last executing test programs: 191.734415ms ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x1b, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000800000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) 166.415528ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x47) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000180)={0x0, 0xffffffff, [0x88, 0xffffffffffffffff, 0x3, 0x83, 0x18000000000000, 0x7ff]}) faccessat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x3, 0x300) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x40, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000300)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200) creat(&(0x7f0000000380)='./file0\x00', 0x128) 101.060892ms ago: executing program 3 (id=4): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x10, r0, 0x28f46000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000180)={&(0x7f0000459000/0x3000)=nil, 0x2000, 0x6}}) mlock(&(0x7f0000213000/0x3000)=nil, 0x3000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x10, r0, 0x28f46000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000180)={&(0x7f0000459000/0x3000)=nil, 0x2000, 0x6}}) (async) mlock(&(0x7f0000213000/0x3000)=nil, 0x3000) (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) (async) 75.661283ms ago: executing program 0 (id=1): r0 = fsopen(&(0x7f0000000040)='qnx4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) fchdir(r1) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 833.35µs ago: executing program 2 (id=5): r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000b80)={0x20080522}, &(0x7f0000000bc0)={0x0, 0x89, 0x0, 0x81, 0xffffffff}) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c00"], 0x50}}], 0x2, 0x800) 510.205µs ago: executing program 1 (id=6): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x21001, 0x0) rt_sigpending(&(0x7f0000000240), 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000580)='./cgroup\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@mpol={'mpol', 0x3d, {'local', '=static'}}}]}) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000004c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@gettfilter={0x5c, 0x2e, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xfff2}, {0xfff5, 0x8}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x94b1}, {0x8, 0xb, 0xffff0000}, {0x8, 0xb, 0x7}, {0x8}]}, 0x5c}}, 0x0) r6 = openat$audio1(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000002c0)=0x21be, 0x4) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000300)=0x4, 0x4) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x44040044) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002142, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80444d1a, 0x0) socket(0xf, 0x1, 0x9) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010000004000000000000a9f5ac8d61bf097bc841cc36ae9002000fe000000000400000800170041000000"], 0x24}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x40800) 187.229µs ago: executing program 2 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xdc}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x84) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x4004891) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r4 = fsmount(0xffffffffffffffff, 0x1, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xfa}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000010}, 0x40) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f00000008c0)={0x0, 0x1, 0xd, 0xffffffff, 0x10001, 0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x450}, 0x44010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r8, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r0) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/attr/keycreate\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) ppoll(&(0x7f0000000c40)=[{r9}, {r4, 0x24a}], 0x2, &(0x7f0000000cc0)={r10, r11+60000000}, &(0x7f0000000d00)={[0xdf9]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x11) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000ec0), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r13, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x130, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_EXP={0x11c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0xcc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2ff}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x810) 0s ago: executing program 3 (id=8): ioprio_set$pid(0x1, 0x0, 0x4000) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000006c0)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000880)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f00000008c0)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioprio_get$uid(0x0, r1) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000580), 0x800000000ffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000600)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x96, 0x0, 0x0, 0xa, "fd0f09a2"}, 0x5, 0x2, {}, 0x80000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r3, &(0x7f00000006c0), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000700)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000240)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005200010a"], 0x20}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) ioprio_get$uid(0x3, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xd6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000100)='qnx6\x00', 0x8000, &(0x7f00000000c0)='mmi_fs\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35521' (ED25519) to the list of known hosts. [ 42.208451][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.208465][ T43] audit: type=1400 audit(1792104493.967:141): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.210549][ T43] audit: type=1400 audit(1792104493.967:142): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.213613][ T5715] cgroup: Unknown subsys name 'net' [ 42.215264][ T43] audit: type=1400 audit(1792104493.967:143): avc: denied { unmount } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.390206][ T5715] cgroup: Unknown subsys name 'cpuset' [ 42.394079][ T5715] cgroup: Unknown subsys name 'rlimit' [ 42.541786][ T43] audit: type=1400 audit(1792104494.297:144): avc: denied { setattr } for pid=5715 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.542271][ T43] audit: type=1400 audit(1792104494.297:145): avc: denied { create } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.542562][ T43] audit: type=1400 audit(1792104494.297:146): avc: denied { write } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.542942][ T43] audit: type=1400 audit(1792104494.297:147): avc: denied { read } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.557534][ T43] audit: type=1400 audit(1792104494.317:148): avc: denied { mounton } for pid=5715 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.559250][ T43] audit: type=1400 audit(1792104494.317:149): avc: denied { mount } for pid=5715 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.618851][ T5720] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.619464][ T43] audit: type=1400 audit(1792104494.377:150): avc: denied { relabelto } for pid=5720 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.569404][ T5715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.457000][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 47.457013][ T43] audit: type=1400 audit(1792104499.207:154): avc: denied { execmem } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.666712][ T43] audit: type=1400 audit(1792104499.427:155): avc: denied { create } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.667043][ T43] audit: type=1400 audit(1792104499.427:156): avc: denied { read write } for pid=5726 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.667066][ T43] audit: type=1400 audit(1792104499.427:157): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.667406][ T43] audit: type=1400 audit(1792104499.427:158): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.676068][ T43] audit: type=1400 audit(1792104499.427:159): avc: denied { ioctl } for pid=5727 comm="syz-executor" path="socket:[3876]" dev="sockfs" ino=3876 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.688517][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.690565][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.691139][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.691443][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.691702][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.692080][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.692530][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.692966][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.693953][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.695237][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.696087][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.699458][ T5731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.700407][ T43] audit: type=1400 audit(1792104499.457:160): avc: denied { read } for pid=5729 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.700753][ T43] audit: type=1400 audit(1792104499.457:161): avc: denied { open } for pid=5729 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.702940][ T5731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.703713][ T5731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.703913][ T43] audit: type=1400 audit(1792104499.457:162): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.708200][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.708606][ T43] audit: type=1400 audit(1792104499.467:163): avc: denied { module_request } for pid=5729 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.711536][ T5731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.713482][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.714598][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.724452][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.728287][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.920563][ T5729] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.921900][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.922487][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.923416][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.942343][ T5726] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.003749][ T5735] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.049375][ T5727] infiniband rxe0: set active [ 48.050583][ T1043] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.050727][ T5727] infiniband rxe0: added rxe_eth0 [ 48.059695][ T5727] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.059717][ T5727] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.059737][ T5727] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.070716][ T5727] RDS/IB: rxe0: added [ 48.070840][ T5727] smc: adding ib device rxe0 with port count 1 [ 48.070872][ T5727] smc: ib device rxe0 port 1 has no pnetid [ 48.087081][ T1043] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.094302][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.209818][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.318382][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.318718][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.319211][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.319310][ T5729] bridge_slave_0: entered allmulticast mode [ 48.320740][ T5729] bridge_slave_0: entered promiscuous mode [ 48.324512][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.324579][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.325210][ T5729] bridge_slave_1: entered allmulticast mode [ 48.326060][ T5729] bridge_slave_1: entered promiscuous mode [ 48.371184][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.371255][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.371335][ T5726] bridge_slave_0: entered allmulticast mode [ 48.372363][ T5726] bridge_slave_0: entered promiscuous mode [ 48.392940][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.393147][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.393218][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.394061][ T5726] bridge_slave_1: entered allmulticast mode [ 48.395399][ T5726] bridge_slave_1: entered promiscuous mode [ 48.413930][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.475589][ T5729] team0: Port device team_slave_0 added [ 48.477671][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.479503][ T5729] team0: Port device team_slave_1 added [ 48.487931][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.488032][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.488089][ T5735] bridge_slave_0: entered allmulticast mode [ 48.488954][ T5735] bridge_slave_0: entered promiscuous mode [ 48.503324][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.504187][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.504263][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.504356][ T5735] bridge_slave_1: entered allmulticast mode [ 48.505755][ T5735] bridge_slave_1: entered promiscuous mode [ 48.508050][ T5727] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.564942][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.565537][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.565545][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.565558][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.567118][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.567127][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.567138][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.568759][ T5726] team0: Port device team_slave_0 added [ 48.573763][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.575103][ T5726] team0: Port device team_slave_1 added [ 48.625725][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.625742][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.625763][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.632079][ T5729] hsr_slave_0: entered promiscuous mode [ 48.632621][ T5729] hsr_slave_1: entered promiscuous mode [ 48.643393][ T5735] team0: Port device team_slave_0 added [ 48.645176][ T5735] team0: Port device team_slave_1 added [ 48.645524][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.645531][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.645543][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.683321][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.683332][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.683344][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.697845][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.697864][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.697883][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.730919][ T5726] hsr_slave_0: entered promiscuous mode [ 48.731916][ T5726] hsr_slave_1: entered promiscuous mode [ 48.732460][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 48.732545][ T5726] Cannot create hsr debugfs directory [ 48.818448][ T5735] hsr_slave_0: entered promiscuous mode [ 48.819056][ T5735] hsr_slave_1: entered promiscuous mode [ 48.819366][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.819377][ T5735] Cannot create hsr debugfs directory [ 48.992049][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.001069][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.027927][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.032981][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.033676][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.038732][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.059591][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.063605][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.144064][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.144110][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.144269][ T5727] bridge_slave_0: entered allmulticast mode [ 49.145038][ T5727] bridge_slave_0: entered promiscuous mode [ 49.152014][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.158054][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.159236][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.159314][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.159406][ T5727] bridge_slave_1: entered allmulticast mode [ 49.160883][ T5727] bridge_slave_1: entered promiscuous mode [ 49.178870][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.181527][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.196909][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.197498][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.200742][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.224751][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.231718][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.235190][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.269035][ T5727] team0: Port device team_slave_0 added [ 49.285313][ T5727] team0: Port device team_slave_1 added [ 49.323126][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.323142][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.323161][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.336920][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.336930][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.336943][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.339613][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.343443][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.353751][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.360783][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.361995][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.364980][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.370030][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.373836][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.391901][ T5727] hsr_slave_0: entered promiscuous mode [ 49.392420][ T5727] hsr_slave_1: entered promiscuous mode [ 49.392709][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 49.392720][ T5727] Cannot create hsr debugfs directory [ 49.497224][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.548450][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.600721][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.601070][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.608327][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.608476][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.613861][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.616832][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.620926][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.621407][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.623368][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.631307][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.634841][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.635328][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.638780][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.660683][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.677357][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.677441][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.685433][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.696404][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.696580][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.722916][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.739893][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.739939][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.747828][ T5734] Bluetooth: hci2: command tx timeout [ 49.757066][ T5734] Bluetooth: hci0: command tx timeout [ 49.757178][ T5734] Bluetooth: hci1: command tx timeout [ 49.757299][ T5734] Bluetooth: hci3: command tx timeout [ 49.758738][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.758811][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.830584][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.844612][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.850879][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.850935][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.855687][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.855729][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.011397][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.041384][ T5729] veth0_vlan: entered promiscuous mode [ 50.049502][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.054832][ T5729] veth1_vlan: entered promiscuous mode [ 50.060052][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.119610][ T5726] veth0_vlan: entered promiscuous mode [ 50.120283][ T5729] veth0_macvtap: entered promiscuous mode [ 50.126107][ T5726] veth1_vlan: entered promiscuous mode [ 50.128315][ T5729] veth1_macvtap: entered promiscuous mode [ 50.143444][ T5735] veth0_vlan: entered promiscuous mode [ 50.148573][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.153889][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.158974][ T5735] veth1_vlan: entered promiscuous mode [ 50.165957][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.175538][ T5726] veth0_macvtap: entered promiscuous mode [ 50.186280][ T5726] veth1_macvtap: entered promiscuous mode [ 50.215562][ T5735] veth0_macvtap: entered promiscuous mode [ 50.223659][ T5727] veth0_vlan: entered promiscuous mode [ 50.226413][ T5735] veth1_macvtap: entered promiscuous mode [ 50.228289][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.244085][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.244430][ T5727] veth1_vlan: entered promiscuous mode [ 50.276186][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.294830][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.294850][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.295202][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.329436][ T5727] veth0_macvtap: entered promiscuous mode [ 50.339347][ T5727] veth1_macvtap: entered promiscuous mode [ 50.345567][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.345582][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.370790][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.370804][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.388949][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.411311][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.412942][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.412953][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.464104][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.495185][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.495203][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.514243][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.514256][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.535779][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.535792][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.537893][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538082][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538478][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538555][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538616][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538799][ T5806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538867][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538947][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.539069][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.559157][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.559170][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.576729][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.601560][ T5880] ======================================================= [ 50.601560][ T5880] WARNING: The mand mount option has been deprecated and [ 50.601560][ T5880] and is ignored by this kernel. Remove the mand [ 50.601560][ T5880] option from the mount to silence this warning. [ 50.601560][ T5880] ======================================================= [ 50.602808][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.602834][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.602851][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.602868][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.602885][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.602902][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.670220][ T5887] tmpfs: Bad value for 'mpol' [ 50.707439][ T5897] loop3: detected capacity change from 0 to 7 [ 50.710340][ T5897] Dev loop3: unable to read RDB block 7 [ 50.710360][ T5897] loop3: unable to read partition table [ 50.710445][ T5897] loop3: partition table beyond EOD, truncated [ 50.710461][ T5897] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 50.713911][ T5897] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 50.727544][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 50.730621][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(full) [ 50.733861][ T5897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.737332][ T5897] RIP: 0010:qnx6_mmi_fill_super+0x339/0xbd0 [ 50.739194][ T5897] Code: 8b 44 24 18 85 c0 74 12 e8 64 ca 6c fe 8b 44 24 08 41 0f cd 0f c8 89 44 24 08 e8 52 ca 6c fe 31 d2 b8 00 10 00 00 8b 74 24 08 <41> f7 f5 48 89 df 01 f0 44 89 ee 89 c0 48 89 44 24 08 e8 20 f7 65 [ 50.745163][ T5897] RSP: 0018:ffffc90004ed7b20 EFLAGS: 00010246 [ 50.747081][ T5897] RAX: 0000000000001000 RBX: ffff88802c5f0000 RCX: ffffc90006e91000 [ 50.749573][ T5897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801df68000 [ 50.752074][ T5897] RBP: ffff8880153b7700 R08: 0000000000000005 R09: 0000000000000000 [ 50.754564][ T5897] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888028f95a00 [ 50.757041][ T5897] R13: 0000000000000000 R14: ffff88802c5f01a0 R15: ffff888028f95a20 [ 50.759516][ T5897] FS: 00007f9f1b2ea6c0(0000) GS:ffff8880d4a46000(0000) knlGS:0000000000000000 [ 50.762298][ T5897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.764414][ T5897] CR2: 000000110c46c33e CR3: 0000000058a05000 CR4: 0000000000352ef0 [ 50.766117][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.767066][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.771333][ T5897] Call Trace: [ 50.772411][ T5897] [ 50.773387][ T5897] qnx6_fill_super+0x957/0x13e0 [ 50.774973][ T5897] ? setup_bdev_super+0x4e8/0x770 [ 50.776812][ T5897] get_tree_bdev_flags+0x38c/0x620 [ 50.776846][ T5902] netlink: 'syz.1.10': attribute type 16 has an invalid length. [ 50.776862][ T5902] netlink: 'syz.1.10': attribute type 17 has an invalid length. [ 50.783276][ T5897] ? __pfx_qnx6_fill_super+0x10/0x10 [ 50.784010][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.784041][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.784737][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.784762][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.793841][ T5897] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 50.795660][ T5897] ? cap_capable+0x107/0x430 [ 50.797140][ T5897] ? bpf_lsm_capable+0x9/0x10 [ 50.798669][ T5897] ? security_capable+0x80/0x260 [ 50.800670][ T5897] vfs_get_tree+0x92/0x320 [ 50.802602][ T5897] path_mount+0x7d0/0x2850 [ 50.804556][ T5897] ? __pfx_path_mount+0x10/0x10 [ 50.806609][ T5897] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.808378][ T5897] ? putname+0xb1/0x110 [ 50.809748][ T5897] ? kmem_cache_free+0x127/0x6c0 [ 50.811313][ T5897] ? __x64_sys_mount+0x293/0x310 [ 50.812880][ T5897] __x64_sys_mount+0x293/0x310 [ 50.814441][ T5897] ? __pfx___x64_sys_mount+0x10/0x10 [ 50.816107][ T5897] do_syscall_64+0x123/0x790 [ 50.817627][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.819772][ T5897] RIP: 0033:0x7f9f1a39e559 [ 50.821644][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.827638][ T5897] RSP: 002b:00007f9f1b2ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.830313][ T5897] RAX: ffffffffffffffda RBX: 00007f9f1a625fa0 RCX: 00007f9f1a39e559 [ 50.832775][ T5897] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000200000000040 [ 50.835374][ T5897] RBP: 00007f9f1a4358b0 R08: 00002000000000c0 R09: 0000000000000000 [ 50.838101][ T5897] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 50.841218][ T5897] R13: 00007f9f1a626038 R14: 00007f9f1a625fa0 R15: 00007ffe7bb65d78 [ 50.843801][ T5897] [ 50.844775][ T5897] Modules linked in: [ 50.846828][ T5897] ---[ end trace 0000000000000000 ]--- [ 50.855380][ T5897] RIP: 0010:qnx6_mmi_fill_super+0x339/0xbd0 [ 50.855402][ T5897] Code: 8b 44 24 18 85 c0 74 12 e8 64 ca 6c fe 8b 44 24 08 41 0f cd 0f c8 89 44 24 08 e8 52 ca 6c fe 31 d2 b8 00 10 00 00 8b 74 24 08 <41> f7 f5 48 89 df 01 f0 44 89 ee 89 c0 48 89 44 24 08 e8 20 f7 65 [ 50.855413][ T5897] RSP: 0018:ffffc90004ed7b20 EFLAGS: 00010246 [ 50.855423][ T5897] RAX: 0000000000001000 RBX: ffff88802c5f0000 RCX: ffffc90006e91000 [ 50.855430][ T5897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801df68000 [ 50.855437][ T5897] RBP: ffff8880153b7700 R08: 0000000000000005 R09: 0000000000000000 [ 50.855444][ T5897] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888028f95a00 [ 50.855450][ T5897] R13: 0000000000000000 R14: ffff88802c5f01a0 R15: ffff888028f95a20 [ 50.855457][ T5897] FS: 00007f9f1b2ea6c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 50.855481][ T5897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.855490][ T5897] CR2: 00007f7d451ebc40 CR3: 0000000058a05000 CR4: 0000000000352ef0 [ 50.855499][ T5897] Kernel panic - not syncing: Fatal exception [ 50.890410][ T5897] Kernel Offset: disabled [ 50.891775][ T5897] Rebooting in 86400 seconds..