last executing test programs: 20m28.87533672s ago: executing program 4 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x1ff, 0x5, 0x0, 0x200, 0x1, 0x0, [{0x3, 0x0, 0x80, '\x00', 0x100}]}) socket(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000280)='-1\x00', 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0xe) 20m28.870786637s ago: executing program 3 (id=911): rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80000001}) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(0x0, 0x6000, 0x0) lseek(0xffffffffffffffff, 0x2, 0x893b8993f4d168b9) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@local}, {@private}, {@private}]}]}}}}}}}, 0x0) 20m28.867000126s ago: executing program 2 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x6040600) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100001"], 0x1c}}, 0x0) 20m27.205424516s ago: executing program 2 (id=914): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)="739135680a1d6fb520a135d74fcb507ba32aad7141e7c84382b075f75900bfba6841728e5b4c8a67ab", 0x29}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 20m26.164589826s ago: executing program 4 (id=915): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)='K', 0x1}], 0x1, &(0x7f0000000c00)=ANY=[], 0x208}, 0x40010) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)="9a", 0x1}], 0x1}, 0x811) 20m25.892203174s ago: executing program 2 (id=918): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "8ccec7bc"}]}}, 0x0}, 0x0) 20m25.891507484s ago: executing program 3 (id=919): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB='+rd'], 0xe) 20m24.048754293s ago: executing program 3 (id=925): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x1ff, 0x5, 0x0, 0x200, 0x1, 0x0, [{0x3, 0x0, 0x80, '\x00', 0x100}]}) socket(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000280)='-1\x00', 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0xe) 20m23.70955599s ago: executing program 4 (id=927): r0 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) unshare(0x24020400) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 20m20.792520714s ago: executing program 1 (id=929): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 20m20.783811078s ago: executing program 2 (id=931): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 20m20.77971581s ago: executing program 3 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0x20000000000000ff, 0x100000000000, 0x0, 0x858, 0x6, 0x0, 0x0, 0x20000, 0xb207, 0xde1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffc0001, 0x0, 0x6, 0x3}) 20m20.714930788s ago: executing program 4 (id=933): recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 20m20.614897386s ago: executing program 1 (id=934): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) 20m20.614711012s ago: executing program 4 (id=935): close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000000000100000000010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000) 20m20.426866124s ago: executing program 4 (id=937): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 20m19.300533541s ago: executing program 1 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x4000}, 0x90) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) syz_emit_ethernet(0xbe, 0x0, 0x0) bind$rxrpc(r4, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x24) 20m18.194918695s ago: executing program 1 (id=940): r0 = socket$inet6(0xa, 0x400000000001, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000a00)={r6, 0x0, 0x0, 0x0, 0x20, 0xffffffcd, 0x0, 0x3, 0x0, 0x0, 0x30000, 0x200000}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000340)='GPL\x00', 0x12, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 20m16.905885896s ago: executing program 2 (id=942): r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f0000000240)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10d, 0x11, &(0x7f0000000000)=r1, 0x4) 20m16.615371898s ago: executing program 1 (id=943): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x1, 0x5, 0xd}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x1) 20m16.451055222s ago: executing program 3 (id=944): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xfffe}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x70}, 0x0) 20m16.275174791s ago: executing program 1 (id=945): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e7706021f0000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 20m16.155440878s ago: executing program 3 (id=946): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 20m16.140313631s ago: executing program 2 (id=947): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000780)={0xe000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_clone3(0x0, 0x0) capget(&(0x7f0000002900)={0x20071026, r3}, &(0x7f0000000180)={0x1e, 0x2, 0x3, 0x6, 0xcdfa, 0x7ffffffe}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)={0x0, 0x722}) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x8007, @broadcast, 'macvlan1\x00'}}, 0x1e) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x5ea}], 0x1) 20m5.099110797s ago: executing program 32 (id=937): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 20m1.081009353s ago: executing program 33 (id=945): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e7706021f0000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 20m1.031871376s ago: executing program 34 (id=946): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 20m0.325628592s ago: executing program 35 (id=947): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000780)={0xe000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_clone3(0x0, 0x0) capget(&(0x7f0000002900)={0x20071026, r3}, &(0x7f0000000180)={0x1e, 0x2, 0x3, 0x6, 0xcdfa, 0x7ffffffe}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)={0x0, 0x722}) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x8007, @broadcast, 'macvlan1\x00'}}, 0x1e) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x5ea}], 0x1) 18m12.866946836s ago: executing program 5 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x3) socket$inet(0xa, 0x801, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) listen(0xffffffffffffffff, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xfff) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 18m10.267005302s ago: executing program 5 (id=1096): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) recvmmsg(r0, &(0x7f000000b140)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1}, 0xaa4797df}], 0x1, 0x1, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0], 0x48}}, 0x0) 18m9.839129256s ago: executing program 5 (id=1097): rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80000001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(0x0, 0x6000, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x100) lseek(0xffffffffffffffff, 0x2, 0x893b8993f4d168b9) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@local}, {@private}, {@private}]}]}}}}}}}, 0x0) 18m9.506275719s ago: executing program 5 (id=1098): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 18m9.164668807s ago: executing program 5 (id=1099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 18m8.06538695s ago: executing program 5 (id=1102): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x0, &(0x7f00000000c0)='usrquota') chdir(0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7ffff000, 0x3) 18m7.412219236s ago: executing program 36 (id=1102): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="d01ca2363ef44116df4e1a55ffef08005ad00c2622b1ac4a"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='msdos\x00', 0x0, &(0x7f00000000c0)='usrquota') chdir(0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7ffff000, 0x3) 13m22.0296253s ago: executing program 0 (id=1623): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13m14.24855612s ago: executing program 0 (id=1631): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 13m13.668146915s ago: executing program 0 (id=1636): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xc, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 13m13.319212875s ago: executing program 0 (id=1638): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2c) 13m13.011121022s ago: executing program 0 (id=1640): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 13m9.248250491s ago: executing program 0 (id=1659): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xc, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 11m47.930343538s ago: executing program 7 (id=1828): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 11m47.527170735s ago: executing program 7 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x6b, &(0x7f0000000080)={0x0, 0x8dd3, 0x200, 0x3e, 0x235}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000000), 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000480)={[0x78c]}, 0x8) r4 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) 11m43.65061285s ago: executing program 7 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getdents64(r0, &(0x7f0000003cc0)=""/4128, 0x1020) r4 = io_uring_setup(0x46e7, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28d}) r5 = add_key$keyring(0x0, &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$invalidate(0x15, r5) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 11m41.863003564s ago: executing program 7 (id=1846): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./bus\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x1, 0x1530, &(0x7f0000002f80)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 11m40.930127258s ago: executing program 7 (id=1849): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x10002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x2, r2}) 11m37.359263612s ago: executing program 7 (id=1859): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x27, 0x7f, 0x48912018, 0x4, 0xfffe, 0x2, 0x7, 0x0, 0x0, 0x8}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 11m36.886208456s ago: executing program 37 (id=1859): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x27, 0x7f, 0x48912018, 0x4, 0xfffe, 0x2, 0x7, 0x0, 0x0, 0x8}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 7m58.541051237s ago: executing program 8 (id=2357): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7m57.876027523s ago: executing program 8 (id=2359): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 7m57.665623937s ago: executing program 8 (id=2361): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000000b0601030000000000000000050008020500010007000000440007801800148014000240fe80000000000000000000000000001f1800018014000240fe800000000000000000000000000033060004404e24004005000700060000000900020073797a31"], 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 7m57.49553334s ago: executing program 8 (id=2363): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 7m53.387620113s ago: executing program 8 (id=2375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000014c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_getattr(r0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x1, 0x836, 0x8, 0x7}, 0x14) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) poll(0x0, 0x0, 0x8) 7m47.859302219s ago: executing program 8 (id=2378): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 7m47.088692136s ago: executing program 38 (id=2378): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 7m26.283899127s ago: executing program 6 (id=2444): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) 7m26.1175568s ago: executing program 6 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fedbdf25140000001c0007800c000300090000000000000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 7m26.055854812s ago: executing program 6 (id=2446): r0 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000000800)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYBLOB, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRES32=0x0, @ANYBLOB="244429c78d4c7fbf49cd097e5022f1ae39f9db8339d3a6220188fa3516964b0fba8fa9e3451db52ce83e8e1e6f01107b778dbabc4ce54357ddcf1caa911b9f15153097456c221a20f6d322f59731e3362ef30cbeb63e1b78d1da50b6da22ea1c48b06ab73e772fd4d66f8d456d645ccac92786f37d589f10c34d3ef442d25b4a", @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES32], 0xfe, 0x1508, &(0x7f0000002b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x100000000000000) 7m25.008433602s ago: executing program 6 (id=2447): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 7m23.185374457s ago: executing program 6 (id=2451): socket(0x10, 0x803, 0x0) epoll_create(0x2cd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000900000022bf000000000004", @ANYRES32, @ANYBLOB="02"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m21.573990907s ago: executing program 6 (id=2455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 7m21.162114068s ago: executing program 39 (id=2455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.843939025s ago: executing program 9 (id=2967): mq_open(&(0x7f0000000040)='ethK\x00i\x85\xbc\x1c\xba@\x1c\xbfH\xc0\x04\x87\x87\x9f\xb5\x1f\v\xb1\x8d\f\xf0\x17\xb1\xdb\xd8\xf9', 0x42, 0x121, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x8810) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0xffffffffffffff39) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) add_key(0x0, &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000340)="9feb24", 0x3, r2) r3 = io_uring_setup(0x5c5e, &(0x7f0000000040)={0x0, 0x7b19, 0xc000, 0xfffffffc, 0x38}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000030400000000fcdbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500340012800b0001006272000000000000"], 0x54}}, 0x0) io_uring_enter(r3, 0x0, 0x2980, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000403, r5}, 0x38) 1.262079802s ago: executing program 9 (id=2968): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) 1.171290011s ago: executing program 9 (id=2969): syz_io_uring_setup(0x48ce, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r1) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.155296548s ago: executing program 9 (id=2970): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x86}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fdatasync(r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x822b01) pipe2(&(0x7f0000000100), 0x0) 134.806711ms ago: executing program 9 (id=2971): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680"], 0x38}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004800) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x50003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x5, 0xffffffffefffff15, 0x3, 0x4, 0x8, 0x2000000000004]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 9 (id=2972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) close(r0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r5 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$UHID_CREATE(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xeeee8000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0xfc, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x83}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x8080000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0xfc, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x5, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffbfffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 250.741293][ T4922] Bluetooth: hci1: command tx timeout [ 1252.621424][ T4922] Bluetooth: hci4: command tx timeout [ 1252.957958][T15832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1252.999373][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.298805][T15832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1253.342432][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.408946][T15832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1253.461423][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1254.139711][T15832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1254.165917][T15832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1254.483902][T16225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.484210][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.484500][T16225] bridge_slave_0: entered allmulticast mode [ 1254.489913][T16225] bridge_slave_0: entered promiscuous mode [ 1254.594870][T16225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.595334][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.595690][T16225] bridge_slave_1: entered allmulticast mode [ 1254.636395][T16225] bridge_slave_1: entered promiscuous mode [ 1255.077173][T16225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.244590][T16225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.733938][T15889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1255.802907][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1256.042144][T16225] team0: Port device team_slave_0 added [ 1257.169859][T15889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1257.211869][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1257.263041][T16225] team0: Port device team_slave_1 added [ 1257.370779][T15889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1257.428307][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1257.608830][T15889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1257.639982][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1257.842043][T16400] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1257.903856][T16400] bond6: (slave lo): Enslaving as an active interface with an up link [ 1257.917611][T16400] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1257.931916][T16250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.937141][T16250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.943093][T16250] bridge_slave_0: entered allmulticast mode [ 1257.969750][T16250] bridge_slave_0: entered promiscuous mode [ 1258.118241][T16225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.118261][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.118291][T16225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.251539][T16250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.251897][T16250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.252218][T16250] bridge_slave_1: entered allmulticast mode [ 1258.282037][T16250] bridge_slave_1: entered promiscuous mode [ 1258.312096][T16225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.312115][T16225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.312148][T16225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.667478][T16250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.757013][T16250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.531602][T16225] hsr_slave_0: entered promiscuous mode [ 1259.542224][T16225] hsr_slave_1: entered promiscuous mode [ 1259.554443][T16225] debugfs: 'hsr0' already exists in 'hsr' [ 1259.554472][T16225] Cannot create hsr debugfs directory [ 1259.575665][T16250] team0: Port device team_slave_0 added [ 1259.727086][T16250] team0: Port device team_slave_1 added [ 1260.426198][T16250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.426214][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.426240][T16250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.540295][T16250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.540309][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.540331][T16250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.447037][T16250] hsr_slave_0: entered promiscuous mode [ 1261.454133][T16250] hsr_slave_1: entered promiscuous mode [ 1261.460558][T16250] debugfs: 'hsr0' already exists in 'hsr' [ 1261.460660][T16250] Cannot create hsr debugfs directory [ 1262.618274][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2566'. [ 1262.861243][T16419] team0: Device vlan0 failed to change mtu [ 1263.303597][T16423] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2567'. [ 1263.696057][T15832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.733078][T16433] overlayfs: failed to clone upperpath [ 1265.448179][T16445] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2574'. [ 1265.553676][ T165] bridge_slave_1: left allmulticast mode [ 1265.553714][ T165] bridge_slave_1: left promiscuous mode [ 1265.554013][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.616891][ T165] bridge_slave_0: left allmulticast mode [ 1265.616930][ T165] bridge_slave_0: left promiscuous mode [ 1265.617174][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.787256][ T165] bridge_slave_1: left allmulticast mode [ 1265.787285][ T165] bridge_slave_1: left promiscuous mode [ 1265.787508][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.862868][ T165] bridge_slave_0: left allmulticast mode [ 1265.862899][ T165] bridge_slave_0: left promiscuous mode [ 1265.863105][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.132791][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1266.132906][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1266.727841][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.813978][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.857813][ T165] bond0 (unregistering): Released all slaves [ 1267.401386][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.486584][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.510531][ T165] bond0 (unregistering): Released all slaves [ 1267.581850][T16448] veth1_to_batadv: entered promiscuous mode [ 1267.659185][T16448] netlink: 'syz.9.2575': attribute type 1 has an invalid length. [ 1267.659209][T16448] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2575'. [ 1267.719125][T15832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.249961][T15889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.252683][T16455] bridge0: port 3(syz_tun) entered blocking state [ 1268.254757][T16455] bridge0: port 3(syz_tun) entered disabled state [ 1268.308053][T16455] syz_tun: entered allmulticast mode [ 1268.387715][T16455] syz_tun: entered promiscuous mode [ 1268.514513][T16455] bridge0: port 3(syz_tun) entered blocking state [ 1268.514769][T16455] bridge0: port 3(syz_tun) entered forwarding state [ 1268.579285][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.579546][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.178669][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.178842][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.480671][T15889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.624017][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.624199][T11875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.205212][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.205394][T11163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.235145][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1271.557267][ T165] hsr_slave_0: left promiscuous mode [ 1271.578501][ T165] hsr_slave_1: left promiscuous mode [ 1271.579616][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.622723][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.792307][ T165] hsr_slave_0: left promiscuous mode [ 1271.813654][ T165] hsr_slave_1: left promiscuous mode [ 1271.814619][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.857249][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.480200][T16485] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2581'. [ 1273.022002][ T165] team0 (unregistering): Port device team_slave_1 removed [ 1273.160762][ T165] team0 (unregistering): Port device team_slave_0 removed [ 1273.973114][ T165] team0 (unregistering): Port device team_slave_1 removed [ 1274.058488][ T165] team0 (unregistering): Port device team_slave_0 removed [ 1274.949112][T16498] netlink: 'syz.9.2584': attribute type 10 has an invalid length. [ 1274.949137][T16498] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2584'. [ 1275.198096][T16498] vxcan0: entered promiscuous mode [ 1275.198125][T16498] vxcan0: entered allmulticast mode [ 1275.198973][T16498] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 1277.326916][T14767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1277.421146][T14767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1277.561644][T14767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1277.594510][T14767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1277.615484][T14767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1279.392081][T16532] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2588'. [ 1279.987093][T14767] Bluetooth: hci2: command tx timeout [ 1281.034805][ T4922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1281.096934][ T4922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1281.098573][ T4922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1281.126625][ T4922] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1281.133415][ T4922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1283.158439][T14767] Bluetooth: hci2: command tx timeout [ 1283.589039][T14767] Bluetooth: hci5: command tx timeout [ 1283.718735][T16580] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2595'. [ 1284.699809][T16592] fuse: fd is not a fuse device [ 1285.284784][T16599] team0: Device vlan0 failed to change mtu [ 1285.366597][T14767] Bluetooth: hci2: command tx timeout [ 1285.773316][ T38] audit: type=1326 audit(1778556935.188:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.801673][T14767] Bluetooth: hci5: command tx timeout [ 1285.806262][ T38] audit: type=1326 audit(1778556935.197:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.806301][ T38] audit: type=1326 audit(1778556935.197:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.826293][ T38] audit: type=1326 audit(1778556935.197:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.826351][ T38] audit: type=1326 audit(1778556935.225:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.826399][ T38] audit: type=1326 audit(1778556935.225:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.826447][ T38] audit: type=1326 audit(1778556935.225:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.826496][ T38] audit: type=1326 audit(1778556935.225:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.826545][ T38] audit: type=1326 audit(1778556935.225:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1285.826593][ T38] audit: type=1326 audit(1778556935.225:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.9.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x7ffc0000 [ 1287.586667][T14767] Bluetooth: hci2: command tx timeout [ 1288.025011][T14767] Bluetooth: hci5: command tx timeout [ 1288.579186][T16225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1288.747790][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1288.778807][T16225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1288.829591][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1288.947253][T16225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1288.976189][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.041691][T16225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1289.103945][T16225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1290.247293][T14767] Bluetooth: hci5: command tx timeout [ 1290.482202][T16664] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2602'. [ 1290.775781][T16519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.776164][T16519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.776531][T16519] bridge_slave_0: entered allmulticast mode [ 1290.781048][T16519] bridge_slave_0: entered promiscuous mode [ 1290.847611][T16519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.847972][T16519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.848317][T16519] bridge_slave_1: entered allmulticast mode [ 1290.876843][T16519] bridge_slave_1: entered promiscuous mode [ 1291.048705][T11875] bridge_slave_1: left allmulticast mode [ 1291.048746][T11875] bridge_slave_1: left promiscuous mode [ 1291.049040][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.114340][T11875] bridge_slave_0: left allmulticast mode [ 1291.114380][T11875] bridge_slave_0: left promiscuous mode [ 1291.114661][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.287699][T16675] fuse: fd is not a fuse device [ 1291.756643][T16682] netlink: 'syz.9.2607': attribute type 1 has an invalid length. [ 1292.120633][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.182063][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.216215][T11875] bond0 (unregistering): Released all slaves [ 1292.417352][T16250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1292.494231][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1292.538540][T16519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.538990][T16250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1292.843283][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1293.995705][T16687] netlink: 'syz.9.2608': attribute type 4 has an invalid length. [ 1294.005417][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2608'. [ 1294.048461][T16519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.062491][T16250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1294.100243][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1294.421494][T16250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1294.471676][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1295.029356][T16519] team0: Port device team_slave_0 added [ 1295.032964][T16549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.033919][T16549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.037768][T16549] bridge_slave_0: entered allmulticast mode [ 1295.040872][T16703] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2609'. [ 1295.051281][T16549] bridge_slave_0: entered promiscuous mode [ 1295.258880][T11875] hsr_slave_0: left promiscuous mode [ 1295.301855][T11875] hsr_slave_1: left promiscuous mode [ 1295.305663][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.345303][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.145223][T16734] syz1: rxe_newlink: already configured on syz_tun [ 1297.824190][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1297.920621][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1298.428992][T16519] team0: Port device team_slave_1 added [ 1298.442734][T16549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.443045][T16549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.443409][T16549] bridge_slave_1: entered allmulticast mode [ 1298.449426][T16549] bridge_slave_1: entered promiscuous mode [ 1298.543709][T16734] lo speed is unknown, defaulting to 1000 [ 1298.702996][T16734] lo speed is unknown, defaulting to 1000 [ 1298.707673][T16519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.707689][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.707720][T16519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.805907][T16549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.821481][T16734] lo speed is unknown, defaulting to 1000 [ 1298.844395][T16519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.844416][T16519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.844449][T16519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.919480][T16549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.324050][T16549] team0: Port device team_slave_0 added [ 1299.486505][T16549] team0: Port device team_slave_1 added [ 1299.763862][T16734] infiniband sz1: set active [ 1299.764026][T16734] infiniband sz1: added lo [ 1299.804240][T16734] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1299.804273][T16734] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1299.804307][T16734] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1299.881581][T16519] hsr_slave_0: entered promiscuous mode [ 1299.883852][T16519] hsr_slave_1: entered promiscuous mode [ 1299.937690][T16519] debugfs: 'hsr0' already exists in 'hsr' [ 1299.937720][T16519] Cannot create hsr debugfs directory [ 1299.968542][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1300.019694][ T9317] lo speed is unknown, defaulting to 1000 [ 1300.097644][T16549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.097664][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.097696][T16549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.157487][T16549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.157506][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.157538][T16549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.336778][T16734] RDS/IB: sz1: added [ 1300.336879][T16734] smc: adding ib device sz1 with port count 1 [ 1300.337209][T16734] smc: ib device sz1 port 1 has no pnetid [ 1300.406621][ T9317] lo speed is unknown, defaulting to 1000 [ 1300.442861][T16734] lo speed is unknown, defaulting to 1000 [ 1300.694780][T16549] hsr_slave_0: entered promiscuous mode [ 1300.715092][T16549] hsr_slave_1: entered promiscuous mode [ 1300.718799][T16549] debugfs: 'hsr0' already exists in 'hsr' [ 1300.718828][T16549] Cannot create hsr debugfs directory [ 1301.685661][T16734] lo speed is unknown, defaulting to 1000 [ 1301.792297][T16225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.343223][T16734] lo speed is unknown, defaulting to 1000 [ 1302.858813][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1303.209880][T16734] lo speed is unknown, defaulting to 1000 [ 1303.564230][T16225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.931403][T16734] lo speed is unknown, defaulting to 1000 [ 1303.934858][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1304.291365][T16734] lo speed is unknown, defaulting to 1000 [ 1304.323201][ T2153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.323335][ T2153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.399800][T16250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.405345][ T2153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.405601][ T2153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.488508][T16250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.222028][ T2153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.223645][ T2153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.445035][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.445199][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.153533][ T4922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1306.231677][ T4922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1306.251927][ T4922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1306.313075][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1306.314149][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1307.624788][T16877] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2616'. [ 1308.618106][T11875] bridge_slave_1: left allmulticast mode [ 1308.618141][T11875] bridge_slave_1: left promiscuous mode [ 1308.618376][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.712544][T14767] Bluetooth: hci3: command tx timeout [ 1308.759851][T11875] bridge_slave_0: left allmulticast mode [ 1308.759887][T11875] bridge_slave_0: left promiscuous mode [ 1308.797261][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1308.895937][ T4922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1308.899632][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1308.902107][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.926967][ T4922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1308.930208][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1311.106160][T14767] Bluetooth: hci3: command tx timeout [ 1312.010653][T14767] Bluetooth: hci1: command tx timeout [ 1312.775861][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.859486][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.884516][T11875] bond0 (unregistering): Released all slaves [ 1313.340270][T14767] Bluetooth: hci3: command tx timeout [ 1314.176661][T14767] Bluetooth: hci1: command tx timeout [ 1314.279988][T16939] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2623'. [ 1315.541506][T14767] Bluetooth: hci3: command tx timeout [ 1316.369689][T16858] lo speed is unknown, defaulting to 1000 [ 1316.396553][T14767] Bluetooth: hci1: command tx timeout [ 1316.643967][T11875] hsr_slave_0: left promiscuous mode [ 1316.685927][T11875] hsr_slave_1: left promiscuous mode [ 1316.692202][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.728978][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.561329][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1317.636423][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1318.003782][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2631'. [ 1318.003866][T16896] lo speed is unknown, defaulting to 1000 [ 1318.682964][T14767] Bluetooth: hci1: command tx timeout [ 1319.291660][T17006] 9pnet_fd: p9_fd_create_unix (17006): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1322.800141][T17030] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 1323.337590][T17037] overlayfs: failed to clone lowerpath [ 1323.641536][T16519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1323.705745][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1323.881821][T16519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1323.994715][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1324.130389][T16519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1324.191763][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1324.942264][T16519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1324.998439][T16519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1325.591347][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2638'. [ 1325.669465][T16858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.669912][T16858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.670235][T16858] bridge_slave_0: entered allmulticast mode [ 1325.701685][T16858] bridge_slave_0: entered promiscuous mode [ 1325.829878][T16858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.830250][T16858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.830565][T16858] bridge_slave_1: entered allmulticast mode [ 1325.857845][T16858] bridge_slave_1: entered promiscuous mode [ 1327.033767][T17085] syz.9.2640 (17085) used greatest stack depth: 16512 bytes left [ 1327.406459][T16858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.462209][T16549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1327.495440][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1327.512278][T16858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.516225][T16549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1327.659596][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1327.730902][T16549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1327.772855][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1327.896514][T16549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1327.958764][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1327.964591][T16858] team0: Port device team_slave_0 added [ 1327.996527][T16858] team0: Port device team_slave_1 added [ 1328.363759][T16858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.363778][T16858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.363824][T16858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.518767][T16858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.518780][T16858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.518800][T16858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.789508][T16896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.789944][T16896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.790242][T16896] bridge_slave_0: entered allmulticast mode [ 1328.812306][T16896] bridge_slave_0: entered promiscuous mode [ 1328.897804][T16896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.898185][T16896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.912461][T16896] bridge_slave_1: entered allmulticast mode [ 1328.922480][T16896] bridge_slave_1: entered promiscuous mode [ 1328.994201][T16858] hsr_slave_0: entered promiscuous mode [ 1328.999824][T16858] hsr_slave_1: entered promiscuous mode [ 1329.007521][T16858] debugfs: 'hsr0' already exists in 'hsr' [ 1329.007549][T16858] Cannot create hsr debugfs directory [ 1329.166189][T16896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.787083][T16896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.044245][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2646'. [ 1330.152597][T17153] netlink: 'syz.9.2647': attribute type 9 has an invalid length. [ 1330.404108][T16896] team0: Port device team_slave_0 added [ 1330.446196][T16896] team0: Port device team_slave_1 added [ 1330.966568][T16896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.966582][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.966603][T16896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.148636][T16896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.148651][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.148674][T16896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.805615][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1331.805740][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1332.057182][T16896] hsr_slave_0: entered promiscuous mode [ 1332.067405][T16896] hsr_slave_1: entered promiscuous mode [ 1332.087134][T16896] debugfs: 'hsr0' already exists in 'hsr' [ 1332.087164][T16896] Cannot create hsr debugfs directory [ 1332.227621][T16519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.769463][T16519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.041700][ T38] kauditd_printk_skb: 138 callbacks suppressed [ 1333.041718][ T38] audit: type=1326 audit(1778556979.404:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.9.2653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x0 [ 1333.169708][T16549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.219507][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.219679][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.308606][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.308783][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.494294][T11875] bridge_slave_1: left allmulticast mode [ 1333.494334][T11875] bridge_slave_1: left promiscuous mode [ 1333.494632][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.591309][T11875] bridge_slave_0: left allmulticast mode [ 1333.591348][T11875] bridge_slave_0: left promiscuous mode [ 1333.591637][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.762344][T11875] bridge_slave_1: left allmulticast mode [ 1333.762375][T11875] bridge_slave_1: left promiscuous mode [ 1333.762587][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.826063][T11875] bridge_slave_0: left allmulticast mode [ 1333.826091][T11875] bridge_slave_0: left promiscuous mode [ 1333.826405][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.787762][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.851523][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.879098][T11875] bond0 (unregistering): Released all slaves [ 1335.471531][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.556812][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.602208][T11875] bond0 (unregistering): Released all slaves [ 1336.158994][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.286067][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.286247][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.694300][T17191] overlayfs: failed to clone upperpath [ 1336.753633][T17191] overlayfs: failed to clone upperpath [ 1336.873389][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.873618][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.033349][T11875] hsr_slave_0: left promiscuous mode [ 1340.076303][T11875] hsr_slave_1: left promiscuous mode [ 1340.077394][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.133921][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.368210][T11875] hsr_slave_0: left promiscuous mode [ 1340.407746][T11875] hsr_slave_1: left promiscuous mode [ 1340.410151][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.454847][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.349976][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1341.476626][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1342.343582][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1342.450684][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1342.722061][ T4922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1342.820245][ T4922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1342.841014][ T4922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1342.870177][ T4922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1342.871094][ T4922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1343.899337][T16549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.037112][T14767] Bluetooth: hci4: command tx timeout [ 1345.149012][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1345.226308][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1345.246897][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1345.275715][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1345.293458][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1347.165891][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2669'. [ 1347.166970][T17232] lo speed is unknown, defaulting to 1000 [ 1347.257189][ T4922] Bluetooth: hci4: command tx timeout [ 1347.602471][ T4922] Bluetooth: hci2: command tx timeout [ 1347.660840][T16858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1348.487257][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.526070][T16858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1349.112104][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1349.195784][T16858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1349.253224][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1349.295090][T16858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1349.424218][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1349.479894][ T4922] Bluetooth: hci4: command tx timeout [ 1349.777105][T17305] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 1349.854608][ T4922] Bluetooth: hci2: command tx timeout [ 1351.160827][T17254] lo speed is unknown, defaulting to 1000 [ 1351.573784][T16896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1351.660342][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1351.709443][ T4922] Bluetooth: hci4: command tx timeout [ 1351.805514][T16896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1351.835236][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1351.927897][T16896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1352.044581][ T4922] Bluetooth: hci2: command tx timeout [ 1352.134982][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1352.295634][T17340] overlayfs: failed to clone upperpath [ 1354.267228][ T4922] Bluetooth: hci2: command tx timeout [ 1355.748761][T16896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1355.792201][T16896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1358.128198][T17232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.128661][T17232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.128937][T17232] bridge_slave_0: entered allmulticast mode [ 1358.151695][T17232] bridge_slave_0: entered promiscuous mode [ 1358.269327][T17232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.269604][T17232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.283018][T17232] bridge_slave_1: entered allmulticast mode [ 1358.312529][T17232] bridge_slave_1: entered promiscuous mode [ 1358.529145][T16858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.828276][T17232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.029888][T17232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.308866][T17232] team0: Port device team_slave_0 added [ 1360.332821][T17254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.333193][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.333891][T17254] bridge_slave_0: entered allmulticast mode [ 1360.370071][T17254] bridge_slave_0: entered promiscuous mode [ 1360.408003][T17232] team0: Port device team_slave_1 added [ 1360.450044][T17254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.450407][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.450715][T17254] bridge_slave_1: entered allmulticast mode [ 1360.455855][T17254] bridge_slave_1: entered promiscuous mode [ 1360.777400][T16858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.848044][T17232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.848058][T17232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1360.848079][T17232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.019907][T17254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.088910][T17232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.088929][T17232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.088958][T17232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.191157][T17254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.507175][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.507448][T11163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.206561][T17254] team0: Port device team_slave_0 added [ 1363.306596][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.306792][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.335204][T16896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.361300][T17254] team0: Port device team_slave_1 added [ 1363.476806][T17446] fuse: fd is not a fuse device [ 1363.539906][T17232] hsr_slave_0: entered promiscuous mode [ 1363.549274][T17232] hsr_slave_1: entered promiscuous mode [ 1363.552452][T17232] debugfs: 'hsr0' already exists in 'hsr' [ 1363.552480][T17232] Cannot create hsr debugfs directory [ 1363.688609][T17254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.688623][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.688645][T17254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.172174][T17450] overlayfs: failed to resolve './bus': -2 [ 1364.318960][T17254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.318980][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.319012][T17254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.200452][T17463] 9pnet_fd: p9_fd_create_unix (17463): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1368.562258][T16896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.722908][T17254] hsr_slave_0: entered promiscuous mode [ 1368.728758][T17254] hsr_slave_1: entered promiscuous mode [ 1368.739943][T17254] debugfs: 'hsr0' already exists in 'hsr' [ 1368.739972][T17254] Cannot create hsr debugfs directory [ 1368.875134][T17467] fuse: fd is not a fuse device [ 1369.464160][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.464339][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.772990][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.773164][ T7225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.512677][T14767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1370.562175][T14767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1370.595311][T14767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1370.614226][T14767] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1370.652962][T14767] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1372.636625][T11875] bridge_slave_1: left allmulticast mode [ 1372.636661][T11875] bridge_slave_1: left promiscuous mode [ 1372.636866][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.701928][T11875] bridge_slave_0: left allmulticast mode [ 1372.701956][T11875] bridge_slave_0: left promiscuous mode [ 1372.702187][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.876986][T11875] bridge_slave_1: left allmulticast mode [ 1372.877016][T11875] bridge_slave_1: left promiscuous mode [ 1372.877239][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.940643][T11875] bridge_slave_0: left allmulticast mode [ 1372.940672][T11875] bridge_slave_0: left promiscuous mode [ 1372.940914][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.989867][T14767] Bluetooth: hci5: command tx timeout [ 1373.869832][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.020653][ T4922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1374.111393][ T4922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1374.114448][ T4922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1374.118134][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.119641][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1374.143709][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1374.273538][T11875] bond0 (unregistering): Released all slaves [ 1374.905600][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.968789][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1375.012573][T11875] bond0 (unregistering): Released all slaves [ 1375.054948][T17491] lo speed is unknown, defaulting to 1000 [ 1375.055515][T17491] lo speed is unknown, defaulting to 1000 [ 1375.058257][T17491] lo speed is unknown, defaulting to 1000 [ 1375.059471][T17491] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1375.059497][T17491] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1375.059529][T17491] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1375.065938][T17491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1375.077267][T17491] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1375.173774][T17491] lo speed is unknown, defaulting to 1000 [ 1375.176301][T17491] lo speed is unknown, defaulting to 1000 [ 1375.178705][T17491] lo speed is unknown, defaulting to 1000 [ 1375.181224][T17491] lo speed is unknown, defaulting to 1000 [ 1375.183569][T17491] lo speed is unknown, defaulting to 1000 [ 1375.185891][T17491] lo speed is unknown, defaulting to 1000 [ 1375.188300][T17491] lo speed is unknown, defaulting to 1000 [ 1375.223571][T14767] Bluetooth: hci5: command tx timeout [ 1376.421569][T14767] Bluetooth: hci3: command tx timeout [ 1377.396037][T17517] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1377.458616][T14767] Bluetooth: hci5: command tx timeout [ 1377.777515][T17518] overlayfs: failed to clone upperpath [ 1378.642153][T14767] Bluetooth: hci3: command tx timeout [ 1378.848482][T17475] lo speed is unknown, defaulting to 1000 [ 1379.657407][T14767] Bluetooth: hci5: command tx timeout [ 1380.855697][T14767] Bluetooth: hci3: command tx timeout [ 1383.582196][T17475] lo speed is unknown, defaulting to 1000 [ 1384.000053][T14767] Bluetooth: hci3: command tx timeout [ 1388.264073][T17494] lo speed is unknown, defaulting to 1000 [ 1388.808079][T17494] lo speed is unknown, defaulting to 1000 [ 1391.413888][T17586] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1391.529418][T17587] overlayfs: failed to clone upperpath [ 1391.593608][T11875] hsr_slave_0: left promiscuous mode [ 1391.636478][T11875] hsr_slave_1: left promiscuous mode [ 1391.656956][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.680164][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.871344][T11875] hsr_slave_0: left promiscuous mode [ 1391.893512][T11875] hsr_slave_1: left promiscuous mode [ 1391.894708][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.936268][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.545358][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1392.590491][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1393.103312][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1393.154575][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1394.457147][T17605] 9pnet_fd: p9_fd_create_unix (17605): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1395.430929][T17475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.431385][T17475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.431696][T17475] bridge_slave_0: entered allmulticast mode [ 1395.435835][T17475] bridge_slave_0: entered promiscuous mode [ 1396.171999][T17475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.172383][T17475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.172757][T17475] bridge_slave_1: entered allmulticast mode [ 1396.176979][T17475] bridge_slave_1: entered promiscuous mode [ 1396.589120][T17475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.628660][T17475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.903376][T17232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1397.001533][T17232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.024593][T17475] team0: Port device team_slave_0 added [ 1397.025993][T17232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1397.083652][T17232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1397.094500][T17475] team0: Port device team_slave_1 added [ 1397.114253][T17232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1397.172203][T17232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1397.234851][T17614] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1397.283207][T17232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1397.358914][T17615] overlayfs: failed to clone upperpath [ 1397.381400][T17232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.447104][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.447222][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.772729][T17619] overlayfs: failed to clone upperpath [ 1397.957107][T17475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.957126][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.957158][T17475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.372549][T17630] 9pnet_fd: p9_fd_create_unix (17630): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1399.237578][T17475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.237600][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.237633][T17475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.697229][T17475] hsr_slave_0: entered promiscuous mode [ 1399.700244][T17475] hsr_slave_1: entered promiscuous mode [ 1399.703741][T17475] debugfs: 'hsr0' already exists in 'hsr' [ 1399.703768][T17475] Cannot create hsr debugfs directory [ 1399.708128][T17494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.708481][T17494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.708796][T17494] bridge_slave_0: entered allmulticast mode [ 1399.758229][T17494] bridge_slave_0: entered promiscuous mode [ 1399.768483][T17254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1400.701483][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1400.878286][T17494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.878733][T17494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.879045][T17494] bridge_slave_1: entered allmulticast mode [ 1400.895024][T17494] bridge_slave_1: entered promiscuous mode [ 1401.020884][T17638] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2723'. [ 1401.822038][T17254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1401.858269][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1401.898716][T17254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1402.029202][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1402.199321][T17642] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1402.212728][T17254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1402.286568][T17643] overlayfs: failed to clone upperpath [ 1402.287696][T17254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1402.355131][T17494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.438350][T17494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.480583][T17647] overlayfs: failed to clone upperpath [ 1402.786214][T17494] team0: Port device team_slave_0 added [ 1402.848493][T17494] team0: Port device team_slave_1 added [ 1403.082803][T17494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.082824][T17494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.082857][T17494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.126164][T17494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.126184][T17494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.126216][T17494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.341259][T17659] 9pnet_fd: p9_fd_create_unix (17659): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1405.721012][T17663] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2730'. [ 1407.321095][T17494] hsr_slave_0: entered promiscuous mode [ 1407.323017][T17494] hsr_slave_1: entered promiscuous mode [ 1407.336862][T17494] debugfs: 'hsr0' already exists in 'hsr' [ 1407.336892][T17494] Cannot create hsr debugfs directory [ 1407.840020][T17670] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1408.062038][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1408.133784][ T4922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1408.151489][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1408.170910][ T4922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1408.210465][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1408.468099][T17674] overlayfs: failed to clone upperpath [ 1409.894290][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1409.978348][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1410.039255][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1410.041392][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1410.098379][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1410.608900][ T4922] Bluetooth: hci1: command tx timeout [ 1410.686156][T17691] overlayfs: failed to clone upperpath [ 1411.193509][T17699] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2737'. [ 1412.409434][ T4922] Bluetooth: hci2: command tx timeout [ 1412.493776][T17708] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1412.826779][ T4922] Bluetooth: hci1: command tx timeout [ 1412.874457][T17710] overlayfs: failed to clone upperpath [ 1414.009817][T17671] lo speed is unknown, defaulting to 1000 [ 1414.170989][T17725] overlayfs: failed to clone upperpath [ 1414.632917][ T4922] Bluetooth: hci2: command tx timeout [ 1415.056305][ T4922] Bluetooth: hci1: command tx timeout [ 1415.149341][T17738] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2744'. [ 1416.464316][T17745] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1416.844741][ T4922] Bluetooth: hci2: command tx timeout [ 1416.881221][T17754] overlayfs: failed to clone upperpath [ 1416.888773][T11875] bridge_slave_1: left allmulticast mode [ 1416.888867][T11875] bridge_slave_1: left promiscuous mode [ 1416.889733][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.990252][T11875] bridge_slave_0: left allmulticast mode [ 1416.990290][T11875] bridge_slave_0: left promiscuous mode [ 1416.990565][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.197428][T11875] bridge_slave_1: left allmulticast mode [ 1417.197465][T11875] bridge_slave_1: left promiscuous mode [ 1417.197746][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.273564][ T4922] Bluetooth: hci1: command tx timeout [ 1417.288568][T11875] bridge_slave_0: left allmulticast mode [ 1417.288595][T11875] bridge_slave_0: left promiscuous mode [ 1417.288790][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.532336][T17763] overlayfs: failed to clone upperpath [ 1418.202982][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.288100][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.312261][T11875] bond0 (unregistering): Released all slaves [ 1418.992675][T17771] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2751'. [ 1419.836829][ T4922] Bluetooth: hci2: command tx timeout [ 1420.100847][T17776] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1420.126250][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.393086][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.397838][T17778] overlayfs: failed to clone upperpath [ 1420.419698][T11875] bond0 (unregistering): Released all slaves [ 1420.469950][T17671] lo speed is unknown, defaulting to 1000 [ 1420.471145][T17684] lo speed is unknown, defaulting to 1000 [ 1421.188237][T17684] lo speed is unknown, defaulting to 1000 [ 1421.511453][T17784] overlayfs: failed to clone upperpath [ 1423.492177][T17794] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2758'. [ 1424.666863][T11875] hsr_slave_0: left promiscuous mode [ 1424.709777][T11875] hsr_slave_1: left promiscuous mode [ 1424.711012][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.753395][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.966112][T11875] hsr_slave_0: left promiscuous mode [ 1425.008993][T11875] hsr_slave_1: left promiscuous mode [ 1425.011961][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.059545][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.897553][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1425.971351][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1426.782767][T17812] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2765'. [ 1427.755936][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1427.802594][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1428.877247][T17827] fuse: fd is not a fuse device [ 1429.335721][T17671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.336151][T17671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.336443][T17671] bridge_slave_0: entered allmulticast mode [ 1429.339943][T17671] bridge_slave_0: entered promiscuous mode [ 1429.364072][T17671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.364418][T17671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.364706][T17671] bridge_slave_1: entered allmulticast mode [ 1429.367903][T17671] bridge_slave_1: entered promiscuous mode [ 1429.892863][T17843] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1430.227471][T17671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.357389][T17843] overlayfs: failed to clone upperpath [ 1430.382457][T17671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.300800][T17671] team0: Port device team_slave_0 added [ 1431.393631][T17671] team0: Port device team_slave_1 added [ 1431.536649][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.536910][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.537156][T17684] bridge_slave_0: entered allmulticast mode [ 1431.619046][T17684] bridge_slave_0: entered promiscuous mode [ 1432.029578][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.030033][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.030391][T17684] bridge_slave_1: entered allmulticast mode [ 1432.036383][T17684] bridge_slave_1: entered promiscuous mode [ 1432.111336][T17671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.111355][T17671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.111387][T17671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.362971][T17671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.362985][T17671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.363008][T17671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.363811][T17475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1432.439587][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1432.598521][T17475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1432.647730][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1432.714541][T17684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.722434][T17475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1432.776119][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1432.805015][T17684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.823067][T17475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1432.995007][T17475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1433.669667][T17888] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2772'. [ 1434.963500][T17671] hsr_slave_0: entered promiscuous mode [ 1434.965888][T17671] hsr_slave_1: entered promiscuous mode [ 1434.967934][T17671] debugfs: 'hsr0' already exists in 'hsr' [ 1434.967958][T17671] Cannot create hsr debugfs directory [ 1435.016258][T17475] kthread_run failed with err -4 [ 1435.049347][T17684] team0: Port device team_slave_0 added [ 1435.111710][T17684] team0: Port device team_slave_1 added [ 1435.377171][T17896] netlink: 'syz.9.2773': attribute type 1 has an invalid length. [ 1435.467639][T14767] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1435.503486][T14767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1435.508963][T14767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1435.581441][T14767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1435.583419][T14767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1436.646619][T17896] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1437.338332][T17906] fuse: fd is not a fuse device [ 1437.363596][T17684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.363615][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.363637][T17684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.803308][T14767] Bluetooth: hci4: command tx timeout [ 1438.076035][T17684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.076049][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.076071][T17684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.080873][T17914] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1439.486524][T17916] overlayfs: failed to clone upperpath [ 1439.644499][T14767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1439.749674][T14767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1439.751917][T14767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1439.792615][T14767] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1439.793420][T14767] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1440.012053][T14767] Bluetooth: hci4: command tx timeout [ 1440.604698][T17684] hsr_slave_0: entered promiscuous mode [ 1440.608936][T17684] hsr_slave_1: entered promiscuous mode [ 1440.618756][T17684] debugfs: 'hsr0' already exists in 'hsr' [ 1440.618833][T17684] Cannot create hsr debugfs directory [ 1442.149453][T14767] Bluetooth: hci5: command tx timeout [ 1442.245468][T14767] Bluetooth: hci4: command tx timeout [ 1443.010288][T17897] lo speed is unknown, defaulting to 1000 [ 1444.374783][T14767] Bluetooth: hci5: command tx timeout [ 1444.468307][T14767] Bluetooth: hci4: command tx timeout [ 1444.597627][T17897] lo speed is unknown, defaulting to 1000 [ 1445.127180][T17971] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1445.182540][T17917] lo speed is unknown, defaulting to 1000 [ 1445.572337][T17972] overlayfs: failed to clone upperpath [ 1445.576213][T17917] lo speed is unknown, defaulting to 1000 [ 1446.285276][T11875] bridge_slave_1: left allmulticast mode [ 1446.285317][T11875] bridge_slave_1: left promiscuous mode [ 1446.285640][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.371715][T11875] bridge_slave_0: left allmulticast mode [ 1446.371743][T11875] bridge_slave_0: left promiscuous mode [ 1446.371973][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.541564][T11875] bridge_slave_1: left allmulticast mode [ 1446.541594][T11875] bridge_slave_1: left promiscuous mode [ 1446.541803][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.605465][T14767] Bluetooth: hci5: command tx timeout [ 1446.607387][T11875] bridge_slave_0: left allmulticast mode [ 1446.607423][T11875] bridge_slave_0: left promiscuous mode [ 1446.607699][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.086909][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.172318][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.259542][T11875] bond0 (unregistering): Released all slaves [ 1447.535690][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.623090][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.686312][T11875] bond0 (unregistering): Released all slaves [ 1448.171630][T17981] bridge0: port 3(syz_tun) entered disabled state [ 1448.193204][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.215509][T17981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.413318][T17981] vxcan0: left promiscuous mode [ 1448.413348][T17981] vxcan0: left allmulticast mode [ 1448.817397][T14767] Bluetooth: hci5: command tx timeout [ 1448.818169][T17981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.821570][T17981] veth1_to_batadv: left promiscuous mode [ 1448.821779][T17981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1448.936405][T17981] vlan0: left promiscuous mode [ 1449.352149][T17981] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1449.781677][T17981] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 1449.786769][T17981] erspan1: left allmulticast mode [ 1449.811321][T17981] ip6gre1: left promiscuous mode [ 1449.811345][T17981] ip6gre1: left allmulticast mode [ 1449.875891][T17981] bond1: left promiscuous mode [ 1449.875917][T17981] bond1: left allmulticast mode [ 1449.939628][T17981] bond2: left promiscuous mode [ 1449.939653][T17981] bond2: left allmulticast mode [ 1450.025007][T17981] bond3: left promiscuous mode [ 1450.025043][T17981] bond3: left allmulticast mode [ 1450.089083][T17981] bond4: left promiscuous mode [ 1450.089109][T17981] bond4: left allmulticast mode [ 1450.174595][T17981] bond5: left promiscuous mode [ 1450.174630][T17981] bond5: left allmulticast mode [ 1450.504180][T16359] syz1: Port: 1 Link DOWN [ 1450.504862][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1450.579168][ T5833] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.579207][ T5833] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.705389][ T5833] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.705431][ T5833] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.857455][ T5833] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.857484][ T5833] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.925659][ T5833] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.925688][ T5833] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.734027][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.734509][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.734876][T17897] bridge_slave_0: entered allmulticast mode [ 1453.776538][T17897] bridge_slave_0: entered promiscuous mode [ 1454.196030][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.196401][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.196764][T17897] bridge_slave_1: entered allmulticast mode [ 1454.237691][T17897] bridge_slave_1: entered promiscuous mode [ 1454.321588][T17917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.321838][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.322074][T17917] bridge_slave_0: entered allmulticast mode [ 1454.324910][T17917] bridge_slave_0: entered promiscuous mode [ 1454.552062][T18030] overlayfs: failed to clone upperpath [ 1454.598625][T11875] hsr_slave_0: left promiscuous mode [ 1454.619861][T11875] hsr_slave_1: left promiscuous mode [ 1454.620963][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.663766][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.801659][T11875] hsr_slave_0: left promiscuous mode [ 1454.823313][T11875] hsr_slave_1: left promiscuous mode [ 1454.824338][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.869062][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.103037][T18036] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2791'. [ 1455.411329][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1455.465850][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1456.009739][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1456.065183][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1456.279941][T17917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.280233][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.280678][T17917] bridge_slave_1: entered allmulticast mode [ 1456.283474][T17917] bridge_slave_1: entered promiscuous mode [ 1456.319493][T17897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.355457][T18036] geneve2: entered promiscuous mode [ 1456.463914][T17897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.464023][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.519824][T18039] fuse: fd is not a fuse device [ 1456.560260][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.695308][T17917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.695931][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.845557][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.917876][T17917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.923475][T17897] team0: Port device team_slave_0 added [ 1457.086382][T17897] team0: Port device team_slave_1 added [ 1457.270131][T17917] team0: Port device team_slave_0 added [ 1457.271257][T17671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1457.305514][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1457.311600][T17917] team0: Port device team_slave_1 added [ 1457.432408][T17671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1457.504569][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1457.542610][T17897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.542628][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.542656][T17897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.015966][T17671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1458.131967][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1458.168858][T17897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.168876][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.168902][T17897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.170506][T17671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1458.233503][T17671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1458.233928][T18068] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 1458.239301][T17917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.239318][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.239349][T17917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.605431][T17917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.605445][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.605468][T17917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.184564][T17897] hsr_slave_0: entered promiscuous mode [ 1459.187379][T17897] hsr_slave_1: entered promiscuous mode [ 1459.188956][T17897] debugfs: 'hsr0' already exists in 'hsr' [ 1459.188985][T17897] Cannot create hsr debugfs directory [ 1459.218287][T18078] overlayfs: failed to clone upperpath [ 1459.247121][T17917] hsr_slave_0: entered promiscuous mode [ 1459.249180][T17917] hsr_slave_1: entered promiscuous mode [ 1459.250775][T17917] debugfs: 'hsr0' already exists in 'hsr' [ 1459.250801][T17917] Cannot create hsr debugfs directory [ 1459.708199][T17684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1459.736500][T17684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1459.889796][T17684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1459.926879][T17684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1460.264879][T17684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1462.208122][T17684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1462.271068][T17684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1462.323631][T17684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1463.037242][T18115] overlayfs: failed to clone upperpath [ 1463.376200][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1463.386000][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1466.255825][T18153] overlayfs: failed to clone upperpath [ 1466.928773][T18156] overlayfs: missing 'lowerdir' [ 1467.938447][T17671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.130074][T17671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.212259][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1468.263102][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.263215][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.439395][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.439626][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.514548][T17684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.388240][T11875] bridge_slave_1: left allmulticast mode [ 1469.388270][T11875] bridge_slave_1: left promiscuous mode [ 1469.388488][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.453302][T11875] bridge_slave_0: left allmulticast mode [ 1469.453331][T11875] bridge_slave_0: left promiscuous mode [ 1469.453610][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.612736][T11875] bridge_slave_1: left allmulticast mode [ 1469.612778][T11875] bridge_slave_1: left promiscuous mode [ 1469.616185][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.785086][T11875] bridge_slave_0: left allmulticast mode [ 1469.785126][T11875] bridge_slave_0: left promiscuous mode [ 1469.785402][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.070830][T18187] overlayfs: failed to clone upperpath [ 1472.167327][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.252692][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.339961][T11875] bond0 (unregistering): Released all slaves [ 1472.521171][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.647969][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.734678][T11875] bond0 (unregistering): Released all slaves [ 1473.826431][ T4922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1473.881539][ T4922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1473.884977][ T4922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1474.014359][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1474.026972][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1474.983025][T18201] overlayfs: failed to clone upperpath [ 1475.580265][ T4922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1475.670759][ T4922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1475.689890][ T4922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1475.730253][ T4922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1475.734403][ T4922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1475.977993][T18210] overlayfs: missing 'lowerdir' [ 1476.520954][T14767] Bluetooth: hci3: command tx timeout [ 1477.201525][T11875] hsr_slave_0: left promiscuous mode [ 1477.243915][T11875] hsr_slave_1: left promiscuous mode [ 1477.244763][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.286497][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.500348][T11875] hsr_slave_0: left promiscuous mode [ 1477.546721][T11875] hsr_slave_1: left promiscuous mode [ 1477.730894][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.773620][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.160993][T14767] Bluetooth: hci1: command tx timeout [ 1479.016121][T14767] Bluetooth: hci3: command tx timeout [ 1480.363703][T14767] Bluetooth: hci1: command tx timeout [ 1480.609315][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1480.662524][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1481.346403][T14767] Bluetooth: hci3: command tx timeout [ 1481.411395][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1481.412160][T18248] overlayfs: failed to clone upperpath [ 1481.475591][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1481.734064][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1482.347721][T18256] overlayfs: missing 'lowerdir' [ 1482.681711][T18193] lo speed is unknown, defaulting to 1000 [ 1482.967690][T14767] Bluetooth: hci1: command tx timeout [ 1483.586739][T14767] Bluetooth: hci3: command tx timeout [ 1485.199456][T18279] 9pnet_virtio: no channels available for device syz [ 1485.286737][T14767] Bluetooth: hci1: command tx timeout [ 1485.381573][T17897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1487.457692][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1487.470429][T18204] lo speed is unknown, defaulting to 1000 [ 1487.472327][T17897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1487.473008][T18193] lo speed is unknown, defaulting to 1000 [ 1487.732036][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1487.831633][T17897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1487.924831][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1488.395404][T17897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1488.467413][T17897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1488.487415][T18204] lo speed is unknown, defaulting to 1000 [ 1488.502992][T18297] overlayfs: failed to clone upperpath [ 1489.033118][T17917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1489.140435][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1489.257271][T17917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1489.304164][T18307] overlayfs: missing 'lowerdir' [ 1489.363548][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1489.401901][T17917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1489.475190][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1489.498542][T17917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1489.546532][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1491.296639][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1492.075675][T18363] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1492.131621][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.135409][T18193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.135669][T18193] bridge_slave_0: entered allmulticast mode [ 1492.151433][T18193] bridge_slave_0: entered promiscuous mode [ 1492.205169][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.205442][T18193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.205716][T18193] bridge_slave_1: entered allmulticast mode [ 1492.210114][T18193] bridge_slave_1: entered promiscuous mode [ 1492.531762][T18371] overlayfs: failed to clone upperpath [ 1492.723872][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.724328][T18204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.724624][T18204] bridge_slave_0: entered allmulticast mode [ 1492.752851][T18204] bridge_slave_0: entered promiscuous mode [ 1492.825806][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.826173][T18204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.826519][T18204] bridge_slave_1: entered allmulticast mode [ 1492.830925][T18204] bridge_slave_1: entered promiscuous mode [ 1492.884580][T18193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.933619][T18193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.003321][T17897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.333996][T18373] overlayfs: missing 'lowerdir' [ 1493.431331][T18204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.482071][T18204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.707143][T18193] team0: Port device team_slave_0 added [ 1494.782805][T18193] team0: Port device team_slave_1 added [ 1494.849337][T18204] team0: Port device team_slave_0 added [ 1495.852750][T18204] team0: Port device team_slave_1 added [ 1495.858284][T18193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.858302][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.858335][T18193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.074239][T18193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.074259][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.074292][T18193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.389071][T17917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.444597][T18204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.444611][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.444633][T18204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.539080][T17897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.543225][T18204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.543243][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.543276][T18204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.705262][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.705495][T11234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.756671][T18193] hsr_slave_0: entered promiscuous mode [ 1497.758580][T18193] hsr_slave_1: entered promiscuous mode [ 1497.771709][T18193] debugfs: 'hsr0' already exists in 'hsr' [ 1497.771740][T18193] Cannot create hsr debugfs directory [ 1497.971518][T18204] hsr_slave_0: entered promiscuous mode [ 1497.981209][T18204] hsr_slave_1: entered promiscuous mode [ 1497.988613][T18204] debugfs: 'hsr0' already exists in 'hsr' [ 1497.988644][T18204] Cannot create hsr debugfs directory [ 1498.094802][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.095054][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.150633][T17917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.465872][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.473996][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.657564][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.657804][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.271464][ T38] audit: type=1326 audit(1778557134.971:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18392 comm="syz.9.2837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x0 [ 1500.876123][T18409] overlayfs: failed to clone upperpath [ 1501.080671][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1501.283330][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1501.293625][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1501.397957][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1501.401080][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1501.914569][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1503.033319][T18438] ceph: No mds server is up or the cluster is laggy [ 1503.035149][T16359] libceph: connect (1)[c::]:6789 error -101 [ 1503.035358][T16359] libceph: mon0 (1)[c::]:6789 connect error [ 1503.312796][T16359] libceph: connect (1)[c::]:6789 error -101 [ 1503.313016][T16359] libceph: mon0 (1)[c::]:6789 connect error [ 1503.619845][ T4922] Bluetooth: hci2: command tx timeout [ 1503.859564][T17546] libceph: connect (1)[c::]:6789 error -101 [ 1503.859780][T17546] libceph: mon0 (1)[c::]:6789 connect error [ 1505.703311][T11875] bridge_slave_1: left allmulticast mode [ 1505.703352][T11875] bridge_slave_1: left promiscuous mode [ 1505.703654][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.858608][T11875] bridge_slave_0: left allmulticast mode [ 1505.858644][T11875] bridge_slave_0: left promiscuous mode [ 1505.858924][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.859779][ T5620] Bluetooth: hci2: command tx timeout [ 1505.867760][T14767] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1505.933032][T14767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1505.937009][T14767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1505.970572][T14767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1505.973942][T14767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1506.319149][T11875] bridge_slave_1: left allmulticast mode [ 1506.319190][T11875] bridge_slave_1: left promiscuous mode [ 1506.319496][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.405736][T11875] bridge_slave_0: left allmulticast mode [ 1506.405765][T11875] bridge_slave_0: left promiscuous mode [ 1506.405965][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.495373][T18475] overlayfs: failed to clone upperpath [ 1507.505829][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.612885][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.700307][T11875] bond0 (unregistering): Released all slaves [ 1508.060808][ T4922] Bluetooth: hci2: command tx timeout [ 1508.319241][ T4922] Bluetooth: hci4: command tx timeout [ 1508.419248][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.478569][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.529072][T11875] bond0 (unregistering): Released all slaves [ 1509.258089][T18413] lo speed is unknown, defaulting to 1000 [ 1509.260850][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1510.007779][T18413] lo speed is unknown, defaulting to 1000 [ 1510.285717][ T4922] Bluetooth: hci2: command tx timeout [ 1510.700025][ T4922] Bluetooth: hci4: command tx timeout [ 1512.992411][ T4922] Bluetooth: hci4: command tx timeout [ 1513.855917][ T5268] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1514.171092][T11875] hsr_slave_0: left promiscuous mode [ 1514.205431][T11875] hsr_slave_1: left promiscuous mode [ 1514.206627][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.523538][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.663845][T18533] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2854'. [ 1515.509189][ T4922] Bluetooth: hci4: command tx timeout [ 1515.637202][T11875] hsr_slave_0: left promiscuous mode [ 1515.679976][T11875] hsr_slave_1: left promiscuous mode [ 1515.681112][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.723693][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.172181][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1516.204376][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1516.653113][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1516.685096][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1517.283724][T18463] lo speed is unknown, defaulting to 1000 [ 1517.675510][T18463] lo speed is unknown, defaulting to 1000 [ 1518.952199][T18573] 9pnet_virtio: no channels available for device syz [ 1522.924037][T18606] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2861'. [ 1523.969793][T18413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.970156][T18413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.970482][T18413] bridge_slave_0: entered allmulticast mode [ 1523.995852][T18413] bridge_slave_0: entered promiscuous mode [ 1524.183182][T18413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.183422][T18413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.183663][T18413] bridge_slave_1: entered allmulticast mode [ 1524.201102][T18413] bridge_slave_1: entered promiscuous mode [ 1524.562625][T18413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.600834][T18413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.698026][T18413] team0: Port device team_slave_0 added [ 1524.715532][T18413] team0: Port device team_slave_1 added [ 1524.801979][T18413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.801998][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.802026][T18413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.863950][T18413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.863967][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.863993][T18413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.644049][T18413] hsr_slave_0: entered promiscuous mode [ 1525.648501][T18413] hsr_slave_1: entered promiscuous mode [ 1525.656425][T18413] debugfs: 'hsr0' already exists in 'hsr' [ 1525.656506][T18413] Cannot create hsr debugfs directory [ 1527.799979][T18463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.800655][T18463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.800984][T18463] bridge_slave_0: entered allmulticast mode [ 1527.805447][T18463] bridge_slave_0: entered promiscuous mode [ 1527.866540][T18463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.866910][T18463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.867272][T18463] bridge_slave_1: entered allmulticast mode [ 1527.872312][T18463] bridge_slave_1: entered promiscuous mode [ 1528.094124][T18463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.168246][T18463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.235875][T18193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1528.551942][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1528.755087][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1528.755171][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1528.878269][T18193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1528.902887][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1528.908223][T18463] team0: Port device team_slave_0 added [ 1528.924339][T18193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1528.969174][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1529.492461][T18463] team0: Port device team_slave_1 added [ 1529.493773][T18193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1529.700770][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1529.893385][T18657] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2868'. [ 1532.655600][T18463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.655614][T18463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.655636][T18463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.732422][T18463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.732442][T18463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.732475][T18463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1533.195427][T18463] hsr_slave_0: entered promiscuous mode [ 1533.197434][T18463] hsr_slave_1: entered promiscuous mode [ 1533.199947][T18463] debugfs: 'hsr0' already exists in 'hsr' [ 1533.199974][T18463] Cannot create hsr debugfs directory [ 1533.632636][T18204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1533.743993][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1537.024555][T18204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1537.089839][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1537.129188][T18204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1537.171396][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1537.471478][T18204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1537.494834][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1539.729192][T14767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1539.775863][T14767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1539.841149][T14767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1539.842677][T18696] fuse: fd is not a fuse device [ 1539.850258][T14767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1539.872207][T14767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1540.705900][ T4922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1540.767710][ T4922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1540.769491][ T4922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1540.795152][ T4922] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1540.796554][ T4922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1541.241156][T11875] bridge_slave_1: left allmulticast mode [ 1541.241195][T11875] bridge_slave_1: left promiscuous mode [ 1541.241528][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.359727][T11875] bridge_slave_0: left allmulticast mode [ 1541.359757][T11875] bridge_slave_0: left promiscuous mode [ 1541.360008][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.508332][T11875] bridge_slave_1: left allmulticast mode [ 1541.508364][T11875] bridge_slave_1: left promiscuous mode [ 1541.508581][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.597564][T11875] bridge_slave_0: left allmulticast mode [ 1541.597595][T11875] bridge_slave_0: left promiscuous mode [ 1541.597798][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.256266][ T4922] Bluetooth: hci3: command tx timeout [ 1542.780498][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.867956][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.071539][T11875] bond0 (unregistering): Released all slaves [ 1543.985365][ T4922] Bluetooth: hci5: command tx timeout [ 1544.985174][ T4922] Bluetooth: hci3: command tx timeout [ 1545.294055][ T38] audit: type=1326 audit(1778557178.046:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18727 comm="syz.9.2883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x0 [ 1545.677807][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.761949][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.806416][T11875] bond0 (unregistering): Released all slaves [ 1546.352265][ T4922] Bluetooth: hci5: command tx timeout [ 1546.711745][T18413] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1546.853400][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1546.876009][T18413] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1546.994240][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1547.128984][ T4922] Bluetooth: hci3: command tx timeout [ 1547.952628][T18413] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1548.191801][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1548.197162][T18413] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1548.291913][T18413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1548.498090][ T4922] Bluetooth: hci5: command tx timeout [ 1548.810109][ T38] audit: type=1326 audit(1778557181.331:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.9.2891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x0 [ 1549.399837][ T4922] Bluetooth: hci3: command tx timeout [ 1550.367575][T18413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.507241][T18413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.554490][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.554753][ T7225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.623292][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.623542][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.785836][ T4922] Bluetooth: hci5: command tx timeout [ 1551.208146][T18697] lo speed is unknown, defaulting to 1000 [ 1552.356625][ T38] audit: type=1326 audit(1778557184.644:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.9.2898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23763fcdd9 code=0x0 [ 1553.085414][T18697] lo speed is unknown, defaulting to 1000 [ 1553.087213][T18705] lo speed is unknown, defaulting to 1000 [ 1554.098600][T18463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1554.361272][T18463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1554.446231][T18463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1555.993829][T18463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1557.103681][T18705] lo speed is unknown, defaulting to 1000 [ 1557.122054][T18463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1557.333505][T18463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1557.479879][T18463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1557.866043][T18463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1558.124995][T11875] hsr_slave_0: left promiscuous mode [ 1558.167693][T11875] hsr_slave_1: left promiscuous mode [ 1558.169213][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.211881][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.426093][T11875] hsr_slave_0: left promiscuous mode [ 1558.509658][T11875] hsr_slave_1: left promiscuous mode [ 1558.510912][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.561015][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.205103][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1559.258275][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1559.763303][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1559.814096][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1560.178511][T18413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1561.643155][T18697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.644451][T18697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.644739][T18697] bridge_slave_0: entered allmulticast mode [ 1561.647957][T18697] bridge_slave_0: entered promiscuous mode [ 1561.708553][T18697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.708887][T18697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.709186][T18697] bridge_slave_1: entered allmulticast mode [ 1561.759068][T18697] bridge_slave_1: entered promiscuous mode [ 1561.847980][T18413] veth0_vlan: entered promiscuous mode [ 1561.971279][T18697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1562.029014][T18697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.278659][T18413] veth1_vlan: entered promiscuous mode [ 1562.307624][T18705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.308069][T18705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.308469][T18705] bridge_slave_0: entered allmulticast mode [ 1562.312825][T18705] bridge_slave_0: entered promiscuous mode [ 1562.350609][T18697] team0: Port device team_slave_0 added [ 1562.568486][T18705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.568810][T18705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.569115][T18705] bridge_slave_1: entered allmulticast mode [ 1562.625484][T18705] bridge_slave_1: entered promiscuous mode [ 1562.632406][T18697] team0: Port device team_slave_1 added [ 1563.152233][T18705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.171809][T18697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.171831][T18697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.171863][T18697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.283534][T18705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1563.296139][T18697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.296156][T18697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.296187][T18697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.849896][T18705] team0: Port device team_slave_0 added [ 1563.873664][T18705] team0: Port device team_slave_1 added [ 1563.936713][T18463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.221209][T18697] hsr_slave_0: entered promiscuous mode [ 1564.224079][T18697] hsr_slave_1: entered promiscuous mode [ 1564.227437][T18697] debugfs: 'hsr0' already exists in 'hsr' [ 1564.227467][T18697] Cannot create hsr debugfs directory [ 1564.272428][T18705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.272448][T18705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.272496][T18705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1564.337901][T18705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.337920][T18705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.337977][T18705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.605583][T18413] veth0_macvtap: entered promiscuous mode [ 1564.683090][T18463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.716618][T18705] hsr_slave_0: entered promiscuous mode [ 1564.720184][T18705] hsr_slave_1: entered promiscuous mode [ 1564.737949][T18705] debugfs: 'hsr0' already exists in 'hsr' [ 1564.737978][T18705] Cannot create hsr debugfs directory [ 1564.766445][T18413] veth1_macvtap: entered promiscuous mode [ 1564.917134][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.917362][ T6591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.518400][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.518601][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.286469][T14767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1566.361602][T14767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1566.372687][T14767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1566.374206][T14767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1566.389684][T14767] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1569.010085][T14767] Bluetooth: hci1: command tx timeout [ 1571.171630][T14767] Bluetooth: hci1: command tx timeout [ 1571.860371][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1571.894454][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1572.997084][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1573.026382][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1573.027215][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1573.374547][ T4922] Bluetooth: hci1: command tx timeout [ 1575.340341][ T4922] Bluetooth: hci2: command tx timeout [ 1577.831541][ T4922] Bluetooth: hci1: command tx timeout [ 1577.831576][ T4922] Bluetooth: hci2: command tx timeout [ 1580.043751][T14767] Bluetooth: hci2: command tx timeout [ 1581.066574][T18901] lo speed is unknown, defaulting to 1000 [ 1582.276902][T14767] Bluetooth: hci2: command tx timeout [ 1584.961657][T18901] lo speed is unknown, defaulting to 1000 [ 1584.963179][T18933] lo speed is unknown, defaulting to 1000 [ 1585.992569][T19011] netlink: 1276 bytes leftover after parsing attributes in process `syz.9.2934'. [ 1586.050598][T11875] bridge_slave_1: left allmulticast mode [ 1586.050628][T11875] bridge_slave_1: left promiscuous mode [ 1586.050852][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.158010][T11875] bridge_slave_0: left allmulticast mode [ 1586.158040][T11875] bridge_slave_0: left promiscuous mode [ 1586.158288][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.368362][T11875] bridge_slave_1: left allmulticast mode [ 1586.368402][T11875] bridge_slave_1: left promiscuous mode [ 1586.368663][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.455572][T11875] bridge_slave_0: left allmulticast mode [ 1586.455614][T11875] bridge_slave_0: left promiscuous mode [ 1586.455911][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.839401][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.924888][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.989818][T11875] bond0 (unregistering): Released all slaves [ 1587.170294][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1587.255996][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1587.321713][T11875] bond0 (unregistering): Released all slaves [ 1587.361070][T18933] lo speed is unknown, defaulting to 1000 [ 1593.462504][T19054] ªªªªª6: renamed from wg2 [ 1593.737099][T11875] hsr_slave_0: left promiscuous mode [ 1593.773653][T11875] hsr_slave_1: left promiscuous mode [ 1593.774828][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.783873][T19062] fuse: fd is not a fuse device [ 1593.818287][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.350905][T11875] hsr_slave_0: left promiscuous mode [ 1594.393470][T11875] hsr_slave_1: left promiscuous mode [ 1594.394609][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.681612][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1594.681748][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1594.727088][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.352391][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1596.413980][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1597.108344][T11875] team0 (unregistering): Port device team_slave_1 removed [ 1597.173306][T11875] team0 (unregistering): Port device team_slave_0 removed [ 1597.799718][T18901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.800114][T18901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.800469][T18901] bridge_slave_0: entered allmulticast mode [ 1597.804734][T18901] bridge_slave_0: entered promiscuous mode [ 1597.988411][T18901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.988881][T18901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.989227][T18901] bridge_slave_1: entered allmulticast mode [ 1597.993446][T18901] bridge_slave_1: entered promiscuous mode [ 1598.474704][T18901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.476316][T18933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.477675][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.478464][T18933] bridge_slave_0: entered allmulticast mode [ 1598.490847][T18933] bridge_slave_0: entered promiscuous mode [ 1598.535569][T18933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.536415][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.536725][T18933] bridge_slave_1: entered allmulticast mode [ 1598.546793][T18933] bridge_slave_1: entered promiscuous mode [ 1598.588853][T18901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1599.015171][T18697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1599.080730][T18697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1599.114884][T18933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.148467][T18901] team0: Port device team_slave_0 added [ 1599.208937][T18697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1599.353257][T18697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1599.390216][T18933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1599.417124][T18901] team0: Port device team_slave_1 added [ 1599.434988][T18697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1599.524215][T18697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1600.900531][T18697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1601.004153][T19099] netlink: 'syz.9.2950': attribute type 1 has an invalid length. [ 1601.004177][T19099] netlink: 'syz.9.2950': attribute type 2 has an invalid length. [ 1602.474204][T18697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1602.811040][T19097] kAFS: unable to lookup cell '(,c¾ûL' [ 1603.007978][T19098] lo speed is unknown, defaulting to 1000 [ 1603.296664][T19098] lo speed is unknown, defaulting to 1000 [ 1603.432961][T18933] team0: Port device team_slave_0 added [ 1603.446476][T18901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.446495][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.446526][T18901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.683848][T18901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.683869][T18901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.683902][T18901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.750508][T18933] team0: Port device team_slave_1 added [ 1603.849872][T18697] kthread_run failed with err -4 [ 1604.146994][T18933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.147013][T18933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.147046][T18933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.312918][T18933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.312939][T18933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.312972][T18933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.154518][T18901] hsr_slave_0: entered promiscuous mode [ 1605.157032][T18901] hsr_slave_1: entered promiscuous mode [ 1605.159197][T18901] debugfs: 'hsr0' already exists in 'hsr' [ 1605.159225][T18901] Cannot create hsr debugfs directory [ 1605.403016][T18705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1605.499588][T18705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1605.619613][T18933] hsr_slave_0: entered promiscuous mode [ 1605.623395][T18933] hsr_slave_1: entered promiscuous mode [ 1605.646122][T18933] debugfs: 'hsr0' already exists in 'hsr' [ 1605.646154][T18933] Cannot create hsr debugfs directory [ 1605.909662][ T4922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1606.049640][ T4922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1606.102244][ T4922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1606.103800][ T4922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1606.104556][ T4922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1607.073153][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2953'. [ 1607.118193][ T4922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1607.204658][ T4922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1607.216190][ T4922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1607.254899][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1607.257439][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1608.348561][T14767] Bluetooth: hci4: command tx timeout [ 1609.535644][T14767] Bluetooth: hci3: command tx timeout [ 1609.745774][T19109] lo speed is unknown, defaulting to 1000 [ 1610.579716][T14767] Bluetooth: hci4: command tx timeout [ 1610.888129][T19157] pim6reg: entered allmulticast mode [ 1610.889230][T19158] team0: entered allmulticast mode [ 1610.889249][T19158] team_slave_0: entered allmulticast mode [ 1610.889275][T19158] ±ÿþ€: entered allmulticast mode [ 1610.889299][T19158] vlan0: entered allmulticast mode [ 1610.889313][T19158] veth0_vlan: entered allmulticast mode [ 1611.271903][T19120] lo speed is unknown, defaulting to 1000 [ 1611.272070][T19157] team0: left allmulticast mode [ 1611.272090][T19157] team_slave_0: left allmulticast mode [ 1611.272118][T19157] ±ÿþ€: left allmulticast mode [ 1611.272142][T19157] vlan0: left allmulticast mode [ 1611.272157][T19157] veth0_vlan: left allmulticast mode [ 1611.272399][T19157] pim6reg: left allmulticast mode [ 1611.471645][T19109] lo speed is unknown, defaulting to 1000 [ 1611.758219][T14767] Bluetooth: hci3: command tx timeout [ 1612.083780][T19120] lo speed is unknown, defaulting to 1000 [ 1612.784186][T14767] Bluetooth: hci4: command tx timeout [ 1614.046826][T14767] Bluetooth: hci3: command tx timeout [ 1615.013115][T14767] Bluetooth: hci4: command tx timeout [ 1616.204986][T14767] Bluetooth: hci3: command tx timeout [ 1618.033539][T19208] smc: removing ib device syz1 [ 1618.106861][T19208] smbdirect: ib_dev[syz1] removed [ 1619.993443][T19208] ------------[ cut here ]------------ [ 1619.993455][T19208] !xa_empty(&pool->xa) [ 1619.993464][T19208] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x4b/0x60, CPU#0: syz.9.2972/19208 [ 1619.993505][T19208] Modules linked in: [ 1619.993522][T19208] CPU: 0 UID: 0 PID: 19208 Comm: syz.9.2972 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1619.993541][T19208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1619.993552][T19208] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 1619.993576][T19208] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 0d 5a e9 f9 48 83 3b 00 75 0c e8 d2 dd 7f f9 5b e9 0c 43 e5 02 cc e8 c6 dd 7f f9 90 <0f> 0b 90 5b e9 fc 42 e5 02 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 1619.993591][T19208] RSP: 0018:ffffc900045e7020 EFLAGS: 00010246 [ 1619.993605][T19208] RAX: ffffffff8844b75a RBX: ffff888038bd16b0 RCX: 0000000000080000 [ 1619.993618][T19208] RDX: ffffc900104c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1619.993629][T19208] RBP: ffff888038bd1318 R08: 0000000000000000 R09: 0000000000000000 [ 1619.993641][T19208] R10: dffffc0000000000 R11: ffffffff8842f330 R12: ffff88805e6193d8 [ 1619.993654][T19208] R13: dffffc0000000000 R14: ffffffff8842f330 R15: dffffc0000000000 [ 1619.993667][T19208] FS: 00007f237464e6c0(0000) GS:ffff888125f36000(0000) knlGS:0000000000000000 [ 1619.993682][T19208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1619.993694][T19208] CR2: 00007f237462cff8 CR3: 000000005ef7e000 CR4: 00000000003526f0 [ 1619.993709][T19208] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1619.993720][T19208] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1619.993732][T19208] Call Trace: [ 1619.993738][T19208] [ 1619.993746][T19208] rxe_dealloc+0x25/0xc0 [ 1619.993765][T19208] ib_dealloc_device+0x54/0x200 [ 1619.993792][T19208] __ib_unregister_device+0x393/0x3f0 [ 1619.993826][T19208] ib_unregister_device_and_put+0xb8/0xf0 [ 1619.993854][T19208] nldev_dellink+0x337/0x3d0 [ 1619.993876][T19208] ? __lock_acquire+0x6b5/0x2cf0 [ 1619.993903][T19208] ? __pfx_nldev_dellink+0x10/0x10 [ 1619.993997][T19208] ? apparmor_capable+0x126/0x170 [ 1619.994022][T19208] ? bpf_lsm_capable+0x9/0x20 [ 1619.994047][T19208] ? security_capable+0x7e/0x2c0 [ 1619.994086][T19208] ? __pfx_nldev_dellink+0x10/0x10 [ 1619.994109][T19208] rdma_nl_rcv+0x6d7/0xa10 [ 1619.994142][T19208] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1619.994181][T19208] ? netlink_deliver_tap+0x2e/0x1b0 [ 1619.994207][T19208] ? netlink_deliver_tap+0x2e/0x1b0 [ 1619.994238][T19208] netlink_unicast+0x780/0x920 [ 1619.994269][T19208] netlink_sendmsg+0x813/0xb40 [ 1619.994302][T19208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1619.994329][T19208] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1619.994355][T19208] ? aa_sock_msg_perm+0x122/0x200 [ 1619.994373][T19208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1619.994399][T19208] sock_sendmsg_nosec+0x112/0x150 [ 1619.994422][T19208] ____sys_sendmsg+0x55c/0x870 [ 1619.994443][T19208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1619.994477][T19208] ? import_iovec+0x73/0xa0 [ 1619.994507][T19208] ___sys_sendmsg+0x2a5/0x360 [ 1619.994522][T19208] ? __lock_acquire+0x6b5/0x2cf0 [ 1619.994551][T19208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1619.994573][T19208] ? futex_wait+0x2a2/0x390 [ 1619.994614][T19208] ? __fget_files+0x2a/0x420 [ 1619.994638][T19208] ? __fget_files+0x3a6/0x420 [ 1619.994671][T19208] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1619.994690][T19208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1619.994713][T19208] ? __pfx_ksys_write+0x10/0x10 [ 1619.994737][T19208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.994756][T19208] do_syscall_64+0x15f/0xf80 [ 1619.994773][T19208] ? trace_irq_disable+0x3b/0x140 [ 1619.994796][T19208] ? clear_bhb_loop+0x40/0x90 [ 1619.994817][T19208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.994834][T19208] RIP: 0033:0x7f23763fcdd9 [ 1619.994850][T19208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.994864][T19208] RSP: 002b:00007f237464e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1619.994881][T19208] RAX: ffffffffffffffda RBX: 00007f2376675fa0 RCX: 00007f23763fcdd9 [ 1619.994893][T19208] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1619.994904][T19208] RBP: 00007f2376492d69 R08: 0000000000000000 R09: 0000000000000000 [ 1619.994915][T19208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1619.994925][T19208] R13: 00007f2376676038 R14: 00007f2376675fa0 R15: 00007fff71a0ba78 [ 1619.994951][T19208] [ 1619.994963][T19208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1619.994975][T19208] CPU: 0 UID: 0 PID: 19208 Comm: syz.9.2972 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1619.994994][T19208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1619.995004][T19208] Call Trace: [ 1619.995011][T19208] [ 1619.995017][T19208] vpanic+0x56c/0xa60 [ 1619.995043][T19208] ? __pfx__printk+0x10/0x10 [ 1619.995059][T19208] ? __pfx_vpanic+0x10/0x10 [ 1619.995086][T19208] ? is_bpf_text_address+0x292/0x2b0 [ 1619.995112][T19208] ? is_bpf_text_address+0x26/0x2b0 [ 1619.995144][T19208] panic+0xc5/0xd0 [ 1619.995167][T19208] ? __pfx_panic+0x10/0x10 [ 1619.995202][T19208] __warn+0x315/0x4c0 [ 1619.995224][T19208] ? rxe_pool_cleanup+0x4b/0x60 [ 1619.995248][T19208] ? rxe_pool_cleanup+0x4b/0x60 [ 1619.995270][T19208] __report_bug+0x29a/0x540 [ 1619.995296][T19208] ? lockdep_hardirqs_on+0x7a/0x110 [ 1619.995327][T19208] ? rxe_pool_cleanup+0x4b/0x60 [ 1619.995349][T19208] ? __pfx___report_bug+0x10/0x10 [ 1619.995383][T19208] ? __flush_workqueue+0x12d3/0x14f0 [ 1619.995411][T19208] ? rxe_pool_cleanup+0x4b/0x60 [ 1619.995433][T19208] report_bug+0x16a/0x220 [ 1619.995459][T19208] ? rxe_pool_cleanup+0x4b/0x60 [ 1619.995480][T19208] ? rxe_pool_cleanup+0x4d/0x60 [ 1619.995501][T19208] handle_bug+0x9c/0x200 [ 1619.995520][T19208] exc_invalid_op+0x1a/0x50 [ 1619.995539][T19208] asm_exc_invalid_op+0x1a/0x20 [ 1619.995555][T19208] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 1619.995577][T19208] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 0d 5a e9 f9 48 83 3b 00 75 0c e8 d2 dd 7f f9 5b e9 0c 43 e5 02 cc e8 c6 dd 7f f9 90 <0f> 0b 90 5b e9 fc 42 e5 02 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 1619.995592][T19208] RSP: 0018:ffffc900045e7020 EFLAGS: 00010246 [ 1619.995605][T19208] RAX: ffffffff8844b75a RBX: ffff888038bd16b0 RCX: 0000000000080000 [ 1619.995618][T19208] RDX: ffffc900104c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1619.995630][T19208] RBP: ffff888038bd1318 R08: 0000000000000000 R09: 0000000000000000 [ 1619.995641][T19208] R10: dffffc0000000000 R11: ffffffff8842f330 R12: ffff88805e6193d8 [ 1619.995654][T19208] R13: dffffc0000000000 R14: ffffffff8842f330 R15: dffffc0000000000 [ 1619.995668][T19208] ? __pfx_rxe_dealloc+0x10/0x10 [ 1619.995688][T19208] ? __pfx_rxe_dealloc+0x10/0x10 [ 1619.995708][T19208] ? rxe_pool_cleanup+0x4a/0x60 [ 1619.995735][T19208] rxe_dealloc+0x25/0xc0 [ 1619.995753][T19208] ib_dealloc_device+0x54/0x200 [ 1619.995779][T19208] __ib_unregister_device+0x393/0x3f0 [ 1619.995812][T19208] ib_unregister_device_and_put+0xb8/0xf0 [ 1619.995839][T19208] nldev_dellink+0x337/0x3d0 [ 1619.995861][T19208] ? __lock_acquire+0x6b5/0x2cf0 [ 1619.995887][T19208] ? __pfx_nldev_dellink+0x10/0x10 [ 1619.995980][T19208] ? apparmor_capable+0x126/0x170 [ 1619.996004][T19208] ? bpf_lsm_capable+0x9/0x20 [ 1619.996028][T19208] ? security_capable+0x7e/0x2c0 [ 1619.996056][T19208] ? __pfx_nldev_dellink+0x10/0x10 [ 1619.996086][T19208] rdma_nl_rcv+0x6d7/0xa10 [ 1619.996117][T19208] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1619.996157][T19208] ? netlink_deliver_tap+0x2e/0x1b0 [ 1619.996182][T19208] ? netlink_deliver_tap+0x2e/0x1b0 [ 1619.996212][T19208] netlink_unicast+0x780/0x920 [ 1619.996243][T19208] netlink_sendmsg+0x813/0xb40 [ 1619.996276][T19208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1619.996303][T19208] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1619.996327][T19208] ? aa_sock_msg_perm+0x122/0x200 [ 1619.996345][T19208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1619.996371][T19208] sock_sendmsg_nosec+0x112/0x150 [ 1619.996394][T19208] ____sys_sendmsg+0x55c/0x870 [ 1619.996414][T19208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1619.996448][T19208] ? import_iovec+0x73/0xa0 [ 1619.996481][T19208] ___sys_sendmsg+0x2a5/0x360 [ 1619.996536][T19208] ? __lock_acquire+0x6b5/0x2cf0 [ 1619.996579][T19208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1619.996601][T19208] ? futex_wait+0x2a2/0x390 [ 1619.996641][T19208] ? __fget_files+0x2a/0x420 [ 1619.996664][T19208] ? __fget_files+0x3a6/0x420 [ 1619.996696][T19208] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1619.996715][T19208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1619.996739][T19208] ? __pfx_ksys_write+0x10/0x10 [ 1619.996762][T19208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.996780][T19208] do_syscall_64+0x15f/0xf80 [ 1619.996795][T19208] ? trace_irq_disable+0x3b/0x140 [ 1619.996820][T19208] ? clear_bhb_loop+0x40/0x90 [ 1619.996841][T19208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.996858][T19208] RIP: 0033:0x7f23763fcdd9 [ 1619.996872][T19208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.996887][T19208] RSP: 002b:00007f237464e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1619.996903][T19208] RAX: ffffffffffffffda RBX: 00007f2376675fa0 RCX: 00007f23763fcdd9 [ 1619.996916][T19208] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1619.996927][T19208] RBP: 00007f2376492d69 R08: 0000000000000000 R09: 0000000000000000 [ 1619.996938][T19208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1619.996948][T19208] R13: 00007f2376676038 R14: 00007f2376675fa0 R15: 00007fff71a0ba78 [ 1619.996974][T19208] [ 1619.997684][T19208] Kernel Offset: disabled