last executing test programs: 23m47.2251409s ago: executing program 32 (id=220): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000851}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23m35.42239873s ago: executing program 33 (id=293): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x4000010) 22m58.415275289s ago: executing program 6 (id=529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0xe, 0x0, 0x0, 0x2f6}, 0x94) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x638, 0x628, 0x3f8, 0x3f8, 0x0, 0x628, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x7400}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'nr0\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'sit0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 22m58.129152668s ago: executing program 6 (id=532): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 22m57.501667347s ago: executing program 6 (id=537): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 22m57.275392545s ago: executing program 6 (id=538): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 22m56.650414045s ago: executing program 6 (id=542): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) 22m56.268896297s ago: executing program 6 (id=545): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22m55.739868073s ago: executing program 34 (id=545): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22m23.550278951s ago: executing program 35 (id=749): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x1}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r2, 0x200007}, &(0x7f0000000040)=0x8) 22m9.349064726s ago: executing program 5 (id=838): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000200)=0x452da, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/87, &(0x7f0000000580)=0x57) 22m6.650715891s ago: executing program 5 (id=847): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001400000000000000000090003"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 22m5.536581746s ago: executing program 5 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES32], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x2, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@access_uid}, {@version_u}, {@noextend}, {@cache_none}, {@cache_loose}, {@version_L}, {@noxattr}, {@privport}]}}) 22m5.264992194s ago: executing program 5 (id=857): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@errors_remount}, {@shortname_lower}, {@shortname_mixed}, {@fat=@flush}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 22m4.800996789s ago: executing program 5 (id=859): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 22m4.174610349s ago: executing program 5 (id=861): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000680)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) signalfd4(r1, &(0x7f00000002c0)={[0x6]}, 0x8, 0x800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x20002013}) 22m3.674159134s ago: executing program 36 (id=861): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000680)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) signalfd4(r1, &(0x7f00000002c0)={[0x6]}, 0x8, 0x800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x20002013}) 19m41.761794612s ago: executing program 7 (id=1874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x20008080) r2 = epoll_create1(0x80000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x500000b, 0x204031, 0xffffffffffffffff, 0x47aef000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000008}) 19m41.567476788s ago: executing program 7 (id=1875): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0xfffffff8}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x80000004}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x404c0c4}, 0x4) 19m41.340887535s ago: executing program 7 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 19m41.057566304s ago: executing program 7 (id=1883): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f00000003c0), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000440)=""/148, 0x94) 19m40.206219992s ago: executing program 7 (id=1904): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7fff0026}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = io_uring_setup(0x60fd, &(0x7f0000000000)={0x0, 0xeec2, 0x2, 0x2, 0x116}) close_range(r4, r4, 0x0) splice(r2, 0x0, r1, 0x0, 0xc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19m39.775846236s ago: executing program 7 (id=1898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x0) 19m39.35337191s ago: executing program 37 (id=1898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x0) 9m18.865949709s ago: executing program 3 (id=5411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_emit_ethernet(0xbe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1f0800450000b00000000200119078000000000000000000004e20009c905bd845f458f9b649bd0e287702f178dff98c8d6b02f029f30930cc593d79e16d2f5ba45ae2ebc9ada87b3df9291090c892e0198c3f759d3e92e8decaae25b9b990f47f8df1c270029d925b2732eecacc9d666932d9b5c5dcd521b858fac948673349e947e9ca65237363d0"], 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) 9m18.82788987s ago: executing program 3 (id=5416): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r2, 0x3, 0x80000}) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 9m16.767420417s ago: executing program 3 (id=5420): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 9m15.45960016s ago: executing program 3 (id=5426): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) r3 = fanotify_init(0x20, 0x800) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x2100, 0x84) fanotify_mark(r3, 0x641, 0x1020, r4, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 9m13.744166616s ago: executing program 3 (id=5432): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x7) write(r3, &(0x7f0000000240)="c6", 0x1) 9m13.206550313s ago: executing program 3 (id=5436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 8m56.757695048s ago: executing program 38 (id=5436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7m14.597321457s ago: executing program 4 (id=5665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdir(0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x240001dd) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, r2, 0x0, 0x0, 0x8000000000}]) io_destroy(r3) 7m13.128558044s ago: executing program 4 (id=5671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="554b00000000000000000800000014000180080005eeffffffff050001"], 0x28}}, 0x0) 7m10.102544293s ago: executing program 4 (id=5675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m58.49318378s ago: executing program 4 (id=5695): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x6}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) 6m48.225043194s ago: executing program 4 (id=5712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 6m38.992984424s ago: executing program 4 (id=5728): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m36.860490663s ago: executing program 9 (id=5733): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x3}) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f11, 0x12) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200000000e4ffff0d1208000f0100810401a80016ea1f000640000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a06408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000000737", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 6m36.220735994s ago: executing program 9 (id=5737): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 6m35.040718822s ago: executing program 9 (id=5740): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r5, 0x0, 0x10}, 0xc) 6m34.537658008s ago: executing program 9 (id=5741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m30.397996403s ago: executing program 9 (id=5746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x20001000, 0x4000, 0x0, 0x0, 0x1}, 0x10) 6m27.854665136s ago: executing program 9 (id=5750): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00'}) 6m23.332269832s ago: executing program 39 (id=5728): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m9.88196089s ago: executing program 40 (id=5750): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00'}) 4m58.268350776s ago: executing program 0 (id=5886): syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="bb090000000000000007daa786dd6002ad1800000000000000ffff00000000ff020000000000000000000000000001030190780000000060fd906300002f00"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000480)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000001c0)=""/5, 0x200000, 0x800}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000c3403000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x8e, &(0x7f0000000080)=""/142, 0x41000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff, 0x280}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x80000001, 0x4}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4m54.700092021s ago: executing program 0 (id=5892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x8, 0x1, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4m51.115129298s ago: executing program 0 (id=5901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 4m49.500650111s ago: executing program 0 (id=5904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 4m45.579491438s ago: executing program 0 (id=5909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad386dd", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m41.290161708s ago: executing program 0 (id=5913): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = getpgrp(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x2, 0x0, 0x7) 4m25.529052769s ago: executing program 41 (id=5913): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = getpgrp(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x2, 0x0, 0x7) 4m2.172789388s ago: executing program 1 (id=5955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r2, 0xfffffff9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x1, 'veth0_to_hsr\x00', {}, 0x8000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 3m59.968208359s ago: executing program 1 (id=5962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) 3m54.205986437s ago: executing program 1 (id=5967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1ab601) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x108, 0x4000000000000ffd, 0x0, 0x0, 0x19, 0x0, "faf90517e5a114998907000000ea6acc96e3a2503dc3bd7d58127cbad0099cebdc25f5ff3798c8b534464c516bdd8a0f350100e35abdb80e38f5eb01000100", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "a13900", [0x8, 0xfff]}}) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000240)=0x1) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x7151, 0x3) 3m51.489088954s ago: executing program 1 (id=5971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0xc050) 3m49.431592179s ago: executing program 1 (id=5975): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x3c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) 3m41.894531878s ago: executing program 1 (id=5983): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x62040200) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) pread64(r2, &(0x7f0000000240)=""/81, 0x51, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) 3m22.372709136s ago: executing program 42 (id=5983): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x62040200) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8}]}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) pread64(r2, &(0x7f0000000240)=""/81, 0x51, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) 15.788614641s ago: executing program 8 (id=6207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.740017009s ago: executing program 8 (id=6212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 10.522714487s ago: executing program 2 (id=6213): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x15) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.48010362s ago: executing program 8 (id=6214): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x110, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.317577115s ago: executing program 2 (id=6215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.955939119s ago: executing program 8 (id=6216): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.422943047s ago: executing program 8 (id=6217): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r4, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.349070246s ago: executing program 8 (id=6218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfd, r4}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x220}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000007c0)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") 2.309988357s ago: executing program 2 (id=6219): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44800, 0x40140}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x40818) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2248260, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 801.064625ms ago: executing program 2 (id=6220): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x7fffffff}, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgid(0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x140) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x80}]}}}]}, 0x44}}, 0x0) 390.277698ms ago: executing program 2 (id=6221): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b1", 0x23}, {&(0x7f00000006c0)='\b', 0x1}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2", 0x75}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db1", 0x13}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f000001"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 2 (id=6222): openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) kernel console output (not intermixed with test programs): an_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.946708][T22141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.065411][T22141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.100159][T22141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.113534][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 1005.128107][T22141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.320586][T22181] SET target dimension over the limit! [ 1005.731754][T22141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.685077][T22141] device hsr_slave_0 entered promiscuous mode [ 1006.736651][T22141] device hsr_slave_1 entered promiscuous mode [ 1006.855550][T22141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1006.875517][T22141] Cannot create hsr debugfs directory [ 1007.193364][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 1008.771758][T22207] ceph: No mds server is up or the cluster is laggy [ 1009.091488][T22213] netlink: 'syz.2.5498': attribute type 1 has an invalid length. [ 1009.194567][T22213] device bond8 entered promiscuous mode [ 1009.201976][T22213] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1009.280444][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 1009.336571][T22217] bond8: (slave bridge7): making interface the new active one [ 1009.398979][T22217] device bridge7 entered promiscuous mode [ 1009.650266][T22217] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 1010.493922][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 1011.355170][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 1013.481666][T22272] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6977] was attempted by ""[22272] [ 1013.507132][T22273] netlink: 'syz.2.5510': attribute type 4 has an invalid length. [ 1014.843590][T22275] netlink: 'syz.2.5510': attribute type 4 has an invalid length. [ 1017.924133][T22294] netlink: 112 bytes leftover after parsing attributes in process `syz.9.5517'. [ 1017.953456][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 1017.953476][ T26] audit: type=1326 audit(1025.127:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22292 comm="syz.4.5516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e9499ce59 code=0x0 [ 1018.139952][T22141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1018.210769][T22141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1018.269796][T22141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1018.332165][T22141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1020.157109][T22141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.348559][T18295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.371371][T18295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.423921][T22141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.447052][T22318] device team_slave_0 left promiscuous mode [ 1020.460305][T22318] team0: Port device team_slave_0 removed [ 1020.466934][T22318] device team_slave_1 left promiscuous mode [ 1020.476091][T22318] team0: Port device team_slave_1 removed [ 1020.482398][T22318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.491403][T22318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.499545][T22318] device netdevsim0 left promiscuous mode [ 1020.519360][T22318] team0: Port device netdevsim0 removed [ 1020.559763][T22318] bond1: (slave bridge1): Releasing active interface [ 1020.574030][T22318] bond5: (slave ip6gretap1): Releasing active interface [ 1020.616359][T22318] bond0: (slave macvlan2): Releasing active interface [ 1020.634594][T22140] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1020.664251][T22318] device team0 left promiscuous mode [ 1020.677851][T22321] team0: Mode changed to "loadbalance" [ 1020.720348][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1020.744398][ T4355] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1020.758881][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.815301][T18277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.823757][T18277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.889365][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.964724][T22325] netlink: 'syz.8.5523': attribute type 1 has an invalid length. [ 1021.033850][T22325] device bond13 entered promiscuous mode [ 1021.050967][T22325] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1021.083516][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.137263][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.165980][T18308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.173289][T18308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.756668][T22329] bond13: (slave bridge7): making interface the new active one [ 1023.771006][T22329] device bridge7 entered promiscuous mode [ 1023.792174][T22329] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 1023.822276][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 1023.845437][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1023.967941][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.810519][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.847408][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1027.088746][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1027.133931][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1027.189362][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1027.234013][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1027.313477][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1027.357247][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1027.444778][T22141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1027.511283][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1028.748299][T22399] netlink: 'syz.9.5537': attribute type 1 has an invalid length. [ 1030.310679][T22411] bond7: (slave bridge4): making interface the new active one [ 1030.694570][T22411] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1030.848892][T22399] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5537'. [ 1030.958711][T22399] device bond7 entered promiscuous mode [ 1031.046101][T22399] device bridge4 entered promiscuous mode [ 1031.151689][T22399] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1031.800335][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1031.835064][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1031.899938][T22141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.087647][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1032.159718][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.209391][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1032.262161][T18288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.592813][T22141] device veth0_vlan entered promiscuous mode [ 1032.621887][T18271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1034.319061][T18271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1036.863293][T22141] device veth1_vlan entered promiscuous mode [ 1037.896778][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1037.924337][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.215337][T22141] device veth0_macvtap entered promiscuous mode [ 1040.276532][T22141] device veth1_macvtap entered promiscuous mode [ 1040.524023][T22141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.608594][T22141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.825225][T22141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.836069][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1040.875005][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.971184][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1041.185494][T22141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.228868][T22141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.365599][T22141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.433341][T22141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.488907][T22141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.541880][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1042.585994][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1043.211807][T18291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.273332][T18291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.332989][T18309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1043.381069][T18309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.432135][T18309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.487563][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1047.425498][T22547] netlink: 'syz.1.5564': attribute type 1 has an invalid length. [ 1047.804543][T22547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1047.985914][T22547] device ip6_vti0 entered promiscuous mode [ 1050.129195][T22565] fuse: Bad value for 'fd' [ 1051.807556][T22581] bond7: (slave geneve3): Releasing active interface [ 1051.924053][T22583] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5575'. [ 1052.619436][T22581] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.633813][T22581] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.667769][T22581] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.171897][T22586] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1055.150410][T22581] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.125562][T22581] bond8: (slave bridge7): Releasing backup interface [ 1056.333407][T22581] device bridge7 left promiscuous mode [ 1059.565076][T22596] team0: Port device team_slave_0 removed [ 1059.944116][T22596] team0: Port device team_slave_1 removed [ 1060.034115][T22596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.133514][T22596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.303935][T22596] bond2: (slave veth0_virt_wifi): Releasing active interface [ 1060.388779][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.395606][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.754510][T22640] loop1: detected capacity change from 0 to 2048 [ 1061.790007][T22596] team0: Port device netdevsim0 removed [ 1061.790918][T22640] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1061.817276][T22640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1062.332551][T22644] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5590'. [ 1062.397911][T22596] bond2: (slave veth5): Releasing active interface [ 1063.366891][T22596] bond3: (slave bond4): Releasing backup interface [ 1063.473834][T22596] bond3: (slave bond4): the permanent HWaddr of slave - ea:28:ce:7a:d3:53 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1063.678978][T22596] bond3: (slave gretap1): making interface the new active one [ 1063.877734][T22596] bond3: (slave gretap1): Releasing backup interface [ 1064.027036][T22647] netlink: 'syz.8.5591': attribute type 1 has an invalid length. [ 1064.256233][T22647] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1064.341310][T22596] syz.4.5579 (22596) used greatest stack depth: 19152 bytes left [ 1064.578166][T22650] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1064.630641][T22650] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1064.692423][T22650] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 1064.728862][T22674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5599'. [ 1064.810120][T22651] device gretap3 entered promiscuous mode [ 1064.866644][T22651] bond14: (slave gretap3): making interface the new active one [ 1064.909156][T22651] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 1064.963458][T22670] netlink: 'syz.2.5599': attribute type 30 has an invalid length. [ 1066.312908][T22688] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1066.312908][T22688] The task syz.1.5602 (22688) triggered the difference, watch for misbehavior. [ 1070.116691][T22722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1070.179450][T22722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1070.736290][T22722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.808099][T22722] device bridge_slave_0 left promiscuous mode [ 1070.854365][T22722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.035437][T22729] overlayfs: failed to clone upperpath [ 1071.076473][T22722] device bridge_slave_1 left promiscuous mode [ 1071.123784][T22722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.320747][T22722] bond0: (slave bond_slave_0): Releasing backup interface [ 1071.384692][T22722] bond0: (slave bond_slave_1): Releasing backup interface [ 1071.628452][T22722] team0: Port device team_slave_0 removed [ 1071.699731][T22722] team0: Port device team_slave_1 removed [ 1071.732010][T22722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.776837][T22722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.845360][T22722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.875445][T22722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.578289][T22747] loop1: detected capacity change from 0 to 128 [ 1072.818113][T22747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1072.994434][ T26] audit: type=1326 audit(1080.217:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22746 comm="syz.1.5617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41a19ce59 code=0x0 [ 1073.773730][T22141] EXT4-fs (loop1): unmounting filesystem. [ 1075.364412][T22736] device bridge_slave_0 left promiscuous mode [ 1076.176822][T22736] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.189636][T22736] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.203104][T22736] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.218582][T22736] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.381417][T22736] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.391090][T22736] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.400488][T22736] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.409827][T22736] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.526298][T22736] device bond0 left promiscuous mode [ 1076.540045][T22736] device bond4 left promiscuous mode [ 1076.627716][T22736] device bridge3 left promiscuous mode [ 1076.711345][T22736] device bond10 left promiscuous mode [ 1076.736227][T22736] device bond13 left promiscuous mode [ 1076.741739][T22736] device bridge7 left promiscuous mode [ 1076.807338][T22736] device gretap3 left promiscuous mode [ 1077.125833][T22804] loop1: detected capacity change from 0 to 256 [ 1077.221246][T22804] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1077.248904][T22804] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1077.367295][T22804] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1079.791427][T22826] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1080.014847][T22826] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1080.083135][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1082.214244][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5633'. [ 1084.803580][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.701228][T22883] exfat: Deprecated parameter 'debug' [ 1085.768968][T22883] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1085.865120][T22883] exFAT-fs (loop1): unable to read boot sector [ 1085.891079][T22892] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1085.895363][T22883] exFAT-fs (loop1): failed to read boot sector [ 1085.943833][T22883] exFAT-fs (loop1): failed to recognize exfat type [ 1090.012953][T22918] loop1: detected capacity change from 0 to 512 [ 1090.267724][T22918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1099.885668][T22141] EXT4-fs (loop1): unmounting filesystem. [ 1100.381648][T22979] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5659'. [ 1106.171208][T23038] netlink: 'syz.4.5671': attribute type 1 has an invalid length. [ 1110.148776][T23056] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1110.163451][T23061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.242004][T23061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.353404][T23066] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1110.394277][T23067] netlink: 'syz.8.5680': attribute type 2 has an invalid length. [ 1110.423382][T23067] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5680'. [ 1113.524110][T23089] overlayfs: failed to resolve './file0': -2 [ 1120.698181][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.710907][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.612188][T23171] loop1: detected capacity change from 0 to 2048 [ 1122.692836][T23171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1123.696465][T22141] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1124.591094][T22141] EXT4-fs (loop1): unmounting filesystem. [ 1127.867489][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 1128.521200][T23224] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5710'. [ 1129.960967][T23241] loop1: detected capacity change from 0 to 8 [ 1132.729905][T23241] SQUASHFS error: Failed to allocate lzo workspace [ 1132.798160][T23241] squashfs image failed sanity check [ 1135.151957][T23274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.426571][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5725'. [ 1135.459303][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5725'. [ 1135.505211][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5725'. [ 1140.223979][T23313] netlink: 'syz.9.5733': attribute type 2 has an invalid length. [ 1140.265627][T23313] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5733'. [ 1141.671377][ T26] audit: type=1326 audit(1148.887:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23339 comm="syz.1.5738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41a19ce59 code=0x0 [ 1141.835527][ T26] audit: type=1326 audit(1148.997:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23339 comm="syz.1.5738" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb41a19ce59 code=0x0 [ 1154.871654][T23434] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1156.515253][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1156.527681][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1156.544382][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1156.552814][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1156.562028][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1156.569550][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1157.802688][T23451] 9pnet_fd: p9_fd_create_tcp (23451): problem connecting socket to 127.0.0.1 [ 1158.756779][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 1159.682581][T23445] chnl_net:caif_netlink_parms(): no params data found [ 1160.813354][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 1161.027335][T23445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.102376][T23445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.155400][T23445] device bridge_slave_0 entered promiscuous mode [ 1161.225359][T23445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.232714][T23445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.274572][T23445] device bridge_slave_1 entered promiscuous mode [ 1161.426090][T23445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.487020][T23445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.887322][T23445] team0: Port device team_slave_0 added [ 1161.940078][T23445] team0: Port device team_slave_1 added [ 1162.076782][T23445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.099343][T23445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.791918][T23445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.814227][T23445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.821893][T23445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.851550][T23445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.873955][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 1163.027553][T23501] loop1: detected capacity change from 0 to 128 [ 1166.830984][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 1166.885777][T23445] device hsr_slave_0 entered promiscuous mode [ 1166.984231][T23445] device hsr_slave_1 entered promiscuous mode [ 1167.084338][T23445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1167.092160][T23445] Cannot create hsr debugfs directory [ 1169.764684][T18290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.903670][T18290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.007237][T18290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.053427][T18290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.082578][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1171.101364][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1171.112956][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1171.121618][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1171.129931][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1171.138156][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1172.070276][T18290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.263330][T18290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.436389][T23550] batman_adv: batadv0: Adding interface: dummy0 [ 1172.455691][T23550] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.609422][T23550] batman_adv: batadv0: Interface activated: dummy0 [ 1172.802048][T18290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.865589][T18290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.979139][T23552] batadv0: mtu less than device minimum [ 1173.029377][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.041971][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.054492][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.067042][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.079655][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.092183][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.104673][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.117316][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.130220][T23552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1173.203539][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 1174.511876][T23567] loop1: detected capacity change from 0 to 1024 [ 1174.609267][T23567] syz.1.5780: attempt to access beyond end of device [ 1174.609267][T23567] loop1: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 1174.725439][T23567] syz.1.5780: attempt to access beyond end of device [ 1174.725439][T23567] loop1: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 1174.811059][T23567] syz.1.5780: attempt to access beyond end of device [ 1174.811059][T23567] loop1: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 1174.887670][T23567] syz.1.5780: attempt to access beyond end of device [ 1174.887670][T23567] loop1: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 1174.961676][T23567] syz.1.5780: attempt to access beyond end of device [ 1174.961676][T23567] loop1: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 1175.028680][T23567] syz.1.5780: attempt to access beyond end of device [ 1175.028680][T23567] loop1: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 1175.120065][T23567] syz.1.5780: attempt to access beyond end of device [ 1175.120065][T23567] loop1: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 1175.166666][T23567] syz.1.5780: attempt to access beyond end of device [ 1175.166666][T23567] loop1: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 1175.229293][T23567] syz.1.5780: attempt to access beyond end of device [ 1175.229293][T23567] loop1: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 1175.270225][T23567] syz.1.5780: attempt to access beyond end of device [ 1175.270225][T23567] loop1: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 1175.315352][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 1176.941372][T18290] tipc: Left network mode [ 1177.067643][T23537] chnl_net:caif_netlink_parms(): no params data found [ 1177.353637][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 1178.871040][T23537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.954470][T23537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.031453][T23537] device bridge_slave_0 entered promiscuous mode [ 1179.211895][T23537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.813399][T23537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.841659][T23537] device bridge_slave_1 entered promiscuous mode [ 1180.374444][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 1181.654521][T23645] tipc: Failed to remove unknown binding: 66,0,0/0:3884093212/3884093214 [ 1181.663094][T23645] tipc: Failed to remove unknown binding: 66,0,0/0:3884093212/3884093213 [ 1181.673883][T23645] tipc: Failed to remove unknown binding: 66,0,0/0:3884093212/3884093214 [ 1181.682427][T23645] tipc: Failed to remove unknown binding: 66,0,0/0:3884093212/3884093213 [ 1183.896874][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.904475][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.415979][T23537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.696634][T23537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.994262][T23537] team0: Port device team_slave_0 added [ 1186.056102][T23537] team0: Port device team_slave_1 added [ 1187.108639][T23537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.123973][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.262286][T23537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.354468][T23537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.361484][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.557373][T23537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.959976][T23537] device hsr_slave_0 entered promiscuous mode [ 1188.546741][T23537] device hsr_slave_1 entered promiscuous mode [ 1188.563956][T23537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.602257][T23537] Cannot create hsr debugfs directory [ 1189.103946][T23445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1190.363810][T23445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1190.455120][T23445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1190.529150][T23445] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1191.791178][T23445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.825377][T23716] netlink: 'syz.2.5811': attribute type 2 has an invalid length. [ 1191.932974][T18309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1191.951301][T18309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1191.980600][T23445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.997171][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1192.027756][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1192.044814][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1192.071491][T18277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.078757][T18277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.128866][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1192.168817][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1192.208023][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1192.241226][T18277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.248489][T18277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.287348][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1192.345886][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1192.368657][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1192.415704][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1192.442298][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1192.481693][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1192.529742][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1192.583901][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1192.615127][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1192.678999][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.710826][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1192.741542][T23445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1192.781434][T23723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5812'. [ 1193.020131][T23723] device hsr_slave_1 left promiscuous mode [ 1193.415603][T23735] "syz.8.5813" (23735) uses obsolete ecb(arc4) skcipher [ 1194.316820][T23738] loop1: detected capacity change from 0 to 512 [ 1194.325307][T23738] EXT4-fs: Ignoring removed orlov option [ 1194.332262][T23738] EXT4-fs: quotafile must be on filesystem root [ 1196.832724][T18298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1197.458341][T23659] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1197.480600][T18298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1198.101077][T23445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.143790][T23787] netlink: 'syz.8.5823': attribute type 4 has an invalid length. [ 1202.853477][T18290] device hsr_slave_0 left promiscuous mode [ 1202.890819][T18290] device hsr_slave_1 left promiscuous mode [ 1203.081571][T18290] device veth1_macvtap left promiscuous mode [ 1203.125745][T18290] device veth0_macvtap left promiscuous mode [ 1203.159224][T18290] device veth1_vlan left promiscuous mode [ 1204.259257][T23831] sctp: [Deprecated]: syz.2.5830 (pid 23831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1204.259257][T23831] Use struct sctp_sack_info instead [ 1204.571843][T18290] bond4 (unregistering): Released all slaves [ 1206.601408][T18290] bond3 (unregistering): Released all slaves [ 1206.668223][T18290] bond0 (unregistering): Released all slaves [ 1207.553520][T18290] bond2 (unregistering): Released all slaves [ 1208.222484][T18290] bond1 (unregistering): Released all slaves [ 1210.130324][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5828'. [ 1210.356916][T23816] device hsr_slave_1 left promiscuous mode [ 1210.369670][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1210.380689][T23867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1210.393641][T23873] bridge0: port 1(erspan0) entered blocking state [ 1210.400165][T23873] bridge0: port 1(erspan0) entered disabled state [ 1210.411881][T23873] device erspan0 entered promiscuous mode [ 1210.420418][T23873] bridge0: port 1(erspan0) entered blocking state [ 1210.427004][T23873] bridge0: port 1(erspan0) entered forwarding state [ 1210.496801][T23874] device erspan0 left promiscuous mode [ 1210.519773][T23874] bridge0: port 1(erspan0) entered disabled state [ 1210.571426][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1210.591677][T18308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1210.629388][T23537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1210.727760][T23537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1211.304929][T23884] xt_NFQUEUE: number of total queues is 0 [ 1212.078667][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1212.094205][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1212.137836][T23445] device veth0_vlan entered promiscuous mode [ 1212.149802][T23537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1212.169793][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1212.184911][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1212.204160][T23537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1212.257974][T23445] device veth1_vlan entered promiscuous mode [ 1212.652841][T23888] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5843'. [ 1213.091354][T23537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.148910][T23537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.271936][T23537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1213.311157][T23537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1213.999494][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1214.015145][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1214.076548][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1214.136610][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1214.176944][T18299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.184161][T18299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.240955][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1214.463524][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1214.492720][T18299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.499947][T18299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.320950][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1215.366739][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1215.407437][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1215.421123][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1215.431883][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1215.442902][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1215.453755][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1215.464421][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1215.497717][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1215.643646][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1215.716764][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1215.729192][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1216.436414][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1216.468546][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1216.525425][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1216.579101][T23537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.324886][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1217.406393][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1217.508417][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1217.544171][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1217.605527][T23537] device veth0_vlan entered promiscuous mode [ 1217.631803][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1217.645226][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1217.736395][T23537] device veth1_vlan entered promiscuous mode [ 1217.820005][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1217.837947][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1217.849547][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1217.859774][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1217.868816][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1217.877728][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1217.980177][T23537] device veth0_macvtap entered promiscuous mode [ 1218.099876][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1218.134425][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1218.214516][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1218.278963][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1218.346743][T23537] device veth1_macvtap entered promiscuous mode [ 1218.381514][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1218.429902][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1218.609769][T23537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.639147][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1218.654459][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1219.862686][T23537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.933490][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 1220.043827][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1220.058930][T18299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1220.385606][T23537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.426995][T23537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.463403][T23537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.504816][T23537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.693882][T18292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.701762][T18292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.729596][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1221.773798][T23946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5856'. [ 1221.896649][T23950] loop7: detected capacity change from 0 to 16384 [ 1221.961784][T23952] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1222.003342][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 1222.121021][T23950] loop7: detected capacity change from 16384 to 0 [ 1222.200282][T23913] chnl_net:caif_netlink_parms(): no params data found [ 1222.266575][T18274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.304034][T18274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.362890][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1223.279138][T23913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.288585][T23913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.298176][T23913] device bridge_slave_0 entered promiscuous mode [ 1223.988636][T23978] loop0: detected capacity change from 0 to 512 [ 1224.034050][T23978] EXT4-fs: Ignoring removed i_version option [ 1224.061653][T23978] EXT4-fs: Ignoring removed nobh option [ 1224.091273][T23978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1224.138344][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 1224.194740][T23978] EXT4-fs (loop0): 1 truncate cleaned up [ 1224.207820][T23978] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1225.023036][T23983] loop1: detected capacity change from 0 to 40427 [ 1225.059345][T23913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.082976][T23983] F2FS-fs (loop1): invalid crc value [ 1225.097061][T23913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.112692][T23913] device bridge_slave_1 entered promiscuous mode [ 1225.187243][T23976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5860'. [ 1225.411940][T23983] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1225.553512][T23983] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1225.575557][T23913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.797459][T23913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.039743][T23913] team0: Port device team_slave_0 added [ 1226.158686][T23913] team0: Port device team_slave_1 added [ 1226.163470][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 1226.179560][ T26] audit: type=1800 audit(1233.397:457): pid=23983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5861" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1227.216306][ T26] audit: type=1800 audit(1234.437:458): pid=24006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5861" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 1227.494211][T22141] bio_check_eod: 23 callbacks suppressed [ 1227.494258][T22141] syz-executor: attempt to access beyond end of device [ 1227.494258][T22141] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1227.753537][T23913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.777749][T23913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.817718][T23913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.056257][T23913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.077816][T23913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.126602][T23913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.159759][T23537] EXT4-fs (loop0): unmounting filesystem. [ 1231.613934][T24022] xt_CONNSECMARK: invalid mode: 0 [ 1232.330846][T23913] device hsr_slave_0 entered promiscuous mode [ 1232.355554][T23913] device hsr_slave_1 entered promiscuous mode [ 1234.288673][T18299] device hsr_slave_0 left promiscuous mode [ 1234.834366][T18299] device hsr_slave_1 left promiscuous mode [ 1234.843858][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.872441][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.888367][T18299] device bridge_slave_1 left promiscuous mode [ 1234.904882][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.938955][T18299] device bridge_slave_0 left promiscuous mode [ 1234.984503][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.184341][T18299] device veth1_vlan left promiscuous mode [ 1235.192160][T18299] device veth0_vlan left promiscuous mode [ 1240.152297][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1240.281342][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1240.408152][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.574248][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.578984][T18299] bond0 (unregistering): Released all slaves [ 1243.947427][T24094] tipc: Started in network mode [ 1243.952574][T24094] tipc: Node identity 8a270e2fabb1, cluster identity 4711 [ 1244.055950][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.083254][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.118548][T24094] tipc: Enabled bearer , priority 0 [ 1244.576817][ T4324] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1244.815504][T24092] tipc: Disabling bearer [ 1244.864002][ T4324] usb 2-1: Using ep0 maxpacket: 16 [ 1244.892385][ T4324] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.017336][ T4324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1245.063440][ T4324] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1245.124649][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.216927][ T4324] usb 2-1: config 0 descriptor?? [ 1245.403427][T24129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1245.567290][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1245.619132][T24130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1246.391891][ T4324] usbhid 2-1:0.0: can't add hid device: -71 [ 1246.433636][ T4324] usbhid: probe of 2-1:0.0 failed with error -71 [ 1246.948173][T24144] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5901'. [ 1247.346520][ T4324] usb 2-1: USB disconnect, device number 2 [ 1248.150857][T24148] 9pnet_fd: p9_fd_create_tcp (24148): problem connecting socket to 127.0.0.1 [ 1251.216434][T24163] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1252.876768][T23913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1253.361441][T18299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.496509][T23913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1253.540932][T23913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1253.596519][T23913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1254.050328][T24187] xt_cgroup: invalid path, errno=-2 [ 1254.181678][T18299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.523046][T23913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.588536][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1254.627222][T18296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1254.667233][T23913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.699652][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1254.729232][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1254.773593][T18301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.781045][T18301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.853765][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1254.901411][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1254.944071][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1255.001202][T18301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.008415][T18301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.079488][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1255.141419][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1255.181835][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1255.225379][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1255.394553][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1255.461235][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1255.564436][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1255.654234][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1256.071424][T18299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.151332][T23913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1256.192659][T23913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1256.210131][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1256.231317][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1256.916828][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1258.403244][T18299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.794453][T24210] PKCS8: Unsupported PKCS#8 version [ 1263.247179][T18299] tipc: Left network mode [ 1266.613456][T18290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1266.621136][T18290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1266.725891][T23913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.222041][T18299] bond3: (slave erspan0): Releasing active interface [ 1271.893723][T18299] bond2: (slave gretap1): Releasing active interface [ 1271.912238][T24282] loop1: detected capacity change from 0 to 16 [ 1271.919303][T24282] erofs: Unknown parameter 'ÿÿÿÿ0xffffffffffffffffœôS2òç/¾b*üDObê hÄ*w³Rþ [ 1271.919303][T24282] ýß±ÌùÀùè™êšçÃZ+ ' [ 1271.974778][T24256] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1272.253600][T18305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1272.294223][T18305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.124303][T18299] device hsr_slave_0 left promiscuous mode [ 1275.202925][T18299] device hsr_slave_1 left promiscuous mode [ 1276.070012][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.086228][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.200001][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1276.218972][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1276.230842][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1276.246145][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1276.259347][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1276.271125][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1276.762355][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1276.777064][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1276.786968][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1276.797620][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1276.806455][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1276.816308][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1278.017673][T18299] bond8 (unregistering): Released all slaves [ 1278.295415][T18299] bond7 (unregistering): Released all slaves [ 1279.747293][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 1280.014323][T18299] bond6 (unregistering): (slave geneve3): Releasing active interface [ 1280.222748][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 1281.610317][T18299] bond6 (unregistering): Released all slaves [ 1281.834033][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 1282.175724][T18299] bond4 (unregistering): Released all slaves [ 1282.328159][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 1283.640709][T18299] bond0 (unregistering): Released all slaves [ 1283.913545][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 1284.122342][T18299] bond5 (unregistering): Released all slaves [ 1284.393601][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 1284.511767][T18299] bond3 (unregistering): Released all slaves [ 1284.811485][T18299] bond2 (unregistering): Released all slaves [ 1285.181518][T18299] bond1 (unregistering): Released all slaves [ 1285.993464][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 1286.152793][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1286.218036][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1286.484480][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 1286.991122][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5937'. [ 1287.004277][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5937'. [ 1287.189107][T24373] xt_bpf: check failed: parse error [ 1287.270424][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5940'. [ 1287.552588][T24353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1287.570779][T24353] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1287.592339][T24353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1287.609638][T24353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1291.360339][T24315] chnl_net:caif_netlink_parms(): no params data found [ 1292.109663][T24306] chnl_net:caif_netlink_parms(): no params data found [ 1292.274884][T24315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.290935][T24315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.302140][T24315] device bridge_slave_0 entered promiscuous mode [ 1292.415662][T24315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.422813][T24315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.447805][T24315] device bridge_slave_1 entered promiscuous mode [ 1292.486992][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5952'. [ 1292.631168][T24420] overlayfs: failed to clone lowerpath [ 1292.646677][T24420] overlayfs: failed to clone lowerpath [ 1293.022083][T24315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.107403][T24306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.127518][T24306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.185356][T24306] device bridge_slave_0 entered promiscuous mode [ 1293.280709][T24315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.325904][T24306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.523304][T24306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.542446][T24306] device bridge_slave_1 entered promiscuous mode [ 1293.648390][T24315] team0: Port device team_slave_0 added [ 1294.598105][T24306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.759158][T24315] team0: Port device team_slave_1 added [ 1294.786298][T24306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.890570][T24315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.908575][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.974508][T24315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.006277][T24306] team0: Port device team_slave_0 added [ 1295.028886][T24315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.047342][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.138857][T24315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.188660][T24306] team0: Port device team_slave_1 added [ 1295.877513][T24306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.884887][T24306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.912652][T24306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.926238][T24306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.933272][T24306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.978746][T24306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.035756][T24437] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1296.380667][T24315] device hsr_slave_0 entered promiscuous mode [ 1296.419587][T24315] device hsr_slave_1 entered promiscuous mode [ 1296.474252][T24315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.504898][T24315] Cannot create hsr debugfs directory [ 1296.584011][T24306] device hsr_slave_0 entered promiscuous mode [ 1296.610440][T24306] device hsr_slave_1 entered promiscuous mode [ 1296.630699][T24306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.669507][T24306] Cannot create hsr debugfs directory [ 1298.390541][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5964'. [ 1302.857136][T24478] loop4: detected capacity change from 0 to 7 [ 1302.996578][T18299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.177890][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1303.193704][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1303.203194][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1303.461969][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1303.471290][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1304.691183][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1304.700455][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1304.779069][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1304.789063][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1304.834974][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1304.844238][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1305.340483][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.348125][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.662669][T18299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.075315][T18299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.206753][T18299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.619558][T18299] tipc: Left network mode [ 1315.903310][T22788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1316.223172][T22788] usb 2-1: Using ep0 maxpacket: 16 [ 1316.246309][T22788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.288826][T22788] usb 2-1: config 0 has no interfaces? [ 1316.303624][T22788] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1316.818064][T22788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.838205][T22788] usb 2-1: config 0 descriptor?? [ 1317.301115][ T26] audit: type=1326 audit(1324.517:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24568 comm="syz.1.5983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41a19ce59 code=0x0 [ 1317.398819][T22798] usb 2-1: USB disconnect, device number 3 [ 1327.590989][ T26] audit: type=1326 audit(1334.807:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1327.654700][T24634] netlink: 'syz.2.5994': attribute type 4 has an invalid length. [ 1327.676199][T24634] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5994'. [ 1327.713375][ T26] audit: type=1326 audit(1334.837:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1327.829904][ T26] audit: type=1326 audit(1334.847:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1327.891317][ T26] audit: type=1326 audit(1334.847:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1328.003978][ T26] audit: type=1326 audit(1334.847:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1328.103937][ T26] audit: type=1326 audit(1334.847:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1328.162869][ T26] audit: type=1326 audit(1334.847:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1328.210594][ T26] audit: type=1326 audit(1334.847:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1328.270696][ T26] audit: type=1326 audit(1334.847:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1328.333729][T24315] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1328.369962][ T26] audit: type=1326 audit(1334.847:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.8.5995" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222ab9ce59 code=0x7ffc0000 [ 1328.528459][T24315] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1328.809519][T24315] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1328.839174][T24315] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1329.539730][T24306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1329.592460][T24306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1329.640000][T24306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1329.749738][T18299] device hsr_slave_0 left promiscuous mode [ 1329.770172][T18299] device hsr_slave_1 left promiscuous mode [ 1329.790556][T18299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.813437][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.327887][T18299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.373364][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.404112][T18299] device bridge_slave_1 left promiscuous mode [ 1334.410805][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.518090][T18299] device bridge_slave_0 left promiscuous mode [ 1334.553381][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.633380][T18299] device hsr_slave_0 left promiscuous mode [ 1334.663740][T18299] device hsr_slave_1 left promiscuous mode [ 1334.682612][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.741553][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.764075][T18299] device bridge_slave_1 left promiscuous mode [ 1334.770369][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.904926][T18299] device bridge_slave_0 left promiscuous mode [ 1334.911310][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.322534][T18299] device veth1_macvtap left promiscuous mode [ 1335.337855][T18299] device veth0_macvtap left promiscuous mode [ 1335.373359][T18299] device veth1_vlan left promiscuous mode [ 1335.405585][T18299] device veth0_vlan left promiscuous mode [ 1335.863419][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1335.877538][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1335.887241][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1335.927737][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1335.939680][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1335.952360][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1336.087126][ T4281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1336.103596][ T4281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1336.119994][ T4281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1336.153450][ T4281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1336.165406][ T4281] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1336.174990][ T4281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1337.530157][ T4281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1337.545492][ T4281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1337.555715][ T4281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1337.564006][ T4281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1337.577039][ T4281] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1337.584659][ T4281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1338.000061][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 1338.244419][ T4286] Bluetooth: hci6: command 0x0409 tx timeout [ 1339.673306][ T4286] Bluetooth: hci7: command 0x0409 tx timeout [ 1339.741465][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1339.900272][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1340.073315][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 1340.116001][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.313211][ T4286] Bluetooth: hci6: command 0x041b tx timeout [ 1340.477092][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.728287][T24734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6006'. [ 1341.687230][T18299] bond0 (unregistering): Released all slaves [ 1341.755155][ T4286] Bluetooth: hci7: command 0x041b tx timeout [ 1342.153220][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 1342.390969][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1342.398762][ T4286] Bluetooth: hci6: command 0x040f tx timeout [ 1342.484973][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1342.570661][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.660177][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.286822][T18299] bond0 (unregistering): Released all slaves [ 1343.462758][T24306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1343.833237][ T4286] Bluetooth: hci7: command 0x040f tx timeout [ 1344.233361][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 1344.473278][ T4286] Bluetooth: hci6: command 0x0419 tx timeout [ 1345.526264][T24753] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6008'. [ 1345.788286][T24706] chnl_net:caif_netlink_parms(): no params data found [ 1345.913739][ T4286] Bluetooth: hci7: command 0x0419 tx timeout [ 1346.918477][T24706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.997300][T24781] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6977] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[24781] [ 1347.978379][T24706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.344473][T24706] device bridge_slave_0 entered promiscuous mode [ 1349.297765][T24698] chnl_net:caif_netlink_parms(): no params data found [ 1349.509797][T24706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.518218][T24706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.526833][T24706] device bridge_slave_1 entered promiscuous mode [ 1349.597391][T24706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.675106][T24693] chnl_net:caif_netlink_parms(): no params data found [ 1350.390469][T24706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.746206][T24706] team0: Port device team_slave_0 added [ 1350.864356][T24706] team0: Port device team_slave_1 added [ 1350.870520][T24698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.883419][T24698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.953812][T24698] device bridge_slave_0 entered promiscuous mode [ 1351.035168][T24698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.042502][T24698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.116955][T24698] device bridge_slave_1 entered promiscuous mode [ 1351.178176][T24693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.189799][T24693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.254557][T24693] device bridge_slave_0 entered promiscuous mode [ 1351.302454][T24706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.344071][T24706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.483442][T24706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.497697][T24693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.513334][T24693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.522036][T24693] device bridge_slave_1 entered promiscuous mode [ 1351.811224][T24706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.834036][T24706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.955246][T24706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.869868][T24698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.915218][T24698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.031317][T24693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.454614][T24693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.576592][T24698] team0: Port device team_slave_0 added [ 1356.747680][T24706] device hsr_slave_0 entered promiscuous mode [ 1356.785233][T24706] device hsr_slave_1 entered promiscuous mode [ 1356.824771][T24698] team0: Port device team_slave_1 added [ 1356.881110][T24693] team0: Port device team_slave_0 added [ 1358.642983][T18299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.800275][T24693] team0: Port device team_slave_1 added [ 1358.840072][T24698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.857539][T24698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.003317][T24698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.249885][T18299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.371828][T24698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.413273][T24698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.612934][T24698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.914471][T18299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.008123][T24693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.037784][T24693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.163419][T24693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.291643][T24693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.309080][T24693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.454178][T24693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.900052][T18299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.986143][T24698] device hsr_slave_0 entered promiscuous mode [ 1362.014020][T24698] device hsr_slave_1 entered promiscuous mode [ 1362.042184][T24698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1362.123525][T24698] Cannot create hsr debugfs directory [ 1365.628872][T24693] device hsr_slave_0 entered promiscuous mode [ 1365.636337][T24693] device hsr_slave_1 entered promiscuous mode [ 1365.643812][T24693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1365.651879][T24693] Cannot create hsr debugfs directory [ 1366.402052][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.409685][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.520727][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1372.268319][T24706] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1372.393577][T24706] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1372.474007][T24706] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1372.492015][T24929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6039'. [ 1372.530841][T24706] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1373.935468][T24706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.595670][T18305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1376.195714][T18305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1376.277997][T24706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.480550][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1377.497530][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1377.540451][T18289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.549105][T18289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.566109][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1377.577607][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1377.599304][T18289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.608005][T18289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.691120][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1377.700748][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1377.710058][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1377.767824][T24706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1377.781436][T24706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1380.293873][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1380.322921][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1380.354340][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1380.392871][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1380.437149][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1380.464702][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1380.496341][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1380.524171][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1380.892900][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1380.922285][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1384.230087][T18274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1384.243005][T18274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1385.257636][T24706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.406281][T24698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1391.488050][T24698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1391.550859][T24698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1391.615051][T24698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1392.332535][T24698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.464760][T24698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.688682][T24698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1392.721259][T24698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1393.943241][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1393.963847][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1394.002083][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1394.026594][T25092] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1394.076685][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1394.135670][T18289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.142994][T18289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.240556][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1394.310715][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1394.361122][T18289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.368401][T18289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.446080][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1394.500487][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1394.558693][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1394.623702][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1394.680445][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1394.933385][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1394.978294][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1395.043818][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1395.117689][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1395.184088][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1395.234701][T25086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6065'. [ 1395.438353][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6065'. [ 1395.773285][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1395.781806][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1395.854846][T18289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1397.503476][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1397.524733][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1397.537599][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1397.546129][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1397.573535][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1397.581041][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1397.700119][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1397.717785][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1397.729312][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1397.765578][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1397.773746][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1397.781183][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1397.913882][T18299] device hsr_slave_0 left promiscuous mode [ 1398.022187][T18299] device hsr_slave_1 left promiscuous mode [ 1399.302980][T18299] batman_adv: batadv0: Interface deactivated: dummy0 [ 1399.319992][T18299] batman_adv: batadv0: Removing interface: dummy0 [ 1399.653532][T18299] device hsr_slave_0 left promiscuous mode [ 1399.671224][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1399.683922][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 1399.717681][T25129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1399.723158][T18299] device hsr_slave_1 left promiscuous mode [ 1399.731149][T25129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1399.740485][T25129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1399.753106][T25129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1399.762448][T25129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1399.769940][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.783698][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.858448][T18299] device bridge_slave_1 left promiscuous mode [ 1399.871833][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.913594][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 1399.950533][T18299] device bridge_slave_0 left promiscuous mode [ 1400.013316][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.127142][T18299] device hsr_slave_0 left promiscuous mode [ 1400.201821][T18299] device hsr_slave_1 left promiscuous mode [ 1400.220553][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.341741][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.364787][T18299] device bridge_slave_1 left promiscuous mode [ 1400.371059][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.495814][T18299] device bridge_slave_0 left promiscuous mode [ 1400.533949][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.312703][T18299] device veth1_macvtap left promiscuous mode [ 1401.339325][T18299] device veth0_macvtap left promiscuous mode [ 1401.463419][T18299] device veth1_vlan left promiscuous mode [ 1401.469448][T18299] device veth0_vlan left promiscuous mode [ 1401.753672][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 1401.833284][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 1401.993218][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 1403.833136][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 1403.921755][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 1404.079733][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 1405.925773][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 1406.033383][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 1406.407579][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 1406.561623][T25179] CIFS: iocharset name too long [ 1408.113363][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 1410.028263][T25201] netlink: 'syz.8.6082': attribute type 1 has an invalid length. [ 1410.043649][T25201] netlink: 'syz.8.6082': attribute type 2 has an invalid length. [ 1412.385460][T18299] bond0 (unregistering): Released all slaves [ 1413.561636][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1413.648486][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1413.732332][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.810402][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.180456][T18299] bond0 (unregistering): Released all slaves [ 1414.517530][T25220] can: request_module (can-proto-0) failed. [ 1416.419076][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1416.507698][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1416.587324][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.777286][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.955277][T18299] bond0 (unregistering): Released all slaves [ 1418.256360][T25127] chnl_net:caif_netlink_parms(): no params data found [ 1418.301402][T25112] chnl_net:caif_netlink_parms(): no params data found [ 1418.349070][T25115] chnl_net:caif_netlink_parms(): no params data found [ 1418.721537][T25127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.739718][T25127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.813425][T25127] device bridge_slave_0 entered promiscuous mode [ 1418.824524][T25127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.845451][T25127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.884529][T25127] device bridge_slave_1 entered promiscuous mode [ 1418.970541][T25115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.986080][T25115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.028019][T25115] device bridge_slave_0 entered promiscuous mode [ 1419.062435][T25112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.083168][T25112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.117086][T25112] device bridge_slave_0 entered promiscuous mode [ 1419.189034][T25115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.198610][T25115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.208826][T25115] device bridge_slave_1 entered promiscuous mode [ 1419.312222][T25112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.354300][T25112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.483344][T25112] device bridge_slave_1 entered promiscuous mode [ 1420.159822][T25112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.368687][T25127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.448524][T25112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.587994][T25127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.651295][T25115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.736373][T25115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.828646][T25112] team0: Port device team_slave_0 added [ 1420.892742][T25112] team0: Port device team_slave_1 added [ 1420.960486][T25127] team0: Port device team_slave_0 added [ 1421.075149][T25127] team0: Port device team_slave_1 added [ 1421.101216][T25115] team0: Port device team_slave_0 added [ 1421.321414][T25115] team0: Port device team_slave_1 added [ 1421.390522][T25112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.399886][T25112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.452692][T25112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.021973][T25115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.062064][T25115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.191980][T25115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.283908][T25112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.313551][T25112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.447214][T25112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.786754][T25127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.798509][T25127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.370711][T25127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.391914][T25115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.413311][T25115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.520966][T25115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.654144][T25127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.661153][T25127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.718410][T25127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.977367][T25112] device hsr_slave_0 entered promiscuous mode [ 1424.003985][T25112] device hsr_slave_1 entered promiscuous mode [ 1424.012156][T25112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1424.036528][T25112] Cannot create hsr debugfs directory [ 1424.968065][T25115] device hsr_slave_0 entered promiscuous mode [ 1424.994380][T25115] device hsr_slave_1 entered promiscuous mode [ 1426.516895][T25115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.573316][T25115] Cannot create hsr debugfs directory [ 1426.597779][T25127] device hsr_slave_0 entered promiscuous mode [ 1426.643864][T25127] device hsr_slave_1 entered promiscuous mode [ 1426.673268][T25127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.691119][T25127] Cannot create hsr debugfs directory [ 1428.264115][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.271685][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.634204][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1435.649846][T25395] netlink: 'syz.2.6114': attribute type 1 has an invalid length. [ 1435.781505][T25395] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1435.864051][T25397] bond9: (slave ip6gretap2): making interface the new active one [ 1435.894097][T25397] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1435.942106][T18293] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 1437.016420][T25412] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6116'. [ 1446.306427][T25112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1446.366142][T25112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1446.474456][T25112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1446.496198][T25112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1446.703993][T25115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1446.775458][T25115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1446.898711][T25115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1447.442649][T25115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1448.479397][T25112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.843622][T25127] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1448.914385][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1448.923846][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1449.304560][T25127] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1449.346943][T25127] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1450.062433][T25112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.122449][T18299] device hsr_slave_0 left promiscuous mode [ 1450.223461][T18299] device hsr_slave_1 left promiscuous mode [ 1450.239940][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.294898][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.325693][T18299] device bridge_slave_1 left promiscuous mode [ 1450.331998][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.384544][T18299] device bridge_slave_0 left promiscuous mode [ 1450.411428][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.456041][T18299] device hsr_slave_0 left promiscuous mode [ 1450.503608][T18299] device hsr_slave_1 left promiscuous mode [ 1450.523499][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.573351][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.632505][T18299] device bridge_slave_1 left promiscuous mode [ 1450.641859][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.746673][T18299] device bridge_slave_0 left promiscuous mode [ 1450.779384][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.915428][T18299] device hsr_slave_0 left promiscuous mode [ 1450.938233][T18299] device hsr_slave_1 left promiscuous mode [ 1450.962663][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.997897][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.027037][T18299] device bridge_slave_1 left promiscuous mode [ 1451.047823][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.129301][T18299] device bridge_slave_0 left promiscuous mode [ 1451.143297][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.578324][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1456.088577][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1456.868341][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.324315][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1457.341088][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1457.351993][T25129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1457.363484][T25129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1457.373196][T25129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1457.380559][T25129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1457.461700][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.520937][ T4286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1457.540193][ T4286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1457.550399][ T4286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1457.562552][ T4286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1457.575150][ T4286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1457.582539][ T4286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1458.244795][T25129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1458.257052][T25129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1458.266676][T25129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1458.283306][T25129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1458.294336][T25129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1458.301872][T25129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1459.243826][T18299] bond0 (unregistering): Released all slaves [ 1459.441144][T25129] Bluetooth: hci4: command 0x0409 tx timeout [ 1459.673614][ T4286] Bluetooth: hci6: command 0x0409 tx timeout [ 1460.058129][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1460.121197][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1460.172313][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.223671][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.394014][ T4286] Bluetooth: hci7: command 0x0409 tx timeout [ 1460.408001][T18299] bond0 (unregistering): Released all slaves [ 1460.831943][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1460.937413][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1461.023709][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.112137][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.513559][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 1461.760987][T18299] bond0 (unregistering): Released all slaves [ 1461.763471][ T4286] Bluetooth: hci6: command 0x041b tx timeout [ 1461.906503][T25127] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1462.487887][T25129] Bluetooth: hci7: command 0x041b tx timeout [ 1463.603169][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 1463.843114][ T4286] Bluetooth: hci6: command 0x040f tx timeout [ 1464.576587][ T4286] Bluetooth: hci7: command 0x040f tx timeout [ 1465.225477][T25568] chnl_net:caif_netlink_parms(): no params data found [ 1465.853181][T25129] Bluetooth: hci4: command 0x0419 tx timeout [ 1465.915325][T25129] Bluetooth: hci6: command 0x0419 tx timeout [ 1466.618055][T25572] chnl_net:caif_netlink_parms(): no params data found [ 1466.661321][T25564] chnl_net:caif_netlink_parms(): no params data found [ 1466.877179][ T4286] Bluetooth: hci7: command 0x0419 tx timeout [ 1468.693840][T25640] netlink: 'syz.8.6148': attribute type 4 has an invalid length. [ 1468.801452][T25572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.817766][T25572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.857745][T25572] device bridge_slave_0 entered promiscuous mode [ 1468.897530][T25568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.033653][T25568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.089164][T25568] device bridge_slave_0 entered promiscuous mode [ 1469.098068][T25564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.108123][T25564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.116635][T25564] device bridge_slave_0 entered promiscuous mode [ 1469.124717][T25572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.131862][T25572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.140999][T25572] device bridge_slave_1 entered promiscuous mode [ 1469.167586][T25572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.231322][T25572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.026805][T25568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.064285][T25568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.099382][T25568] device bridge_slave_1 entered promiscuous mode [ 1470.124387][T25564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.141865][T25564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.171196][T25564] device bridge_slave_1 entered promiscuous mode [ 1473.386779][T25572] team0: Port device team_slave_0 added [ 1473.459292][T25572] team0: Port device team_slave_1 added [ 1473.525910][T25568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.545648][T25564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.602914][T25568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.654865][T25564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.767148][T25572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.833329][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.961409][T25572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.067632][T25564] team0: Port device team_slave_0 added [ 1474.112263][T25568] team0: Port device team_slave_0 added [ 1474.619780][T25572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.655846][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.784421][T25572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.860365][T25564] team0: Port device team_slave_1 added [ 1475.303082][T25568] team0: Port device team_slave_1 added [ 1475.354975][T25564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.362073][T25564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.465129][T25564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.340262][T25572] device hsr_slave_0 entered promiscuous mode [ 1477.006965][T25572] device hsr_slave_1 entered promiscuous mode [ 1477.063344][T25564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.070442][T25564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.235791][T25564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.683669][T25568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.692510][T25568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.178806][T25568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.297923][T25568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.323228][T25568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.447910][T25568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.650974][T25564] device hsr_slave_0 entered promiscuous mode [ 1479.676883][T25564] device hsr_slave_1 entered promiscuous mode [ 1479.726925][T25564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.756784][T25564] Cannot create hsr debugfs directory [ 1479.903894][T25568] device hsr_slave_0 entered promiscuous mode [ 1479.924740][T25568] device hsr_slave_1 entered promiscuous mode [ 1479.980441][T25568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1480.087804][T25568] Cannot create hsr debugfs directory [ 1489.585058][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.592358][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.347871][T25572] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1491.681610][T25572] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1492.516730][T25572] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1492.847111][T25572] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1494.536481][T25792] netlink: 'syz.2.6175': attribute type 1 has an invalid length. [ 1494.557260][T25792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6175'. [ 1495.034253][T25572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.146242][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1495.164743][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1495.215555][T25572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.276376][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1495.294451][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1495.313852][T18291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.321102][T18291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.361825][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1495.387244][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1495.417824][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1495.453440][T18291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.460645][T18291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.499470][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1495.620847][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1495.648813][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1495.726918][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1497.263300][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1497.281764][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1497.302195][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1497.340000][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1497.369959][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1497.428432][T25572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1497.759604][T25572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1497.787882][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1498.340429][T18291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1499.647825][T18309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1499.671134][T18309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1499.781471][T25572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.695864][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1503.726357][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1503.782824][T25572] device veth0_vlan entered promiscuous mode [ 1506.444313][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1506.453495][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1506.499111][T25572] device veth1_vlan entered promiscuous mode [ 1506.526732][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1506.546468][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1506.700322][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 1506.700339][ T26] audit: type=1326 audit(1513.917:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1506.851499][ T26] audit: type=1326 audit(1513.937:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1506.973684][ T26] audit: type=1326 audit(1513.957:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.052267][ T26] audit: type=1326 audit(1513.957:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.127439][ T26] audit: type=1326 audit(1513.967:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.220350][ T26] audit: type=1326 audit(1513.967:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.257602][ T26] audit: type=1326 audit(1513.967:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.321034][ T26] audit: type=1326 audit(1513.967:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.345636][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1507.364805][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1507.430822][ T26] audit: type=1326 audit(1513.967:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.472608][ T26] audit: type=1326 audit(1513.967:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25887 comm="syz.2.6192" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ff6f4b9ce59 code=0x7ffc0000 [ 1507.476526][T25572] device veth0_macvtap entered promiscuous mode [ 1507.563738][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1507.881608][T25572] device veth1_macvtap entered promiscuous mode [ 1507.904470][T25564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1507.932248][T25564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1507.994220][T25572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.005862][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1508.026346][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1508.060147][T25564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1508.828944][T25564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1509.720856][T25572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.774058][T25572] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.814949][T25572] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.864849][T25572] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.904086][T25572] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.139321][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1510.170754][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1510.891991][T18299] device hsr_slave_0 left promiscuous mode [ 1510.929128][T18299] device hsr_slave_1 left promiscuous mode [ 1510.958814][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.985642][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.011798][T18299] device bridge_slave_1 left promiscuous mode [ 1511.032172][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.078404][T18299] device bridge_slave_0 left promiscuous mode [ 1511.114008][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.178016][T18299] device hsr_slave_0 left promiscuous mode [ 1511.190760][T18299] device hsr_slave_1 left promiscuous mode [ 1511.242136][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.794901][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.856835][T18299] device bridge_slave_1 left promiscuous mode [ 1512.873645][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.900382][T18299] device bridge_slave_0 left promiscuous mode [ 1512.908299][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.997574][T18299] device hsr_slave_0 left promiscuous mode [ 1513.014024][T18299] device hsr_slave_1 left promiscuous mode [ 1513.043851][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.093357][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1513.125803][T18299] device bridge_slave_1 left promiscuous mode [ 1513.154147][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.187669][T18299] device bridge_slave_0 left promiscuous mode [ 1513.213712][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.714472][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1514.798711][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1514.895846][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.981034][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.279106][T18299] bond0 (unregistering): Released all slaves [ 1517.613931][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1517.874165][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1518.141228][T25129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1518.163580][T25129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1518.174441][T25129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1518.185546][T25129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1518.196561][T25129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1518.204369][T25129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1518.304371][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.454255][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.670108][T25129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1518.685492][T25129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1518.695232][T25129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1518.705062][T25129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1518.713237][T25129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1518.720818][T25129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1519.219939][T25129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1519.237436][T25129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1519.249199][T25129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1519.257914][T25129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1519.268894][T25129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1519.277137][T25129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1519.435573][T18299] bond0 (unregistering): Released all slaves [ 1519.876372][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1519.938508][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1519.988348][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.041373][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.202864][T18299] bond0 (unregistering): Released all slaves [ 1520.255064][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 1520.429383][T25967] tipc: Enabling of bearer rejected, already enabled [ 1520.793136][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 1521.353384][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 1522.935461][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 1522.937454][T25129] Bluetooth: hci3: command 0x041b tx timeout [ 1523.433350][T25129] Bluetooth: hci5: command 0x041b tx timeout [ 1524.900028][T26004] chnl_net:caif_netlink_parms(): no params data found [ 1524.929603][T25987] chnl_net:caif_netlink_parms(): no params data found [ 1524.954316][T25129] Bluetooth: hci0: command 0x040f tx timeout [ 1525.043227][T25129] Bluetooth: hci3: command 0x040f tx timeout [ 1525.513662][T25129] Bluetooth: hci5: command 0x040f tx timeout [ 1527.121274][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 1527.128044][T25129] Bluetooth: hci0: command 0x0419 tx timeout [ 1527.154753][T25993] chnl_net:caif_netlink_parms(): no params data found [ 1527.209082][T26004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.218011][T26004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.246274][T26004] device bridge_slave_0 entered promiscuous mode [ 1527.435827][T25987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.455472][T25987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.466579][T25987] device bridge_slave_0 entered promiscuous mode [ 1527.531035][T26004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.549781][T26004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.593613][T26004] device bridge_slave_1 entered promiscuous mode [ 1527.630656][T25987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.643372][T25129] Bluetooth: hci5: command 0x0419 tx timeout [ 1527.653492][T25987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.704403][T25987] device bridge_slave_1 entered promiscuous mode [ 1528.043630][T26004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.915994][T25987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.947683][T26004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.520425][T25987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.649870][T26004] team0: Port device team_slave_0 added [ 1530.846125][T26004] team0: Port device team_slave_1 added [ 1530.869597][T25993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.893192][T25993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.901608][T25993] device bridge_slave_0 entered promiscuous mode [ 1531.037784][T25993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.063871][T25993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.113973][T25993] device bridge_slave_1 entered promiscuous mode [ 1531.275039][T25987] team0: Port device team_slave_0 added [ 1531.420504][T25987] team0: Port device team_slave_1 added [ 1531.495009][T26004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.502018][T26004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.633924][T26004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1531.686155][T25993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.829223][T26004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.863207][T26004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.073198][T26004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.251348][T25993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.368212][T25987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.377387][T25987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.453077][T25987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.724042][T25987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.732429][T25987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.843099][T25987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.485285][T25993] team0: Port device team_slave_0 added [ 1534.802676][T26004] device hsr_slave_0 entered promiscuous mode [ 1534.843746][T26004] device hsr_slave_1 entered promiscuous mode [ 1535.833646][T26004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1535.851506][T26004] Cannot create hsr debugfs directory [ 1535.907057][T25993] team0: Port device team_slave_1 added [ 1536.184967][T25987] device hsr_slave_0 entered promiscuous mode [ 1536.214015][T25987] device hsr_slave_1 entered promiscuous mode [ 1536.237639][T25987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1536.266237][T25987] Cannot create hsr debugfs directory [ 1536.362886][T25993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.383202][T25993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.523403][T25993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.654912][T25993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.662707][T25993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.843141][T25993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.035724][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 1537.035742][ T26] audit: type=1804 audit(1544.257:598): pid=26111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6222" name="bus" dev="ramfs" ino=106629 res=1 errno=0 [ 1642.883191][ C1] ------------[ cut here ]------------ [ 1642.891307][ C1] WARNING: CPU: 1 PID: 0 at kernel/rcu/tree_stall.h:970 rcu_check_gp_start_stall+0x2dc/0x460 [ 1642.901617][ C1] Modules linked in: [ 1642.905540][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1642.912724][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.923342][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1642.929743][ C1] Code: ff ff ff 48 c7 c7 20 8f c4 96 be 04 00 00 00 e8 ba 7a 66 00 48 89 df b8 01 00 00 00 87 05 3c 75 57 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 33 b3 8c 74 47 48 c7 c0 e4 40 20 8e 48 c1 e8 03 [ 1642.949432][ C1] RSP: 0018:ffffc900001e0b78 EFLAGS: 00010046 [ 1642.955610][ C1] RAX: 0000000000000000 RBX: ffffffff8cb33340 RCX: ffffffff816d19d6 [ 1642.963608][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cb33340 [ 1642.971605][ C1] RBP: ffffc900001e0df0 R08: 0000000000000003 R09: 0000000000000004 [ 1642.980673][ C1] R10: dffffc0000000000 R11: fffffbfff2d891e4 R12: 0000000000002904 [ 1642.988699][ C1] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 1642.996750][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1643.005713][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1643.012340][ C1] CR2: 0000001b2e515ff8 CR3: 0000000066dcf000 CR4: 00000000003506e0 [ 1643.020367][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1643.028556][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1643.036658][ C1] Call Trace: [ 1643.040038][ C1] [ 1643.042950][ C1] rcu_core+0x60b/0x1740 [ 1643.047333][ C1] ? lock_chain_count+0x20/0x20 [ 1643.052268][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1643.057882][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1643.063114][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1643.068405][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1643.073657][ C1] ? __run_timers+0x79c/0x800 [ 1643.078448][ C1] ? __run_timers+0x75f/0x800 [ 1643.083165][ C1] ? detach_timer+0x350/0x350 [ 1643.087887][ C1] ? detach_timer+0x350/0x350 [ 1643.092684][ C1] ? lock_chain_count+0x20/0x20 [ 1643.097675][ C1] handle_softirqs+0x2a1/0x930 [ 1643.102554][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1643.107525][ C1] ? do_softirq+0x210/0x210 [ 1643.112166][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1643.117476][ C1] __irq_exit_rcu+0x13b/0x230 [ 1643.122182][ C1] ? irq_exit_rcu+0x20/0x20 [ 1643.126721][ C1] irq_exit_rcu+0x5/0x20 [ 1643.130987][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1643.136759][ C1] [ 1643.139721][ C1] [ 1643.142933][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1643.149049][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1643.154106][ C1] Code: 48 89 df e8 97 04 9b f7 e9 44 ff ff ff e8 fd 06 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 67 1a 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1643.173740][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1643.179848][ C1] RAX: 6d1434a7bc36de00 RBX: ffffffff8a389347 RCX: 6d1434a7bc36de00 [ 1643.187850][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1b60 [ 1643.195856][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1643.203967][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 1643.211969][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8 [ 1643.220418][ C1] ? default_idle_call+0x77/0xc0 [ 1643.225490][ C1] default_idle_call+0x84/0xc0 [ 1643.230388][ C1] do_idle+0x250/0x680 [ 1643.234807][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1643.240034][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1643.245266][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 1643.251024][ C1] ? schedule_idle+0x57/0x90 [ 1643.255707][ C1] cpu_startup_entry+0x3f/0x60 [ 1643.260502][ C1] start_secondary+0xe4/0xf0 [ 1643.265767][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1643.271724][ C1] [ 1643.274774][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1643.282073][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1643.289206][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1643.299283][ C1] Call Trace: [ 1643.302648][ C1] [ 1643.305514][ C1] dump_stack_lvl+0x188/0x24e [ 1643.310215][ C1] ? memcpy+0x3c/0x60 [ 1643.314286][ C1] ? show_regs_print_info+0x12/0x12 [ 1643.319588][ C1] ? load_image+0x400/0x400 [ 1643.324249][ C1] panic+0x2e5/0x730 [ 1643.328804][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1643.333361][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 1643.339474][ C1] __warn+0x2f8/0x4f0 [ 1643.343570][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1643.349331][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1643.355167][ C1] report_bug+0x2ba/0x4f0 [ 1643.359561][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1643.365310][ C1] handle_bug+0x3a/0x70 [ 1643.369496][ C1] exc_invalid_op+0x16/0x40 [ 1643.374112][ C1] asm_exc_invalid_op+0x16/0x20 [ 1643.379003][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1643.385453][ C1] Code: ff ff ff 48 c7 c7 20 8f c4 96 be 04 00 00 00 e8 ba 7a 66 00 48 89 df b8 01 00 00 00 87 05 3c 75 57 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 33 b3 8c 74 47 48 c7 c0 e4 40 20 8e 48 c1 e8 03 [ 1643.405093][ C1] RSP: 0018:ffffc900001e0b78 EFLAGS: 00010046 [ 1643.411192][ C1] RAX: 0000000000000000 RBX: ffffffff8cb33340 RCX: ffffffff816d19d6 [ 1643.419190][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cb33340 [ 1643.427294][ C1] RBP: ffffc900001e0df0 R08: 0000000000000003 R09: 0000000000000004 [ 1643.435291][ C1] R10: dffffc0000000000 R11: fffffbfff2d891e4 R12: 0000000000002904 [ 1643.443281][ C1] R13: dffffc0000000000 R14: 0000000000000a06 R15: dffffc0000000000 [ 1643.451289][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1643.457064][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1643.462807][ C1] rcu_core+0x60b/0x1740 [ 1643.467081][ C1] ? lock_chain_count+0x20/0x20 [ 1643.471988][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1643.477576][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1643.482803][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1643.488046][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1643.493280][ C1] ? __run_timers+0x79c/0x800 [ 1643.497981][ C1] ? __run_timers+0x75f/0x800 [ 1643.502779][ C1] ? detach_timer+0x350/0x350 [ 1643.507477][ C1] ? detach_timer+0x350/0x350 [ 1643.512354][ C1] ? lock_chain_count+0x20/0x20 [ 1643.517249][ C1] handle_softirqs+0x2a1/0x930 [ 1643.522048][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1643.526929][ C1] ? do_softirq+0x210/0x210 [ 1643.531456][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1643.536689][ C1] __irq_exit_rcu+0x13b/0x230 [ 1643.541389][ C1] ? irq_exit_rcu+0x20/0x20 [ 1643.545944][ C1] irq_exit_rcu+0x5/0x20 [ 1643.550208][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1643.555873][ C1] [ 1643.558822][ C1] [ 1643.561774][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1643.567792][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1643.572842][ C1] Code: 48 89 df e8 97 04 9b f7 e9 44 ff ff ff e8 fd 06 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 67 1a 4e 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1643.592490][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1643.598588][ C1] RAX: 6d1434a7bc36de00 RBX: ffffffff8a389347 RCX: 6d1434a7bc36de00 [ 1643.606662][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1b60 [ 1643.614654][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1643.622648][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 1643.630638][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffff9200002efc8 [ 1643.638635][ C1] ? default_idle_call+0x77/0xc0 [ 1643.643619][ C1] default_idle_call+0x84/0xc0 [ 1643.648408][ C1] do_idle+0x250/0x680 [ 1643.652520][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1643.657835][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1643.663061][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 1643.668813][ C1] ? schedule_idle+0x57/0x90 [ 1643.673435][ C1] cpu_startup_entry+0x3f/0x60 [ 1643.678231][ C1] start_secondary+0xe4/0xf0 [ 1643.682845][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1643.688779][ C1] [ 1643.691963][ C1] Kernel Offset: disabled [ 1643.697261][ C1] Rebooting in 86400 seconds..