last executing test programs: 15m48.83031292s ago: executing program 32 (id=572): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x800c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\a', 0x1}, {0x0}], 0x2, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x4000001) 15m40.601859454s ago: executing program 33 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {r2}, 0xfffffffc, 0x80000001}) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 15m39.469795584s ago: executing program 34 (id=620): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cf340875ea676900334bb9a99c51424c"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x18000) 15m7.680226097s ago: executing program 35 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) io_uring_setup(0x481e, &(0x7f00000000c0)={0x0, 0x7428, 0x20, 0x3, 0x184}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc030700000028bd7000fedb800005001a00000000000000000000008000000000"], 0x38}}, 0x40408c0) 15m3.716554186s ago: executing program 36 (id=747): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1000000010, 0x80802, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1], 0x90}}, 0x0) 14m20.79815844s ago: executing program 37 (id=754): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x4000094, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @private1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340)=0x1, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 12m38.732917208s ago: executing program 5 (id=1154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073"], 0x20}}, 0x4000000) 12m38.347996582s ago: executing program 5 (id=1158): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000180)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 12m37.235727058s ago: executing program 5 (id=1162): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 12m36.919746371s ago: executing program 6 (id=1165): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ab, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000e80)={0x0, 0x1, 0x2, 0x4}) 12m35.801568102s ago: executing program 6 (id=1169): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2b003300d0430000ffffffffffff080211000000505050505050200000042503010c0f7606030c0600000000"], 0x48}, 0x1, 0x0, 0x0, 0x20028801}, 0x24008846) 12m34.828003068s ago: executing program 5 (id=1171): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x58, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e3ca6413280c8ed285a22df77662868f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "47ae86cfb41101c767852dc9268eb307"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="95f26f9412a7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 12m34.814691409s ago: executing program 9 (id=1172): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) fcntl$getflags(r0, 0x401) 12m34.47944944s ago: executing program 5 (id=1175): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 12m34.431951812s ago: executing program 9 (id=1176): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 12m34.322850702s ago: executing program 6 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 12m34.243024906s ago: executing program 4 (id=1178): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) 12m34.054925719s ago: executing program 6 (id=1179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000600), 0x4) 12m34.053919844s ago: executing program 9 (id=1180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xb4, 0x0, 0x80000001, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12m33.799462668s ago: executing program 6 (id=1181): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000c80)="$eJzs3U9oHFUYAPBvM/lbaJODUBSE0ZugoX/woKeUkkIxF5Wl6kFcbKqSjYUsLqaHbuNFPAoe9eRFPOjBQ88iKOLNg1crSFU8aG8Fi092d3Z3trtJU2Fbg7/fYfnyvffNe7OZZF8m2ZdXVmLj/ExcuHHjeszPV2J65fRK3KzEUmTRcyVGzY7JAQAHw82U4s/Utc+SyoSnBABMWOf1/7XDpcw7X+/VP3n1B4ADr/j5f2GvPvO7NVycyJQAgAkbuf//6FDz7PCv+qdLfxUAABxUz7/40jOn1iKey/P5iM13m9VmNZ4etJ+6EG9EPdbjWCzGrYjuQqH9UOk8njm7tnosz/NW/LIU1XZFsxqx2WpWuyuFU1mnfi6Ox2IsFfXFaiOllJ35Ym31eN4REVdanfFjs9KszsShYvwfD8V6nIg8Hhipjzi7tnoiLw5Q3ezVtyJ2Bvct2vNfjsX4/tW4GPU4v3AuUuota9ZWLx/P89Npbai+WZ2L8/1nYdc7IAAAAAAAAAAAAAAAAAAAAAAA8K8s531L/f1v0mD/nuXlMe2d/XG69cX+QDvd/YHSXIqU/nj7iep7WQztD3T7/jzN6nRM3d9TBwAAAAAAAAAAAAAAAAAAgP+MxvZs1Or19a3G9qWNctDaamxPRUQ78+a3n321EKN97hBMF2OUmvIidWmjlrJe55QN9SmCrD14L/Pp1f6My33m+mcxdhpzuzfV64cf+fnDQebhrHfkvwd9sqnx5dlt0ygHm0e6U7qbJ+rSySI4cYfO11JKux3n8sujVVGJmL77T9zeQWoH31x//cGTjaNPdjJfpq7HHl88d+2Dj3/bqNXbI7fVP5ndatxKG7Xi4/EX2+5BVrp+KtENKuUrYXqv8p3hTC374fcXHnr/u/2NnsqZt8b0ybqn8/lWY7tSfKV0mma7QTvXCab6VQv1s1nEbceZGXPxTyA4+tFK7erln37db1Xpm4SNOgAAAAAAAAAAAAAAAAAA4J4ovVe8ULzZd2avqqeenfzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODeGfz//1KwM5LZT/BXK0ab5ta3GhFH7vdpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/dPAAAA///fkWru") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 12m33.729824381s ago: executing program 5 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x4, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x375, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 12m33.697267478s ago: executing program 9 (id=1183): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f00000002c0)=""/163, 0xa3) 12m33.641629308s ago: executing program 4 (id=1184): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x8000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0xfe, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) 12m32.919455315s ago: executing program 4 (id=1185): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}], 0x30, 0x4855}, 0x24000052) 12m32.881691674s ago: executing program 9 (id=1186): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x0, 0x20, 0x10000000fffff}, 0x2f) 12m31.775450583s ago: executing program 9 (id=1187): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000080)={'bond0\x00', @ifru_settings={0x81, 0x10000, @sync=0x0}}) 12m31.506901434s ago: executing program 6 (id=1188): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 12m31.506318204s ago: executing program 4 (id=1189): syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6082dc05000c11ff2001000000000000000000000000180200000000000000000000ffff000000004e225e21"], 0x0) 12m31.304016702s ago: executing program 4 (id=1191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000600), 0x4) 12m31.182254665s ago: executing program 4 (id=1192): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) 12m18.168902889s ago: executing program 38 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x4, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x375, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 12m16.683561528s ago: executing program 39 (id=1187): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000080)={'bond0\x00', @ifru_settings={0x81, 0x10000, @sync=0x0}}) 12m16.091955613s ago: executing program 40 (id=1188): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 12m15.675188482s ago: executing program 41 (id=1192): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000c80)="$eJzs3U9oHFUYAPBvM/lbaJODUBSE0ZugoX/woKeUkkIxF5Wl6kFcbKqSjYUsLqaHbuNFPAoe9eRFPOjBQ88iKOLNg1crSFU8aG8Fi092d3Z3trtJU2Fbg7/fYfnyvffNe7OZZF8m2ZdXVmLj/ExcuHHjeszPV2J65fRK3KzEUmTRcyVGzY7JAQAHw82U4s/Utc+SyoSnBABMWOf1/7XDpcw7X+/VP3n1B4ADr/j5f2GvPvO7NVycyJQAgAkbuf//6FDz7PCv+qdLfxUAABxUz7/40jOn1iKey/P5iM13m9VmNZ4etJ+6EG9EPdbjWCzGrYjuQqH9UOk8njm7tnosz/NW/LIU1XZFsxqx2WpWuyuFU1mnfi6Ox2IsFfXFaiOllJ35Ym31eN4REVdanfFjs9KszsShYvwfD8V6nIg8Hhipjzi7tnoiLw5Q3ezVtyJ2Bvct2vNfjsX4/tW4GPU4v3AuUuota9ZWLx/P89Npbai+WZ2L8/1nYdc7IAAAAAAAAAAAAAAAAAAAAAAA8K8s531L/f1v0mD/nuXlMe2d/XG69cX+QDvd/YHSXIqU/nj7iep7WQztD3T7/jzN6nRM3d9TBwAAAAAAAAAAAAAAAAAAgP+MxvZs1Or19a3G9qWNctDaamxPRUQ78+a3n321EKN97hBMF2OUmvIidWmjlrJe55QN9SmCrD14L/Pp1f6My33m+mcxdhpzuzfV64cf+fnDQebhrHfkvwd9sqnx5dlt0ygHm0e6U7qbJ+rSySI4cYfO11JKux3n8sujVVGJmL77T9zeQWoH31x//cGTjaNPdjJfpq7HHl88d+2Dj3/bqNXbI7fVP5ndatxKG7Xi4/EX2+5BVrp+KtENKuUrYXqv8p3hTC374fcXHnr/u/2NnsqZt8b0ybqn8/lWY7tSfKV0mma7QTvXCab6VQv1s1nEbceZGXPxTyA4+tFK7erln37db1Xpm4SNOgAAAAAAAAAAAAAAAAAA4J4ovVe8ULzZd2avqqeenfzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODeGfz//1KwM5LZT/BXK0ab5ta3GhFH7vdpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/dPAAAA///fkWru") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) 9m23.503649635s ago: executing program 1 (id=1796): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0xc2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601, 0xffffffff, 0xdae}) 9m23.348033139s ago: executing program 1 (id=1797): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0xff) 9m23.085133444s ago: executing program 1 (id=1799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 9m21.907793778s ago: executing program 1 (id=1805): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000001c0)="186bf7ffffffff", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0xffff]}}}}}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 9m18.012298856s ago: executing program 1 (id=1832): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2001, 0x0) ioctl$BLKPBSZGET(r0, 0x80041284, 0x0) 9m16.762935991s ago: executing program 1 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) 9m15.84343116s ago: executing program 42 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) 7m28.556447366s ago: executing program 7 (id=2432): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 7m23.011514118s ago: executing program 7 (id=2449): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) process_mrelease(r1, 0x0) 7m21.888732603s ago: executing program 7 (id=2452): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) listen(r0, 0xb) 7m21.771687476s ago: executing program 7 (id=2455): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03000200000000000011070000000c001600f9ffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 7m21.492392869s ago: executing program 7 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000000, 0xfe7f, 0x44, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m20.394526493s ago: executing program 7 (id=2461): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000180)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 7m4.485502819s ago: executing program 43 (id=2461): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000180)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) 6m25.571544604s ago: executing program 2 (id=2660): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6m24.202064261s ago: executing program 2 (id=2664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m21.210884744s ago: executing program 2 (id=2666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 6m19.294364287s ago: executing program 2 (id=2669): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8}]}, 0x2a, 0x33f, &(0x7f0000000dc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 6m18.186533586s ago: executing program 2 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r0, &(0x7f0000000440)}, 0x20) 6m18.105751782s ago: executing program 2 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1800000001090301"], 0x18}}, 0x0) 6m2.951468633s ago: executing program 44 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1800000001090301"], 0x18}}, 0x0) 27.418890292s ago: executing program 3 (id=3881): r0 = timerfd_create(0x9, 0x80800) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 27.18951125s ago: executing program 3 (id=3882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) close(0x4) 26.931062876s ago: executing program 8 (id=3883): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x0) 26.663586246s ago: executing program 8 (id=3884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}}, 0x0) 26.543118538s ago: executing program 8 (id=3885): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='X \x00\x00'], 0x250}, 0x0) 26.470775351s ago: executing program 3 (id=3886): madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 26.338229107s ago: executing program 8 (id=3887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) 26.337591612s ago: executing program 3 (id=3888): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000001280)={0x990000, 0x3, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000001240)={0x990001, 0x2, '\x00', @string=0x0}}) 25.9475576s ago: executing program 3 (id=3889): mremap(&(0x7f00004fc000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000a9e000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xc, 0x57519bea}, 0x18, 0x1000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 23.003653581s ago: executing program 3 (id=3890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) 22.942039461s ago: executing program 8 (id=3891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 21.813589772s ago: executing program 8 (id=3897): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6020}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 20.781459459s ago: executing program 0 (id=3898): mremap(&(0x7f00004fc000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000a9e000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xc, 0x57519bea}, 0x18, 0x1000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 19.343359965s ago: executing program 0 (id=3899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) 18.443041971s ago: executing program 0 (id=3900): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpriority(0x0, 0x0, 0x9) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) 16.575694625s ago: executing program 0 (id=3901): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.373817666s ago: executing program 0 (id=3902): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 15.445395586s ago: executing program 0 (id=3903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) close(0x4) 7.650882027s ago: executing program 45 (id=3890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) 6.650505657s ago: executing program 46 (id=3897): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6020}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 0s ago: executing program 47 (id=3903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) close(0x4) kernel console output (not intermixed with test programs): `syz.7.1990'. [ 610.294045][T13213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.312260][T13213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.458464][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1991'. [ 611.266931][T13213] team0: Port device team_slave_0 added [ 611.275887][T13213] team0: Port device team_slave_1 added [ 611.396179][T13698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1996'. [ 611.601440][T13213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.601457][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.601482][T13213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.616381][T13213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.616399][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.616423][T13213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.630251][T13709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2001'. [ 612.389405][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 613.386457][T13213] hsr_slave_0: entered promiscuous mode [ 613.398446][T13213] hsr_slave_1: entered promiscuous mode [ 613.896856][ T5616] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 614.015839][T13752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2015'. [ 614.015863][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 615.278277][T12187] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 615.278308][T12187] CPU: 1 UID: 0 PID: 12187 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.278337][T12187] Tainted: [L]=SOFTLOCKUP [ 615.278345][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.278358][T12187] Workqueue: hci1 hci_rx_work [ 615.278386][T12187] Call Trace: [ 615.278395][T12187] [ 615.278403][T12187] dump_stack_lvl+0xe8/0x150 [ 615.278444][T12187] sysfs_create_dir_ns+0x271/0x2a0 [ 615.278470][T12187] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 615.278503][T12187] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 615.278530][T12187] ? rt_spin_unlock+0x160/0x200 [ 615.278565][T12187] kobject_add_internal+0x631/0xd10 [ 615.278603][T12187] kobject_add+0x163/0x240 [ 615.278634][T12187] ? __pfx_kobject_add+0x10/0x10 [ 615.278668][T12187] ? get_device_parent+0x370/0x3a0 [ 615.278699][T12187] device_add+0x408/0xb90 [ 615.278729][T12187] hci_conn_add_sysfs+0xd5/0x210 [ 615.278753][T12187] le_conn_complete_evt+0x10e6/0x16b0 [ 615.278787][T12187] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 615.278813][T12187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.278835][T12187] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.278858][T12187] ? skb_pull_data+0xfb/0x200 [ 615.278883][T12187] hci_le_conn_complete_evt+0x187/0x470 [ 615.278916][T12187] hci_event_packet+0x659/0xef0 [ 615.278945][T12187] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 615.278971][T12187] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 615.278995][T12187] ? __pfx_hci_event_packet+0x10/0x10 [ 615.279017][T12187] ? rt_spin_unlock+0x14f/0x200 [ 615.279060][T12187] ? hci_send_to_monitor+0xe2/0x590 [ 615.279092][T12187] hci_rx_work+0x3ee/0x1040 [ 615.279128][T12187] process_one_work+0xa31/0x1980 [ 615.279170][T12187] ? process_one_work+0x8d5/0x1980 [ 615.279211][T12187] ? __pfx_process_one_work+0x10/0x10 [ 615.279237][T12187] ? do_raw_spin_lock+0x12b/0x2f0 [ 615.279282][T12187] worker_thread+0xba8/0x11e0 [ 615.279321][T12187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.279343][T12187] ? __kthread_parkme+0x7a/0x1f0 [ 615.279373][T12187] ? __kthread_parkme+0x19c/0x1f0 [ 615.279415][T12187] kthread+0x388/0x470 [ 615.279436][T12187] ? __pfx_worker_thread+0x10/0x10 [ 615.279463][T12187] ? __pfx_kthread+0x10/0x10 [ 615.279486][T12187] ret_from_fork+0x514/0xb70 [ 615.279515][T12187] ? __pfx_ret_from_fork+0x10/0x10 [ 615.279540][T12187] ? __switch_to+0xc79/0x1410 [ 615.279561][T12187] ? __pfx_kthread+0x10/0x10 [ 615.279580][T12187] ret_from_fork_asm+0x1a/0x30 [ 615.279622][T12187] [ 615.287371][T12187] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 615.287423][T12187] Bluetooth: hci1: failed to register connection device [ 615.583904][T13778] loop3: detected capacity change from 0 to 8192 [ 615.666333][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.667909][T13778] FAT-fs (loop3): Filesystem has been set read-only [ 615.667945][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.667968][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.668226][T13778] syz.3.2024: attempt to access beyond end of device [ 615.668226][T13778] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 615.668388][T13778] Buffer I/O error on dev loop3, logical block 57847, async page read [ 615.668532][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.668753][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.668776][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.794526][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.794560][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.794582][T13778] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 615.794637][T13778] syz.3.2024: attempt to access beyond end of device [ 615.794637][T13778] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 615.794662][T13778] Buffer I/O error on dev loop3, logical block 57847, async page read [ 615.800820][ T37] audit: type=1800 audit(1778113535.512:3): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2024" name="file2" dev="loop3" ino=1048665 res=0 errno=0 [ 617.372111][T12187] Bluetooth: hci1: command 0x0406 tx timeout [ 617.788693][T13814] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2033'. [ 618.086044][T12187] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 618.086071][T12187] CPU: 1 UID: 0 PID: 12187 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.086109][T12187] Tainted: [L]=SOFTLOCKUP [ 618.086116][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.086129][T12187] Workqueue: hci1 hci_rx_work [ 618.086154][T12187] Call Trace: [ 618.086162][T12187] [ 618.086171][T12187] dump_stack_lvl+0xe8/0x150 [ 618.086200][T12187] sysfs_create_dir_ns+0x271/0x2a0 [ 618.086227][T12187] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 618.086260][T12187] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 618.086289][T12187] ? rt_spin_unlock+0x160/0x200 [ 618.086321][T12187] kobject_add_internal+0x631/0xd10 [ 618.086359][T12187] kobject_add+0x163/0x240 [ 618.086394][T12187] ? __pfx_kobject_add+0x10/0x10 [ 618.086429][T12187] ? get_device_parent+0x370/0x3a0 [ 618.086457][T12187] device_add+0x408/0xb90 [ 618.086487][T12187] hci_conn_add_sysfs+0xd5/0x210 [ 618.086512][T12187] le_conn_complete_evt+0x10e6/0x16b0 [ 618.086549][T12187] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 618.086578][T12187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 618.086601][T12187] ? lockdep_hardirqs_on+0x7a/0x110 [ 618.086626][T12187] ? skb_pull_data+0xfb/0x200 [ 618.086655][T12187] hci_le_conn_complete_evt+0x187/0x470 [ 618.086689][T12187] hci_event_packet+0x659/0xef0 [ 618.086719][T12187] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 618.086747][T12187] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 618.086771][T12187] ? __pfx_hci_event_packet+0x10/0x10 [ 618.086793][T12187] ? rt_spin_unlock+0x14f/0x200 [ 618.086829][T12187] ? hci_send_to_monitor+0xe2/0x590 [ 618.086860][T12187] hci_rx_work+0x3ee/0x1040 [ 618.086894][T12187] process_one_work+0xa31/0x1980 [ 618.086936][T12187] ? process_one_work+0x8d5/0x1980 [ 618.086977][T12187] ? __pfx_process_one_work+0x10/0x10 [ 618.087002][T12187] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.087049][T12187] worker_thread+0xba8/0x11e0 [ 618.087088][T12187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 618.087118][T12187] ? __kthread_parkme+0x7a/0x1f0 [ 618.087149][T12187] ? __kthread_parkme+0x19c/0x1f0 [ 618.087187][T12187] kthread+0x388/0x470 [ 618.087210][T12187] ? __pfx_worker_thread+0x10/0x10 [ 618.087237][T12187] ? __pfx_kthread+0x10/0x10 [ 618.087261][T12187] ret_from_fork+0x514/0xb70 [ 618.087288][T12187] ? __pfx_ret_from_fork+0x10/0x10 [ 618.087311][T12187] ? __switch_to+0xc79/0x1410 [ 618.087335][T12187] ? __pfx_kthread+0x10/0x10 [ 618.087356][T12187] ret_from_fork_asm+0x1a/0x30 [ 618.087399][T12187] [ 618.087498][T12187] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 618.087536][T12187] Bluetooth: hci1: failed to register connection device [ 619.449766][T12187] Bluetooth: hci1: command 0x0406 tx timeout [ 619.691925][T13869] binder: 13868:13869 ioctl c0306201 0 returned -14 [ 620.111382][T13879] fuse: Bad value for 'fd' [ 620.112436][T13879] Invalid source name [ 620.112451][T13879] UBIFS error (pid: 13879): cannot open "./file0", error -22 [ 621.530465][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 623.669913][T12187] Bluetooth: hci1: command 0x0406 tx timeout [ 624.133702][T13213] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 624.225791][T13213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.250927][T13213] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 624.346359][T13213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.421496][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.421594][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.454803][T13978] [U] zÍ»´iœùÊý®Ò[27| [ 624.454868][T13978] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 624.454886][T13978] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 624.454942][T13978] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 624.454985][T13978] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 624.455003][T13978] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 624.455018][T13978] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 624.455061][T13978] [U] ‰ϼcEv‹û @ý [ 624.455068][T13978] [U] aÆ„% [ 624.455104][T13978] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 624.455128][T13978] [U] éf1Ïp±3 [ 624.455141][T13978] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 624.455173][T13978] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 624.455237][T13978] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n_?lP¡Gw±‹“jL®6ŠÔ$© Ù™´È3¹9c!¥ÌŒ¾41Ž'còušÅ(E°yæ&} [ 624.455273][T13978] [U] ÉvÕS&îLk*KÐ@‰¹VŸ€…™…Öà¯y·3)¨M†Û55ՠܧ«ñþkJŽáªÄOlŽùQý [ 624.455289][T13978] [U] ûÛÒçùÖL˜üFÃÚ¸k®Ýmf¥ [ 624.455324][T13978] [U] #º„¤jÆQl*óòÚ…'>‘þ [ 624.455349][T13978] [U] üŸ¤’uëΪiR¨ïUߎÑeÊéÙ’\L;4Lr­W<ò¾Os$ [ 687.596391][ T148] tipc: Disabling bearer [ 687.742517][ T148] tipc: Left network mode [ 689.725831][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 692.464720][T15175] loop3: detected capacity change from 0 to 512 [ 692.475941][T15175] EXT4-fs (loop3): Test dummy encryption mode enabled [ 692.475963][T15175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 692.497612][ T148] hsr_slave_0: left promiscuous mode [ 692.498716][T15175] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2436: bad orphan inode 131083 [ 692.498748][T15175] loop3: lost filesystem error report for type 5 error -117 [ 692.499751][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 692.499767][ C0] EXT4-fs (loop3): initial error at time 1778113612: ext4_orphan_get:1423 [ 692.499783][ C0] EXT4-fs (loop3): last error at time 1778113612: ext4_orphan_get:1423 [ 692.589352][T15175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.612677][ T148] hsr_slave_1: left promiscuous mode [ 692.613949][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.613977][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.690329][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.690363][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.785529][T15175] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.2436: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 692.886222][T15175] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.2436: path /295/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 693.018495][ T148] veth1_macvtap: left promiscuous mode [ 693.053599][ T148] veth0_macvtap: left promiscuous mode [ 693.053886][ T148] veth1_vlan: left promiscuous mode [ 693.054062][ T148] veth0_vlan: left promiscuous mode [ 693.255568][T10092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.642168][ T148] team0 (unregistering): Port device team_slave_1 removed [ 695.700433][ T148] team0 (unregistering): Port device team_slave_0 removed [ 704.703339][T15351] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2482'. [ 707.362645][T15388] netlink: 'syz.2.2491': attribute type 1 has an invalid length. [ 707.362666][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 707.415366][T15393] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2495'. [ 708.638351][T15411] loop8: detected capacity change from 0 to 256 [ 708.842231][T15411] FAT-fs (loop8): Directory bread(block 64) failed [ 708.842265][T15411] FAT-fs (loop8): Directory bread(block 65) failed [ 708.842373][T15411] FAT-fs (loop8): Directory bread(block 66) failed [ 708.842395][T15411] FAT-fs (loop8): Directory bread(block 67) failed [ 708.842487][T15411] FAT-fs (loop8): Directory bread(block 68) failed [ 708.842508][T15411] FAT-fs (loop8): Directory bread(block 69) failed [ 708.842600][T15411] FAT-fs (loop8): Directory bread(block 70) failed [ 708.842621][T15411] FAT-fs (loop8): Directory bread(block 71) failed [ 708.842752][T15411] FAT-fs (loop8): Directory bread(block 72) failed [ 708.842773][T15411] FAT-fs (loop8): Directory bread(block 73) failed [ 710.985434][T15421] sctp: [Deprecated]: syz.3.2502 (pid 15421) Use of int in max_burst socket option deprecated. [ 710.985434][T15421] Use struct sctp_assoc_value instead [ 711.288130][T15426] loop8: detected capacity change from 0 to 128 [ 711.299982][T15426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 711.301209][T15426] EXT4-fs (loop8): Test dummy encryption mode enabled [ 711.387165][T15426] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 711.416926][T15426] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 713.352972][T13213] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.915722][T15450] loop8: detected capacity change from 0 to 1024 [ 715.386694][T15450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.696458][T12187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 715.718909][T12187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 715.766328][T12187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 715.795498][T12187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 715.798978][T12187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.961259][T13213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.091806][ T5616] Bluetooth: hci2: command tx timeout [ 720.363219][ T5616] Bluetooth: hci2: command tx timeout [ 722.410946][ T5616] Bluetooth: hci2: command tx timeout [ 722.794201][ T1395] Bluetooth: hci1: Frame reassembly failed (-84) [ 723.045839][ T1409] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.491331][T12187] Bluetooth: hci2: command tx timeout [ 724.729859][ T5616] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 726.356061][ T1409] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.120168][T15662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2559'. [ 729.120192][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 729.180312][T15665] loop8: detected capacity change from 0 to 128 [ 729.184992][T15665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.195865][T15665] EXT4-fs (loop8): Test dummy encryption mode enabled [ 729.262437][T15665] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 729.263368][T15665] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 729.264403][ T1409] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.312311][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'. [ 731.391485][T13213] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 731.399530][T15688] loop3: detected capacity change from 0 to 512 [ 731.502158][ T1409] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.752790][T15688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.752932][T15688] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.158829][T10092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.527829][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.528144][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.528408][T15474] bridge_slave_0: entered allmulticast mode [ 734.580123][T15474] bridge_slave_0: entered promiscuous mode [ 734.595398][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.595758][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.596042][T15474] bridge_slave_1: entered allmulticast mode [ 734.628541][T15474] bridge_slave_1: entered promiscuous mode [ 734.799874][T15742] 9pnet: p9_errstr2errno: server reported unknown error ile2 [ 736.997002][T15474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.058306][T15474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.677667][T15474] team0: Port device team_slave_0 added [ 737.693580][T15474] team0: Port device team_slave_1 added [ 737.890965][ T1409] bridge_slave_1: left allmulticast mode [ 737.890999][ T1409] bridge_slave_1: left promiscuous mode [ 737.892418][ T1409] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.238954][ T1409] bridge_slave_0: left allmulticast mode [ 738.238988][ T1409] bridge_slave_0: left promiscuous mode [ 738.239275][ T1409] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.081425][T15809] 9p: Bad value for 'rfdno' [ 739.611000][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 739.695069][ T1409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.790829][ T1409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.852806][ T1409] bond0 (unregistering): Released all slaves [ 740.112829][T15817] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 740.114950][T15817] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 740.145661][T15474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.145677][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.145702][T15474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.199313][T15474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.199328][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.199350][T15474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.353851][ T1409] tipc: Disabling bearer [ 740.425721][ T1409] tipc: Disabling bearer [ 740.425905][ T1409] tipc: Left network mode [ 740.436878][T15827] loop3: detected capacity change from 0 to 128 [ 740.448583][T15827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 740.452403][T15827] EXT4-fs (loop3): Test dummy encryption mode enabled [ 740.527554][T15827] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 740.604104][T15827] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 740.953391][T15474] hsr_slave_0: entered promiscuous mode [ 740.959586][T15474] hsr_slave_1: entered promiscuous mode [ 740.962958][T15474] debugfs: 'hsr0' already exists in 'hsr' [ 740.962985][T15474] Cannot create hsr debugfs directory [ 741.392343][T15843] 9p: Bad value for 'rfdno' [ 741.839587][T10092] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 745.069872][T15889] tipc: Enabling of bearer rejected, failed to enable media [ 745.874957][ T1409] hsr_slave_0: left promiscuous mode [ 745.897179][T15918] loop8: detected capacity change from 0 to 8192 [ 745.937634][ T1409] hsr_slave_1: left promiscuous mode [ 745.943596][ T1409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.943623][ T1409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.964025][T15918] Dev loop8: unable to read partition block 142936478056448 [ 745.964380][T15918] loop8: RDSK (-2113929728) unable to read partition table [ 745.964617][T15918] loop8: partition table beyond EOD, truncated [ 745.964633][T15918] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 746.014796][ T1409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.014830][ T1409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.246753][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 746.835610][ T1409] veth1_macvtap: left promiscuous mode [ 746.835711][ T1409] veth0_macvtap: left promiscuous mode [ 746.836040][ T1409] veth1_vlan: left promiscuous mode [ 746.836227][ T1409] veth0_vlan: left promiscuous mode [ 747.323978][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.324075][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.953784][T15943] 9pnet_fd: p9_fd_create_tcp (15943): problem connecting socket to 127.0.0.1 [ 748.670469][ T1409] team0 (unregistering): Port device team_slave_1 removed [ 748.730609][ T1409] team0 (unregistering): Port device team_slave_0 removed [ 750.358523][T15984] 9pnet_fd: Insufficient options for proto=fd [ 751.374829][T15989] 9pnet_fd: p9_fd_create_tcp (15989): problem connecting socket to 127.0.0.1 [ 751.431864][T15976] dvmrp0: tun_chr_ioctl cmd 1074025677 [ 751.432154][T15976] dvmrp0: linktype set to 0 [ 753.121935][T16029] 9pnet_fd: Insufficient options for proto=fd [ 753.771949][T16039] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2655'. [ 753.899418][T16045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2653'. [ 759.132640][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 760.573420][T16085] 9pnet_fd: Insufficient options for proto=fd [ 761.404326][T16103] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2674'. [ 764.888671][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.906992][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.713963][T16136] loop8: detected capacity change from 0 to 512 [ 766.950561][T15474] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 767.164863][T16150] 9p: Bad value for 'rfdno' [ 767.223003][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.224130][T15474] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 767.900083][T16157] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2688'. [ 767.997050][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.101817][T15474] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 768.147559][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.157636][T15474] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 768.218624][T15474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.270622][T16166] loop3: detected capacity change from 0 to 512 [ 768.381941][T16166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.382074][T16166] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.637819][T10092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.916156][T16195] loop8: detected capacity change from 0 to 128 [ 769.183745][T15474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.228623][T16201] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2699'. [ 770.224013][T15474] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.338361][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.338532][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.520396][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.520597][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.130015][T16232] Bluetooth: MGMT ver 1.23 [ 774.448332][T16288] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2721'. [ 774.630234][T16294] 9p: Bad value for 'rfdno' [ 775.064063][T15474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.064959][T16308] tipc: Started in network mode [ 775.064975][T16308] tipc: Node identity , cluster identity 4711 [ 775.531078][T16325] loop8: detected capacity change from 0 to 512 [ 775.532142][T16325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 775.614157][T16325] EXT4-fs: Mount option(s) incompatible with ext3 [ 776.653659][T12187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 776.658682][T12187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.701497][T12187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.739351][T12187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 776.800082][T12187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 776.891764][T16325] gfs2: Unexpected value for 'barrier' [ 777.617328][T16360] loop8: detected capacity change from 0 to 128 [ 777.827706][T12187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 777.886482][T12187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 777.896073][T16360] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 777.897787][T12187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 777.928439][T16360] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.937521][T12187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 777.940033][T12187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 778.972015][T12187] Bluetooth: hci1: command tx timeout [ 779.428851][T13213] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.370265][T12187] Bluetooth: hci3: command tx timeout [ 781.682623][T12187] Bluetooth: hci1: command tx timeout [ 782.534689][T12187] Bluetooth: hci3: command tx timeout [ 783.770730][T12187] Bluetooth: hci1: command tx timeout [ 784.649796][T12187] Bluetooth: hci3: command tx timeout [ 784.702302][T16493] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 785.982576][T12187] Bluetooth: hci1: command tx timeout [ 786.739926][T12187] Bluetooth: hci3: command tx timeout [ 793.090993][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 794.690870][ T1510] bridge_slave_1: left allmulticast mode [ 794.690903][ T1510] bridge_slave_1: left promiscuous mode [ 794.691169][ T1510] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.801377][ T1510] bridge_slave_0: left allmulticast mode [ 794.801402][ T1510] bridge_slave_0: left promiscuous mode [ 794.801562][ T1510] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.702155][ T1510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.780622][ T1510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.823163][ T1510] bond0 (unregistering): Released all slaves [ 795.925893][T16634] netlink: 'syz.0.2817': attribute type 153 has an invalid length. [ 796.236400][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.236742][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.237051][T16359] bridge_slave_0: entered allmulticast mode [ 796.261484][T16359] bridge_slave_0: entered promiscuous mode [ 797.074665][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.075421][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.075770][T16359] bridge_slave_1: entered allmulticast mode [ 797.078961][T16359] bridge_slave_1: entered promiscuous mode [ 797.259460][T16332] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.268978][T16332] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.269289][T16332] bridge_slave_0: entered allmulticast mode [ 797.287856][T16332] bridge_slave_0: entered promiscuous mode [ 798.245997][ T1510] hsr_slave_0: left promiscuous mode [ 798.283694][ T1510] hsr_slave_1: left promiscuous mode [ 798.293650][ T1510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.321959][ T1510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.702293][T16671] 9p: Could not find request transport: fd0x0000000000000004 [ 799.020412][ T1510] team0 (unregistering): Port device team_slave_1 removed [ 799.060344][ T1510] team0 (unregistering): Port device team_slave_0 removed [ 799.271017][T16332] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.271310][T16332] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.271586][T16332] bridge_slave_1: entered allmulticast mode [ 799.273586][T16332] bridge_slave_1: entered promiscuous mode [ 799.279628][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.373345][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.412009][T16332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.551493][T16332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.660921][T16359] team0: Port device team_slave_0 added [ 799.804876][T16359] team0: Port device team_slave_1 added [ 800.995232][T16332] team0: Port device team_slave_0 added [ 801.722569][T16332] team0: Port device team_slave_1 added [ 801.732907][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.732922][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.732949][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.925894][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.925912][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.925938][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.046570][T16332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.046589][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.046615][T16332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.096894][T16332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.096910][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.096936][T16332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.839160][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2839'. [ 802.941671][T16359] hsr_slave_0: entered promiscuous mode [ 802.948231][T16359] hsr_slave_1: entered promiscuous mode [ 803.041793][T16359] debugfs: 'hsr0' already exists in 'hsr' [ 803.041820][T16359] Cannot create hsr debugfs directory [ 803.267545][T16332] hsr_slave_0: entered promiscuous mode [ 803.272279][T16332] hsr_slave_1: entered promiscuous mode [ 803.274733][T16332] debugfs: 'hsr0' already exists in 'hsr' [ 803.274757][T16332] Cannot create hsr debugfs directory [ 803.659401][T16719] fuse: fd is not a fuse device [ 804.729289][T16731] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2849'. [ 805.359290][ T1510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.724966][T16739] binder_alloc: 16738: binder_alloc_buf, no vma [ 806.123084][ T1510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.238573][T16746] syz_tun: entered allmulticast mode [ 807.166740][T16744] syz_tun: left allmulticast mode [ 807.447779][T16758] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2858'. [ 807.973698][ T1510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.292379][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.292475][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.472891][ T1510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.438222][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 814.410181][T16834] block nbd8: Device being setup by another task [ 814.410261][T16831] block nbd8: NBD_DISCONNECT [ 814.532698][T16830] block nbd8: Disconnected due to user request. [ 814.532721][T16830] block nbd8: shutting down sockets [ 814.862906][ T1510] vlan2: left promiscuous mode [ 814.862929][ T1510] dummy0: left promiscuous mode [ 814.907724][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2883'. [ 815.378372][ T1510] bridge0: port 3(vlan2) entered disabled state [ 815.481572][ T1510] bridge_slave_1: left allmulticast mode [ 815.481607][ T1510] bridge_slave_1: left promiscuous mode [ 815.481886][ T1510] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.817791][ T1510] bridge_slave_0: left allmulticast mode [ 815.817827][ T1510] bridge_slave_0: left promiscuous mode [ 815.818087][ T1510] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.234316][T16887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2890'. [ 818.380408][ T1510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.460327][ T1510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.502396][ T1510] bond0 (unregistering): Released all slaves [ 819.077319][T16891] binder: BINDER_SET_CONTEXT_MGR already set [ 819.077335][T16891] binder: 16889:16891 ioctl 4018620d 200000000180 returned -16 [ 820.265369][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2900'. [ 823.116467][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 823.342866][ T1510] hsr_slave_0: left promiscuous mode [ 823.570741][ T1510] hsr_slave_1: left promiscuous mode [ 823.576860][ T1510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.576888][ T1510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.425555][ T1510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.425582][ T1510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.823958][ T1510] veth1_macvtap: left promiscuous mode [ 824.824060][ T1510] veth0_macvtap: left promiscuous mode [ 824.842397][ T1510] veth1_vlan: left promiscuous mode [ 824.842598][ T1510] veth0_vlan: left promiscuous mode [ 827.721426][ T1510] team0 (unregistering): Port device team_slave_1 removed [ 827.780437][ T1510] team0 (unregistering): Port device team_slave_0 removed [ 830.485210][T16359] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 830.611324][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.708084][T16359] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 830.754805][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.781483][T16359] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 830.938969][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 831.502403][T16359] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 831.547735][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.030543][T16332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 832.236072][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 832.261322][T16332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 832.340846][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.355958][T16332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 832.454070][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.473600][T16332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 832.644417][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.746110][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.828369][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.878457][T16332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.896848][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.897083][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.003972][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.004141][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.786056][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 836.837987][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 836.839364][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 836.862498][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 836.879117][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 836.888118][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2937'. [ 837.011637][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 837.307119][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 837.917727][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 837.947964][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 837.957714][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 837.967241][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 839.408707][T12187] Bluetooth: hci2: command tx timeout [ 840.111609][T12187] Bluetooth: hci5: command tx timeout [ 841.452283][T12187] Bluetooth: hci2: command tx timeout [ 841.486160][T17200] loop3: detected capacity change from 0 to 128 [ 841.509769][T17200] vfat: Unexpected value for 'dos1xfloppy' [ 842.209905][T12187] Bluetooth: hci5: command tx timeout [ 843.238302][T12187] Bluetooth: hci6: unexpected event for opcode 0x040e [ 844.969132][T12187] Bluetooth: hci2: command tx timeout [ 844.973616][T12187] Bluetooth: hci5: command tx timeout [ 846.380976][T17259] loop3: detected capacity change from 0 to 128 [ 846.384573][T17259] vfat: Unexpected value for 'dos1xfloppy' [ 846.974119][T12187] Bluetooth: hci2: command tx timeout [ 847.052109][T12187] Bluetooth: hci5: command tx timeout [ 847.275092][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 849.897418][T12187] Bluetooth: hci4: unexpected event for opcode 0x040e [ 851.096412][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'. [ 851.190515][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 852.197947][T17142] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.198216][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.198465][T17142] bridge_slave_0: entered allmulticast mode [ 852.234467][T17142] bridge_slave_0: entered promiscuous mode [ 852.503867][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.504158][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.504459][T17157] bridge_slave_0: entered allmulticast mode [ 852.522125][T17157] bridge_slave_0: entered promiscuous mode [ 853.349286][T17142] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.349749][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.350052][T17142] bridge_slave_1: entered allmulticast mode [ 853.359390][T17142] bridge_slave_1: entered promiscuous mode [ 853.366591][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.366814][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.367085][T17157] bridge_slave_1: entered allmulticast mode [ 853.415129][T17157] bridge_slave_1: entered promiscuous mode [ 853.862310][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19 [ 854.341973][T12187] Bluetooth: hci6: unexpected event for opcode 0x040e [ 855.665534][T17383] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2974'. [ 855.935118][T17142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.989972][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.001385][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20 [ 856.028169][T17142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.207624][ T9432] bridge_slave_1: left allmulticast mode [ 856.207660][ T9432] bridge_slave_1: left promiscuous mode [ 856.207923][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.343279][ T9432] bridge_slave_0: left allmulticast mode [ 856.343312][ T9432] bridge_slave_0: left promiscuous mode [ 856.343621][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.799421][T12187] Bluetooth: hci6: unexpected event for opcode 0x0c1c [ 856.887715][T17406] netlink: 'syz.3.2981': attribute type 7 has an invalid length. [ 858.242380][T12187] Bluetooth: hci4: unexpected event for opcode 0x040e [ 859.960443][ T9432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.080728][ T9432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.142754][ T9432] bond0 (unregistering): Released all slaves [ 860.196894][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.777503][T17142] team0: Port device team_slave_0 added [ 860.879360][T17157] team0: Port device team_slave_0 added [ 860.891846][T17142] team0: Port device team_slave_1 added [ 861.027318][T17157] team0: Port device team_slave_1 added [ 861.450592][ T9432] hsr_slave_0: left promiscuous mode [ 861.489922][ T9432] hsr_slave_1: left promiscuous mode [ 861.490988][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.542547][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.595221][T17435] loop8: detected capacity change from 0 to 8192 [ 862.784009][T12187] Bluetooth: hci4: unexpected event for opcode 0x040e [ 866.603053][ T9432] team0 (unregistering): Port device team_slave_1 removed [ 866.660207][ T9432] team0 (unregistering): Port device team_slave_0 removed [ 867.278281][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.278298][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.278323][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.329382][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.329399][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.329439][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.358406][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.358424][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.358449][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.454629][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.454646][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.454672][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.705383][T17142] hsr_slave_0: entered promiscuous mode [ 867.717550][T17142] hsr_slave_1: entered promiscuous mode [ 867.731527][T17142] debugfs: 'hsr0' already exists in 'hsr' [ 867.731554][T17142] Cannot create hsr debugfs directory [ 868.530490][T17157] hsr_slave_0: entered promiscuous mode [ 868.547593][T17157] hsr_slave_1: entered promiscuous mode [ 868.554945][T17157] debugfs: 'hsr0' already exists in 'hsr' [ 868.554972][T17157] Cannot create hsr debugfs directory [ 871.690219][T12187] Bluetooth: hci4: unexpected event for opcode 0x040e [ 873.468471][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.468568][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.074853][T17514] loop3: detected capacity change from 0 to 256 [ 875.907800][T17522] overlayfs: failed to clone upperpath [ 881.375111][T17552] loop3: detected capacity change from 0 to 128 [ 881.377659][T17552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 881.381587][T17552] EXT4-fs (loop3): Test dummy encryption mode enabled [ 881.456981][T17552] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 881.477292][T17552] ext4 filesystem being mounted at /490/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 881.603228][T17563] netlink: 'syz.8.3027': attribute type 10 has an invalid length. [ 883.057863][T10092] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 890.442564][T12187] Bluetooth: hci6: unexpected event for opcode 0x040e [ 892.305203][T17683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3049'. [ 892.451427][T17657] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.451968][T17657] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.745644][T17657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.757769][T17657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.141026][T17657] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 893.782837][ T156] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.473214][ T156] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.503517][ T156] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.503566][ T156] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.602101][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3059'. [ 897.744373][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 897.775832][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 897.777831][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 897.820538][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 897.838605][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 897.998171][T17716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 898.095768][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 898.132592][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 898.135873][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 898.159292][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 898.171356][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.183280][T17716] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 899.641144][T12187] Bluetooth: hci6: unexpected event for opcode 0x040e [ 899.983617][T12187] Bluetooth: hci1: command tx timeout [ 900.430114][T17767] fuse: fd is not a fuse device [ 900.950339][T12187] Bluetooth: hci3: command tx timeout [ 902.011782][T12187] Bluetooth: hci1: command tx timeout [ 903.445199][T17812] overlayfs: failed to resolve './bus': -2 [ 903.459584][T12187] Bluetooth: hci3: command tx timeout [ 907.809619][ C1] sched: DL replenish lagged too much [ 908.081846][T12187] Bluetooth: hci1: command tx timeout [ 908.101152][ T5616] Bluetooth: hci3: command tx timeout [ 908.730170][ T5616] Bluetooth: hci6: unexpected event for opcode 0x040e [ 910.505669][ T5616] Bluetooth: hci1: command tx timeout [ 910.980388][ T5616] Bluetooth: hci3: command tx timeout [ 914.679907][ T9432] bridge_slave_1: left allmulticast mode [ 914.679941][ T9432] bridge_slave_1: left promiscuous mode [ 914.680204][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.754628][ T9432] bridge_slave_0: left allmulticast mode [ 914.754662][ T9432] bridge_slave_0: left promiscuous mode [ 914.754955][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.599353][ T5616] Bluetooth: hci4: unexpected event for opcode 0x040e [ 918.360913][ T9432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.441956][ T9432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.488992][ T9432] bond0 (unregistering): Released all slaves [ 918.863261][ T5616] Bluetooth: hci6: unexpected event for opcode 0x204e [ 919.425064][T17977] loop3: detected capacity change from 0 to 256 [ 919.584386][ T9432] hsr_slave_0: left promiscuous mode [ 919.624222][ T9432] hsr_slave_1: left promiscuous mode [ 919.625441][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.671264][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.727079][ T5616] Bluetooth: hci6: unexpected event for opcode 0x0c58 [ 922.131714][T18009] binder: 18008:18009 ioctl 4018620d 0 returned -22 [ 925.167913][T18055] overlayfs: upper fs does not support file handles, falling back to index=off. [ 925.182918][ T9432] team0 (unregistering): Port device team_slave_1 removed [ 927.615234][ T9432] team0 (unregistering): Port device team_slave_0 removed [ 927.773266][T18074] binder: 18073:18074 ioctl 4018620d 0 returned -22 [ 929.833222][T17726] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.835116][T17726] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.835440][T17726] bridge_slave_0: entered allmulticast mode [ 929.838697][T17726] bridge_slave_0: entered promiscuous mode [ 930.761803][T17726] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.762102][T17726] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.762406][T17726] bridge_slave_1: entered allmulticast mode [ 930.775509][T17726] bridge_slave_1: entered promiscuous mode [ 932.477068][T17726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.640296][T17726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.641553][T17715] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.641845][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.642139][T17715] bridge_slave_0: entered allmulticast mode [ 932.646584][T17715] bridge_slave_0: entered promiscuous mode [ 933.149198][T17715] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.149476][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.150015][T17715] bridge_slave_1: entered allmulticast mode [ 933.200303][T17715] bridge_slave_1: entered promiscuous mode [ 934.690524][T17726] team0: Port device team_slave_0 added [ 934.915641][T17726] team0: Port device team_slave_1 added [ 934.931864][T17715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.986892][T17715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.037274][T17726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.037291][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.037317][T17726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.141675][T17726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.141692][T17726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.141717][T17726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.147019][T17715] team0: Port device team_slave_0 added [ 935.219171][T17715] team0: Port device team_slave_1 added [ 935.321708][T17715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.321726][T17715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.321753][T17715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.406621][T17715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.406639][T17715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.406665][T17715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.482910][T17726] hsr_slave_0: entered promiscuous mode [ 935.485426][T17726] hsr_slave_1: entered promiscuous mode [ 935.487256][T17726] debugfs: 'hsr0' already exists in 'hsr' [ 935.487280][T17726] Cannot create hsr debugfs directory [ 936.217182][T17715] hsr_slave_0: entered promiscuous mode [ 936.218396][T17715] hsr_slave_1: entered promiscuous mode [ 936.219495][T17715] debugfs: 'hsr0' already exists in 'hsr' [ 936.220433][T17715] Cannot create hsr debugfs directory [ 936.224541][T18136] bond0: entered promiscuous mode [ 936.224569][T18136] bond_slave_0: entered promiscuous mode [ 936.224771][T18136] bond_slave_1: entered promiscuous mode [ 936.311438][T18143] netlink: 'syz.3.3175': attribute type 16 has an invalid length. [ 936.311458][T18143] netlink: 'syz.3.3175': attribute type 17 has an invalid length. [ 936.314450][T18135] bond0: left promiscuous mode [ 936.314468][T18135] bond_slave_0: left promiscuous mode [ 936.314685][T18135] bond_slave_1: left promiscuous mode [ 936.506703][T18142] tipc: Resetting bearer [ 936.507215][T18142] tipc: Resetting bearer [ 936.704864][T18143] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.736385][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.736465][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.769031][T18143] bridge0: port 1(bridge_slave_0) entered listening state [ 936.786222][T18143] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.786389][T18143] bridge0: port 2(bridge_slave_1) entered listening state [ 936.988028][T18143] tipc: Resetting bearer [ 937.035540][T18143] geneve2: left promiscuous mode [ 937.035565][T18143] geneve2: left allmulticast mode [ 937.047016][T18143] ip6erspan0: left allmulticast mode [ 939.892323][T18169] loop8: detected capacity change from 0 to 2048 [ 939.958537][T18169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.962677][T18169] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.143221][T18172] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 940.171913][T18172] EXT4-fs (loop8): Remounting filesystem read-only [ 940.918206][T13213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.154802][T18178] bond0: entered promiscuous mode [ 941.154825][T18178] bond_slave_0: entered promiscuous mode [ 941.155013][T18178] bond_slave_1: entered promiscuous mode [ 941.162845][T18177] bond0: left promiscuous mode [ 941.162866][T18177] bond_slave_0: left promiscuous mode [ 941.163062][T18177] bond_slave_1: left promiscuous mode [ 941.350376][ T9432] bridge_slave_1: left allmulticast mode [ 941.350409][ T9432] bridge_slave_1: left promiscuous mode [ 941.350687][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.443512][ T9432] bridge_slave_0: left allmulticast mode [ 941.443545][ T9432] bridge_slave_0: left promiscuous mode [ 941.443824][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.650064][ T9432] bridge_slave_1: left allmulticast mode [ 941.650099][ T9432] bridge_slave_1: left promiscuous mode [ 941.650363][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.736415][ T9432] bridge_slave_0: left allmulticast mode [ 941.736449][ T9432] bridge_slave_0: left promiscuous mode [ 941.736713][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.300321][ T9432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.400367][ T9432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.461305][ T9432] bond0 (unregistering): Released all slaves [ 942.731830][ T9432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.828642][T18206] overlayfs: upper fs does not support file handles, falling back to index=off. [ 942.851101][ T9432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.933311][ T9432] bond0 (unregistering): Released all slaves [ 943.606116][T18217] loop8: detected capacity change from 0 to 4096 [ 943.646675][T18217] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 943.776256][T18217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.931575][ T9432] hsr_slave_0: left promiscuous mode [ 943.975641][ T9432] hsr_slave_1: left promiscuous mode [ 943.976800][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.014778][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.036973][T13213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.289625][ T9432] hsr_slave_0: left promiscuous mode [ 944.332859][ T9432] hsr_slave_1: left promiscuous mode [ 944.334010][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.401936][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.220468][ T9432] team0 (unregistering): Port device team_slave_1 removed [ 946.282035][ T9432] team0 (unregistering): Port device team_slave_0 removed [ 946.990443][ T9432] team0 (unregistering): Port device team_slave_1 removed [ 947.053010][ T9432] team0 (unregistering): Port device team_slave_0 removed [ 947.366296][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 947.969997][T17726] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 949.012188][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.039840][T17726] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 949.277959][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.300684][T17726] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 949.301346][ C0] Unknown status report in ack skb [ 949.324737][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.326333][T17726] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 949.504931][T17726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 954.206660][T17726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.207422][T17715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 954.368668][T17715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.379768][T17715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 954.523269][T17715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.562664][T17715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 954.601602][T18329] overlayfs: failed to clone upperpath [ 954.737994][T17715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 954.796193][T17715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 955.133437][T17715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 955.222329][T17726] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.521325][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.523391][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.620234][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.620462][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.865832][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'. [ 955.865862][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'. [ 955.865905][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 955.992855][T18365] binder: 18364:18365 ioctl c018620c 0 returned -14 [ 956.047627][T18367] fuse: fd is not a fuse device [ 956.668088][T17715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.857123][T17715] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.977723][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.977841][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.087604][ T1409] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.087766][ T1409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.173556][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 957.212231][T18406] fuse: fd is not a fuse device [ 957.793951][T17814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 957.855403][T17814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 957.858229][T17814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 957.867527][T17814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 957.870866][T17814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 958.431591][T18437] fuse: fd is not a fuse device [ 958.581496][T17814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 958.636296][T17814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 958.639415][T17814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 958.656348][T17814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 958.692888][T17814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 959.977837][T18475] fuse: Unknown parameter 'group_i00000000000000000000' [ 960.012830][ T5616] Bluetooth: hci2: command tx timeout [ 960.058010][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 960.895717][ T5616] Bluetooth: hci5: command tx timeout [ 961.457552][T18505] 9pnet_fd: p9_fd_create_unix (18505): problem connecting socket: ./file0: -111 [ 961.941020][T18514] fuse: Unknown parameter 'group_i00000000000000000000' [ 962.659125][ T5616] Bluetooth: hci2: command tx timeout [ 962.974425][T17814] Bluetooth: hci5: command tx timeout [ 963.682720][T18537] vlan2: entered allmulticast mode [ 963.682742][T18537] virt_wifi0: entered allmulticast mode [ 964.545322][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 964.549219][T18552] fuse: fd is not a fuse device [ 964.729687][ T5616] Bluetooth: hci2: command tx timeout [ 964.895680][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 965.043500][T18573] fuse: Unknown parameter 'group_id00000000000000000000' [ 965.157473][ T5616] Bluetooth: hci5: command tx timeout [ 965.439854][T18571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 966.134307][T18609] fuse: Unknown parameter 'group_id00000000000000000000' [ 967.176202][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 967.178617][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 967.184783][ T5616] Bluetooth: hci2: command tx timeout [ 967.209645][ T5616] Bluetooth: hci5: command tx timeout [ 968.410051][T18632] 9pnet_fd: p9_fd_create_tcp (18632): problem connecting socket to 127.0.0.1 [ 968.659793][ T156] bridge_slave_1: left allmulticast mode [ 968.659827][ T156] bridge_slave_1: left promiscuous mode [ 968.660096][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.751163][ T156] bridge_slave_0: left allmulticast mode [ 968.760004][ T156] bridge_slave_0: left promiscuous mode [ 968.760426][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.569838][T18679] 9pnet_fd: p9_fd_create_tcp (18679): problem connecting socket to 127.0.0.1 [ 973.507561][T18706] 9pnet_fd: p9_fd_create_tcp (18706): problem connecting socket to 127.0.0.1 [ 973.832723][T18715] loop8: detected capacity change from 0 to 128 [ 973.880797][T18715] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 973.882927][T18715] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 974.983179][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.301430][T18733] 9pnet_fd: p9_fd_create_tcp (18733): problem connecting socket to 127.0.0.1 [ 976.360223][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.603071][ T156] bond0 (unregistering): Released all slaves [ 976.649682][T18715] lo speed is unknown, defaulting to 1000 [ 976.669058][T18715] lo speed is unknown, defaulting to 1000 [ 976.671098][T18715] lo speed is unknown, defaulting to 1000 [ 976.672710][T18715] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 976.672750][T18715] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 976.672791][T18715] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 976.688719][T18715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 976.721020][T18715] lo speed is unknown, defaulting to 1000 [ 976.724822][T18715] lo speed is unknown, defaulting to 1000 [ 976.728323][T18715] lo speed is unknown, defaulting to 1000 [ 976.731816][T18715] lo speed is unknown, defaulting to 1000 [ 976.735984][T18715] lo speed is unknown, defaulting to 1000 [ 976.739403][T18715] lo speed is unknown, defaulting to 1000 [ 976.745642][T18715] lo speed is unknown, defaulting to 1000 [ 977.987089][T18745] overlayfs: upper fs does not support file handles, falling back to index=off. [ 978.132617][T18433] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.132917][T18433] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.133220][T18433] bridge_slave_0: entered allmulticast mode [ 978.138608][T18433] bridge_slave_0: entered promiscuous mode [ 978.569886][T13213] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 978.657744][T18433] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.658018][T18433] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.658330][T18433] bridge_slave_1: entered allmulticast mode [ 978.668196][T18433] bridge_slave_1: entered promiscuous mode [ 978.870556][T18752] 9pnet_fd: p9_fd_create_unix (18752): problem connecting socket: ./file0: -111 [ 979.371695][T18433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.514545][ T156] hsr_slave_0: left promiscuous mode [ 981.961025][ T156] hsr_slave_1: left promiscuous mode [ 981.962201][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.003614][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.479168][T18817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 983.066408][ T156] team0 (unregistering): Port device team_slave_1 removed [ 983.140582][ T156] team0 (unregistering): Port device team_slave_0 removed [ 983.336659][T18433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.382113][T18817] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 983.395815][T18818] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 983.460712][T18833] overlayfs: failed to clone upperpath [ 983.761710][T18433] team0: Port device team_slave_0 added [ 983.788026][T18433] team0: Port device team_slave_1 added [ 984.121338][T18417] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.121649][T18417] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.121923][T18417] bridge_slave_0: entered allmulticast mode [ 984.125139][T18417] bridge_slave_0: entered promiscuous mode [ 984.127506][T18858] bond0: entered promiscuous mode [ 984.127527][T18858] bond_slave_0: entered promiscuous mode [ 984.127704][T18858] bond_slave_1: entered promiscuous mode [ 984.130574][T18417] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.130847][T18417] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.131122][T18417] bridge_slave_1: entered allmulticast mode [ 984.134344][T18417] bridge_slave_1: entered promiscuous mode [ 984.136346][T18856] bond0: left promiscuous mode [ 984.136362][T18856] bond_slave_0: left promiscuous mode [ 984.136649][T18856] bond_slave_1: left promiscuous mode [ 984.373404][T18433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.373421][T18433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.373446][T18433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.427516][T18433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.427533][T18433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.427555][T18433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.655254][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3399'. [ 984.671157][T18417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.799108][T18417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.822674][T18869] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 985.238709][T18417] team0: Port device team_slave_0 added [ 985.342318][T18417] team0: Port device team_slave_1 added [ 985.386876][T18433] hsr_slave_0: entered promiscuous mode [ 985.399137][T18433] hsr_slave_1: entered promiscuous mode [ 985.409335][T18433] debugfs: 'hsr0' already exists in 'hsr' [ 985.409361][T18433] Cannot create hsr debugfs directory [ 985.535368][T18886] bond0: entered promiscuous mode [ 985.535391][T18886] bond_slave_0: entered promiscuous mode [ 985.535599][T18886] bond_slave_1: entered promiscuous mode [ 985.725438][T18885] bond0: left promiscuous mode [ 985.725462][T18885] bond_slave_0: left promiscuous mode [ 985.725654][T18885] bond_slave_1: left promiscuous mode [ 985.736772][T18417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.736789][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.736813][T18417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.789291][T18417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.789306][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.789332][T18417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.274483][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3411'. [ 987.643117][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 987.657354][T18909] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 987.692488][T18912] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 987.994056][T18417] hsr_slave_0: entered promiscuous mode [ 987.996227][T18417] hsr_slave_1: entered promiscuous mode [ 987.997995][T18417] debugfs: 'hsr0' already exists in 'hsr' [ 987.998019][T18417] Cannot create hsr debugfs directory [ 988.326690][T18934] bond0: entered promiscuous mode [ 988.326713][T18934] bond_slave_0: entered promiscuous mode [ 988.326899][T18934] bond_slave_1: entered promiscuous mode [ 988.387307][T18933] bond0: left promiscuous mode [ 988.387327][T18933] bond_slave_0: left promiscuous mode [ 988.387521][T18933] bond_slave_1: left promiscuous mode [ 989.741555][T15820] IPVS: starting estimator thread 0... [ 989.867201][T18951] IPVS: using max 12 ests per chain, 28800 per kthread [ 990.868633][T18975] loop8: detected capacity change from 0 to 128 [ 990.997672][T18978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3432'. [ 990.998659][T18978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3432'. [ 991.064751][ T37] audit: type=1804 audit(2000000087.579:39): pid=18977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3431" name="/newroot/369/file0/bus" dev="loop8" ino=1048693 res=1 errno=0 [ 992.347236][T19007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3443'. [ 992.854322][T19024] overlayfs: upper fs does not support file handles, falling back to index=off. [ 993.674083][T19056] overlayfs: upper fs does not support file handles, falling back to index=off. [ 993.839765][ T156] bridge_slave_1: left allmulticast mode [ 993.839797][ T156] bridge_slave_1: left promiscuous mode [ 993.840071][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.933943][ T156] bridge_slave_0: left allmulticast mode [ 993.933979][ T156] bridge_slave_0: left promiscuous mode [ 993.934259][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.073053][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.167550][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.325160][ T156] bond0 (unregistering): Released all slaves [ 997.520237][ T156] hsr_slave_0: left promiscuous mode [ 997.534246][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.534279][ C1] bridge0: topology change detected, propagating [ 997.534940][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.534955][ C1] bridge0: topology change detected, propagating [ 997.612555][ T156] hsr_slave_1: left promiscuous mode [ 997.627798][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.854060][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.176343][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.176439][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.014648][ T156] team0 (unregistering): Port device team_slave_1 removed [ 999.090485][ T156] team0 (unregistering): Port device team_slave_0 removed [ 1000.488791][T19174] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1003.578196][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1003.805234][ T5616] Bluetooth: Wrong link type (-22) [ 1009.967021][T19317] loop8: detected capacity change from 0 to 2048 [ 1010.021491][T19317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.127240][T13213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.497819][T18433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1011.618593][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1011.621484][T18433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1011.708879][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.728366][T18433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1011.735424][T19340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3546'. [ 1011.855219][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.872454][T18433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1012.161191][T19354] loop9: detected capacity change from 0 to 7 [ 1012.188519][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1012.285224][T19354] Dev loop9: unable to read RDB block 7 [ 1012.285254][T19354] loop9: AHDI p2 p3 [ 1012.285282][T19354] loop9: partition table partially beyond EOD, truncated [ 1012.332052][T19354] loop9: p2 size 150995200 extends beyond EOD, truncated [ 1012.621347][T17564] udevd[17564]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1014.334266][T19395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1014.394877][T19396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3555'. [ 1015.849799][T19421] 9pnet_fd: p9_fd_create_tcp (19421): problem connecting socket to 127.0.0.1 [ 1016.184931][T18417] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1016.266054][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.275548][T18417] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1016.358034][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.363832][T18417] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1016.583028][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.615803][T18417] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1016.675521][T18417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.958999][T19451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1017.180102][T18433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.486890][T18433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.531882][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.532162][ T9431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.716098][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.716274][ T9431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.627161][T17814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1018.685675][T17814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1018.689161][T17814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1018.809706][T17814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1018.817489][T17814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1020.499026][T19488] 9pnet_fd: p9_fd_create_tcp (19488): problem connecting socket to 127.0.0.1 [ 1020.756378][T17814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1020.829333][T17814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1020.837799][T17814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1020.865713][T17814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1020.867162][T17814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1020.984143][ T5616] Bluetooth: hci1: command tx timeout [ 1021.585735][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1023.370090][T19535] 9pnet_fd: p9_fd_create_tcp (19535): problem connecting socket to 127.0.0.1 [ 1023.385138][ T5616] Bluetooth: hci2: command tx timeout [ 1023.385474][ T5616] Bluetooth: hci1: command tx timeout [ 1024.946799][T19468] lo speed is unknown, defaulting to 1000 [ 1025.143184][T19555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1025.455774][T17814] Bluetooth: hci1: command tx timeout [ 1025.455784][ T5616] Bluetooth: hci2: command tx timeout [ 1025.744245][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3596'. [ 1027.447853][ T5628] IPVS: starting estimator thread 0... [ 1027.530213][T19576] IPVS: using max 10 ests per chain, 24000 per kthread [ 1027.531827][T17814] Bluetooth: hci2: command tx timeout [ 1027.531855][T17814] Bluetooth: hci1: command tx timeout [ 1028.304725][T19491] lo speed is unknown, defaulting to 1000 [ 1029.669265][ T5616] Bluetooth: hci2: command tx timeout [ 1031.572822][T19618] fuse: fd is not a fuse device [ 1032.173367][T19633] tipc: Failed to remove unknown binding: 66,0,0/9611946:3769324060/3769324062 [ 1032.488667][T19644] tmpfs: Unknown parameter 'usrquota_i' [ 1032.538749][T19644] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1032.762615][T19468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.763164][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.763425][T19468] bridge_slave_0: entered allmulticast mode [ 1032.767923][T19468] bridge_slave_0: entered promiscuous mode [ 1032.877674][T19468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.877980][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.878289][T19468] bridge_slave_1: entered allmulticast mode [ 1032.914985][T19468] bridge_slave_1: entered promiscuous mode [ 1033.812951][T19655] loop3: detected capacity change from 0 to 128 [ 1034.181695][T19655] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1034.942751][T19655] ext4 filesystem being mounted at /693/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.198455][T10092] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1036.436926][T19468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.510983][T19468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.779824][ T1134] bridge_slave_1: left allmulticast mode [ 1036.779857][ T1134] bridge_slave_1: left promiscuous mode [ 1036.780124][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.861880][ T1134] bridge_slave_0: left allmulticast mode [ 1036.861917][ T1134] bridge_slave_0: left promiscuous mode [ 1036.863370][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.383844][T19687] loop3: detected capacity change from 0 to 128 [ 1038.190787][T19687] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1038.197422][T19687] ext4 filesystem being mounted at /698/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.172710][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1039.470309][T10092] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1039.801536][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.920404][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.985919][ T1134] bond0 (unregistering): Released all slaves [ 1040.132049][T19698] vlan2: entered allmulticast mode [ 1040.241498][T19491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.241761][T19491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.242057][T19491] bridge_slave_0: entered allmulticast mode [ 1040.245445][T19491] bridge_slave_0: entered promiscuous mode [ 1040.345402][T19468] team0: Port device team_slave_0 added [ 1040.381317][T19491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.381498][T19491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.381704][T19491] bridge_slave_1: entered allmulticast mode [ 1040.388979][T19491] bridge_slave_1: entered promiscuous mode [ 1040.489063][T19468] team0: Port device team_slave_1 added [ 1040.939659][ T1134] hsr_slave_0: left promiscuous mode [ 1040.959736][ T1134] hsr_slave_1: left promiscuous mode [ 1040.960913][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.008620][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.336870][T19721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3643'. [ 1041.911162][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 1042.024237][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 1042.258349][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3646'. [ 1042.415288][T19491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.419087][T19468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.419103][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.419126][T19468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.504102][T19491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.507876][T19468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.507891][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.507916][T19468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.747123][T19491] team0: Port device team_slave_0 added [ 1042.764315][T19491] team0: Port device team_slave_1 added [ 1042.993447][T19468] hsr_slave_0: entered promiscuous mode [ 1043.001972][T19468] hsr_slave_1: entered promiscuous mode [ 1043.003815][T19468] debugfs: 'hsr0' already exists in 'hsr' [ 1043.003840][T19468] Cannot create hsr debugfs directory [ 1043.006837][T19491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.006851][T19491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.006877][T19491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.116520][T19491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.116537][T19491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.116563][T19491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.757578][T19491] hsr_slave_0: entered promiscuous mode [ 1043.768514][T19491] hsr_slave_1: entered promiscuous mode [ 1043.779028][T19491] debugfs: 'hsr0' already exists in 'hsr' [ 1043.779053][T19491] Cannot create hsr debugfs directory [ 1044.235493][T19757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1045.001254][T19770] loop3: detected capacity change from 0 to 2048 [ 1045.015930][T19772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1045.045431][T19770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.164540][T19775] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1045.208896][T10092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.402254][T19782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1045.533330][T19784] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1046.287863][T19798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3672'. [ 1046.401457][T19801] loop3: detected capacity change from 0 to 2048 [ 1046.482643][T19807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1046.547707][T19801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.624819][T10092] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.267015][T19830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3681'. [ 1048.602184][T19842] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3684'. [ 1049.836870][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3687'. [ 1050.009393][T19857] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1052.859732][ T1134] bridge_slave_1: left allmulticast mode [ 1052.859754][ T1134] bridge_slave_1: left promiscuous mode [ 1052.859949][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.925277][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3696'. [ 1052.961238][ T1134] bridge_slave_0: left allmulticast mode [ 1052.961272][ T1134] bridge_slave_0: left promiscuous mode [ 1052.961546][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.791372][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.873724][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.913229][ T1134] bond0 (unregistering): Released all slaves [ 1053.974555][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1054.998227][T19945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3705'. [ 1055.010381][ T1134] hsr_slave_0: left promiscuous mode [ 1055.031074][ T1134] hsr_slave_1: left promiscuous mode [ 1055.034412][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.081185][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.150898][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 1056.261791][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 1056.335455][T19952] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3706'. [ 1056.595367][T19958] fuse: fd is not a fuse device [ 1057.287124][T19976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3713'. [ 1060.067624][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.067683][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.683752][T20013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3722'. [ 1060.883396][T20021] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3723'. [ 1062.585334][T19468] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1062.618574][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.619219][T20062] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3733'. [ 1062.641288][T19468] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1062.724604][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.068438][T19468] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1063.248249][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.250630][T19468] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1063.271587][T20075] fuse: Unknown parameter 'grou00000000000000000000' [ 1063.358361][T19468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.596759][T19491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.634720][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.638957][T19491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1063.678545][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.735694][T19491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1063.975127][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.985134][T19491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1064.037384][T19491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1065.135896][T20122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1065.424539][T20129] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1065.435779][T20130] fuse: Unknown parameter 'grou00000000000000000000' [ 1065.446899][T20129] overlayfs: failed to clone upperpath [ 1065.651676][T19468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.083469][T19468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.207701][T19491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.382986][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.383145][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.579713][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.579899][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.667160][T19491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.758644][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.761336][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.876490][T15657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.876656][T15657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.011118][T20193] fuse: Unknown parameter 'grou00000000000000000000' [ 1069.267907][T19468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.483090][T19491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.161825][T19468] veth0_vlan: entered promiscuous mode [ 1073.307125][T19468] veth1_vlan: entered promiscuous mode [ 1074.335131][T19468] veth0_macvtap: entered promiscuous mode [ 1074.375512][T20144] IPVS: starting estimator thread 0... [ 1074.375797][T19468] veth1_macvtap: entered promiscuous mode [ 1074.377919][T20269] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1074.489729][T20270] IPVS: using max 9 ests per chain, 21600 per kthread [ 1074.616344][T19468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.706306][T19468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.807592][ T148] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.808778][ T148] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.811057][ T148] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.838129][ T148] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.806821][T19491] veth0_vlan: entered promiscuous mode [ 1075.941743][T19491] veth1_vlan: entered promiscuous mode [ 1076.616052][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.616072][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.225226][T19491] veth0_macvtap: entered promiscuous mode [ 1078.274845][T19491] veth1_macvtap: entered promiscuous mode [ 1078.412401][T19491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.443534][T19491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.469372][ T9431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.504224][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.548208][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.583901][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.261109][T17814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1080.422182][T17814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1080.440720][T17814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1080.481495][T17814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1080.483306][T17814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1081.517864][T17814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1081.580333][T17814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1081.582973][T17814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1081.612330][T17814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1081.641779][T17814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1082.751129][ T5616] Bluetooth: hci1: command tx timeout [ 1083.421390][T20360] tipc: Failed to remove unknown binding: 66,0,0/0:279447176/279447177 [ 1083.693024][ T5616] Bluetooth: hci3: command tx timeout [ 1083.725593][ T1436] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.811816][ T5616] Bluetooth: hci1: command tx timeout [ 1085.429282][ T1436] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.769892][ T5616] Bluetooth: hci3: command tx timeout [ 1086.889984][ T5616] Bluetooth: hci1: command tx timeout [ 1087.139825][T20419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3797'. [ 1087.205210][ T1436] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.369828][T20320] lo speed is unknown, defaulting to 1000 [ 1087.867254][T20427] loop3: detected capacity change from 0 to 128 [ 1087.976913][ T5616] Bluetooth: hci3: command tx timeout [ 1088.989954][ T5616] Bluetooth: hci1: command tx timeout [ 1089.342264][T20427] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1089.379299][T20427] ext4 filesystem being mounted at /758/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.766287][ T1436] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.236771][ T5616] Bluetooth: hci3: command tx timeout [ 1090.317915][T20341] lo speed is unknown, defaulting to 1000 [ 1090.392719][T10092] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.581991][T20436] loop8: detected capacity change from 0 to 512 [ 1090.622423][T20436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.622491][T20436] EXT4-fs: Ignoring removed mblk_io_submit option [ 1091.598682][T20436] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1091.598717][T20436] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1091.721873][T20444] loop8: detected capacity change from 512 to 0 [ 1092.036328][T20436] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 13 starting block 26) [ 1092.036640][T20436] Buffer I/O error on device loop8, logical block 26 [ 1092.090272][T20436] EXT4-fs (loop8): 1 truncate cleaned up [ 1092.093170][T20436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.143381][T20436] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1092.149305][T20436] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 1092.149392][T20436] EXT4-fs (loop8): I/O error while writing superblock [ 1092.149408][T20436] EXT4-fs (loop8): Remounting filesystem read-only [ 1092.273031][T13213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.030016][T20320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.030395][T20320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.034222][T20320] bridge_slave_0: entered allmulticast mode [ 1096.038002][T20320] bridge_slave_0: entered promiscuous mode [ 1096.106890][T20320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.107171][T20320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.107475][T20320] bridge_slave_1: entered allmulticast mode [ 1096.137943][T20320] bridge_slave_1: entered promiscuous mode [ 1096.574459][T20516] loop3: detected capacity change from 0 to 128 [ 1096.591682][T20516] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1096.689784][T20516] ext4 filesystem being mounted at /765/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.864466][T10092] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1098.181894][ T1436] bridge_slave_1: left allmulticast mode [ 1098.181928][ T1436] bridge_slave_1: left promiscuous mode [ 1098.182785][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.261365][ T1436] bridge_slave_0: left allmulticast mode [ 1098.261402][ T1436] bridge_slave_0: left promiscuous mode [ 1098.261710][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.326524][T20543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1099.170279][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.250505][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.293024][ T1436] bond0 (unregistering): Released all slaves [ 1099.315149][T20341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.315315][T20341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.315549][T20341] bridge_slave_0: entered allmulticast mode [ 1099.317376][T20341] bridge_slave_0: entered promiscuous mode [ 1099.352872][T20320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.445152][T20341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.445340][T20341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.445550][T20341] bridge_slave_1: entered allmulticast mode [ 1099.456116][T20341] bridge_slave_1: entered promiscuous mode [ 1099.485668][T20320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.985920][T20575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1102.115155][T20341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.179407][T20320] team0: Port device team_slave_0 added [ 1102.195213][T20341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.205078][T20320] team0: Port device team_slave_1 added [ 1102.670579][T20595] loop3: detected capacity change from 0 to 128 [ 1102.691587][T20595] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1102.692310][T20595] ext4 filesystem being mounted at /771/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.007388][T20341] team0: Port device team_slave_0 added [ 1103.024269][T20320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.024286][T20320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.024311][T20320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.143565][T20615] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3850'. [ 1104.246512][T10092] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1104.385909][T20341] team0: Port device team_slave_1 added [ 1104.396320][T20320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.396336][T20320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.396363][T20320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.870553][ T1436] hsr_slave_0: left promiscuous mode [ 1104.909576][ T1436] hsr_slave_1: left promiscuous mode [ 1104.910393][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.910412][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.951696][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.951722][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.165616][ T1436] veth1_macvtap: left promiscuous mode [ 1105.165677][ T1436] veth0_macvtap: left promiscuous mode [ 1105.165831][ T1436] veth1_vlan: left promiscuous mode [ 1105.173753][ T1436] veth0_vlan: left promiscuous mode [ 1105.282565][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 1106.921188][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1106.943785][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1107.296629][T20341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.296646][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.296671][T20341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.310258][T20341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.310275][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.310300][T20341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.469875][T20654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1107.470109][T20655] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 1107.609207][T20320] hsr_slave_0: entered promiscuous mode [ 1107.623050][T20320] hsr_slave_1: entered promiscuous mode [ 1107.629046][T20320] debugfs: 'hsr0' already exists in 'hsr' [ 1107.629080][T20320] Cannot create hsr debugfs directory [ 1107.704390][T20659] vlan2: entered allmulticast mode [ 1107.704414][T20659] bond5: entered allmulticast mode [ 1107.911925][T20668] tipc: Failed to remove unknown binding: 66,0,0/0:2728067427/2728067429 [ 1108.477114][T20341] hsr_slave_0: entered promiscuous mode [ 1108.492435][T20341] hsr_slave_1: entered promiscuous mode [ 1108.497463][T20341] debugfs: 'hsr0' already exists in 'hsr' [ 1108.497492][T20341] Cannot create hsr debugfs directory [ 1108.827964][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3869'. [ 1109.654135][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1111.295300][T20717] netlink: 'syz.8.3877': attribute type 1 has an invalid length. [ 1111.557878][T20724] vlan2: entered allmulticast mode [ 1111.557900][T20724] bond2: entered allmulticast mode [ 1112.388160][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1116.575998][T20787] netlink: 'syz.8.3891': attribute type 1 has an invalid length. [ 1116.850186][ T1436] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.010332][T20792] vlan2: entered allmulticast mode [ 1117.010353][T20792] bond3: entered allmulticast mode [ 1118.697994][ T1436] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.087173][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.087271][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1132.048229][T17814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1132.063874][T17814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1132.065406][T17814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1132.066395][T17814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1132.067022][T17814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1132.981538][T17814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1133.051071][T17814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1133.062239][T17814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1133.066292][T17814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1133.066984][T17814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1134.409759][ T5616] Bluetooth: hci2: command tx timeout [ 1135.403776][ T5616] Bluetooth: hci5: command tx timeout [ 1136.493405][ T5616] Bluetooth: hci2: command tx timeout [ 1137.459844][ T5616] Bluetooth: hci5: command tx timeout [ 1138.603442][ T5616] Bluetooth: hci2: command tx timeout [ 1139.540660][ T5616] Bluetooth: hci5: command tx timeout [ 1139.720647][T17814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1139.819326][T20865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1139.836748][T12187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1139.953775][T12187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1139.963967][T20865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1140.007956][T20865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1140.075225][T12187] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1140.127244][T12187] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1140.144157][T12187] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1140.144792][T12187] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1140.649806][T17814] Bluetooth: hci2: command tx timeout [ 1141.609907][T17814] Bluetooth: hci5: command tx timeout [ 1141.700587][ T5616] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1141.819211][ T5616] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1141.833155][ T5616] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1141.834998][ T5616] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1141.835628][ T5616] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1142.417154][T17814] Bluetooth: hci7: command tx timeout [ 1142.499206][T17814] Bluetooth: hci8: command tx timeout [ 1144.009753][T17814] Bluetooth: hci9: command tx timeout [ 1144.519724][T17814] Bluetooth: hci7: command tx timeout [ 1144.570243][T17814] Bluetooth: hci8: command tx timeout [ 1144.587352][T20784] ================================================================== [ 1144.587370][T20784] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x92/0x190 [ 1144.587409][T20784] Read of size 8 at addr ffff8880317eb780 by task syz.3.3890/20784 [ 1144.587424][T20784] [ 1144.587438][T20784] CPU: 1 UID: 0 PID: 20784 Comm: syz.3.3890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1144.587461][T20784] Tainted: [L]=SOFTLOCKUP [ 1144.587468][T20784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1144.587478][T20784] Call Trace: [ 1144.587485][T20784] [ 1144.587492][T20784] dump_stack_lvl+0xe8/0x150 [ 1144.587515][T20784] print_address_description+0x55/0x1e0 [ 1144.587538][T20784] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1144.587556][T20784] print_report+0x58/0x70 [ 1144.587574][T20784] kasan_report+0x117/0x150 [ 1144.587601][T20784] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1144.587623][T20784] __list_del_entry_valid_or_report+0x92/0x190 [ 1144.587641][T20784] bt_accept_unlink+0x39/0x260 [ 1144.587665][T20784] l2cap_sock_teardown_cb+0x17e/0x490 [ 1144.587685][T20784] l2cap_chan_del+0xb5/0x610 [ 1144.587702][T20784] ? l2cap_conn_del+0x331/0x570 [ 1144.587727][T20784] l2cap_conn_del+0x33d/0x570 [ 1144.587753][T20784] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1144.587778][T20784] hci_conn_hash_flush+0x10d/0x260 [ 1144.587804][T20784] hci_dev_close_sync+0x821/0x10e0 [ 1144.587830][T20784] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1144.587851][T20784] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1144.587871][T20784] ? hci_unregister_dev+0x212/0x5a0 [ 1144.587892][T20784] hci_unregister_dev+0x21a/0x5a0 [ 1144.587913][T20784] vhci_release+0x155/0x1b0 [ 1144.587934][T20784] ? __pfx_vhci_release+0x10/0x10 [ 1144.587954][T20784] __fput+0x461/0xa70 [ 1144.587979][T20784] task_work_run+0x1d9/0x270 [ 1144.588002][T20784] ? __pfx_task_work_run+0x10/0x10 [ 1144.588023][T20784] ? do_exit+0x70a/0x22c0 [ 1144.588040][T20784] ? kmem_cache_free+0x187/0x6c0 [ 1144.588065][T20784] ? put_net+0x191/0x260 [ 1144.588088][T20784] ? do_exit+0x70a/0x22c0 [ 1144.588107][T20784] do_exit+0x70f/0x22c0 [ 1144.588127][T20784] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1144.588148][T20784] ? __pfx_do_exit+0x10/0x10 [ 1144.588165][T20784] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1144.588190][T20784] ? reacquire_held_locks+0x104/0x190 [ 1144.588212][T20784] ? rt_spin_lock+0x1e0/0x400 [ 1144.588239][T20784] do_group_exit+0x21b/0x2d0 [ 1144.588259][T20784] ? rt_spin_unlock+0x160/0x200 [ 1144.588282][T20784] get_signal+0x1284/0x1330 [ 1144.588314][T20784] arch_do_signal_or_restart+0xbc/0x840 [ 1144.588335][T20784] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1144.588363][T20784] exit_to_user_mode_loop+0x86/0x4d0 [ 1144.588382][T20784] ? rcu_is_watching+0x15/0xb0 [ 1144.588413][T20784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.588432][T20784] ? do_syscall_64+0x33e/0xf80 [ 1144.588451][T20784] ? clear_bhb_loop+0x40/0x90 [ 1144.588471][T20784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.588496][T20784] [ 1144.588503][T20784] [ 1144.588507][T20784] Allocated by task 5278: [ 1144.588516][T20784] kasan_save_track+0x3e/0x80 [ 1144.588537][T20784] __kasan_kmalloc+0x93/0xb0 [ 1144.588558][T20784] __kvmalloc_node_noprof+0x3c2/0x8e0 [ 1144.588581][T20784] pfifo_fast_init+0x112/0x6f0 [ 1144.588604][T20784] qdisc_create_dflt+0x13b/0x4e0 [ 1144.588627][T20784] dev_activate+0x378/0x1150 [ 1144.588640][T20784] __dev_open+0x67a/0x830 [ 1144.588660][T20784] __dev_change_flags+0x2fa/0x7e0 [ 1144.588683][T20784] netif_change_flags+0x88/0x1a0 [ 1144.588705][T20784] dev_change_flags+0x130/0x270 [ 1144.588726][T20784] devinet_ioctl+0x9f2/0x1b30 [ 1144.588749][T20784] inet_ioctl+0x42a/0x560 [ 1144.588767][T20784] sock_do_ioctl+0x101/0x320 [ 1144.588786][T20784] sock_ioctl+0x5c9/0x7f0 [ 1144.588804][T20784] __se_sys_ioctl+0xff/0x170 [ 1144.588825][T20784] do_syscall_64+0x15f/0xf80 [ 1144.588841][T20784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.588857][T20784] [ 1144.588861][T20784] The buggy address belongs to the object at ffff8880317e8000 [ 1144.588861][T20784] which belongs to the cache kmalloc-8k of size 8192 [ 1144.588876][T20784] The buggy address is located 6208 bytes to the right of [ 1144.588876][T20784] allocated 8000-byte region [ffff8880317e8000, ffff8880317e9f40) [ 1144.588895][T20784] [ 1144.588899][T20784] The buggy address belongs to the physical page: [ 1144.588916][T20784] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x317e8 [ 1144.588937][T20784] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1144.588951][T20784] flags: 0x80000000000040(head|node=0|zone=1) [ 1144.588970][T20784] page_type: f5(slab) [ 1144.588986][T20784] raw: 0080000000000040 ffff88813fe17280 dead000000000100 dead000000000122 [ 1144.589001][T20784] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1144.589016][T20784] head: 0080000000000040 ffff88813fe17280 dead000000000100 dead000000000122 [ 1144.589029][T20784] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1144.589043][T20784] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1144.589057][T20784] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1144.589066][T20784] page dumped because: kasan: bad access detected [ 1144.589078][T20784] page_owner tracks the page as allocated [ 1144.589084][T20784] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17142, tgid 17142 (syz-executor), ts 847366907379, free_ts 821567727040 [ 1144.589114][T20784] post_alloc_hook+0x1f9/0x250 [ 1144.589136][T20784] get_page_from_freelist+0x27d6/0x2850 [ 1144.589151][T20784] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1144.589167][T20784] allocate_slab+0x74/0x5e0 [ 1144.589183][T20784] refill_objects+0x33c/0x3d0 [ 1144.589199][T20784] __pcs_replace_empty_main+0x373/0x720 [ 1144.589216][T20784] __kmalloc_noprof+0x530/0x7b0 [ 1144.589237][T20784] batadv_hash_new+0x7b/0x2c0 [ 1144.589252][T20784] batadv_tt_init+0xbc/0x2a0 [ 1144.589274][T20784] batadv_mesh_init+0x416/0x710 [ 1144.589296][T20784] batadv_meshif_init_late+0xa38/0xee0 [ 1144.589316][T20784] register_netdevice+0x6e4/0x1f10 [ 1144.589332][T20784] rtnl_newlink_create+0x329/0xb70 [ 1144.589347][T20784] rtnl_newlink+0x166a/0x1bb0 [ 1144.589368][T20784] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1144.589397][T20784] netlink_rcv_skb+0x232/0x4b0 [ 1144.589418][T20784] page last free pid 16934 tgid 16934 stack trace: [ 1144.589427][T20784] __free_frozen_pages+0x1075/0x11b0 [ 1144.589445][T20784] __slab_free+0x252/0x2a0 [ 1144.589463][T20784] qlist_free_all+0x99/0x100 [ 1144.589479][T20784] kasan_quarantine_reduce+0x148/0x160 [ 1144.589496][T20784] __kasan_slab_alloc+0x22/0x80 [ 1144.589516][T20784] kmem_cache_alloc_noprof+0x33b/0x680 [ 1144.589535][T20784] ptlock_alloc+0x20/0x70 [ 1144.589554][T20784] pte_alloc_one+0x7e/0x380 [ 1144.589573][T20784] __do_fault+0xd1/0x2a0 [ 1144.589586][T20784] do_pte_missing+0x65b/0x2940 [ 1144.589600][T20784] handle_mm_fault+0xdb5/0x14c0 [ 1144.589618][T20784] do_user_addr_fault+0xa73/0x1340 [ 1144.589636][T20784] exc_page_fault+0x6a/0xc0 [ 1144.589651][T20784] asm_exc_page_fault+0x26/0x30 [ 1144.589667][T20784] [ 1144.589672][T20784] Memory state around the buggy address: [ 1144.589681][T20784] ffff8880317eb680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1144.589691][T20784] ffff8880317eb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1144.589702][T20784] >ffff8880317eb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1144.589711][T20784] ^ [ 1144.589720][T20784] ffff8880317eb800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1144.589731][T20784] ffff8880317eb880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1144.589740][T20784] ================================================================== [ 1144.862377][T20784] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1144.862407][T20784] CPU: 0 UID: 0 PID: 20784 Comm: syz.3.3890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1144.862434][T20784] Tainted: [L]=SOFTLOCKUP [ 1144.862441][T20784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1144.862452][T20784] Call Trace: [ 1144.862459][T20784] [ 1144.862466][T20784] vpanic+0x56c/0xa60 [ 1144.862496][T20784] ? __pfx_vpanic+0x10/0x10 [ 1144.862523][T20784] panic+0xc5/0xd0 [ 1144.862550][T20784] ? __pfx_panic+0x10/0x10 [ 1144.862572][T20784] ? preempt_schedule_thunk+0x16/0x40 [ 1144.862592][T20784] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1144.862611][T20784] ? preempt_schedule_thunk+0x16/0x40 [ 1144.862628][T20784] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1144.862647][T20784] check_panic_on_warn+0x89/0xb0 [ 1144.862666][T20784] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1144.862684][T20784] end_report+0x73/0x170 [ 1144.862712][T20784] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1144.862729][T20784] kasan_report+0x128/0x150 [ 1144.862754][T20784] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1144.862776][T20784] __list_del_entry_valid_or_report+0x92/0x190 [ 1144.862796][T20784] bt_accept_unlink+0x39/0x260 [ 1144.862818][T20784] l2cap_sock_teardown_cb+0x17e/0x490 [ 1144.862838][T20784] l2cap_chan_del+0xb5/0x610 [ 1144.862857][T20784] ? l2cap_conn_del+0x331/0x570 [ 1144.862880][T20784] l2cap_conn_del+0x33d/0x570 [ 1144.862906][T20784] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1144.862930][T20784] hci_conn_hash_flush+0x10d/0x260 [ 1144.862957][T20784] hci_dev_close_sync+0x821/0x10e0 [ 1144.862982][T20784] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1144.863004][T20784] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1144.863024][T20784] ? hci_unregister_dev+0x212/0x5a0 [ 1144.863045][T20784] hci_unregister_dev+0x21a/0x5a0 [ 1144.863065][T20784] vhci_release+0x155/0x1b0 [ 1144.863086][T20784] ? __pfx_vhci_release+0x10/0x10 [ 1144.863105][T20784] __fput+0x461/0xa70 [ 1144.863130][T20784] task_work_run+0x1d9/0x270 [ 1144.863151][T20784] ? __pfx_task_work_run+0x10/0x10 [ 1144.863170][T20784] ? do_exit+0x70a/0x22c0 [ 1144.863188][T20784] ? kmem_cache_free+0x187/0x6c0 [ 1144.863211][T20784] ? put_net+0x191/0x260 [ 1144.863232][T20784] ? do_exit+0x70a/0x22c0 [ 1144.863251][T20784] do_exit+0x70f/0x22c0 [ 1144.863271][T20784] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1144.863290][T20784] ? __pfx_do_exit+0x10/0x10 [ 1144.863307][T20784] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1144.863331][T20784] ? reacquire_held_locks+0x104/0x190 [ 1144.863352][T20784] ? rt_spin_lock+0x1e0/0x400 [ 1144.863379][T20784] do_group_exit+0x21b/0x2d0 [ 1144.863397][T20784] ? rt_spin_unlock+0x160/0x200 [ 1144.863420][T20784] get_signal+0x1284/0x1330 [ 1144.863451][T20784] arch_do_signal_or_restart+0xbc/0x840 [ 1144.863472][T20784] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1144.863498][T20784] exit_to_user_mode_loop+0x86/0x4d0 [ 1144.863515][T20784] ? rcu_is_watching+0x15/0xb0 [ 1144.863540][T20784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.863557][T20784] ? do_syscall_64+0x33e/0xf80 [ 1144.863575][T20784] ? clear_bhb_loop+0x40/0x90 [ 1144.863593][T20784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.863614][T20784] [ 1144.864149][T20784] Kernel Offset: disabled