20424] bridge_slave_1: entered promiscuous mode [ 1573.724523][T20341] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1573.825365][T20341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1573.893191][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1573.940172][T20341] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1573.986018][T20341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1574.026218][T20341] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1574.064336][T20341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1574.081652][T20424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.090389][ T60] Bluetooth: hci5: command tx timeout [ 1574.157329][T20424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.487147][T20463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.487535][T20463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.487861][T20463] bridge_slave_0: entered allmulticast mode [ 1574.490648][T20463] bridge_slave_0: entered promiscuous mode [ 1574.547119][T20424] team0: Port device team_slave_0 added [ 1574.547561][T20463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.547941][T20463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.548267][T20463] bridge_slave_1: entered allmulticast mode [ 1574.550864][T20463] bridge_slave_1: entered promiscuous mode [ 1574.589639][T20424] team0: Port device team_slave_1 added [ 1574.791204][T20463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.822205][T20424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.822223][T20424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.822253][T20424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.892625][T20463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.925778][T20424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.925797][T20424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.925827][T20424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.510398][T20463] team0: Port device team_slave_0 added [ 1575.582870][T20463] team0: Port device team_slave_1 added [ 1575.757045][T20424] hsr_slave_0: entered promiscuous mode [ 1575.768825][T20424] hsr_slave_1: entered promiscuous mode [ 1575.774429][T20424] debugfs: 'hsr0' already exists in 'hsr' [ 1575.774518][T20424] Cannot create hsr debugfs directory [ 1575.813516][T20463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.813535][T20463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.813566][T20463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.873546][T20463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.873572][T20463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.873603][T20463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.244927][T20208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.609568][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1576.631239][T20463] hsr_slave_0: entered promiscuous mode [ 1576.633859][T20463] hsr_slave_1: entered promiscuous mode [ 1576.635770][T20463] debugfs: 'hsr0' already exists in 'hsr' [ 1576.635801][T20463] Cannot create hsr debugfs directory [ 1576.967378][T20208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.204195][ T1529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.204417][ T1529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.534195][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.534452][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.258193][T20341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.754539][T20341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.117962][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.118170][T16381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.327520][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.331754][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.776364][T20208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.188880][T17387] bridge_slave_1: left allmulticast mode [ 1581.188917][T17387] bridge_slave_1: left promiscuous mode [ 1581.189213][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.387252][T17387] bridge_slave_0: left allmulticast mode [ 1581.387279][T17387] bridge_slave_0: left promiscuous mode [ 1581.387522][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.687505][T17387] bridge_slave_1: left allmulticast mode [ 1581.687533][T17387] bridge_slave_1: left promiscuous mode [ 1581.687739][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.797700][T17387] bridge_slave_0: left allmulticast mode [ 1581.797735][T17387] bridge_slave_0: left promiscuous mode [ 1581.798018][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.219168][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.305858][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.372402][T17387] bond0 (unregistering): Released all slaves [ 1582.708125][T17387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.793703][T17387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.882048][T17387] bond0 (unregistering): Released all slaves [ 1582.915096][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1583.760480][T20208] veth0_vlan: entered promiscuous mode [ 1583.902679][T20341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.114979][T17387] hsr_slave_0: left promiscuous mode [ 1584.159934][T17387] hsr_slave_1: left promiscuous mode [ 1584.160843][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.204153][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.420205][T17387] hsr_slave_0: left promiscuous mode [ 1584.461824][T17387] hsr_slave_1: left promiscuous mode [ 1584.463071][T17387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.518093][T17387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.950096][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1585.012212][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1585.546242][T17387] team0 (unregistering): Port device team_slave_1 removed [ 1585.600814][T17387] team0 (unregistering): Port device team_slave_0 removed [ 1585.959774][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1585.995901][T20208] veth1_vlan: entered promiscuous mode [ 1586.771963][T20208] veth0_macvtap: entered promiscuous mode [ 1586.881900][T20208] veth1_macvtap: entered promiscuous mode [ 1587.391779][T20208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.456096][T20208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.648683][T16381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.657135][T16381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.684420][T16381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.757031][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.865531][T20341] veth0_vlan: entered promiscuous mode [ 1588.258033][T20341] veth1_vlan: entered promiscuous mode [ 1590.436795][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.436820][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.036885][T11893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.036905][T11893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.218859][T20341] veth0_macvtap: entered promiscuous mode [ 1591.265720][T20341] veth1_macvtap: entered promiscuous mode [ 1591.297203][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1591.297302][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1591.454077][T20667] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4274'. [ 1591.564829][T20341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.633513][T20341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.618547][T20424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1592.778231][T20424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1592.778706][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.962662][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.964380][T20424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1593.098652][T20424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1593.318422][T20678] loop3: detected capacity change from 0 to 4096 [ 1594.206669][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.241669][T20424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1594.436866][T20424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1594.463959][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.478634][T20424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1594.665170][T20424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1595.498094][T20684] loop6: detected capacity change from 0 to 1024 [ 1595.650008][T20684] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1596.856543][T20689] loop3: detected capacity change from 0 to 1024 [ 1597.151751][T20689] ext4: Unknown parameter 'context' [ 1600.451629][T20720] trusted_key: encrypted_key: insufficient parameters specified [ 1602.789998][T20731] sctp: [Deprecated]: syz.6.4275 (pid 20731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1602.789998][T20731] Use struct sctp_sack_info instead [ 1603.688222][ T38] audit: type=1400 audit(1495.551:869): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=20730 comm="syz.3.4277" [ 1604.586530][ T821] IPVS: starting estimator thread 0... [ 1604.710552][T20737] IPVS: using max 9 ests per chain, 21600 per kthread [ 1605.075120][T20463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1607.156297][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1607.342829][T20463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1607.451359][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1607.702126][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.702149][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.726770][T20463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1608.640418][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1608.741868][T20463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1608.829103][T20463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1609.339385][T20766] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 1609.925405][T20766] loop6: detected capacity change from 0 to 4096 [ 1610.178359][T20766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1610.464021][T20764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4282: corrupted inode contents [ 1610.474410][T20764] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #15: comm syz.6.4282: mark_inode_dirty error [ 1610.484710][T20764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4282: corrupted inode contents [ 1610.502014][T20764] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4282: mark_inode_dirty error [ 1610.638082][T20764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4282: corrupted inode contents [ 1610.645849][T20764] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4282: mark_inode_dirty error [ 1610.647720][T20764] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4282: corrupted inode contents [ 1610.743988][T20764] EXT4-fs error (device loop6): ext4_truncate:4690: inode #15: comm syz.6.4282: mark_inode_dirty error [ 1610.780037][T20764] EXT4-fs error (device loop6) in ext4_setattr:6120: Corrupt filesystem [ 1610.948412][T20773] loop3: detected capacity change from 0 to 1024 [ 1611.012124][T11902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.012143][T11902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.067395][ T9893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1611.183813][T20773] hfsplus: failed to load extents file [ 1613.500762][T20424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.425340][T20800] overlayfs: missing 'lowerdir' [ 1615.707496][T20803] loop6: detected capacity change from 0 to 4096 [ 1615.708532][T20803] EXT4-fs: Ignoring removed i_version option [ 1615.708553][T20803] EXT4-fs: Ignoring removed oldalloc option [ 1616.637551][T20803] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1616.652812][T20803] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 1617.052469][T20424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.391554][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.391754][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.509848][T20807] tipc: Started in network mode [ 1617.509872][T20807] tipc: Node identity 2007ff, cluster identity 4711 [ 1617.509887][T20807] tipc: Node number set to 2099199 [ 1617.611307][T20805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.611586][T20805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.595576][ T60] Bluetooth: hci5: link tx timeout [ 1618.596196][ T60] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1618.637396][ T60] Bluetooth: hci5: link tx timeout [ 1618.637418][ T60] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1618.816923][T20463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.578469][T18489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1619.649801][T18489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1619.660095][T18489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1619.800435][T18489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1619.825571][T18489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1620.356128][T20463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.457399][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.457629][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.606252][T11893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.606507][T11893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.813830][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 1624.330758][ T5633] Bluetooth: hci0: command tx timeout [ 1626.534313][ T60] Bluetooth: hci0: command tx timeout [ 1626.648426][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1626.755578][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1626.803326][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1626.818918][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1626.923678][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1626.951002][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.379413][T20885] loop3: detected capacity change from 0 to 32768 [ 1628.428696][T20886] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1628.713948][T20885] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1628.788240][ T60] Bluetooth: hci0: command tx timeout [ 1629.221762][ T60] Bluetooth: hci2: command tx timeout [ 1629.303477][T20900] comedi comedi1: pcl818: I/O base address or length out of range [ 1632.006124][ T60] Bluetooth: hci0: command tx timeout [ 1632.006158][ T60] Bluetooth: hci2: command tx timeout [ 1633.184926][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1633.278210][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1633.358100][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1633.373639][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1633.394651][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1634.380928][ T60] Bluetooth: hci2: command tx timeout [ 1635.004042][T12658] IPVS: starting estimator thread 0... [ 1635.202313][T20926] IPVS: using max 11 ests per chain, 26400 per kthread [ 1635.529917][T20208] ocfs2: Unmounting device (7,3) on (node local) [ 1635.687295][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.902304][ T60] Bluetooth: hci1: command tx timeout [ 1636.591435][ T60] Bluetooth: hci2: command tx timeout [ 1638.181518][ T60] Bluetooth: hci1: command tx timeout [ 1638.311409][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.500231][ T60] Bluetooth: hci1: command tx timeout [ 1641.049681][T20980] loop3: detected capacity change from 0 to 1024 [ 1641.050933][T20980] EXT4-fs: Ignoring removed oldalloc option [ 1641.184167][T20980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1642.481681][T20208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1642.912399][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.295808][ T60] Bluetooth: hci1: command tx timeout [ 1645.768050][ T5753] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1645.967434][T20825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.967833][T20825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.968222][T20825] bridge_slave_0: entered allmulticast mode [ 1645.983304][ T5753] usb 7-1: Using ep0 maxpacket: 16 [ 1646.006494][T20825] bridge_slave_0: entered promiscuous mode [ 1646.017019][ T5753] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1646.017049][ T5753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.017072][ T5753] usb 7-1: Product: syz [ 1646.017088][ T5753] usb 7-1: Manufacturer: syz [ 1646.017103][ T5753] usb 7-1: SerialNumber: syz [ 1646.093373][ T5753] usb 7-1: config 0 descriptor?? [ 1646.231681][T20825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.232021][T20825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.232389][T20825] bridge_slave_1: entered allmulticast mode [ 1646.236219][T20825] bridge_slave_1: entered promiscuous mode [ 1646.336919][T21024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.338876][T21024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.364871][T21024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.396895][T21024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.681764][ T5753] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1646.948119][T21047] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.502217][ T5925] usb 7-1: USB disconnect, device number 24 [ 1652.512907][ T38] audit: type=1400 audit(1540.339:870): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=21080 comm="syz.6.4312" [ 1655.119744][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4314'. [ 1656.156908][T20825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.298746][T20825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.463711][T20825] team0: Port device team_slave_0 added [ 1656.488983][T20825] team0: Port device team_slave_1 added [ 1656.584280][T21102] loop3: detected capacity change from 0 to 512 [ 1656.587212][T21102] EXT4-fs: Ignoring removed mblk_io_submit option [ 1656.603228][T21102] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1657.261430][T21102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1657.261788][T21102] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1657.295494][T21102] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4316: bg 0: block 361: padding at end of block bitmap is not set [ 1657.295533][T21102] loop3: lost filesystem error report for type 5 error -117 [ 1657.302657][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1657.302685][ C1] EXT4-fs (loop3): initial error at time 1545: ext4_validate_block_bitmap:441 [ 1657.302711][ C1] EXT4-fs (loop3): last error at time 1545: ext4_validate_block_bitmap:441 [ 1657.399877][T21102] EXT4-fs (loop3): Remounting filesystem read-only [ 1657.533284][T21102] EXT4-fs (loop3): 1 truncate cleaned up [ 1657.690574][T21102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1657.839701][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1657.839815][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1658.104982][T21111] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.4316: dx entry: limit 0 != root limit 125 [ 1658.105050][T21111] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4316: Corrupt directory, running e2fsck is recommended [ 1658.138230][T21112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4316'. [ 1659.529622][T20208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1659.891947][T20825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1659.891966][T20825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.892006][T20825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.173644][T21119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1660.798629][T20825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.798647][T20825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.798680][T20825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.465865][ T12] bridge_slave_1: left allmulticast mode [ 1661.465904][ T12] bridge_slave_1: left promiscuous mode [ 1661.466232][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.677168][ T12] bridge_slave_0: left allmulticast mode [ 1661.677204][ T12] bridge_slave_0: left promiscuous mode [ 1661.677473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.600670][T21139] loop6: detected capacity change from 0 to 32768 [ 1662.632645][T21139] (syz.6.4329,21139,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1662.635044][T21139] (syz.6.4329,21139,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1662.814764][T21144] loop3: detected capacity change from 0 to 512 [ 1662.959996][T21144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1663.104851][T21139] JBD2: Ignoring recovery information on journal [ 1663.799771][T21144] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.4322: iget: bad i_size value: 38620345925642 [ 1663.799827][T21144] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1663.810644][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1663.810669][ C1] EXT4-fs (loop3): initial error at time 1551: ext4_orphan_get:1397: inode 15 [ 1663.810701][ C1] EXT4-fs (loop3): last error at time 1551: ext4_orphan_get:1397: inode 15 [ 1663.963530][T21144] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4322: couldn't read orphan inode 15 (err -117) [ 1663.963567][T21144] loop3: lost filesystem error report for type 5 error -117 [ 1663.977132][T21144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.083715][T21139] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1664.460220][ T1404] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 1664.465949][ T1404] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1664.465979][ T1404] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1664.465979][ T1404] [ 1664.465993][ T1404] EXT4-fs (loop3): Total free blocks count 0 [ 1664.466004][ T1404] EXT4-fs (loop3): Free/Dirty block details [ 1664.466015][ T1404] EXT4-fs (loop3): free_blocks=0 [ 1664.466026][ T1404] EXT4-fs (loop3): dirty_blocks=2128 [ 1664.466036][ T1404] EXT4-fs (loop3): Block reservation details [ 1664.466058][ T1404] EXT4-fs (loop3): i_reserved_data_blocks=2128 [ 1664.937065][ T1404] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 76 with error 28 [ 1664.942064][T20208] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1665.269743][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1665.407207][T21154] loop3: detected capacity change from 0 to 512 [ 1665.750673][T21154] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1666.059159][T21154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1666.137755][T21154] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.4323: Allocating blocks 41-42 which overlap fs metadata [ 1666.137845][T21154] loop3: lost filesystem error report for type 5 error -117 [ 1666.153320][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1666.153394][ C1] EXT4-fs (loop3): initial error at time 1553: ext4_mb_mark_diskspace_used:4222 [ 1666.153494][ C1] EXT4-fs (loop3): last error at time 1553: ext4_mb_mark_diskspace_used:4222 [ 1666.500975][T21154] Quota error (device loop3): write_blk: dquota write failed [ 1666.501019][T21154] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1666.528286][T21154] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1666.528461][T21154] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4323: Failed to acquire dquot type 1 [ 1666.528527][T21154] loop3: lost filesystem error report for type 5 error -117 [ 1666.530269][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1666.597421][T21154] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1666.597504][T21154] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.4323: corrupted inode contents [ 1666.597523][T21154] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1666.616922][ T12] bond0 (unregistering): Released all slaves [ 1666.652250][T21154] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.4323: mark_inode_dirty error [ 1666.652275][T21154] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1666.671450][T21154] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.4323: corrupted inode contents [ 1666.671473][T21154] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1666.703502][T21154] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.4323: mark_inode_dirty error [ 1666.703541][T21154] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1666.704338][T21154] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.4323: corrupted inode contents [ 1666.704369][T21154] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1666.704960][T21154] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1666.704984][T21154] loop3: lost filesystem error report for type 5 error -117 [ 1666.705575][T21154] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.4323: corrupted inode contents [ 1666.705605][T21154] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1666.706154][T21154] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.4323: mark_inode_dirty error [ 1666.706182][T21154] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1667.025662][T21154] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1667.025695][T21154] loop3: lost filesystem error report for type 5 error -117 [ 1667.028529][T21154] EXT4-fs (loop3): 1 truncate cleaned up [ 1667.168351][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1667.303575][T21154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1667.327407][T20825] hsr_slave_0: entered promiscuous mode [ 1667.329797][T20825] hsr_slave_1: entered promiscuous mode [ 1667.331871][T20825] debugfs: 'hsr0' already exists in 'hsr' [ 1667.331898][T20825] Cannot create hsr debugfs directory [ 1667.740379][ T9893] ocfs2: Unmounting device (7,6) on (node local) [ 1667.793845][T20208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.481568][T20868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.482003][T20868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.482335][T20868] bridge_slave_0: entered allmulticast mode [ 1669.487197][T20868] bridge_slave_0: entered promiscuous mode [ 1669.603598][T20868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.604477][T20868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.604864][T20868] bridge_slave_1: entered allmulticast mode [ 1669.613057][T20868] bridge_slave_1: entered promiscuous mode [ 1671.253061][T21181] loop3: detected capacity change from 0 to 512 [ 1671.259863][T21181] EXT4-fs: Ignoring removed i_version option [ 1671.259899][T21181] ext4: Unknown parameter 'obj_type' [ 1672.946814][ T60] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1673.043465][T20868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.069322][T21201] binder: BINDER_SET_CONTEXT_MGR already set [ 1674.069365][T21201] binder: 21198:21201 ioctl 4018620d 200000004a80 returned -16 [ 1674.079561][T21201] binder: 21198:21201 ioctl c01064b5 200000000280 returned -22 [ 1675.624949][T20868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.774441][T20868] team0: Port device team_slave_0 added [ 1676.997124][T20868] team0: Port device team_slave_1 added [ 1677.083680][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 1678.573249][ T12] hsr_slave_0: left promiscuous mode [ 1678.606279][ T12] hsr_slave_1: left promiscuous mode [ 1678.613014][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1678.613041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1678.685881][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1678.685911][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.774179][ T12] veth1_macvtap: left promiscuous mode [ 1678.774290][ T12] veth0_macvtap: left promiscuous mode [ 1678.774586][ T12] veth1_vlan: left promiscuous mode [ 1678.774784][ T12] veth0_vlan: left promiscuous mode [ 1679.191231][T21234] loop3: detected capacity change from 0 to 32768 [ 1679.383111][T21234] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1682.020554][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1682.081714][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1682.373149][T20913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.373488][T20913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.373782][T20913] bridge_slave_0: entered allmulticast mode [ 1682.377797][T20913] bridge_slave_0: entered promiscuous mode [ 1682.469769][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1683.787392][T20913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.787794][T20913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.788147][T20913] bridge_slave_1: entered allmulticast mode [ 1683.791868][T20913] bridge_slave_1: entered promiscuous mode [ 1684.036320][T20868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.036339][T20868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.036371][T20868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.372615][T20868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.372634][T20868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.372666][T20868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.436115][T20208] ocfs2: Unmounting device (7,3) on (node local) [ 1685.016088][T20913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.218965][T20913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.443971][T20913] team0: Port device team_slave_0 added [ 1685.463816][T20868] hsr_slave_0: entered promiscuous mode [ 1685.466309][T20868] hsr_slave_1: entered promiscuous mode [ 1685.468182][T20868] debugfs: 'hsr0' already exists in 'hsr' [ 1685.468224][T20868] Cannot create hsr debugfs directory [ 1686.212585][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1686.257988][T20913] team0: Port device team_slave_1 added [ 1686.353060][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1686.391780][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1686.432680][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1686.436675][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1686.728350][T21265] [ 1686.728364][T21265] ====================================================== [ 1686.728444][T21265] WARNING: possible circular locking dependency detected [ 1686.728496][T21265] syzkaller #0 Tainted: G L [ 1686.728510][T21265] ------------------------------------------------------ [ 1686.728543][T21265] syz.3.4345/21265 is trying to acquire lock: [ 1686.728557][T21265] ffffffff8f3f0600 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1686.728669][T21265] [ 1686.728669][T21265] but task is already holding lock: [ 1686.728678][T21265] ffff888037262058 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x15f/0x11f0 [ 1686.728730][T21265] [ 1686.728730][T21265] which lock already depends on the new lock. [ 1686.728730][T21265] [ 1686.728740][T21265] [ 1686.728740][T21265] the existing dependency chain (in reverse order) is: [ 1686.728749][T21265] [ 1686.728749][T21265] -> #7 (&pipe->mutex){+.+.}-{4:4}: [ 1686.728831][T21265] mutex_lock_nested+0x5a/0x1d0 [ 1686.728861][T21265] iter_file_splice_write+0x1f3/0x10f0 [ 1686.728886][T21265] do_splice+0xef8/0x1940 [ 1686.728908][T21265] __se_sys_splice+0x353/0x490 [ 1686.728932][T21265] do_syscall_64+0x15f/0x560 [ 1686.728953][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.728975][T21265] [ 1686.728975][T21265] -> #6 (sb_writers#5){.+.+}-{0:0}: [ 1686.729043][T21265] lo_rw_aio+0xb1b/0xf00 [ 1686.729068][T21265] loop_process_work+0x637/0x11b0 [ 1686.729093][T21265] process_one_work+0x98b/0x1630 [ 1686.729126][T21265] worker_thread+0xb49/0x1140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1686.729144][T21265] kthread+0x388/0x470 [ 1686.729167][T21265] ret_from_fork+0x514/0xb70 [ 1686.729193][T21265] ret_from_fork_asm+0x1a/0x30 [ 1686.729223][T21265] [ 1686.729223][T21265] -> #5 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 1686.729255][T21265] process_one_work+0x8d7/0x1630 [ 1686.729288][T21265] worker_thread+0xb49/0x1140 [ 1686.729305][T21265] kthread+0x388/0x470 [ 1686.729328][T21265] ret_from_fork+0x514/0xb70 [ 1686.729352][T21265] ret_from_fork_asm+0x1a/0x30 [ 1686.729386][T21265] [ 1686.729386][T21265] -> #4 ((wq_completion)loop0){+.+.}-{0:0}: [ 1686.729418][T21265] touch_wq_lockdep_map+0xcb/0x180 [ 1686.729442][T21265] __flush_workqueue+0x14b/0x14f0 [ 1686.729464][T21265] drain_workqueue+0xd3/0x390 [ 1686.729485][T21265] lo_release+0x287/0x8f0 [ 1686.729507][T21265] bdev_release+0x541/0x660 [ 1686.729532][T21265] blkdev_release+0x15/0x20 [ 1686.729558][T21265] __fput+0x461/0xa70 [ 1686.729584][T21265] fput_close_sync+0x11f/0x240 [ 1686.729604][T21265] __x64_sys_close+0x7e/0x110 [ 1686.729626][T21265] do_syscall_64+0x15f/0x560 [ 1686.729646][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.729668][T21265] [ 1686.729668][T21265] -> #3 (&disk->open_mutex){+.+.}-{4:4}: [ 1686.729700][T21265] mutex_lock_nested+0x5a/0x1d0 [ 1686.729727][T21265] __del_gendisk+0x127/0x980 [ 1686.729755][T21265] del_gendisk+0xe7/0x160 [ 1686.729783][T21265] loop_remove+0x42/0xc0 [ 1686.729803][T21265] loop_control_ioctl+0x4ba/0x5b0 [ 1686.729826][T21265] __se_sys_ioctl+0xff/0x170 [ 1686.729853][T21265] do_syscall_64+0x15f/0x560 [ 1686.729873][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.729903][T21265] [ 1686.729903][T21265] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1686.729936][T21265] down_write+0x3a/0x50 [ 1686.729958][T21265] blk_mq_update_nr_hw_queues+0xbf/0x1a80 [ 1686.729987][T21265] nbd_start_device+0x17f/0xb20 [ 1686.730025][T21265] nbd_genl_connect+0x1651/0x1c80 [ 1686.730055][T21265] genl_family_rcv_msg_doit+0x22a/0x330 [ 1686.730085][T21265] genl_rcv_msg+0x61c/0x7a0 [ 1686.730112][T21265] netlink_rcv_skb+0x232/0x4b0 [ 1686.730133][T21265] genl_rcv+0x28/0x40 [ 1686.730159][T21265] netlink_unicast+0x780/0x920 [ 1686.730192][T21265] netlink_sendmsg+0x813/0xb40 [ 1686.730214][T21265] sock_sendmsg_nosec+0x112/0x150 [ 1686.730240][T21265] ____sys_sendmsg+0x55c/0x870 [ 1686.730261][T21265] ___sys_sendmsg+0x2a5/0x360 [ 1686.730283][T21265] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1686.730305][T21265] do_syscall_64+0x15f/0x560 [ 1686.730326][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.730347][T21265] [ 1686.730347][T21265] -> #1 (genl_mutex){+.+.}-{4:4}: [ 1686.730378][T21265] mutex_lock_nested+0x5a/0x1d0 [ 1686.730405][T21265] genl_register_family+0x7b9/0x17b0 [ 1686.730432][T21265] vdpa_init+0x39/0x70 [ 1686.730449][T21265] do_one_initcall+0x250/0x870 [ 1686.730477][T21265] do_initcall_level+0x104/0x190 [ 1686.730568][T21265] do_initcalls+0x59/0xa0 [ 1686.730597][T21265] kernel_init_freeable+0x2a6/0x3e0 [ 1686.730627][T21265] kernel_init+0x1d/0x1d0 [ 1686.730651][T21265] ret_from_fork+0x514/0xb70 [ 1686.730677][T21265] ret_from_fork_asm+0x1a/0x30 [ 1686.730706][T21265] [ 1686.730706][T21265] -> #0 (cb_lock){++++}-{4:4}: [ 1686.730737][T21265] __lock_acquire+0x15a5/0x2d10 [ 1686.730764][T21265] lock_acquire+0x106/0x350 [ 1686.730788][T21265] down_read+0x97/0x200 [ 1686.730808][T21265] genl_rcv+0x19/0x40 [ 1686.730834][T21265] netlink_unicast+0x780/0x920 [ 1686.730865][T21265] netlink_sendmsg+0x813/0xb40 [ 1686.730887][T21265] sock_sendmsg_nosec+0x112/0x150 [ 1686.730913][T21265] sock_sendmsg+0x1ca/0x2d0 [ 1686.730938][T21265] splice_to_socket+0xae5/0x11f0 [ 1686.730961][T21265] do_splice+0xef8/0x1940 [ 1686.730984][T21265] __se_sys_splice+0x353/0x490 [ 1686.731009][T21265] do_syscall_64+0x15f/0x560 [ 1686.731040][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.731059][T21265] [ 1686.731059][T21265] other info that might help us debug this: [ 1686.731059][T21265] [ 1686.731067][T21265] Chain exists of: [ 1686.731067][T21265] cb_lock --> sb_writers#5 --> &pipe->mutex [ 1686.731067][T21265] [ 1686.731152][T21265] Possible unsafe locking scenario: [ 1686.731152][T21265] [ 1686.731189][T21265] CPU0 CPU1 [ 1686.731227][T21265] ---- ---- [ 1686.731242][T21265] lock(&pipe->mutex); [ 1686.731258][T21265] lock(sb_writers#5); [ 1686.731281][T21265] lock(&pipe->mutex); [ 1686.731299][T21265] rlock(cb_lock); [ 1686.731314][T21265] [ 1686.731314][T21265] *** DEADLOCK *** [ 1686.731314][T21265] [ 1686.731321][T21265] 1 lock held by syz.3.4345/21265: [ 1686.731335][T21265] #0: ffff888037262058 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0x15f/0x11f0 [ 1686.731415][T21265] [ 1686.731415][T21265] stack backtrace: [ 1686.731433][T21265] CPU: 1 UID: 0 PID: 21265 Comm: syz.3.4345 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1686.731464][T21265] Tainted: [L]=SOFTLOCKUP [ 1686.731473][T21265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1686.731489][T21265] Call Trace: [ 1686.731498][T21265] [ 1686.731508][T21265] dump_stack_lvl+0xe8/0x150 [ 1686.731539][T21265] print_circular_bug+0x2e1/0x300 [ 1686.731575][T21265] check_noncircular+0x12e/0x150 [ 1686.731611][T21265] __lock_acquire+0x15a5/0x2d10 [ 1686.731650][T21265] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1686.731680][T21265] ? ref_tracker_free+0x673/0x820 [ 1686.731709][T21265] ? __netlink_deliver_tap+0x636/0x8b0 [ 1686.731733][T21265] ? netlink_deliver_tap+0x19c/0x1b0 [ 1686.731756][T21265] ? netlink_unicast+0x754/0x920 [ 1686.731789][T21265] ? netlink_sendmsg+0x813/0xb40 [ 1686.731811][T21265] ? sock_sendmsg_nosec+0x112/0x150 [ 1686.731839][T21265] ? sock_sendmsg+0x1ca/0x2d0 [ 1686.731864][T21265] ? splice_to_socket+0xae5/0x11f0 [ 1686.731895][T21265] ? do_splice+0xef8/0x1940 [ 1686.731918][T21265] ? __se_sys_splice+0x353/0x490 [ 1686.731943][T21265] ? do_syscall_64+0x15f/0x560 [ 1686.731964][T21265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.731990][T21265] ? genl_rcv+0x19/0x40 [ 1686.732035][T21265] lock_acquire+0x106/0x350 [ 1686.732063][T21265] ? genl_rcv+0x19/0x40 [ 1686.732104][T21265] down_read+0x97/0x200 [ 1686.732126][T21265] ? genl_rcv+0x19/0x40 [ 1686.732154][T21265] ? __pfx_down_read+0x10/0x10 [ 1686.732175][T21265] ? netlink_deliver_tap+0x2e/0x1b0 [ 1686.732197][T21265] ? netlink_deliver_tap+0x2e/0x1b0 [ 1686.732222][T21265] genl_rcv+0x19/0x40 [ 1686.732251][T21265] netlink_unicast+0x780/0x920 [ 1686.732290][T21265] netlink_sendmsg+0x813/0xb40 [ 1686.732318][T21265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1686.732344][T21265] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1686.732374][T21265] ? aa_sock_msg_perm+0x122/0x200 [ 1686.732397][T21265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1686.732421][T21265] sock_sendmsg_nosec+0x112/0x150 [ 1686.732452][T21265] sock_sendmsg+0x1ca/0x2d0 [ 1686.732484][T21265] ? __pfx_sock_sendmsg+0x10/0x10 [ 1686.732518][T21265] ? __asan_memset+0x22/0x50 [ 1686.732539][T21265] ? iov_iter_bvec+0xb8/0x180 [ 1686.732572][T21265] splice_to_socket+0xae5/0x11f0 [ 1686.732607][T21265] ? __pfx_splice_to_socket+0x10/0x10 [ 1686.732657][T21265] ? rw_verify_area+0x25b/0x4e0 [ 1686.732685][T21265] ? __pfx_splice_to_socket+0x10/0x10 [ 1686.732710][T21265] do_splice+0xef8/0x1940 [ 1686.732747][T21265] ? __pfx_do_splice+0x10/0x10 [ 1686.732778][T21265] __se_sys_splice+0x353/0x490 [ 1686.732807][T21265] ? __pfx___se_sys_splice+0x10/0x10 [ 1686.732833][T21265] ? __pfx_kcov_ioctl+0x10/0x10 [ 1686.732859][T21265] ? __x64_sys_splice+0x21/0xf0 [ 1686.732884][T21265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.732907][T21265] do_syscall_64+0x15f/0x560 [ 1686.732928][T21265] ? trace_irq_disable+0x3b/0x140 [ 1686.732953][T21265] ? clear_bhb_loop+0x40/0x90 [ 1686.732979][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.733001][T21265] RIP: 0033:0x7f599bdfce59 [ 1686.733032][T21265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.733053][T21265] RSP: 002b:00007f599a035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1686.733078][T21265] RAX: ffffffffffffffda RBX: 00007f599c076090 RCX: 00007f599bdfce59 [ 1686.733095][T21265] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 1686.733109][T21265] RBP: 00007f599be92d6f R08: 000000000004ffe2 R09: 0000000000000000 [ 1686.733124][T21265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.733138][T21265] R13: 00007f599c076128 R14: 00007f599c076090 R15: 00007ffe56c36778 [ 1686.733165][T21265] [ 1688.802617][ T60] Bluetooth: hci5: command tx timeout [ 1688.989112][ T9893] macvlan2 (unregistering): left allmulticast mode [ 1688.989133][ T9893] macvlan2 (unregistering): left promiscuous mode [ 1688.989201][ T9893] bridge0: port 3(macvlan2) entered disabled state [ 1690.516207][ T1557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.887924][ T1557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.357803][ T1557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.603591][ T1557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.123004][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1692.426832][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1692.736618][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1693.238129][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1693.734836][ T5278] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1694.042309][ T5278] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1694.386446][ T5278] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1694.734098][ T1557] bridge_slave_1: left allmulticast mode [ 1694.734120][ T1557] bridge_slave_1: left promiscuous mode [ 1694.734273][ T1557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.883759][ T1557] bridge_slave_0: left allmulticast mode [ 1694.883790][ T1557] bridge_slave_0: left promiscuous mode [ 1694.883973][ T1557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.343040][ T1557] bridge_slave_1: left allmulticast mode [ 1695.343069][ T1557] bridge_slave_1: left promiscuous mode [ 1695.343255][ T1557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.449847][ T1557] bridge_slave_0: left allmulticast mode [ 1695.449868][ T1557] bridge_slave_0: left promiscuous mode [ 1695.450015][ T1557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.663095][ T1557] bridge_slave_1: left allmulticast mode [ 1695.663117][ T1557] bridge_slave_1: left promiscuous mode [ 1695.663254][ T1557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.791666][ T1557] bridge_slave_0: left allmulticast mode [ 1695.791688][ T1557] bridge_slave_0: left promiscuous mode [ 1695.791825][ T1557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.005105][ T1557] bridge_slave_1: left allmulticast mode [ 1696.005133][ T1557] bridge_slave_1: left promiscuous mode [ 1696.005305][ T1557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.112530][ T1557] bridge_slave_0: left allmulticast mode [ 1696.112559][ T1557] bridge_slave_0: left promiscuous mode [ 1696.112742][ T1557] bridge0: port 1(bridge_slave_0) entered disabled state