last executing test programs: 3m17.588531959s ago: executing program 3 (id=4): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf2505000000fe7e0b67072f06cd6f5d0d826150c9fe42ca52273c9136cef1ea590b4005164466359a6c106ea1ac8cb7203fedc64a882507743fcdc4c1493fdc9497f4b16e76d5d3ce1066daf2946c6ffb11784b6fbee175504f469549ec0468c380249900ffc43bb9a673e5ef7633b7adf68ead7a3c37f2375fcc167d744c7ebf6080655e5285ec1e706e0b"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x40000) 3m16.6405735s ago: executing program 3 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 3m15.707528708s ago: executing program 3 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, 0x0, 0x0) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x1, 0x1, "528035", "b5ea47", 0x1, 0xd, 0x6, @any, 0x0, 0xff, 0x0, 0xf5, 0x8, 0xf9, 0x3}}}, 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x286201, 0x0) close(r4) ioctl$FIONCLEX(r1, 0x5450) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) close(0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) 3m0.876455694s ago: executing program 2 (id=38): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3m0.251263096s ago: executing program 32 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, 0x0, 0x0) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x1, 0x1, "528035", "b5ea47", 0x1, 0xd, 0x6, @any, 0x0, 0xff, 0x0, 0xf5, 0x8, 0xf9, 0x3}}}, 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x286201, 0x0) close(r4) ioctl$FIONCLEX(r1, 0x5450) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) close(0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) 2m58.382463614s ago: executing program 2 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) close(0x3) 2m55.993166614s ago: executing program 2 (id=45): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2m54.306113582s ago: executing program 2 (id=50): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 2m50.336793151s ago: executing program 2 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m48.808867197s ago: executing program 2 (id=56): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x200440c4) 2m45.606198954s ago: executing program 33 (id=56): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x200440c4) 2m14.127637449s ago: executing program 1 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2m11.109996192s ago: executing program 1 (id=109): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xf43b) 2m8.960961659s ago: executing program 1 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0xf3, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m6.739840715s ago: executing program 1 (id=115): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 2m5.558691697s ago: executing program 1 (id=117): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2m4.399142932s ago: executing program 1 (id=120): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040811) 2m0.541137229s ago: executing program 34 (id=120): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040811) 1m56.308884268s ago: executing program 4 (id=127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 1m54.915367191s ago: executing program 4 (id=128): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1m53.471778192s ago: executing program 4 (id=130): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000900)=""/10, 0xa}], 0x1}, 0xe}], 0x2, 0x10023, 0x0) 1m51.029636384s ago: executing program 4 (id=133): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 1m50.010546921s ago: executing program 4 (id=135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 1m49.14312601s ago: executing program 6 (id=137): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 1m48.990407678s ago: executing program 4 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x158b8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1m46.140985218s ago: executing program 35 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x158b8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1m46.042604243s ago: executing program 6 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0xf3, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m44.298863216s ago: executing program 6 (id=143): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)='J', 0x1) 1m40.829293333s ago: executing program 6 (id=145): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r0, 0x0, 0x0) 1m40.438924391s ago: executing program 6 (id=146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 1m39.226335564s ago: executing program 6 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 1m23.906199658s ago: executing program 36 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 44.018686462s ago: executing program 8 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 42.918525332s ago: executing program 8 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xef}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8c014) 42.211710519s ago: executing program 8 (id=234): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) 41.487164503s ago: executing program 8 (id=235): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 40.582145508s ago: executing program 8 (id=238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) 39.799483278s ago: executing program 8 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 38.308964915s ago: executing program 37 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 19.310689184s ago: executing program 9 (id=276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) 18.734868385s ago: executing program 9 (id=277): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0) 16.592598462s ago: executing program 9 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 15.767358549s ago: executing program 9 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'ip6_vti0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003"], 0x4c}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x200001, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfd, 0x22c, &(0x7f0000000580)="$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") sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x24008080) socket$kcm(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) 5.418208006s ago: executing program 0 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) 4.66622746s ago: executing program 0 (id=293): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'A'}]}], {0x14}}, 0x78}}, 0x0) 4.030872956s ago: executing program 0 (id=294): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000001) 3.480719286s ago: executing program 5 (id=39): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x8003, 0x2000000024ee, 0x400], 0x0, 0x0, 0x0}, 0x2a8) 3.281396196s ago: executing program 0 (id=295): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xc}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") socket(0x10, 0x803, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.896593164s ago: executing program 7 (id=121): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11", 0x12}], 0x1}, 0x0) 2.626853008s ago: executing program 5 (id=296): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) open(0x0, 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 2.311374963s ago: executing program 3 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}], 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xfff2}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 2.067583936s ago: executing program 9 (id=297): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) 1.937965022s ago: executing program 7 (id=298): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0xf3, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.544299241s ago: executing program 0 (id=299): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.507879239s ago: executing program 5 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 1.05121426s ago: executing program 9 (id=301): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'A'}]}], {0x14}}, 0x78}}, 0x0) 794.396815ms ago: executing program 3 (id=302): syz_open_dev$usbfs(0x0, 0x76, 0x101341) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xc1, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08", 0x0, 0xf0}, 0x50) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000), 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r7, 0x0, 0x40001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 217.405315ms ago: executing program 0 (id=303): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 76.773201ms ago: executing program 5 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000800d0800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44000) 0s ago: executing program 7 (id=305): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x8003, 0x2000000024ee, 0x400], 0x0, 0x0, 0x0}, 0x2a8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 193.678701][ T5755] cgroup: Unknown subsys name 'net' [ 193.826526][ T5755] cgroup: Unknown subsys name 'cpuset' [ 193.845319][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 200.554896][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.542620][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.562148][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.572032][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.583409][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.593310][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.605297][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.614717][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.625201][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.626604][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.655758][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.671403][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.680607][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.692141][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.693127][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.700903][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.709386][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.726661][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.736656][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.740183][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.750890][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.763766][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.772423][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.784004][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.826037][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.845888][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.180901][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 207.598690][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 207.623871][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 207.878100][ T49] Bluetooth: hci0: command tx timeout [ 207.883755][ T49] Bluetooth: hci1: command tx timeout [ 207.889941][ T5784] Bluetooth: hci4: command tx timeout [ 207.899489][ T5784] Bluetooth: hci2: command tx timeout [ 207.955341][ T49] Bluetooth: hci3: command tx timeout [ 208.176972][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 208.399072][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.408566][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.419445][ T5781] bridge_slave_0: entered allmulticast mode [ 208.431291][ T5781] bridge_slave_0: entered promiscuous mode [ 208.449308][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 208.537116][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.545883][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.553885][ T5781] bridge_slave_1: entered allmulticast mode [ 208.566199][ T5781] bridge_slave_1: entered promiscuous mode [ 208.711892][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.720131][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.728199][ T5774] bridge_slave_0: entered allmulticast mode [ 208.737932][ T5774] bridge_slave_0: entered promiscuous mode [ 208.961904][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.970144][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.978386][ T5774] bridge_slave_1: entered allmulticast mode [ 208.987707][ T5774] bridge_slave_1: entered promiscuous mode [ 209.041914][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.065653][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.073395][ T5773] bridge_slave_0: entered allmulticast mode [ 209.099271][ T5773] bridge_slave_0: entered promiscuous mode [ 209.158938][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.206358][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.214144][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.222185][ T5773] bridge_slave_1: entered allmulticast mode [ 209.231396][ T5773] bridge_slave_1: entered promiscuous mode [ 209.250556][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.276720][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.300772][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.340292][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.355927][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.727770][ T5774] team0: Port device team_slave_0 added [ 209.734441][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.743127][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.751021][ T5778] bridge_slave_0: entered allmulticast mode [ 209.759800][ T5778] bridge_slave_0: entered promiscuous mode [ 209.781146][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.800328][ T5781] team0: Port device team_slave_0 added [ 209.838795][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.846787][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.854399][ T5782] bridge_slave_0: entered allmulticast mode [ 209.864105][ T5782] bridge_slave_0: entered promiscuous mode [ 209.886042][ T5774] team0: Port device team_slave_1 added [ 209.892468][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.900451][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.908377][ T5778] bridge_slave_1: entered allmulticast mode [ 209.918302][ T5778] bridge_slave_1: entered promiscuous mode [ 209.937144][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.954910][ T5781] team0: Port device team_slave_1 added [ 209.957345][ T5789] Bluetooth: hci2: command tx timeout [ 209.968524][ T5784] Bluetooth: hci4: command tx timeout [ 209.974542][ T5784] Bluetooth: hci0: command tx timeout [ 209.986300][ T49] Bluetooth: hci1: command tx timeout [ 210.035292][ T49] Bluetooth: hci3: command tx timeout [ 210.063266][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.072455][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.081957][ T5782] bridge_slave_1: entered allmulticast mode [ 210.093270][ T5782] bridge_slave_1: entered promiscuous mode [ 210.223386][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.231965][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.262047][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.452745][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.460936][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.488762][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.531789][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.539269][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.566978][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.591295][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.627966][ T5773] team0: Port device team_slave_0 added [ 210.667022][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.679748][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.687887][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.715807][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.737365][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.753811][ T5773] team0: Port device team_slave_1 added [ 210.838026][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.932454][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.939951][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.967176][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.984809][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.992490][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.019597][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.071053][ T5778] team0: Port device team_slave_0 added [ 211.173428][ T5778] team0: Port device team_slave_1 added [ 211.189450][ T5782] team0: Port device team_slave_0 added [ 211.244766][ T5781] hsr_slave_0: entered promiscuous mode [ 211.257563][ T5781] hsr_slave_1: entered promiscuous mode [ 211.335559][ T5782] team0: Port device team_slave_1 added [ 211.511868][ T5773] hsr_slave_0: entered promiscuous mode [ 211.523039][ T5773] hsr_slave_1: entered promiscuous mode [ 211.532943][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 211.540188][ T5773] Cannot create hsr debugfs directory [ 211.565479][ T5774] hsr_slave_0: entered promiscuous mode [ 211.574599][ T5774] hsr_slave_1: entered promiscuous mode [ 211.583945][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 211.590020][ T5774] Cannot create hsr debugfs directory [ 211.605793][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.612947][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.639594][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.778163][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.785438][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.814105][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.829704][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.838624][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.865980][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.882694][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.890307][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.917699][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.037265][ T5789] Bluetooth: hci2: command tx timeout [ 212.043020][ T5789] Bluetooth: hci0: command tx timeout [ 212.046312][ T5784] Bluetooth: hci4: command tx timeout [ 212.050033][ T49] Bluetooth: hci1: command tx timeout [ 212.115638][ T49] Bluetooth: hci3: command tx timeout [ 212.535671][ T5778] hsr_slave_0: entered promiscuous mode [ 212.544997][ T5778] hsr_slave_1: entered promiscuous mode [ 212.553914][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 212.560281][ T5778] Cannot create hsr debugfs directory [ 212.582627][ T5782] hsr_slave_0: entered promiscuous mode [ 212.591773][ T5782] hsr_slave_1: entered promiscuous mode [ 212.602957][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 212.609231][ T5782] Cannot create hsr debugfs directory [ 213.590660][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.650281][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.707913][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.782335][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.917565][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.954396][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.984942][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.032528][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.118872][ T49] Bluetooth: hci1: command tx timeout [ 214.124817][ T49] Bluetooth: hci0: command tx timeout [ 214.131911][ T5789] Bluetooth: hci2: command tx timeout [ 214.132416][ T5784] Bluetooth: hci4: command tx timeout [ 214.195318][ T5784] Bluetooth: hci3: command tx timeout [ 214.288776][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.318947][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.343080][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.393363][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.660936][ T5778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.722165][ T5778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.784799][ T5778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.816597][ T5778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.068569][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.128296][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.150590][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.177077][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.262721][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.451290][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.570910][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.578706][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.644173][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.651856][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.737869][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.026693][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.103379][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.153461][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.161509][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.240621][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.248261][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.455769][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.552742][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.603831][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.611561][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.712381][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.720459][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.817019][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.959423][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.073885][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.081461][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.184885][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.192634][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.250260][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.352210][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.359866][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.545272][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.553029][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.596319][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.709481][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.880600][ T5781] veth0_vlan: entered promiscuous mode [ 219.080881][ T5781] veth1_vlan: entered promiscuous mode [ 219.450790][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.499268][ T5774] veth0_vlan: entered promiscuous mode [ 219.533813][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.662044][ T5781] veth0_macvtap: entered promiscuous mode [ 219.713798][ T5781] veth1_macvtap: entered promiscuous mode [ 219.759781][ T5774] veth1_vlan: entered promiscuous mode [ 220.011119][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.061063][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.199241][ T5773] veth0_vlan: entered promiscuous mode [ 220.226929][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.339512][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.355002][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.463931][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.490369][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.540324][ T5774] veth0_macvtap: entered promiscuous mode [ 220.603320][ T5773] veth1_vlan: entered promiscuous mode [ 220.700099][ T5774] veth1_macvtap: entered promiscuous mode [ 221.002779][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.144781][ T5778] veth0_vlan: entered promiscuous mode [ 221.176585][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.191848][ T5782] veth0_vlan: entered promiscuous mode [ 221.273781][ T5773] veth0_macvtap: entered promiscuous mode [ 221.332074][ T5773] veth1_macvtap: entered promiscuous mode [ 221.364419][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.383505][ T5778] veth1_vlan: entered promiscuous mode [ 221.420295][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.442313][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.483096][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.504946][ T5782] veth1_vlan: entered promiscuous mode [ 221.833187][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.899324][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.057307][ T129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.143521][ T5778] veth0_macvtap: entered promiscuous mode [ 222.182737][ T129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.217687][ T129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.296412][ T5782] veth0_macvtap: entered promiscuous mode [ 222.330400][ T129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.418304][ T5778] veth1_macvtap: entered promiscuous mode [ 222.453496][ T5782] veth1_macvtap: entered promiscuous mode [ 222.707572][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.820518][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.852926][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.969555][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.018004][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.040187][ T1088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.133446][ T1088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.169674][ T1088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.273154][ T1088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.321434][ T1088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.380114][ T1088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.406452][ T1088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.542948][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.622763][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.836233][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.844396][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.327849][ T5781] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 228.234806][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.279604][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.645639][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.700885][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.179911][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.224828][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.654216][ T5962] Zero length message leads to an empty skb [ 229.954019][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.985269][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.499459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 231.324073][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.364594][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.824301][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.875636][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.011527][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.042599][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.307911][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.333232][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.103697][ T5985] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 233.701434][ T5988] syzkaller0: entered promiscuous mode [ 233.722500][ T5988] syzkaller0: entered allmulticast mode [ 234.945793][ T5999] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.12'. [ 235.785538][ T6002] netlink: 'syz.0.14': attribute type 3 has an invalid length. [ 235.939295][ T6002] syz_tun: entered allmulticast mode [ 235.961287][ T6009] Bluetooth: MGMT ver 1.23 [ 236.020500][ T6001] syz_tun: left allmulticast mode [ 236.871658][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19'. [ 240.378429][ T6059] netlink: 'syz.4.30': attribute type 3 has an invalid length. [ 240.474779][ T6059] syz_tun: entered allmulticast mode [ 240.499609][ T6058] syz_tun: left allmulticast mode [ 240.542266][ T6055] loop2: detected capacity change from 0 to 4096 [ 240.661588][ T6055] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.771686][ T6055] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 240.812544][ T6055] System zones: 0-5 [ 240.947055][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.210598][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 241.360888][ T5860] IPVS: starting estimator thread 0... [ 241.465582][ T6068] IPVS: using max 192 ests per chain, 9600 per kthread [ 241.671238][ T6055] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 242.046889][ T6070] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 242.247180][ T6076] netlink: 'syz.0.34': attribute type 13 has an invalid length. [ 242.262054][ T6070] bond1 (unregistering): Released all slaves [ 242.566210][ T6079] block nbd1: not configured, cannot reconfigure [ 242.638387][ T5784] block nbd0: Receive control failed (result -32) [ 243.436754][ T6082] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 243.504490][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.603072][ T6092] loop1: detected capacity change from 0 to 512 [ 244.638839][ T6092] EXT4-fs: Ignoring removed orlov option [ 244.736883][ T6092] EXT4-fs (loop1): Test dummy encryption mode enabled [ 244.743996][ T6092] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 244.928532][ T6092] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.037287][ T6092] EXT4-fs (loop1): 1 truncate cleaned up [ 245.044573][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.051905][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.193711][ T6092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.487995][ T6091] syz.2.38 (6091): drop_caches: 2 [ 246.063114][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.210151][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.245615][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.280308][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.296069][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.310056][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.327710][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.341937][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.640277][ T6087] veth1_macvtap: renamed from veth0_vlan [ 247.863613][ T56] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.931365][ T56] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.000040][ T56] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.011549][ T56] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.445313][ T49] Bluetooth: hci5: command tx timeout [ 249.949402][ T6125] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 250.044634][ T6125] bond1 (unregistering): Released all slaves [ 250.328917][ T6127] loop4: detected capacity change from 0 to 4096 [ 250.417075][ T6127] EXT4-fs (loop4): Test dummy encryption mode enabled [ 250.444386][ T6136] loop2: detected capacity change from 0 to 64 [ 250.472890][ T6127] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 250.515900][ T49] Bluetooth: hci5: command tx timeout [ 250.588533][ T6127] System zones: 0-5 [ 250.651609][ T6127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.676347][ T6132] bridge0: port 3(wlan1) entered blocking state [ 250.697775][ T6132] bridge0: port 3(wlan1) entered disabled state [ 250.741712][ T6132] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 250.910156][ T6132] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 250.920537][ T6136] loop2: detected capacity change from 64 to 0 [ 250.930208][ C0] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 251.050549][ C1] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.092755][ T6132] bridge0: port 3(wlan1) entered blocking state [ 251.100041][ T6132] bridge0: port 3(wlan1) entered forwarding state [ 252.596539][ T49] Bluetooth: hci5: command tx timeout [ 252.616506][ T129] bridge0: port 3(wlan1) entered disabled state [ 253.710555][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.739774][ T6150] loop0: detected capacity change from 0 to 512 [ 253.809225][ T6150] EXT4-fs: Ignoring removed orlov option [ 253.887846][ T5782] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02 [ 253.906149][ T6150] EXT4-fs (loop0): Test dummy encryption mode enabled [ 253.931971][ T5782] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02 [ 253.961151][ T6150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.109700][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 254.137906][ T6150] EXT4-fs (loop0): 1 truncate cleaned up [ 254.163209][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.675502][ T49] Bluetooth: hci5: command tx timeout [ 254.906181][ T6163] netlink: 'syz.1.53': attribute type 4 has an invalid length. [ 255.241310][ T6166] loop4: detected capacity change from 0 to 2048 [ 255.329596][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.372866][ T6166] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 255.524078][ T1112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.632081][ T6170] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.827194][ T6166] NILFS error (device loop4): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 255.963096][ T6166] Remounting filesystem read-only [ 256.034252][ T1112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.265994][ T5429] veth1_macvtap: left promiscuous mode [ 256.400801][ T5429] veth1_macvtap: entered promiscuous mode [ 256.761406][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f538600: rx timeout, send abort [ 256.782218][ T1112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.114579][ T1112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.262500][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f540400: rx timeout, send abort [ 257.272145][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f538600: abort rx timeout. Force session deactivation [ 257.311776][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.353620][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.380451][ T6102] bridge_slave_0: entered allmulticast mode [ 257.415975][ T6102] bridge_slave_0: entered promiscuous mode [ 257.485667][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.506290][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.525214][ T6102] bridge_slave_1: entered allmulticast mode [ 257.546842][ T6102] bridge_slave_1: entered promiscuous mode [ 257.732279][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050ca0400: rx timeout, send abort [ 257.742946][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888050ca0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 257.771796][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f540400: abort rx timeout. Force session deactivation [ 258.072131][ T6102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.246190][ T1112] bridge_slave_1: left allmulticast mode [ 258.252095][ T1112] bridge_slave_1: left promiscuous mode [ 258.276531][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.310841][ T1112] bridge_slave_0: left allmulticast mode [ 258.330392][ T1112] bridge_slave_0: left promiscuous mode [ 258.349041][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.111651][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.183774][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.266904][ T1112] bond0 (unregistering): Released all slaves [ 259.350694][ T6102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.679594][ T6183] loop4: detected capacity change from 0 to 4096 [ 259.758588][ T6183] EXT4-fs (loop4): Test dummy encryption mode enabled [ 259.841604][ T6183] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 259.956584][ T6183] System zones: 0-5 [ 259.962370][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.981292][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.991838][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.026192][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.051666][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.072064][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.393501][ T6102] team0: Port device team_slave_0 added [ 261.564133][ T6102] team0: Port device team_slave_1 added [ 261.618636][ T6199] loop1: detected capacity change from 0 to 512 [ 261.961934][ T6199] EXT4-fs: Ignoring removed orlov option [ 262.050983][ T6199] EXT4-fs (loop1): Test dummy encryption mode enabled [ 262.174304][ T6199] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.203706][ T5784] Bluetooth: hci2: command tx timeout [ 262.407571][ T6199] EXT4-fs (loop1): 1 truncate cleaned up [ 262.524010][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.043622][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.102701][ T1112] hsr_slave_0: left promiscuous mode [ 263.125389][ T1112] hsr_slave_1: left promiscuous mode [ 263.133795][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.162583][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.248454][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.305713][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.456832][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.478337][ T1112] veth1_macvtap: left promiscuous mode [ 263.484130][ T1112] veth0_macvtap: left promiscuous mode [ 263.565704][ T1112] veth1_vlan: left promiscuous mode [ 263.571646][ T1112] veth0_vlan: left promiscuous mode [ 264.067257][ T6208] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 264.139122][ T6205] loop4: detected capacity change from 0 to 2048 [ 264.282966][ T5784] Bluetooth: hci2: command tx timeout [ 264.301996][ T6214] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.482180][ T6205] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 264.538147][ T6205] Remounting filesystem read-only [ 265.127199][ T5778] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 265.795983][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 265.863320][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 266.250529][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.274328][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.325823][ T6102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.347451][ T6102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.357214][ T5784] Bluetooth: hci2: command tx timeout [ 266.373033][ T6102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.405817][ T6102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.615659][ T6225] bridge0: port 3(syz_tun) entered blocking state [ 266.635782][ T6225] bridge0: port 3(syz_tun) entered disabled state [ 266.643351][ T6225] syz_tun: entered allmulticast mode [ 266.689307][ T6225] syz_tun: entered promiscuous mode [ 266.719566][ T6225] bridge0: port 3(syz_tun) entered blocking state [ 266.726792][ T6225] bridge0: port 3(syz_tun) entered forwarding state [ 267.311770][ C1] vcan0: j1939_tp_rxtimer: 0xffff888128ea2e00: rx timeout, send abort [ 267.703095][ T6102] hsr_slave_0: entered promiscuous mode [ 267.730025][ T6102] hsr_slave_1: entered promiscuous mode [ 267.758801][ T6102] debugfs: 'hsr0' already exists in 'hsr' [ 267.776509][ T6102] Cannot create hsr debugfs directory [ 267.812762][ C1] vcan0: j1939_tp_rxtimer: 0xffff888128ea2c00: rx timeout, send abort [ 267.821633][ C1] vcan0: j1939_tp_rxtimer: 0xffff888128ea2e00: abort rx timeout. Force session deactivation [ 268.302562][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880135d7000: rx timeout, send abort [ 268.312699][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880135d7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 268.328681][ C1] vcan0: j1939_tp_rxtimer: 0xffff888128ea2c00: abort rx timeout. Force session deactivation [ 268.445355][ T5784] Bluetooth: hci2: command tx timeout [ 269.147749][ T6241] loop4: detected capacity change from 0 to 4096 [ 269.200841][ T6243] loop1: detected capacity change from 0 to 512 [ 269.248907][ T6243] EXT4-fs: Ignoring removed orlov option [ 269.269885][ T6241] EXT4-fs (loop4): Test dummy encryption mode enabled [ 269.308663][ T6243] EXT4-fs (loop1): Test dummy encryption mode enabled [ 269.335497][ T6241] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 269.344206][ T6243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 269.471266][ T6241] System zones: 0-5 [ 269.500489][ T6243] EXT4-fs (loop1): 1 truncate cleaned up [ 269.570397][ T6243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.604973][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.678840][ T6190] chnl_net:caif_netlink_parms(): no params data found [ 270.806646][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.813622][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.523301][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.547937][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.537349][ T6102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.688245][ T6102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.887127][ T6102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.998609][ T6102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.850121][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.886106][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.905267][ T6190] bridge_slave_0: entered allmulticast mode [ 274.947279][ T6190] bridge_slave_0: entered promiscuous mode [ 275.296884][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.328735][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.354169][ T6190] bridge_slave_1: entered allmulticast mode [ 275.415757][ T6190] bridge_slave_1: entered promiscuous mode [ 276.353728][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.421985][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.722669][ T6298] loop4: detected capacity change from 0 to 512 [ 276.804790][ T6298] EXT4-fs: Ignoring removed orlov option [ 276.869702][ T6190] team0: Port device team_slave_0 added [ 276.887531][ T6298] EXT4-fs (loop4): Test dummy encryption mode enabled [ 276.925638][ T6298] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.972243][ T6298] EXT4-fs (loop4): 1 truncate cleaned up [ 276.989927][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.043368][ T6190] team0: Port device team_slave_1 added [ 277.493652][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.504346][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.524691][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.584541][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.652872][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.662825][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.751124][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.508427][ T6190] hsr_slave_0: entered promiscuous mode [ 278.610521][ T6190] hsr_slave_1: entered promiscuous mode [ 278.684201][ T6190] debugfs: 'hsr0' already exists in 'hsr' [ 278.735797][ T6190] Cannot create hsr debugfs directory [ 279.962886][ T6102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.502632][ C1] vcan0: j1939_tp_rxtimer: 0xffff888013b82000: rx timeout, send abort [ 280.825519][ T6102] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.003589][ C1] vcan0: j1939_tp_rxtimer: 0xffff888013b82200: rx timeout, send abort [ 281.012374][ C1] vcan0: j1939_tp_rxtimer: 0xffff888013b82000: abort rx timeout. Force session deactivation [ 281.064588][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.072327][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.213487][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.221289][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.493551][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ebeea00: rx timeout, send abort [ 281.504776][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804ebeea00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 281.525952][ C1] vcan0: j1939_tp_rxtimer: 0xffff888013b82200: abort rx timeout. Force session deactivation [ 281.968435][ T6337] loop1: detected capacity change from 0 to 512 [ 282.135222][ T6190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.169928][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.198921][ T6337] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.266085][ T6190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.285481][ T6337] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.93: corrupted inode contents [ 282.323781][ T6190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.370520][ T6337] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.93: mark_inode_dirty error [ 282.398040][ T6342] loop4: detected capacity change from 0 to 512 [ 282.428580][ T6342] EXT4-fs: Ignoring removed orlov option [ 282.465799][ T6337] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.93: corrupted inode contents [ 282.542956][ T6190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.572876][ T6342] EXT4-fs (loop4): Test dummy encryption mode enabled [ 282.616810][ T6342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.651179][ T6337] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.93: mark_inode_dirty error [ 282.727347][ T6342] EXT4-fs (loop4): 1 truncate cleaned up [ 282.813015][ T6343] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.93: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 282.813015][ T6343] [ 282.852592][ T6342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.615503][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.679440][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.776680][ T6360] tipc: Started in network mode [ 284.814535][ T6360] tipc: Node identity 7e0a6c87bec8, cluster identity 4711 [ 284.850736][ T6360] tipc: Enabled bearer , priority 0 [ 285.314583][ T6362] syzkaller0: entered promiscuous mode [ 285.335368][ T6362] syzkaller0: entered allmulticast mode [ 285.344622][ T6362] tipc: Resetting bearer [ 285.399261][ T1112] tipc: Resetting bearer [ 285.448122][ T6359] tipc: Resetting bearer [ 286.037467][ T6359] tipc: Disabling bearer [ 286.253156][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.340381][ T796] tipc: Node number set to 3233967239 [ 286.667302][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.687278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.779942][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.902689][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.910570][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.182586][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.190206][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.621091][ T6389] tipc: Enabled bearer , priority 0 [ 287.883329][ T6389] tipc: Resetting bearer [ 288.171869][ T6386] tipc: Disabling bearer [ 288.584469][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ebbc200: rx timeout, send abort [ 289.087324][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ebbc600: rx timeout, send abort [ 289.099266][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ebbc200: abort rx timeout. Force session deactivation [ 289.188417][ T6405] loop4: detected capacity change from 0 to 512 [ 289.228923][ T6405] EXT4-fs: Ignoring removed orlov option [ 289.337486][ T6405] EXT4-fs (loop4): Test dummy encryption mode enabled [ 289.344688][ T6405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.443087][ T6405] EXT4-fs (loop4): 1 truncate cleaned up [ 289.543442][ T6405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.573684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ebbc800: rx timeout, send abort [ 289.583923][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804ebbc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.600085][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ebbc600: abort rx timeout. Force session deactivation [ 290.560939][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.605570][ T6102] veth0_vlan: entered promiscuous mode [ 290.960610][ T6102] veth1_vlan: entered promiscuous mode [ 291.690517][ T6420] syzkaller0: entered promiscuous mode [ 291.727684][ T6420] syzkaller0: entered allmulticast mode [ 293.005805][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 293.205693][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 293.243240][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.257554][ T5830] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 293.295474][ T5830] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.333502][ T6102] veth0_macvtap: entered promiscuous mode [ 293.354034][ T5830] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.425473][ T5830] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 293.460388][ T6102] veth1_macvtap: entered promiscuous mode [ 293.495791][ T5830] usb 5-1: config 7 interface 0 has no altsetting 0 [ 293.502835][ T5830] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 293.586379][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.789896][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.013874][ T6102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.036462][ T6443] loop1: detected capacity change from 0 to 2048 [ 294.214417][ T6447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.308526][ T6443] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 294.340394][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.370166][ T6443] Remounting filesystem read-only [ 294.397979][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.459934][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.531712][ T124] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.746890][ T5830] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0001/input/input5 [ 295.106561][ T5830] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 295.306849][ T5830] usb 5-1: USB disconnect, device number 2 [ 295.408892][ T5773] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 296.602850][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050deae00: rx timeout, send abort [ 296.628547][ T6456] fido_id[6456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 296.657879][ T6468] syzkaller0: entered promiscuous mode [ 296.663799][ T6468] syzkaller0: entered allmulticast mode [ 297.103817][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050d8c400: rx timeout, send abort [ 297.114676][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050deae00: abort rx timeout. Force session deactivation [ 297.551309][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050de7e00: rx timeout, send abort [ 297.562239][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888050de7e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 297.613352][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050d8c400: abort rx timeout. Force session deactivation [ 297.831640][ T6190] veth0_vlan: entered promiscuous mode [ 297.958096][ T6477] loop1: detected capacity change from 0 to 64 [ 298.012917][ T6190] veth1_vlan: entered promiscuous mode [ 298.659078][ T5773] BFS-fs: bfs_iget(): Bad inode number loop1:0000fe02 [ 298.726069][ T5773] BFS-fs: bfs_iget(): Bad inode number loop1:0000fe02 [ 298.763729][ T6190] veth0_macvtap: entered promiscuous mode [ 298.971709][ T6190] veth1_macvtap: entered promiscuous mode [ 299.363544][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.675620][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.876232][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.910242][ T129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.964458][ T129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.014075][ T129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.057164][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.106113][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.421276][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.446709][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.872653][ T129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.172359][ T129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.378737][ T6525] syzkaller0: entered promiscuous mode [ 304.384558][ T6525] syzkaller0: entered allmulticast mode [ 304.804546][ T129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.360655][ T129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.453960][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.476724][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.498536][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.529200][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.541939][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.518643][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.556786][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.578058][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.593015][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.613464][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.622022][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dfb800: rx timeout, send abort [ 307.080278][ T129] bridge_slave_1: left allmulticast mode [ 307.103133][ T129] bridge_slave_1: left promiscuous mode [ 307.123238][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f51f800: rx timeout, send abort [ 307.132876][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dfb800: abort rx timeout. Force session deactivation [ 307.136130][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.276229][ T129] bridge_slave_0: left allmulticast mode [ 307.320027][ T129] bridge_slave_0: left promiscuous mode [ 307.346522][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.588503][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f51fc00: rx timeout, send abort [ 307.600505][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f51fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 307.632906][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f51f800: abort rx timeout. Force session deactivation [ 307.652085][ T5784] Bluetooth: hci0: command tx timeout [ 308.432278][ T6562] loop4: detected capacity change from 0 to 512 [ 308.477624][ T6562] EXT4-fs: Ignoring removed orlov option [ 308.507119][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.537256][ T6562] EXT4-fs (loop4): Test dummy encryption mode enabled [ 308.571758][ T6562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.606801][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.656721][ T6562] EXT4-fs (loop4): 1 truncate cleaned up [ 308.705503][ T5784] Bluetooth: hci4: command tx timeout [ 308.716746][ T129] bond0 (unregistering): Released all slaves [ 308.747335][ T6562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.352405][ T5778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.714592][ T6571] netlink: 'syz.4.128': attribute type 10 has an invalid length. [ 309.723716][ T5784] Bluetooth: hci0: command tx timeout [ 310.063836][ T6571] bridge0: port 3(syz_tun) entered disabled state [ 310.083803][ T6571] syz_tun: left allmulticast mode [ 310.109197][ T6571] bridge0: port 3(syz_tun) entered disabled state [ 310.272605][ T6571] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 310.534586][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.595348][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.774129][ T5784] Bluetooth: hci4: command tx timeout [ 311.150484][ T129] hsr_slave_0: left promiscuous mode [ 311.173951][ T129] hsr_slave_1: left promiscuous mode [ 311.199474][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.208873][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.228466][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.237958][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.281229][ T129] veth1_macvtap: left promiscuous mode [ 311.288777][ T129] veth0_macvtap: left promiscuous mode [ 311.300800][ T129] veth1_vlan: left promiscuous mode [ 311.310286][ T129] veth0_vlan: left promiscuous mode [ 311.795484][ T5784] Bluetooth: hci0: command tx timeout [ 312.392368][ T129] team0 (unregistering): Port device team_slave_1 removed [ 312.471746][ T129] team0 (unregistering): Port device team_slave_0 removed [ 312.835625][ T5784] Bluetooth: hci4: command tx timeout [ 313.219638][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.248687][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.590784][ T6599] loop4: detected capacity change from 0 to 64 [ 313.825745][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 313.875663][ T5784] Bluetooth: hci0: command tx timeout [ 314.184605][ T5778] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02 [ 314.279967][ T5778] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02 [ 314.734790][ T129] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.807009][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 314.917902][ T5784] Bluetooth: hci4: command tx timeout [ 315.026640][ T5778] bond0: (slave syz_tun): Releasing backup interface [ 315.142593][ T129] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.636242][ T129] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.088456][ T129] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.388807][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.416130][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.424157][ T6543] bridge_slave_0: entered allmulticast mode [ 316.469983][ T6543] bridge_slave_0: entered promiscuous mode [ 316.528911][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.546058][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.553971][ T6543] bridge_slave_1: entered allmulticast mode [ 316.609820][ T6543] bridge_slave_1: entered promiscuous mode [ 317.106759][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.400308][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.605703][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.613301][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.673450][ T6550] bridge_slave_0: entered allmulticast mode [ 317.701547][ T6550] bridge_slave_0: entered promiscuous mode [ 317.738354][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.755947][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.775986][ T6550] bridge_slave_1: entered allmulticast mode [ 317.796754][ T6550] bridge_slave_1: entered promiscuous mode [ 317.908129][ T129] bridge_slave_1: left allmulticast mode [ 317.914197][ T129] bridge_slave_1: left promiscuous mode [ 317.936462][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.991165][ T129] bridge_slave_0: left allmulticast mode [ 317.997450][ T129] bridge_slave_0: left promiscuous mode [ 318.004169][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.126105][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.176124][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.198299][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.209627][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.231902][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.243053][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.261842][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.281816][ T129] bond0 (unregistering): Released all slaves [ 319.437747][ T6543] team0: Port device team_slave_0 added [ 319.727685][ T6543] team0: Port device team_slave_1 added [ 319.959249][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.037785][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.421025][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.438146][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.539147][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.782700][ T6550] team0: Port device team_slave_0 added [ 320.813706][ T6550] team0: Port device team_slave_1 added [ 320.839516][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.852136][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.911313][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.316909][ T5784] Bluetooth: hci3: command tx timeout [ 321.357393][ T129] hsr_slave_0: left promiscuous mode [ 321.375663][ T129] hsr_slave_1: left promiscuous mode [ 321.393985][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.413465][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.444418][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.465409][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.542996][ T129] veth1_macvtap: left promiscuous mode [ 321.561637][ T129] veth0_macvtap: left promiscuous mode [ 321.576704][ T129] veth1_vlan: left promiscuous mode [ 321.593502][ T129] veth0_vlan: left promiscuous mode [ 323.091805][ T129] team0 (unregistering): Port device team_slave_1 removed [ 323.167635][ T129] team0 (unregistering): Port device team_slave_0 removed [ 323.406663][ T5784] Bluetooth: hci3: command tx timeout [ 324.040004][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.072367][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.160409][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.201459][ T6666] loop6: detected capacity change from 0 to 512 [ 324.263203][ T6666] EXT4-fs: Ignoring removed orlov option [ 324.300490][ T6666] EXT4-fs (loop6): Test dummy encryption mode enabled [ 324.345800][ T6666] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 324.390631][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.426046][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.427187][ T6666] EXT4-fs (loop6): 1 truncate cleaned up [ 324.467655][ T6666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.545317][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.886993][ T6543] hsr_slave_0: entered promiscuous mode [ 324.921196][ T6543] hsr_slave_1: entered promiscuous mode [ 325.023798][ T6190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.475655][ T5784] Bluetooth: hci3: command tx timeout [ 325.609566][ T6550] hsr_slave_0: entered promiscuous mode [ 325.640470][ T6550] hsr_slave_1: entered promiscuous mode [ 325.670736][ T6550] debugfs: 'hsr0' already exists in 'hsr' [ 325.685490][ T6550] Cannot create hsr debugfs directory [ 325.901943][ T29] audit: type=1326 audit(1771282038.799:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.6.147" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x0 [ 326.091365][ T129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.303681][ T129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.591749][ T129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.341187][ T129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.561723][ T49] Bluetooth: hci3: command tx timeout [ 329.273911][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 329.316490][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 329.777212][ T129] bridge_slave_1: left allmulticast mode [ 329.783249][ T129] bridge_slave_1: left promiscuous mode [ 329.806761][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.836584][ T129] bridge_slave_0: left allmulticast mode [ 329.844271][ T129] bridge_slave_0: left promiscuous mode [ 329.867194][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.889364][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.064934][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.104657][ T129] bond0 (unregistering): Released all slaves [ 331.580045][ T129] tipc: Left network mode [ 331.613018][ T6543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.763272][ T6543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 332.052174][ T6543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 332.194658][ T6543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 332.231911][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.259575][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.782259][ T129] hsr_slave_0: left promiscuous mode [ 332.798676][ T129] hsr_slave_1: left promiscuous mode [ 332.827583][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.845958][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.869224][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.893902][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.952958][ T129] veth1_macvtap: left promiscuous mode [ 332.960472][ T129] veth0_macvtap: left promiscuous mode [ 332.968353][ T129] veth1_vlan: left promiscuous mode [ 332.974200][ T129] veth1_macvtap: left promiscuous mode [ 333.260518][ T6723] overlayfs: failed to clone upperpath [ 334.206415][ T129] team0 (unregistering): Port device team_slave_1 removed [ 334.344513][ T129] team0 (unregistering): Port device team_slave_0 removed [ 335.321129][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.368329][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.391240][ T6653] bridge_slave_0: entered allmulticast mode [ 335.426896][ T6653] bridge_slave_0: entered promiscuous mode [ 335.569080][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.617488][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.646071][ T6653] bridge_slave_1: entered allmulticast mode [ 335.660268][ T6653] bridge_slave_1: entered promiscuous mode [ 335.941610][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.096446][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.546475][ T6653] team0: Port device team_slave_0 added [ 336.643967][ T6653] team0: Port device team_slave_1 added [ 336.923030][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.941134][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.005205][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.077008][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.084191][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.175787][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.260790][ T6550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.432247][ T6550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.498770][ T6550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.599943][ T6550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.992042][ T6653] hsr_slave_0: entered promiscuous mode [ 338.022772][ T6653] hsr_slave_1: entered promiscuous mode [ 338.058795][ T6653] debugfs: 'hsr0' already exists in 'hsr' [ 338.064756][ T6653] Cannot create hsr debugfs directory [ 338.581237][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.210594][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.352181][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.359954][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.407596][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.415536][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.852209][ T6678] Set syz1 is full, maxelem 65536 reached [ 340.564826][ T6653] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 340.708732][ T6653] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 340.780775][ T6653] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 340.918572][ T6653] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 341.077115][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.560947][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.717010][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.749169][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.776679][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.832896][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.862046][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.870443][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.882984][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.042162][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.050905][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.958740][ T5784] Bluetooth: hci5: command tx timeout [ 344.132899][ T129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.372101][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.514137][ T129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.711457][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.796406][ T129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.191171][ T129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.453782][ T6760] chnl_net:caif_netlink_parms(): no params data found [ 345.543513][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.844015][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.852479][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.871233][ T5784] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 346.035269][ T5784] Bluetooth: hci5: command tx timeout [ 346.294391][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.302043][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.727552][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.751702][ T129] bridge_slave_1: left allmulticast mode [ 346.789062][ T129] bridge_slave_1: left promiscuous mode [ 346.806548][ T129] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.865806][ T129] bridge_slave_0: left allmulticast mode [ 346.871705][ T129] bridge_slave_0: left promiscuous mode [ 346.918159][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.751895][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.791824][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.821155][ T129] bond0 (unregistering): Released all slaves [ 347.913636][ T6816] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 348.018432][ T6817] pim6reg: entered allmulticast mode [ 348.125205][ T5784] Bluetooth: hci5: command tx timeout [ 348.525775][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.547412][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.586175][ T6760] bridge_slave_0: entered allmulticast mode [ 348.609385][ T6760] bridge_slave_0: entered promiscuous mode [ 348.706463][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.739482][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.761783][ T6760] bridge_slave_1: entered allmulticast mode [ 348.774225][ T6760] bridge_slave_1: entered promiscuous mode [ 349.112984][ T129] hsr_slave_0: left promiscuous mode [ 349.135979][ T129] hsr_slave_1: left promiscuous mode [ 349.166223][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.184553][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.214027][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.236295][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.306203][ T129] veth1_macvtap: left promiscuous mode [ 349.311992][ T129] veth0_macvtap: left promiscuous mode [ 349.325970][ T129] veth1_vlan: left promiscuous mode [ 349.331594][ T129] veth0_vlan: left promiscuous mode [ 350.212070][ T5784] Bluetooth: hci5: command tx timeout [ 350.451135][ T129] team0 (unregistering): Port device team_slave_1 removed [ 350.497389][ T129] team0 (unregistering): Port device team_slave_0 removed [ 350.990209][ T6760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.042435][ T6760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.473250][ T6760] team0: Port device team_slave_0 added [ 351.503485][ T6760] team0: Port device team_slave_1 added [ 351.826224][ T6543] veth0_vlan: entered promiscuous mode [ 351.851160][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.898498][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.075296][ T6760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.234244][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.255595][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.325364][ T6760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.540577][ T6543] veth1_vlan: entered promiscuous mode [ 352.658197][ T6550] veth0_vlan: entered promiscuous mode [ 353.045728][ T6760] hsr_slave_0: entered promiscuous mode [ 353.079600][ T6760] hsr_slave_1: entered promiscuous mode [ 353.098998][ T6760] debugfs: 'hsr0' already exists in 'hsr' [ 353.134700][ T6760] Cannot create hsr debugfs directory [ 353.473032][ T6550] veth1_vlan: entered promiscuous mode [ 354.855490][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.985764][ T6543] veth0_macvtap: entered promiscuous mode [ 355.172094][ T6550] veth0_macvtap: entered promiscuous mode [ 355.252124][ T6550] veth1_macvtap: entered promiscuous mode [ 355.353903][ T6543] veth1_macvtap: entered promiscuous mode [ 355.640982][ T6760] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 355.712244][ T6760] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 355.774061][ T6760] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 355.827147][ T5784] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 355.899992][ T6760] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 356.143069][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.261088][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.426411][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.640585][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.741912][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.785494][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.794559][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.970489][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.005557][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.014627][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.209797][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.237674][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.107955][ T6653] veth0_vlan: entered promiscuous mode [ 358.312809][ T6653] veth1_vlan: entered promiscuous mode [ 358.590856][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.788494][ T6760] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.932541][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.940212][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.084498][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.092291][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.253916][ T6653] veth0_macvtap: entered promiscuous mode [ 359.377744][ T6653] veth1_macvtap: entered promiscuous mode [ 359.876285][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 359.885501][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 359.895878][ T5784] Bluetooth: hci1: hardware error 0x00 [ 359.950674][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.314407][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.554293][ T1088] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.603343][ T1088] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.696388][ T1088] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.784471][ T1088] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.041079][ T5784] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 362.724650][ T6760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.053323][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.136357][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.412286][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.455997][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.491425][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.518632][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.556608][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.586051][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.616327][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.813162][ T6760] veth0_vlan: entered promiscuous mode [ 367.077179][ T6760] veth1_vlan: entered promiscuous mode [ 367.120169][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.146310][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.178231][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.192090][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.203690][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.678966][ T49] Bluetooth: hci2: command tx timeout [ 368.913292][ T6760] veth0_macvtap: entered promiscuous mode [ 369.319994][ T49] Bluetooth: hci6: command tx timeout [ 369.532045][ T56] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.590167][ T6760] veth1_macvtap: entered promiscuous mode [ 369.752856][ T56] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.850728][ T56] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.226887][ T56] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.605237][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.613386][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.755303][ T49] Bluetooth: hci2: command tx timeout [ 370.901400][ T7018] chnl_net:caif_netlink_parms(): no params data found [ 371.139929][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.364237][ T7014] chnl_net:caif_netlink_parms(): no params data found [ 371.395879][ T49] Bluetooth: hci6: command tx timeout [ 371.430160][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.465821][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.522976][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.833921][ T56] bridge_slave_1: left allmulticast mode [ 371.847912][ T56] bridge_slave_1: left promiscuous mode [ 371.854700][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.909025][ T56] bridge_slave_0: left allmulticast mode [ 371.922819][ T56] bridge_slave_0: left promiscuous mode [ 371.948623][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.613087][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.654599][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.693242][ T56] bond0 (unregistering): Released all slaves [ 372.754213][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.779775][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.841470][ T49] Bluetooth: hci2: command tx timeout [ 372.887707][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.935991][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.475393][ T49] Bluetooth: hci6: command tx timeout [ 373.593603][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.627298][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.673971][ T7018] bridge_slave_0: entered allmulticast mode [ 373.728571][ T7018] bridge_slave_0: entered promiscuous mode [ 374.028836][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.046747][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.056204][ T7018] bridge_slave_1: entered allmulticast mode [ 374.067405][ T7018] bridge_slave_1: entered promiscuous mode [ 374.461143][ T7018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.638657][ T56] hsr_slave_0: left promiscuous mode [ 374.650001][ T56] hsr_slave_1: left promiscuous mode [ 374.673980][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.703008][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.759832][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.785228][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.856155][ T56] veth1_macvtap: left promiscuous mode [ 374.862719][ T56] veth0_macvtap: left promiscuous mode [ 374.891072][ T56] veth1_vlan: left promiscuous mode [ 374.911703][ T56] veth0_vlan: left promiscuous mode [ 374.930319][ T49] Bluetooth: hci2: command tx timeout [ 375.540408][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.8.212'. [ 375.559537][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.8.212'. [ 375.565628][ T49] Bluetooth: hci6: command tx timeout [ 376.522937][ T56] team0 (unregistering): Port device team_slave_1 removed [ 376.608490][ T56] team0 (unregistering): Port device team_slave_0 removed [ 377.399136][ T7018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.782748][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.803430][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.844286][ T7014] bridge_slave_0: entered allmulticast mode [ 377.873444][ T7014] bridge_slave_0: entered promiscuous mode [ 377.931074][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.942944][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.981475][ T7014] bridge_slave_1: entered allmulticast mode [ 377.996555][ T7014] bridge_slave_1: entered promiscuous mode [ 378.051856][ T7018] team0: Port device team_slave_0 added [ 378.109344][ T7018] team0: Port device team_slave_1 added [ 378.508897][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.561811][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.622298][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.674263][ T7014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.785847][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.804485][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.838753][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.884383][ T7014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.039848][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.324532][ T7014] team0: Port device team_slave_0 added [ 379.379716][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.489105][ T7014] team0: Port device team_slave_1 added [ 379.863949][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.082543][ T7018] hsr_slave_0: entered promiscuous mode [ 380.110140][ T7018] hsr_slave_1: entered promiscuous mode [ 380.316429][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.324852][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.461642][ T7014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.541068][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.771705][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.794906][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.887584][ T7014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.128947][ T7014] hsr_slave_0: entered promiscuous mode [ 382.191472][ T7014] hsr_slave_1: entered promiscuous mode [ 382.246507][ T7014] debugfs: 'hsr0' already exists in 'hsr' [ 382.287877][ T7014] Cannot create hsr debugfs directory [ 382.710074][ T56] bridge_slave_1: left allmulticast mode [ 382.765242][ T56] bridge_slave_1: left promiscuous mode [ 382.772131][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.861653][ T56] bridge_slave_0: left allmulticast mode [ 382.890616][ T56] bridge_slave_0: left promiscuous mode [ 382.902723][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.098534][ T7186] loop8: detected capacity change from 0 to 64 [ 383.381599][ T7186] loop8: detected capacity change from 64 to 0 [ 383.391299][ C0] I/O error, dev loop8, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 383.773530][ T7075] BFS-fs: find_inode(): Unable to read inode loop8:00000001 [ 383.785665][ T7075] BFS-fs: find_inode(): Unable to read inode loop8:00000000 [ 383.974528][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.996206][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.020888][ T56] bond0 (unregistering): Released all slaves [ 385.331345][ T56] hsr_slave_0: left promiscuous mode [ 385.382830][ T56] hsr_slave_1: left promiscuous mode [ 385.391322][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.400679][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.422578][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.435252][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.487150][ T56] veth1_macvtap: left promiscuous mode [ 385.493020][ T56] veth0_macvtap: left promiscuous mode [ 385.500544][ T56] veth1_vlan: left promiscuous mode [ 385.515584][ T56] veth0_vlan: left promiscuous mode [ 386.517408][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.531054][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.541317][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.555471][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.625945][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.842247][ T56] team0 (unregistering): Port device team_slave_1 removed [ 386.909664][ T56] team0 (unregistering): Port device team_slave_0 removed [ 387.541807][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.566149][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.113886][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.140008][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.732759][ T56] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.756484][ T5784] Bluetooth: hci0: command tx timeout [ 388.971354][ T56] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.198586][ T56] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.369908][ T56] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.840939][ T7200] chnl_net:caif_netlink_parms(): no params data found [ 390.322977][ T7014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 390.507173][ T56] bridge_slave_1: left allmulticast mode [ 390.513459][ T56] bridge_slave_1: left promiscuous mode [ 390.530304][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.561853][ T56] bridge_slave_0: left allmulticast mode [ 390.570100][ T56] bridge_slave_0: left promiscuous mode [ 390.581364][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.835663][ T5784] Bluetooth: hci0: command tx timeout [ 391.326922][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.357203][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.382712][ T56] bond0 (unregistering): Released all slaves [ 391.409467][ T7215] loop9: detected capacity change from 0 to 32768 [ 391.425223][ T7014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 391.481514][ T7014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 391.541233][ T7014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 391.580023][ T7215] JBD2: Ignoring recovery information on journal [ 391.943159][ T7215] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 392.284600][ T7018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.327723][ T6760] ocfs2: Unmounting device (7,9) on (node local) [ 392.374015][ T7018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.586365][ T7018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.787516][ T7018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.915561][ T5784] Bluetooth: hci0: command tx timeout [ 393.031165][ T56] hsr_slave_0: left promiscuous mode [ 393.059438][ T56] hsr_slave_1: left promiscuous mode [ 393.078240][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.113415][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.149926][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.181805][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.248230][ T56] veth1_macvtap: left promiscuous mode [ 393.254038][ T56] veth0_macvtap: left promiscuous mode [ 393.287525][ T56] veth1_vlan: left promiscuous mode [ 393.293314][ T56] veth0_vlan: left promiscuous mode [ 393.519045][ T7244] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 393.664467][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.671671][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.513879][ T56] team0 (unregistering): Port device team_slave_1 removed [ 394.549998][ T56] team0 (unregistering): Port device team_slave_0 removed [ 394.793066][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.803888][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.825367][ T7200] bridge_slave_0: entered allmulticast mode [ 394.835752][ T7200] bridge_slave_0: entered promiscuous mode [ 394.893010][ T7244] syz_tun: entered promiscuous mode [ 394.914370][ T7244] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 394.960069][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.996227][ T5784] Bluetooth: hci0: command tx timeout [ 395.032950][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.051452][ T7200] bridge_slave_1: entered allmulticast mode [ 395.096490][ T7200] bridge_slave_1: entered promiscuous mode [ 396.026606][ T7255] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 396.096027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 396.123748][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.178334][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.539449][ T7200] team0: Port device team_slave_0 added [ 396.696131][ T7200] team0: Port device team_slave_1 added [ 396.885448][ T7259] loop9: detected capacity change from 0 to 2048 [ 396.929136][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.938283][ T7259] ======================================================= [ 396.938283][ T7259] WARNING: The mand mount option has been deprecated and [ 396.938283][ T7259] and is ignored by this kernel. Remove the mand [ 396.938283][ T7259] option from the mount to silence this warning. [ 396.938283][ T7259] ======================================================= [ 396.989997][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.053046][ T7200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.067671][ T7259] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 397.135846][ T7260] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.147762][ T7259] syz.9.264: attempt to access beyond end of device [ 397.147762][ T7259] loop9: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 397.266590][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.274703][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.315949][ T7259] syz.9.264: attempt to access beyond end of device [ 397.315949][ T7259] loop9: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 397.360345][ T7200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.400222][ T7259] NILFS (loop9): I/O error reading meta-data file (ino=6, block-offset=3) [ 397.428309][ T7259] NILFS (loop9): error -5 reading inode: ino=12 [ 398.073777][ T7200] hsr_slave_0: entered promiscuous mode [ 398.080855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 398.110138][ T7200] hsr_slave_1: entered promiscuous mode [ 398.155402][ T7200] debugfs: 'hsr0' already exists in 'hsr' [ 398.162576][ T7200] Cannot create hsr debugfs directory [ 398.397332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 398.980198][ T7014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.193909][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.854787][ T7014] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.998202][ T7266] netlink: 'syz.9.267': attribute type 11 has an invalid length. [ 400.072567][ T7266] netlink: 'syz.9.267': attribute type 11 has an invalid length. [ 400.090354][ T7018] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.110676][ T7266] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.267'. [ 400.140873][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.148778][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.229402][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.237276][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.416220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 400.561014][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.569572][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.803454][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.810936][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.975832][ T7200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.088956][ T7200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.212551][ T7200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.258776][ T7200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.259805][ T7276] netlink: 'syz.9.270': attribute type 10 has an invalid length. [ 402.292916][ T5835] IPVS: starting estimator thread 0... [ 402.386496][ T7277] IPVS: using max 192 ests per chain, 9600 per kthread [ 402.400512][ T1088] bond0: (slave bond_slave_0): interface is now down [ 402.433335][ T1088] bond0: (slave bond_slave_1): interface is now down [ 402.477144][ T7276] syz_tun: entered promiscuous mode [ 402.495476][ T56] bond0: (slave bond_slave_0): interface is now down [ 402.502597][ T56] bond0: (slave bond_slave_1): interface is now down [ 402.575554][ T56] bond0: (slave bond_slave_0): interface is now down [ 402.582528][ T56] bond0: (slave bond_slave_1): interface is now down [ 402.597238][ T56] bond0: (slave syz_tun): interface is now down [ 402.611545][ T7276] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 402.624834][ T1112] bond0: (slave bond_slave_0): interface is now down [ 402.633951][ T1112] bond0: (slave bond_slave_1): interface is now down [ 402.655615][ T1112] bond0: (slave syz_tun): interface is now down [ 402.678972][ T7075] bond0: (slave bond_slave_0): interface is now down [ 402.723388][ T7075] bond0: (slave bond_slave_1): interface is now down [ 402.745167][ T7075] bond0: (slave syz_tun): interface is now down [ 402.798235][ T124] bond0: (slave bond_slave_0): interface is now down [ 402.835848][ T124] bond0: (slave bond_slave_1): interface is now down [ 402.842802][ T124] bond0: (slave syz_tun): interface is now down [ 402.895572][ T13] bond0: (slave bond_slave_0): interface is now down [ 402.951098][ T13] bond0: (slave bond_slave_1): interface is now down [ 402.972734][ T13] bond0: (slave syz_tun): interface is now down [ 403.045399][ T1112] bond0: (slave bond_slave_0): interface is now down [ 403.052353][ T1112] bond0: (slave bond_slave_1): interface is now down [ 403.124821][ T1112] bond0: (slave syz_tun): interface is now down [ 403.168382][ T1112] bond0: (slave bond_slave_0): interface is now down [ 403.226994][ T1112] bond0: (slave bond_slave_1): interface is now down [ 403.234053][ T1112] bond0: (slave syz_tun): interface is now down [ 403.342345][ T138] bond0: (slave bond_slave_0): interface is now down [ 403.386441][ T138] bond0: (slave bond_slave_1): interface is now down [ 403.393466][ T138] bond0: (slave syz_tun): interface is now down [ 403.455309][ T138] bond0: (slave bond_slave_0): interface is now down [ 403.467549][ T138] bond0: (slave bond_slave_1): interface is now down [ 403.494463][ T138] bond0: (slave syz_tun): interface is now down [ 403.557419][ T124] bond0: (slave bond_slave_0): interface is now down [ 403.564464][ T124] bond0: (slave bond_slave_1): interface is now down [ 403.612135][ T124] bond0: (slave syz_tun): interface is now down [ 403.656756][ T124] bond0: (slave bond_slave_0): interface is now down [ 403.663730][ T124] bond0: (slave bond_slave_1): interface is now down [ 403.684873][ T124] bond0: (slave syz_tun): interface is now down [ 403.705217][ T7075] bond0: (slave bond_slave_0): interface is now down [ 403.712168][ T7075] bond0: (slave bond_slave_1): interface is now down [ 403.781257][ T7075] bond0: (slave syz_tun): interface is now down [ 403.827614][ T124] bond0: (slave bond_slave_0): interface is now down [ 403.865806][ T124] bond0: (slave bond_slave_1): interface is now down [ 403.872750][ T124] bond0: (slave syz_tun): interface is now down [ 403.965714][ T7075] bond0: (slave bond_slave_0): interface is now down [ 403.972698][ T7075] bond0: (slave bond_slave_1): interface is now down [ 404.045118][ T7075] bond0: (slave syz_tun): interface is now down [ 404.112010][ T56] bond0: (slave bond_slave_0): interface is now down [ 404.155327][ T56] bond0: (slave bond_slave_1): interface is now down [ 404.162374][ T56] bond0: (slave syz_tun): interface is now down [ 404.227155][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.270972][ T13] bond0: (slave bond_slave_0): interface is now down [ 404.330647][ T13] bond0: (slave bond_slave_1): interface is now down [ 404.395138][ T13] bond0: (slave syz_tun): interface is now down [ 404.420804][ T124] bond0: (slave bond_slave_0): interface is now down [ 404.465216][ T124] bond0: (slave bond_slave_1): interface is now down [ 404.496097][ T124] bond0: (slave syz_tun): interface is now down [ 404.520028][ T147] bond0: (slave bond_slave_0): interface is now down [ 404.550106][ T147] bond0: (slave bond_slave_1): interface is now down [ 404.565423][ T147] bond0: (slave syz_tun): interface is now down [ 404.629082][ T13] bond0: (slave bond_slave_0): interface is now down [ 404.633493][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.655969][ T13] bond0: (slave bond_slave_1): interface is now down [ 404.662997][ T13] bond0: (slave syz_tun): interface is now down [ 404.735418][ T7075] bond0: (slave bond_slave_0): interface is now down [ 404.742957][ T7075] bond0: (slave bond_slave_1): interface is now down [ 404.782948][ T7075] bond0: (slave syz_tun): interface is now down [ 404.837205][ T13] bond0: (slave bond_slave_0): interface is now down [ 404.844409][ T13] bond0: (slave bond_slave_1): interface is now down [ 404.895602][ T13] bond0: (slave syz_tun): interface is now down [ 404.951176][ T56] bond0: (slave bond_slave_0): interface is now down [ 404.971535][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.979396][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.991578][ T56] bond0: (slave bond_slave_1): interface is now down [ 405.010232][ T56] bond0: (slave syz_tun): interface is now down [ 405.057853][ T147] bond0: (slave bond_slave_0): interface is now down [ 405.085453][ T147] bond0: (slave bond_slave_1): interface is now down [ 405.092400][ T147] bond0: (slave syz_tun): interface is now down [ 405.165617][ T56] bond0: (slave bond_slave_0): interface is now down [ 405.172594][ T56] bond0: (slave bond_slave_1): interface is now down [ 405.186066][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.193806][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.221100][ T56] bond0: (slave syz_tun): interface is now down [ 405.255457][ T56] bond0: (slave bond_slave_0): interface is now down [ 405.262423][ T56] bond0: (slave bond_slave_1): interface is now down [ 405.308827][ T56] bond0: (slave syz_tun): interface is now down [ 405.355844][ T1112] bond0: (slave bond_slave_0): interface is now down [ 405.375190][ T1112] bond0: (slave bond_slave_1): interface is now down [ 405.382224][ T1112] bond0: (slave syz_tun): interface is now down [ 405.445589][ T147] bond0: (slave bond_slave_0): interface is now down [ 405.458523][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.492958][ T147] bond0: (slave bond_slave_1): interface is now down [ 405.505871][ T147] bond0: (slave syz_tun): interface is now down [ 405.528559][ T1112] bond0: (slave bond_slave_0): interface is now down [ 405.545961][ T1112] bond0: (slave bond_slave_1): interface is now down [ 405.552163][ T7014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.580308][ T1112] bond0: (slave syz_tun): interface is now down [ 405.625466][ T124] bond0: (slave bond_slave_0): interface is now down [ 405.649691][ T124] bond0: (slave bond_slave_1): interface is now down [ 405.710298][ T124] bond0: (slave syz_tun): interface is now down [ 405.772509][ T1088] bond0: (slave bond_slave_0): interface is now down [ 405.813686][ T1088] bond0: (slave bond_slave_1): interface is now down [ 405.820995][ T1088] bond0: (slave syz_tun): interface is now down [ 405.865342][ T7075] bond0: (slave bond_slave_0): interface is now down [ 405.872409][ T7075] bond0: (slave bond_slave_1): interface is now down [ 405.905363][ T7075] bond0: (slave syz_tun): interface is now down [ 405.939538][ T7075] bond0: (slave bond_slave_0): interface is now down [ 405.985429][ T7075] bond0: (slave bond_slave_1): interface is now down [ 405.992400][ T7075] bond0: (slave syz_tun): interface is now down [ 406.049853][ T7075] bond0: (slave bond_slave_0): interface is now down [ 406.067577][ T7075] bond0: (slave bond_slave_1): interface is now down [ 406.080417][ T7075] bond0: (slave syz_tun): interface is now down [ 406.132645][ T138] bond0: (slave bond_slave_0): interface is now down [ 406.181263][ T138] bond0: (slave bond_slave_1): interface is now down [ 406.220438][ T138] bond0: (slave syz_tun): interface is now down [ 406.265679][ T147] bond0: (slave bond_slave_0): interface is now down [ 406.276882][ T147] bond0: (slave bond_slave_1): interface is now down [ 406.328862][ T147] bond0: (slave syz_tun): interface is now down [ 406.375542][ T124] bond0: (slave bond_slave_0): interface is now down [ 406.410604][ T124] bond0: (slave bond_slave_1): interface is now down [ 406.456175][ T124] bond0: (slave syz_tun): interface is now down [ 406.497631][ T124] bond0: now running without any active interface! [ 407.036634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 408.877528][ T7018] veth0_vlan: entered promiscuous mode [ 409.008560][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.120026][ T7018] veth1_vlan: entered promiscuous mode [ 409.442118][ T7014] veth0_vlan: entered promiscuous mode [ 409.574583][ T7014] veth1_vlan: entered promiscuous mode [ 409.909958][ T7018] veth0_macvtap: entered promiscuous mode [ 410.071135][ T7018] veth1_macvtap: entered promiscuous mode [ 410.090497][ T7327] tipc: Enabling of bearer rejected, failed to enable media [ 410.136335][ T7014] veth0_macvtap: entered promiscuous mode [ 410.179327][ T7200] veth0_vlan: entered promiscuous mode [ 410.271240][ T7014] veth1_macvtap: entered promiscuous mode [ 410.404437][ T7200] veth1_vlan: entered promiscuous mode [ 410.523004][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.664510][ T7014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.744337][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.863486][ T7014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.993613][ T1112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.100855][ T1112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.117032][ T1112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.202607][ T1112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.245772][ T34] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.330933][ T34] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.437672][ T7336] loop9: detected capacity change from 0 to 8 [ 411.465427][ T34] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.491055][ T138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.533417][ T7336] SQUASHFS error: xz decompression failed, data probably corrupt [ 411.589682][ T7200] veth0_macvtap: entered promiscuous mode [ 411.641372][ T7336] SQUASHFS error: Failed to read block 0x108: -5 [ 411.747684][ T7200] veth1_macvtap: entered promiscuous mode [ 411.756047][ T7336] SQUASHFS error: Unable to read metadata cache entry [106] [ 411.764743][ T7336] SQUASHFS error: Unable to read inode 0x101f [ 412.177384][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.435797][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.745571][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.888048][ T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.964113][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.074060][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.050064][ T7398] tipc: Enabling of bearer rejected, failed to enable media [ 419.571569][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.625500][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.868270][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.915287][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.148528][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.180164][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.444629][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.495885][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.630516][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.668840][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.113067][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.179586][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.062618][ T7451] loop5: detected capacity change from 0 to 64 [ 423.040394][ T7460] tipc: Enabling of bearer rejected, failed to enable media [ 424.242439][ T147] ===================================================== [ 424.249971][ T147] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 424.263764][ T147] __inet6_bind+0x4ac/0x1830 [ 424.275801][ T147] inet6_bind+0x11e/0x1a0 [ 424.280991][ T147] kernel_bind+0xd6/0x130 [ 424.285999][ T147] rds_tcp_conn_path_connect+0x952/0xff0 [ 424.292028][ T147] rds_connect_worker+0x353/0x4d0 [ 424.297981][ T147] process_scheduled_works+0xb21/0x1e30 [ 424.303836][ T147] worker_thread+0xede/0x1580 [ 424.308956][ T147] kthread+0x53f/0x600 [ 424.313294][ T147] ret_from_fork+0x20f/0x910 [ 424.318332][ T147] ret_from_fork_asm+0x1a/0x30 [ 424.323406][ T147] [ 424.326238][ T147] Uninit was stored to memory at: [ 424.331648][ T147] kernel_bind+0x92/0x130 [ 424.337126][ T147] rds_tcp_conn_path_connect+0x952/0xff0 [ 424.343174][ T147] rds_connect_worker+0x353/0x4d0 [ 424.348573][ T147] process_scheduled_works+0xb21/0x1e30 [ 424.354521][ T147] worker_thread+0xede/0x1580 [ 424.369143][ T147] kthread+0x53f/0x600 [ 424.373494][ T147] ret_from_fork+0x20f/0x910 [ 424.384165][ T147] ret_from_fork_asm+0x1a/0x30 [ 424.389553][ T147] [ 424.392170][ T147] Uninit was stored to memory at: [ 424.397923][ T147] rds_tcp_conn_path_connect+0xae5/0xff0 [ 424.404226][ T147] rds_connect_worker+0x353/0x4d0 [ 424.409681][ T147] process_scheduled_works+0xb21/0x1e30 [ 424.415537][ T147] worker_thread+0xede/0x1580 [ 424.420611][ T147] kthread+0x53f/0x600 [ 424.424897][ T147] ret_from_fork+0x20f/0x910 [ 424.429801][ T147] ret_from_fork_asm+0x1a/0x30 [ 424.435142][ T147] [ 424.437578][ T147] Uninit was created at: [ 424.442121][ T147] kmem_cache_alloc_noprof+0x37b/0x1270 [ 424.448466][ T147] rds_tcp_conn_alloc+0x7b/0xbb0 [ 424.453702][ T147] __rds_conn_create+0x267f/0x34e0 [ 424.459164][ T147] rds_conn_create_outgoing+0x5d/0x80 [ 424.471170][ T147] rds_sendmsg+0x2684/0x4d70 [ 424.478067][ T147] __sys_sendto+0xa77/0xb90 [ 424.482838][ T147] __ia32_sys_sendto+0x12f/0x200 [ 424.488103][ T147] ia32_sys_call+0x372f/0x4360 [ 424.493214][ T147] __do_fast_syscall_32+0x17f/0x3f0 [ 424.498716][ T147] do_fast_syscall_32+0x37/0x80 [ 424.503861][ T147] do_SYSENTER_32+0x1f/0x30 [ 424.508850][ T147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.516054][ T147] [ 424.518799][ T147] CPU: 1 UID: 0 PID: 147 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 424.529619][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.540884][ T147] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 424.547417][ T147] ===================================================== [ 424.554477][ T147] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 425.062422][ T147] Kernel panic - not syncing: kmsan.panic set ... [ 425.070079][ T147] CPU: 1 UID: 0 PID: 147 Comm: kworker/u8:8 Tainted: G B syzkaller #0 PREEMPT(full) [ 425.082403][ T147] Tainted: [B]=BAD_PAGE [ 425.087616][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.097948][ T147] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 425.104498][ T147] Call Trace: [ 425.107908][ T147] [ 425.110957][ T147] __dump_stack+0x26/0x30 [ 425.115620][ T147] dump_stack_lvl+0x50/0x1c0 [ 425.120607][ T147] ? dump_stack+0x12/0x25 [ 425.125172][ T147] dump_stack+0x1e/0x25 [ 425.129624][ T147] vpanic+0x7b4/0x1430 [ 425.133944][ T147] panic+0x15d/0x160 [ 425.138126][ T147] kmsan_report+0x31a/0x320 [ 425.142883][ T147] ? __msan_warning+0x1b/0x30 [ 425.147866][ T147] ? __inet6_bind+0x4ac/0x1830 [ 425.152832][ T147] ? inet6_bind+0x11e/0x1a0 [ 425.157537][ T147] ? kernel_bind+0xd6/0x130 [ 425.162257][ T147] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 425.168276][ T147] ? rds_connect_worker+0x353/0x4d0 [ 425.173729][ T147] ? process_scheduled_works+0xb21/0x1e30 [ 425.179664][ T147] ? worker_thread+0xede/0x1580 [ 425.184728][ T147] ? kthread+0x53f/0x600 [ 425.189198][ T147] ? ret_from_fork+0x20f/0x910 [ 425.194166][ T147] ? ret_from_fork_asm+0x1a/0x30 [ 425.199349][ T147] ? stack_depot_save+0x12/0x20 [ 425.204459][ T147] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 425.210505][ T147] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 425.216632][ T147] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 425.223297][ T147] ? __msan_memcpy+0x105/0x1c0 [ 425.228354][ T147] ? kernel_bind+0x92/0x130 [ 425.233038][ T147] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 425.239036][ T147] ? rds_connect_worker+0x353/0x4d0 [ 425.244718][ T147] ? process_scheduled_works+0xb21/0x1e30 [ 425.250629][ T147] ? worker_thread+0xede/0x1580 [ 425.255776][ T147] ? kthread+0x53f/0x600 [ 425.260312][ T147] ? ret_from_fork+0x20f/0x910 [ 425.265281][ T147] ? ret_from_fork_asm+0x1a/0x30 [ 425.270467][ T147] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 425.276640][ T147] ? stack_depot_save_flags+0x610/0x790 [ 425.282407][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 425.287779][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 425.293945][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 425.299283][ T147] __msan_warning+0x1b/0x30 [ 425.304005][ T147] __inet6_bind+0x4ac/0x1830 [ 425.308794][ T147] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 425.314963][ T147] inet6_bind+0x11e/0x1a0 [ 425.319527][ T147] ? __pfx_inet6_bind+0x10/0x10 [ 425.324662][ T147] kernel_bind+0xd6/0x130 [ 425.329194][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 425.334525][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 425.340597][ T147] rds_tcp_conn_path_connect+0x952/0xff0 [ 425.346603][ T147] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 425.353168][ T147] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 425.359634][ T147] rds_connect_worker+0x353/0x4d0 [ 425.364888][ T147] ? __pfx_rds_connect_worker+0x10/0x10 [ 425.370666][ T147] process_scheduled_works+0xb21/0x1e30 [ 425.376487][ T147] worker_thread+0xede/0x1580 [ 425.381405][ T147] kthread+0x53f/0x600 [ 425.385703][ T147] ? __pfx_worker_thread+0x10/0x10 [ 425.391121][ T147] ? __pfx_kthread+0x10/0x10 [ 425.395913][ T147] ret_from_fork+0x20f/0x910 [ 425.400792][ T147] ? __switch_to+0x51c/0x750 [ 425.405604][ T147] ? __pfx_kthread+0x10/0x10 [ 425.410419][ T147] ret_from_fork_asm+0x1a/0x30 [ 425.415468][ T147] [ 425.419319][ T147] Kernel Offset: disabled [ 425.423908][ T147] Rebooting in 86400 seconds..