last executing test programs: 7m4.394584485s ago: executing program 2 (id=58): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 7m0.525955902s ago: executing program 2 (id=62): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x81d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000536000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m57.78593282s ago: executing program 2 (id=66): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 6m54.955729551s ago: executing program 2 (id=73): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 6m54.281357228s ago: executing program 2 (id=75): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x1, 0x2, 0x7, 0x3110, 0x1, 0xe94}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="0040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000085000000070000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000200a}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) 6m49.284208623s ago: executing program 2 (id=82): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='r', 0x1) 6m47.552735427s ago: executing program 32 (id=82): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='r', 0x1) 6m8.909908905s ago: executing program 0 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x50) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0xa02, 0x0) 6m5.692250976s ago: executing program 0 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x9900, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m3.384462014s ago: executing program 1 (id=150): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0xa100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x100, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x2000000, 0xf8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x7ffffffe, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m58.405089298s ago: executing program 0 (id=153): unshare(0x60040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x6c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7fffffff}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000640)='U', 0x1}], 0x1) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x7}, {&(0x7f0000000200)="9efef5abfd2a00000000000600"/33, 0x21}], 0x2}, 0x20028b88) 5m55.068826762s ago: executing program 4 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1d3, &(0x7f00000000c0)="$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") r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0xfcb2) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x18, 0x0, 0x1, 0x81}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) 5m54.174600694s ago: executing program 0 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x41b}}}, 0x7) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='common_pid > 0', 0xe) 5m53.934416671s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m53.902463261s ago: executing program 1 (id=163): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 5m52.445067868s ago: executing program 0 (id=164): r0 = socket$packet(0x11, 0x2, 0x300) mlockall(0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f00000007c0)}, 0x20) 5m52.385541309s ago: executing program 1 (id=165): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c0006801400040000000000000000000000000000000001"], 0xc0}}, 0x0) 5m52.304498421s ago: executing program 4 (id=166): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0fc5:', 0x5) 5m47.849592263s ago: executing program 1 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffe8, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x1, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 5m47.849018983s ago: executing program 0 (id=169): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 5m46.844881168s ago: executing program 1 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000300)={{0x5, 0x0, 0x4, 0x0, '\x00', 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5m46.826721189s ago: executing program 4 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 5m42.842740698s ago: executing program 1 (id=177): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r4, 0x0, 0x0, 0x80800) 5m42.542780586s ago: executing program 4 (id=178): openat$incfs(0xffffffffffffffff, 0x0, 0x4000c2, 0xa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 5m41.329621156s ago: executing program 4 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 5m32.565795056s ago: executing program 33 (id=169): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 5m27.763836676s ago: executing program 34 (id=177): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r4, 0x0, 0x0, 0x80800) 5m25.857166334s ago: executing program 35 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 14.34595914s ago: executing program 5 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet6(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x3e, r5, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r7, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) 12.999583523s ago: executing program 5 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xa, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x3c}}, 0x20000001) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) close(r6) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0xdf5, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x100005, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x11], 0x8080000}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x40, 0x4, 0x4, 0x2, 0x9, 0x2, 0x6, 0x0, 0x4b, 0x7, 0xd6, 0x9, 0x1}, {0x3a, 0x2, 0x8, 0x2, 0x7, 0xff, 0x5, 0x4, 0x8, 0xf9, 0x1, 0x4, 0x4f2000000}, {0x3bc, 0x0, 0x2, 0x5, 0xd, 0x4, 0xff, 0x9, 0x8, 0x81, 0x3, 0x2, 0xd}], 0x8}) 9.896012482s ago: executing program 3 (id=571): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003380)={0x2020}, 0x2020) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x12\x9b\xf4\x01\x9f^\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xd7n\x97]||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xcdq#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3', 0x5) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000180)={'stack ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6[Wk\x8c\xe9\x1e\xf3\xf8-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\xf5}\xdes\xab\xc9\xd5\x9b\x80I\x83\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xdc`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^\'^K\x8c\x97\x13\x9e\x8a\f+\x83c\xc0\xfd}k\x06\xd0\xbfr\xd6\xe5\x84\x8eS\x97\xc7\x01\x00\x13\xe5\xc0\xa7;\x1d\xfegw\xcc\xf6/\xc9\xd8\x14y\x1b\x91\xbb\b\xd6\x12u\xa5\xdd\xdf\x90l\xa7\x8d\xe3,\xfci\xa38\xae~\xe4\x99\x9a\x91Q\xa5{\xce\xbe\x02l\xedS\xf6\xc8\xf0.D&\xdd$\xaee\xe5\x9eE\xbeo\x05\x12\xfb\xea\xef\xa8\xe4\x00\xe1z\xf7\xef\xc3\xae\x90\xd5SC\x88xM\xef\n\x99,F\xd4\x06\x10\x8d~\x17\xfc\xad\x8e\xa1R\x06\x85s\x93\x807\xfc\x84\a\xceU\xe9\xba\x81eF\xab\xf4\xe8O`\xbd\xf0=z[\x82\x13\xe0\x84\x05\xe2C\x93\xe8\x1f'}, 0x17d) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8.909929246s ago: executing program 3 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x80) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updsa={0xec, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x2, '\x00', 0xfd}, @in=@multicast2}, {@in=@empty, 0x0, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10}}, 0xec}}, 0x0) r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r8, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 7.899132312s ago: executing program 3 (id=574): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x80) r0 = fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x20) ioctl$BLKPG(r1, 0xc0184d16, &(0x7f0000000580)={0x2, 0x300, 0x0, 0x0}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000180)={&(0x7f0000000980)={{@my=0x0}, {@hyper, 0x1}, 0x400, "7df70918c4e3fc35b898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b08933865e3e154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367a0f7319cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae384d43c763ddcb66c31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a372f0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a3ba367c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098a04000000cbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99484cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x2001}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x4e}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0x3, 0x1}}, 0x44) syz_open_procfs(0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) chdir(0x0) 7.882144782s ago: executing program 6 (id=575): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd0, &(0x7f0000000040), 0xf4, 0x1119, &(0x7f0000003600)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8000ce1) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') sendmsg$kcm(r4, 0x0, 0x4040040) syz_clone(0x81091800, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x4edd) 7.774838105s ago: executing program 3 (id=576): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r3 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100)) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) unlink(&(0x7f0000000180)='./bus\x00') 5.548609091s ago: executing program 6 (id=577): syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = socket$inet6(0xa, 0x80002, 0x0) getpid() syz_emit_ethernet(0x95, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000040)=@in6={0xa, 0x4e28, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xb}, 0x80, 0x0}, 0x0) fsopen(0x0, 0x0) 4.086742687s ago: executing program 3 (id=578): ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@local, 0x1, 0x0, 0x10, 0x0, [{@local}]}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, 0x0, 0x20040894) 3.98854918s ago: executing program 6 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x80, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_pages(0x0, 0x55, 0xffffffffffffffff, 0x0, 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x24, 0x26, 0x505, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x440c1}, 0x2400c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r4, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000400)={@remote, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) unshare(0x22020400) pipe2(&(0x7f0000000040), 0x0) 2.888326587s ago: executing program 3 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000000080)) mount$fuse(0x0, 0x0, 0x0, 0x1a0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r5 = msgget$private(0x0, 0x486) msgctl$IPC_RMID(r5, 0x0) r6 = socket(0xa, 0x3, 0x87) sendmsg$unix(r6, 0x0, 0x54814) 2.679957313s ago: executing program 5 (id=583): socket$can_j1939(0x1d, 0x2, 0x7) ustat(0x11, &(0x7f0000000600)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) socket(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000010000000008000001000000010000000000000001000000000000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000420)="0000000001000000000000000000000006000000") ioctl(r3, 0x400c0930, 0x0) 2.35809975s ago: executing program 5 (id=584): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r1, &(0x7f0000000280)='1', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x35, 0x0, &(0x7f0000000400)="00000000000100000000000208004500002800000000400600007f0000017f00000112345678000000010000000050021000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.717454106s ago: executing program 6 (id=585): syz_open_dev$video4linux(0x0, 0x6, 0x200) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x100030, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x8e}, 0x28) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) 1.139083551s ago: executing program 6 (id=586): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea", 0x75}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd4", 0x81}, {&(0x7f0000002240)="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", 0x753}], 0x2}}], 0x2, 0x0) 1.124964291s ago: executing program 5 (id=594): socket$can_j1939(0x1d, 0x2, 0x7) ustat(0x11, &(0x7f0000000600)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) socket(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='md0', 0x3) ioctl(0xffffffffffffffff, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000010000000008000001000000010000000000000001000000000000000100"/72) ioctl(0xffffffffffffffff, 0x40140921, &(0x7f0000000420)="0000000001000000000000000000000006000000") ioctl(0xffffffffffffffff, 0x400c0930, 0x0) 306.74µs ago: executing program 6 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@generic={0x91, 0x1, 0x1, 0x24}]}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0xe4, 0x2dc, 0xe4, 0x218, 0x218, 0x37c, 0x37c, 0x37c, 0x37c, 0x37c, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1, 0x76}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x31}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x1, @multicast1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x2b, @local, 0x4e20}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) unshare(0x22020600) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) setns(0xc9, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x2e9, 0x4) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89", 0x3f80) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x14101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r3}, 0x50) lseek(r0, 0xa67, 0x3) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r4, &(0x7f0000000140)='+b', 0x2) 0s ago: executing program 5 (id=588): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'wg2\x00'}}, 0x1e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) io_cancel(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x5, r4, &(0x7f0000000980)="419f4b47662764b5a01e080f475c15802464d115bedf1366c271ec6a3b106f16006464f502cc61e837742a3768c4c85d938e1449188ed4f91d90ab08763722d3fb42b1f44c9ad9cf6db3c872d1d86d82c1ca1053116219927a70", 0x5a, 0x7fffffff, 0x0, 0x2}, &(0x7f0000000a40)) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) kernel console output (not intermixed with test programs): 001 length: 249 > 9 [ 222.958859][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.969398][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.979989][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.336916][ T5448] loop5: detected capacity change from 0 to 1024 [ 223.840716][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.858583][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.902068][ T5406] device bridge_slave_1 entered promiscuous mode [ 224.104860][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.168890][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.200307][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 224.286603][ T5406] team0: Port device team_slave_0 added [ 224.316092][ T5406] team0: Port device team_slave_1 added [ 224.402730][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.409751][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.471627][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.498327][ T5446] chnl_net:caif_netlink_parms(): no params data found [ 224.572271][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.597728][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.695729][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.080130][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 226.280029][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 227.160046][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 227.309103][ T4284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 227.322115][ T4284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 227.338051][ T4284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 227.585475][ T4284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 227.604407][ T4284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 227.614566][ T4284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.537070][ T5406] device hsr_slave_0 entered promiscuous mode [ 229.240012][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 229.642009][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 230.234679][ T5406] device hsr_slave_1 entered promiscuous mode [ 230.279460][ T5406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.315139][ T5406] Cannot create hsr debugfs directory [ 230.347341][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 230.665239][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.690539][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.720125][ T5446] device bridge_slave_0 entered promiscuous mode [ 230.764748][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.789572][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.818851][ T5446] device bridge_slave_1 entered promiscuous mode [ 230.849493][ T5487] device lo entered promiscuous mode [ 230.948161][ T5487] device tunl0 entered promiscuous mode [ 230.998808][ T5487] device gre0 entered promiscuous mode [ 231.214834][ T5487] device gretap0 entered promiscuous mode [ 231.283442][ T5487] device erspan0 entered promiscuous mode [ 231.320155][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 231.357343][ T5487] device ip_vti0 entered promiscuous mode [ 231.399005][ T5487] device ip6_vti0 entered promiscuous mode [ 231.459186][ T5487] device sit0 entered promiscuous mode [ 231.562565][ T5487] device ip6tnl0 entered promiscuous mode [ 231.631862][ T5487] device ip6gre0 entered promiscuous mode [ 231.683056][ T5487] device syz_tun entered promiscuous mode [ 231.720197][ T4282] Bluetooth: hci6: command 0x041b tx timeout [ 231.730204][ T5487] device ip6gretap0 entered promiscuous mode [ 231.764148][ T5487] device vcan0 entered promiscuous mode [ 231.779468][ T5487] device bond0 entered promiscuous mode [ 231.785233][ T5487] device bond_slave_0 entered promiscuous mode [ 231.793089][ T5487] device bond_slave_1 entered promiscuous mode [ 231.824472][ T5487] device team0 entered promiscuous mode [ 231.830248][ T5487] device team_slave_0 entered promiscuous mode [ 231.836643][ T5487] device team_slave_1 entered promiscuous mode [ 231.868999][ T5487] device dummy0 entered promiscuous mode [ 231.900848][ T5487] device nlmon0 entered promiscuous mode [ 231.917327][ T5487] device caif0 entered promiscuous mode [ 231.933273][ T5487] device batadv0 entered promiscuous mode [ 231.969447][ T5487] device vxcan0 entered promiscuous mode [ 231.987220][ T5487] device vxcan1 entered promiscuous mode [ 232.005563][ T5487] device veth0 entered promiscuous mode [ 232.038500][ T5487] device veth1 entered promiscuous mode [ 232.072784][ T5487] device wg0 entered promiscuous mode [ 232.096584][ T5487] device wg1 entered promiscuous mode [ 232.122194][ T5487] device wg2 entered promiscuous mode [ 232.144439][ T5487] device veth0_to_bridge entered promiscuous mode [ 232.174521][ T5487] device bridge_slave_0 entered promiscuous mode [ 232.212202][ T5487] device veth1_to_bridge entered promiscuous mode [ 232.247530][ T5487] device bridge_slave_1 entered promiscuous mode [ 232.274513][ T5487] device veth0_to_bond entered promiscuous mode [ 232.339675][ T5487] device veth1_to_bond entered promiscuous mode [ 232.415196][ T5487] device veth0_to_team entered promiscuous mode [ 232.488315][ T5487] device veth1_to_team entered promiscuous mode [ 232.547283][ T5487] device veth0_to_batadv entered promiscuous mode [ 232.567081][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.602289][ T5487] device batadv_slave_0 entered promiscuous mode [ 232.675896][ T5487] device veth1_to_batadv entered promiscuous mode [ 232.700957][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.728617][ T5487] device batadv_slave_1 entered promiscuous mode [ 232.764097][ T5487] device xfrm0 entered promiscuous mode [ 232.805495][ T5487] device veth0_to_hsr entered promiscuous mode [ 232.901211][ T5487] device veth1_to_hsr entered promiscuous mode [ 232.961122][ T5487] device hsr0 entered promiscuous mode [ 233.025645][ T5487] device veth1_virt_wifi entered promiscuous mode [ 233.097389][ T5487] device veth0_virt_wifi entered promiscuous mode [ 233.125347][ T5487] device virt_wifi0 entered promiscuous mode [ 233.230590][ T5487] device vlan0 entered promiscuous mode [ 233.236465][ T5487] device vlan1 entered promiscuous mode [ 233.424465][ T5487] device macvlan0 entered promiscuous mode [ 233.459752][ T5487] device macvlan1 entered promiscuous mode [ 233.468234][ T5487] device ipvlan0 entered promiscuous mode [ 233.800258][ T4282] Bluetooth: hci6: command 0x040f tx timeout [ 234.230454][ T5487] device ipvlan1 entered promiscuous mode [ 234.327965][ T5487] device macvtap0 entered promiscuous mode [ 234.365608][ T5487] device macsec0 entered promiscuous mode [ 234.401904][ T5487] device geneve0 entered promiscuous mode [ 234.436498][ T5487] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.445629][ T5487] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.456252][ T5487] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.465505][ T5487] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.475088][ T5487] device geneve1 entered promiscuous mode [ 234.510237][ T5487] device netdevsim0 entered promiscuous mode [ 234.536030][ T5487] device netdevsim1 entered promiscuous mode [ 234.595748][ T5487] device netdevsim2 entered promiscuous mode [ 234.618313][ T5487] device netdevsim3 entered promiscuous mode [ 234.739807][ T5502] process 'syz.5.206' launched './file0' with NULL argv: empty string added [ 235.553400][ T5487] device wlan0 entered promiscuous mode [ 236.828562][ T5505] syz.5.207 (5505): drop_caches: 2 [ 237.201331][ T4282] Bluetooth: hci6: command 0x0419 tx timeout [ 237.233919][ T5487] device wlan1 entered promiscuous mode [ 237.281537][ T5487] device dvmrp1 entered promiscuous mode [ 237.387064][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.405678][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.567253][ T5446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.651786][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.690064][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.728680][ T5446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.830702][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.875071][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 238.937974][ T5511] FAULT_INJECTION: forcing a failure. [ 238.937974][ T5511] name failslab, interval 1, probability 0, space 0, times 0 [ 238.950898][ T5511] CPU: 0 PID: 5511 Comm: syz.3.210 Not tainted syzkaller #0 [ 238.958220][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.968317][ T5511] Call Trace: [ 238.971608][ T5511] [ 238.974551][ T5511] dump_stack_lvl+0x188/0x24e [ 238.979249][ T5511] ? show_regs_print_info+0x12/0x12 [ 238.984463][ T5511] ? load_image+0x410/0x410 [ 238.989170][ T5511] ? __might_sleep+0xd0/0xd0 [ 238.993776][ T5511] ? __lock_acquire+0x7ea0/0x7ea0 [ 238.998848][ T5511] should_fail_ex+0x390/0x4c0 [ 239.003565][ T5511] should_failslab+0x5/0x20 [ 239.008198][ T5511] slab_pre_alloc_hook+0x59/0x300 [ 239.013255][ T5511] kmem_cache_alloc+0x56/0x2f0 [ 239.018035][ T5511] ? getname_flags+0xb7/0x500 [ 239.022732][ T5511] getname_flags+0xb7/0x500 [ 239.027258][ T5511] __x64_sys_symlinkat+0x78/0xa0 [ 239.032299][ T5511] do_syscall_64+0x4c/0xa0 [ 239.036742][ T5511] ? clear_bhb_loop+0x60/0xb0 [ 239.041432][ T5511] ? clear_bhb_loop+0x60/0xb0 [ 239.046122][ T5511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.052041][ T5511] RIP: 0033:0x7eff3cf9e1d9 [ 239.056464][ T5511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.076179][ T5511] RSP: 002b:00007eff3dd8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 239.084619][ T5511] RAX: ffffffffffffffda RBX: 00007eff3d225fa0 RCX: 00007eff3cf9e1d9 [ 239.092623][ T5511] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 239.100599][ T5511] RBP: 00007eff3d035888 R08: 0000000000000000 R09: 0000000000000000 [ 239.108579][ T5511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.116558][ T5511] R13: 00007eff3d226038 R14: 00007eff3d225fa0 R15: 00007ffeabb687e8 [ 239.124550][ T5511] [ 239.135622][ T5511] kAFS: No cell specified [ 239.315430][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.340445][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 239.379446][ T5446] team0: Port device team_slave_0 added [ 239.416381][ T5446] team0: Port device team_slave_1 added [ 239.636720][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.651182][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.677784][ T5446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.690677][ T5446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.730342][ T5446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.222298][ T5446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.634059][ T5525] ======================================================= [ 240.634059][ T5525] WARNING: The mand mount option has been deprecated and [ 240.634059][ T5525] and is ignored by this kernel. Remove the mand [ 240.634059][ T5525] option from the mount to silence this warning. [ 240.634059][ T5525] ======================================================= [ 240.805894][ T5526] loop5: detected capacity change from 0 to 256 [ 240.816974][ T5526] FAT-fs (loop5): Unrecognized mount option "errors=remount-ro 18 [ 253.220614][ T4284] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 253.384978][ T11] bond1 (unregistering): Released all slaves [ 253.658363][ T5629] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 255.283571][ T5639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 255.292892][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 255.304172][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.310470][ T4282] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.727986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734504][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.207987][ T11] team0 (unregistering): Port device team_slave_1 removed [ 256.574436][ T11] team0 (unregistering): Port device team_slave_0 removed [ 257.042040][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.728181][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.205669][ T5649] loop3: detected capacity change from 0 to 512 [ 258.283320][ T5649] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 258.302459][ T5649] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 258.333878][ T5649] System zones: 0-1, 15-15, 18-18, 34-34 [ 258.356531][ T5649] EXT4-fs (loop3): orphan cleanup on readonly fs [ 258.381377][ T5649] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 258.414937][ T5649] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 258.469609][ T5649] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 258.495284][ T5649] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.233: bad orphan inode 16 [ 258.539525][ T5649] ext4_test_bit(bit=15, block=18) = 1 [ 258.570861][ T5649] is_bad_inode(inode)=0 [ 258.575117][ T5649] NEXT_ORPHAN(inode)=0 [ 258.640402][ T5649] max_ino=32 [ 258.653147][ T5649] i_nlink=2 [ 258.671506][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.173471][ T11] bond0 (unregistering): Released all slaves [ 259.340297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.349252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.377911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.424952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.437567][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 259.444429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.482397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.330573][ T5670] netlink: 168 bytes leftover after parsing attributes in process `syz.5.234'. [ 261.346770][ T5463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 261.359787][ T5463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 261.370881][ T5463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 261.469992][ T5463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 261.511028][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.531500][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.569816][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.586099][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.685343][ T5406] device veth0_vlan entered promiscuous mode [ 261.844687][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.914907][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.233062][ T5406] device veth1_vlan entered promiscuous mode [ 262.402619][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.465838][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.568199][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.762362][ T5406] device veth0_macvtap entered promiscuous mode [ 264.092440][ T5406] device veth1_macvtap entered promiscuous mode [ 264.528685][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.663387][ T5463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.934679][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.068318][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.234220][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.340396][ T5686] block device autoloading is deprecated and will be removed. [ 265.369370][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.397889][ T5687] random: crng reseeded on system resumption [ 265.445175][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.516195][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.541816][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.586247][ T5463] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.603453][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.640567][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.370831][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.417807][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.460820][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.479951][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.639903][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.680239][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.709135][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.730203][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.759286][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.822874][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.860653][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.913717][ T5406] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.935862][ T5406] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.959409][ T5406] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.969666][ T5406] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.078512][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.132975][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.174834][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.210317][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.240220][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 269.247799][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.272790][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.280011][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.300600][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.409650][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.454955][ T5446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.564799][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.621105][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.643680][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.690500][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.697664][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.764433][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.845655][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.934294][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.951148][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.972844][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.990844][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.009638][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.053574][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.089103][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.128533][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.130160][ T3042] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 270.189486][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.212005][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.511028][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.523566][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.557236][ T3042] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 270.579634][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.589221][ T3042] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 270.658855][ T3042] usb 6-1: config 0 interface 0 has no altsetting 0 [ 270.673459][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.708619][ T3042] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.754403][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.764334][ T3042] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 270.780986][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.799124][ T3042] usb 6-1: Product: syz [ 270.810566][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.815401][ T3042] usb 6-1: Manufacturer: syz [ 270.835650][ T3042] usb 6-1: SerialNumber: syz [ 270.868411][ T3042] usb 6-1: config 0 descriptor?? [ 270.891633][ T5722] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 270.936330][ T3042] usb 6-1: selecting invalid altsetting 0 [ 271.152981][ T5722] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 271.322841][ T4765] usb 6-1: USB disconnect, device number 2 [ 271.557754][ T5740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.950246][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.959454][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.032260][ T5759] loop6: detected capacity change from 0 to 128 [ 275.096675][ T5759] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 275.171032][ T5759] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.326141][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.367464][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.421617][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.465615][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.561820][ T5446] device veth0_vlan entered promiscuous mode [ 275.698581][ T5446] device veth1_vlan entered promiscuous mode [ 275.736380][ T5406] EXT4-fs (loop6): unmounting filesystem. [ 276.031586][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.064541][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.088828][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.325066][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.621185][ T5463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.137091][ T5446] device veth0_macvtap entered promiscuous mode [ 277.519130][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.699663][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.245010][ T5446] device veth1_macvtap entered promiscuous mode [ 278.277236][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.598023][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.628971][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.143022][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.527627][ T5791] loop3: detected capacity change from 0 to 164 [ 279.544628][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.591118][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.796545][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.821477][ T5794] loop5: detected capacity change from 0 to 128 [ 279.879959][ T5794] FAT-fs (loop5): Unrecognized mount option "net/hci" or missing value [ 279.890166][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.904583][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.919483][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.319032][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.346783][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.471284][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.550095][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.569704][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.588651][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.598943][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.875678][ T5811] loop3: detected capacity change from 0 to 128 [ 281.980881][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.021773][ T5446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.059867][ T5446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.130346][ T5446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.148030][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.194313][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.303208][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.323351][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.394343][ T5811] EXT4-fs (loop3): Test dummy encryption mode enabled [ 282.411398][ T11] device hsr_slave_0 left promiscuous mode [ 282.418265][ T5811] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.427309][ T5811] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.492073][ T11] device hsr_slave_1 left promiscuous mode [ 282.541456][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.571146][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.644798][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.689039][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.701790][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 282.755364][ T5827] loop5: detected capacity change from 0 to 512 [ 282.778386][ T11] device bridge_slave_1 left promiscuous mode [ 282.789444][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.865230][ T11] device bridge_slave_0 left promiscuous mode [ 282.873971][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.915401][ T5827] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 282.944317][ T5827] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 282.984910][ T5827] System zones: 0-1, 15-15, 18-18, 34-34 [ 282.999558][ T5833] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 283.028890][ T4510] Bluetooth: hci1: Frame reassembly failed (-84) [ 283.061384][ T5827] EXT4-fs (loop5): orphan cleanup on readonly fs [ 283.089961][ T5827] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 283.111792][ T11] device veth1_macvtap left promiscuous mode [ 283.128004][ T11] device veth0_macvtap left promiscuous mode [ 283.161830][ T5827] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 283.189110][ T11] device veth1_vlan left promiscuous mode [ 283.200354][ T11] device veth0_vlan left promiscuous mode [ 283.216082][ T5827] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 283.236709][ T5827] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.255: bad orphan inode 16 [ 283.295409][ T5827] ext4_test_bit(bit=15, block=18) = 1 [ 283.332610][ T5827] is_bad_inode(inode)=0 [ 283.336876][ T5827] NEXT_ORPHAN(inode)=0 [ 283.404818][ T5827] max_ino=32 [ 283.408100][ T5827] i_nlink=2 [ 283.451108][ T5827] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 283.595865][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.606388][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.628276][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.639193][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.663815][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.671372][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.160330][ T4286] Bluetooth: hci1: command 0x1003 tx timeout [ 286.160368][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 286.173151][ T4284] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 286.421265][ T4717] EXT4-fs (loop5): unmounting filesystem. [ 288.121647][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 288.199991][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 288.243003][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.263225][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.272199][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.280874][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.299954][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.307329][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.330485][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 288.352642][ T7] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 288.381391][ T7] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 288.415674][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.453707][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.490243][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.542210][ T7] usbtmc 4-1:16.0: bulk endpoints not found [ 288.897492][ T5856] loop6: detected capacity change from 0 to 128 [ 290.004698][ T11] team0 (unregistering): Port device team_slave_1 removed [ 290.088641][ T11] team0 (unregistering): Port device team_slave_0 removed [ 290.159265][ T4334] usb 4-1: USB disconnect, device number 4 [ 290.284255][ T5864] Cannot find add_set index 0 as target [ 290.857301][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.955916][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.970002][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 290.970151][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 292.355962][ T11] bond0 (unregistering): Released all slaves [ 293.000278][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 293.000277][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 293.025322][ T5874] loop6: detected capacity change from 0 to 1024 [ 296.041940][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 296.588183][ T5886] loop6: detected capacity change from 0 to 512 [ 296.723883][ T5886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 296.793101][ T5886] System zones: 1-12 [ 296.857572][ T5886] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.267: missing EA_INODE flag [ 296.970122][ T5886] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.267: error while reading EA inode 12 err=-117 [ 297.054612][ T5886] EXT4-fs (loop6): 1 orphan inode deleted [ 297.094378][ T5886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 297.245180][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 297.275869][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 298.459283][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 298.887128][ T5406] EXT4-fs (loop6): unmounting filesystem. [ 299.046017][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.066154][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.640019][ T5838] device bridge_slave_0 entered promiscuous mode [ 300.695759][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.710156][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.746538][ T5838] device bridge_slave_1 entered promiscuous mode [ 300.812508][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.840831][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.849659][ T5853] device bridge_slave_0 entered promiscuous mode [ 300.903802][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.955861][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.964288][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.985757][ T5853] device bridge_slave_1 entered promiscuous mode [ 301.037143][ T5929] loop3: detected capacity change from 0 to 512 [ 301.123826][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.133278][ T5878] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.299128][ T5838] team0: Port device team_slave_0 added [ 301.389635][ T5838] team0: Port device team_slave_1 added [ 301.597881][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.666243][ T5934] tipc: Started in network mode [ 301.671510][ T5934] tipc: Node identity 4, cluster identity 4711 [ 301.700118][ T5934] tipc: Node number set to 4 [ 301.708002][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.807472][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.814805][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.931581][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.002540][ T5937] tipc: Enabled bearer , priority 0 [ 302.024159][ T5934] tipc: Resetting bearer [ 302.473591][ T5934] tipc: Disabling bearer [ 302.526986][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.540209][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.609203][ T5946] loop3: detected capacity change from 0 to 1024 [ 302.630491][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.651866][ T5946] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 302.684620][ T5946] EXT4-fs (loop3): barriers disabled [ 302.706459][ T5946] JBD2: no valid journal superblock found [ 302.719348][ T5946] EXT4-fs (loop3): error loading journal [ 304.581054][ T5853] team0: Port device team_slave_0 added [ 304.595538][ T5853] team0: Port device team_slave_1 added [ 304.771273][ T5838] device hsr_slave_0 entered promiscuous mode [ 304.862322][ T5838] device hsr_slave_1 entered promiscuous mode [ 304.904675][ T5963] overlayfs: conflicting options: nfs_export=on,index=off [ 304.984479][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.122398][ T5838] Cannot create hsr debugfs directory [ 305.447181][ T5959] netlink: 14 bytes leftover after parsing attributes in process `syz.3.274'. [ 305.743271][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.760086][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.806788][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.832130][ T5967] loop5: detected capacity change from 0 to 4096 [ 305.857642][ T5967] EXT4-fs (loop5): Test dummy encryption mode enabled [ 306.137889][ T5967] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 306.335731][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.346058][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.419358][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.654488][ T5853] device hsr_slave_0 entered promiscuous mode [ 306.685209][ T5853] device hsr_slave_1 entered promiscuous mode [ 306.704152][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.714118][ T5977] loop3: detected capacity change from 0 to 256 [ 306.720855][ T5853] Cannot create hsr debugfs directory [ 306.736343][ T5977] exfat: Deprecated parameter 'namecase' [ 306.804761][ T5977] exfat: Deprecated parameter 'namecase' [ 306.912667][ T5977] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 307.631206][ T4717] EXT4-fs (loop5): unmounting filesystem. [ 309.059511][ T5997] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 309.083019][ T47] Bluetooth: hci4: Frame reassembly failed (-84) [ 309.259591][ T6002] loop6: detected capacity change from 0 to 1024 [ 309.367050][ T6002] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 309.625932][ T6002] EXT4-fs (loop6): barriers disabled [ 309.738009][ T6002] JBD2: no valid journal superblock found [ 309.806367][ T6002] EXT4-fs (loop6): error loading journal [ 311.085895][ T4286] Bluetooth: hci4: command 0x1003 tx timeout [ 311.094085][ T4284] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 314.618617][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 314.828750][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 314.835795][ T7] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 314.860173][ T7] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 314.883264][ T7] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.910026][ T7] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.919147][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.008615][ T7] usbtmc 7-1:16.0: bulk endpoints not found [ 317.093034][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.099652][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.300735][ T27] usb 7-1: USB disconnect, device number 2 [ 318.066400][ T5853] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 318.520310][ T5853] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 318.582817][ T6047] loop3: detected capacity change from 0 to 4096 [ 318.591750][ T6047] EXT4-fs (loop3): Test dummy encryption mode enabled [ 318.605533][ T6047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 318.862506][ T5853] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 319.702957][ T5853] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 319.718402][ T6060] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 319.718402][ T6060] program syz.6.291 not setting count and/or reply_len properly [ 320.146356][ T11] device hsr_slave_0 left promiscuous mode [ 320.162167][ T11] device hsr_slave_1 left promiscuous mode [ 320.190046][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.217939][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.243770][ T11] device bridge_slave_1 left promiscuous mode [ 320.264182][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.336734][ T11] device bridge_slave_0 left promiscuous mode [ 320.350610][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.673717][ T6071] loop5: detected capacity change from 0 to 1024 [ 321.052605][ T6071] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.292: lblock 2 mapped to illegal pblock 2 (length 1) [ 321.068622][ T6071] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 321.076821][ T6071] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.292: lblock 0 mapped to illegal pblock 48 (length 1) [ 321.091739][ T6071] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 321.101206][ T6071] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.292: Failed to acquire dquot type 0 [ 321.114656][ T6071] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 321.134958][ T6071] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.292: mark_inode_dirty error [ 321.146837][ T6071] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 321.157203][ T6071] EXT4-fs (loop5): 1 orphan inode deleted [ 321.163220][ T6071] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 321.254128][ T5973] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.271176][ T11] device hsr_slave_0 left promiscuous mode [ 321.279445][ T11] device hsr_slave_1 left promiscuous mode [ 321.291592][ T5973] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 321.302414][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.310247][ T5973] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 0 [ 321.314824][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.341180][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.360225][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.368347][ T11] device bridge_slave_1 left promiscuous mode [ 321.383935][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.446364][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 321.513873][ T4717] EXT4-fs (loop5): unmounting filesystem. [ 321.524290][ T11] device bridge_slave_0 left promiscuous mode [ 321.534010][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.543872][ T4717] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 322.151757][ T4717] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 322.204392][ T4717] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 322.508799][ T11] device veth1_macvtap left promiscuous mode [ 322.528385][ T11] device veth0_macvtap left promiscuous mode [ 322.546982][ T11] device veth1_vlan left promiscuous mode [ 322.974837][ T11] device veth0_vlan left promiscuous mode [ 323.270284][ T6079] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 323.296531][ T6079] CIFS mount error: No usable UNC path provided in device string! [ 323.296531][ T6079] [ 323.306984][ T6079] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 325.691753][ T26] audit: type=1800 audit(2000000083.720:76): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.297" name="power" dev="configfs" ino=41534 res=0 errno=0 [ 327.699603][ T6111] loop5: detected capacity change from 0 to 256 [ 329.551428][ T6127] input: syz1 as /devices/virtual/input/input6 [ 330.652081][ T11] team0 (unregistering): Port device team_slave_1 removed [ 332.160343][ T11] team0 (unregistering): Port device team_slave_0 removed [ 332.312936][ T6139] loop6: detected capacity change from 0 to 128 [ 332.924812][ T6139] EXT4-fs (loop6): Test dummy encryption mode enabled [ 333.004038][ T6139] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 333.013552][ T6139] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.072034][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.083272][ T5406] EXT4-fs (loop6): unmounting filesystem. [ 334.490923][ T6156] loop3: detected capacity change from 0 to 512 [ 334.503989][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.947835][ T6156] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.313: bad orphan inode 15 [ 334.976058][ T6156] ext4_test_bit(bit=14, block=5) = 0 [ 334.982436][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 339.619990][ T6159] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 339.908282][ T11] bond0 (unregistering): Released all slaves [ 341.110224][ T6195] loop5: detected capacity change from 0 to 512 [ 341.117396][ T6195] EXT4-fs: Ignoring removed oldalloc option [ 341.133681][ T6195] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 341.147395][ T6195] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 341.183032][ T6195] EXT4-fs (loop5): 1 truncate cleaned up [ 341.188758][ T6195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 341.438070][ T11] team0 (unregistering): Port device team_slave_1 removed [ 341.560076][ T11] team0 (unregistering): Port device team_slave_0 removed [ 341.624928][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.744120][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.901322][ T4717] EXT4-fs (loop5): unmounting filesystem. [ 344.663097][ T11] bond0 (unregistering): Released all slaves [ 344.680614][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.699326][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.707976][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.716472][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.725961][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.734404][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.759939][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 345.211718][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 345.398026][ T4284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.408796][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.418157][ T4284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.427160][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.436082][ T4284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.445966][ T4284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.684741][ T6226] netlink: 'syz.5.326': attribute type 16 has an invalid length. [ 345.692635][ T6226] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.326'. [ 347.894331][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 347.902948][ T4286] Bluetooth: hci6: command 0x0409 tx timeout [ 348.507659][ T6248] loop5: detected capacity change from 0 to 512 [ 348.557907][ T6216] chnl_net:caif_netlink_parms(): no params data found [ 349.961304][ T4282] Bluetooth: hci6: command 0x041b tx timeout [ 349.967466][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 350.048803][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 350.104342][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.140106][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.163313][ T6216] device bridge_slave_0 entered promiscuous mode [ 350.295181][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.341279][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.428995][ T6216] device bridge_slave_1 entered promiscuous mode [ 351.468515][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.537911][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.725633][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.744649][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.778442][ T6274] loop3: detected capacity change from 0 to 1024 [ 351.785442][ T6221] device bridge_slave_0 entered promiscuous mode [ 353.279949][ T4282] Bluetooth: hci6: command 0x040f tx timeout [ 353.279942][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 353.313094][ T6216] team0: Port device team_slave_0 added [ 353.328853][ T6274] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.333: lblock 2 mapped to illegal pblock 2 (length 1) [ 353.343156][ T6274] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 353.348489][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.351460][ T6274] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.333: lblock 0 mapped to illegal pblock 48 (length 1) [ 353.372851][ T6274] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 353.381757][ T6274] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.333: Failed to acquire dquot type 0 [ 353.391030][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.402611][ T6274] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 353.417665][ T6274] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.333: mark_inode_dirty error [ 353.429270][ T6274] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 353.439747][ T6274] EXT4-fs (loop3): 1 orphan inode deleted [ 353.446140][ T6274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 353.465852][ T6221] device bridge_slave_1 entered promiscuous mode [ 353.473259][ T4362] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 353.533747][ T6216] team0: Port device team_slave_1 added [ 353.570240][ T4362] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 353.578770][ T4362] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 0 [ 353.763085][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.782674][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 353.798998][ T4281] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 353.812982][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.830100][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.840729][ T4281] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 353.957822][ T4281] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 353.973503][ T6288] virtio-fs: tag not found [ 354.059646][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.281748][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.390884][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.488682][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.020579][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.320210][ T4286] Bluetooth: hci6: command 0x0419 tx timeout [ 355.326326][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 355.734433][ T6221] team0: Port device team_slave_0 added [ 356.063671][ T6221] team0: Port device team_slave_1 added [ 356.310987][ T6216] device hsr_slave_0 entered promiscuous mode [ 356.348995][ T6216] device hsr_slave_1 entered promiscuous mode [ 356.446946][ T6300] NILFS (nullb0): couldn't find nilfs on the device [ 357.052927][ T6216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.101073][ T6216] Cannot create hsr debugfs directory [ 357.603558][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.626308][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.945789][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.179737][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.232498][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.511835][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.626059][ T6307] mmap: syz.3.340 (6307) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 358.959019][ T6221] device hsr_slave_0 entered promiscuous mode [ 359.066937][ T6221] device hsr_slave_1 entered promiscuous mode [ 359.179722][ T6221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.292677][ T6221] Cannot create hsr debugfs directory [ 366.803036][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.012199][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.211132][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.405227][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.774127][ T6216] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.739648][ T4282] Bluetooth: hci0: command 0x0c13 tx timeout [ 368.766794][ T6216] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.800592][ T6216] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.834860][ T6216] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.050076][ T4286] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 370.155842][ T6369] loop5: detected capacity change from 0 to 512 [ 370.688650][ T6369] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 371.008912][ T6369] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.352: invalid indirect mapped block 256 (level 1) [ 371.652359][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.726480][ T6369] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.352: invalid indirect mapped block 2683928664 (level 1) [ 371.749718][ T6369] EXT4-fs (loop5): 1 truncate cleaned up [ 371.755673][ T6369] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 373.345443][ T6216] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.382578][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.393927][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.401630][ T6371] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 373.446901][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.460182][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.538860][ T4717] EXT4-fs (loop5): unmounting filesystem. [ 373.559446][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.566802][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.847506][ T4286] Bluetooth: hci6: command 0x0405 tx timeout [ 374.457333][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 374.466814][ T6391] openvswitch: netlink: Flow key attr not present in new flow. [ 375.639307][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.654051][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.692465][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.730279][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.737477][ T5468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.798609][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.839214][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.887619][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.919649][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.964149][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.004065][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.047683][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.081583][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.106544][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.168170][ T6404] netlink: 14 bytes leftover after parsing attributes in process `syz.5.356'. [ 376.607499][ T6216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.648481][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.679389][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.710924][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.005313][ T6424] loop5: detected capacity change from 0 to 128 [ 377.707896][ T6424] EXT4-fs (loop5): Test dummy encryption mode enabled [ 378.285362][ T6424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 378.313595][ T6424] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 378.427123][ T6221] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 378.490319][ T6221] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 378.534664][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.541088][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.599000][ T6435] gadgetfs: bound to dummy_udc driver [ 378.662227][ T4717] EXT4-fs (loop5): unmounting filesystem. [ 378.672651][ T6221] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 378.880081][ T5806] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 378.893743][ C0] gadgetfs: connected [ 378.901245][ T6434] gadgetfs: suspended from state 3 [ 378.907002][ T6434] gadgetfs: disconnected [ 379.970477][ T6221] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 385.797838][ T6482] netlink: 'syz.3.371': attribute type 16 has an invalid length. [ 385.806041][ T6482] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.371'. [ 386.115171][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.221481][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.835015][ T6216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.877760][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.533225][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.580247][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.588903][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.101311][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.141105][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.205068][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.212301][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.313373][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.495412][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.276108][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.283349][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.366424][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 389.381568][ T6526] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 389.481496][ T26] audit: type=1800 audit(2000000048.420:77): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.380" name="addr_trtype" dev="configfs" ino=44171 res=0 errno=0 [ 389.555787][ T26] audit: type=1800 audit(2000000048.450:78): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.380" name="addr_traddr" dev="configfs" ino=44172 res=0 errno=0 [ 390.668116][ T6529] nvmet: transport type 0 not supported [ 390.997385][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 391.029430][ T6543] jffs2: notice: (6543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 391.490492][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 391.599984][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 391.662314][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.670501][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.850432][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.275944][ T11] device hsr_slave_0 left promiscuous mode [ 396.050501][ T11] device hsr_slave_1 left promiscuous mode [ 396.126949][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.180489][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.232108][ T11] device bridge_slave_1 left promiscuous mode [ 396.244703][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.764936][ T11] device bridge_slave_0 left promiscuous mode [ 396.775884][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.823519][ T6546] syz.3.383 (6546): drop_caches: 2 [ 396.843144][ T11] device hsr_slave_0 left promiscuous mode [ 396.874049][ T11] device hsr_slave_1 left promiscuous mode [ 396.900194][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.924100][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.950748][ T11] device bridge_slave_1 left promiscuous mode [ 397.007816][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.187779][ T11] device bridge_slave_0 left promiscuous mode [ 397.200204][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.297136][ T6579] tmpfs: Bad value for 'mpol' [ 399.186512][ T11] device hsr_slave_0 left promiscuous mode [ 399.209761][ T11] device hsr_slave_1 left promiscuous mode [ 399.264418][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.316891][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.382965][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.594522][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.535598][ T11] device veth1_macvtap left promiscuous mode [ 400.554691][ T11] device veth0_macvtap left promiscuous mode [ 400.566203][ T11] device veth1_vlan left promiscuous mode [ 400.583440][ T11] device veth0_vlan left promiscuous mode [ 401.635802][ T6598] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.766285][ T6600] jffs2: notice: (6600) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 402.420238][ T6612] md: array md0 already has disks! [ 402.436601][ T6612] md: could not open device unknown-block(1,0). [ 402.442399][ T11] team0 (unregistering): Port device team_slave_1 removed [ 402.460089][ T6612] md: error, md_import_device() returned -16 [ 402.671678][ T11] team0 (unregistering): Port device team_slave_0 removed [ 402.805676][ T6614] md/raid:md0: not clean -- starting background reconstruction [ 402.823508][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.843107][ T6614] md/raid:md0: invalid chunk size 0 [ 402.866303][ T6614] md: pers->run() failed ... [ 403.523107][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.159102][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.181055][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.191346][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.199598][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.209593][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 404.236216][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.299373][ T11] bond0 (unregistering): Released all slaves [ 404.416844][ T6632] loop3: detected capacity change from 0 to 2048 [ 404.460730][ T6632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 405.407108][ T6639] syz.5.402 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 406.148363][ T11] team0 (unregistering): Port device team_slave_1 removed [ 406.252544][ T11] team0 (unregistering): Port device team_slave_0 removed [ 406.359128][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.360198][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 406.418578][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.431364][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.440759][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.450424][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.458084][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 406.465589][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.510806][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.817025][ T11] bond0 (unregistering): Released all slaves [ 408.118595][ T11] team0 (unregistering): Port device team_slave_1 removed [ 408.440667][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 408.481653][ T11] team0 (unregistering): Port device team_slave_0 removed [ 408.521576][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 408.774345][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.888283][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.520327][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 410.600427][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 411.012621][ T11] bond0 (unregistering): Released all slaves [ 411.064159][ T6666] loop6: detected capacity change from 0 to 512 [ 411.113801][ T6666] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 411.159962][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.168152][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.227520][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.238745][ T6666] EXT4-fs (loop6): 1 truncate cleaned up [ 411.302118][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'. [ 411.318544][ T6666] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 411.443180][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 411.534428][ T26] audit: type=1800 audit(2000000070.470:79): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.408" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 411.779217][ T5406] EXT4-fs (loop6): unmounting filesystem. [ 412.880858][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 412.886942][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 412.997760][ T6693] loop3: detected capacity change from 0 to 128 [ 413.368320][ T6648] chnl_net:caif_netlink_parms(): no params data found [ 413.688106][ T6625] chnl_net:caif_netlink_parms(): no params data found [ 415.511552][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 416.257127][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.315069][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.355518][ T6625] device bridge_slave_0 entered promiscuous mode [ 416.411477][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.418991][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.442465][ T6648] device bridge_slave_0 entered promiscuous mode [ 416.483047][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.599847][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.651519][ T6625] device bridge_slave_1 entered promiscuous mode [ 416.710393][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.717880][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.728000][ T6648] device bridge_slave_1 entered promiscuous mode [ 416.795645][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.829677][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.861971][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.886287][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.022319][ T6625] team0: Port device team_slave_0 added [ 417.061818][ T6625] team0: Port device team_slave_1 added [ 417.087029][ T6648] team0: Port device team_slave_0 added [ 417.148197][ T6648] team0: Port device team_slave_1 added [ 417.220066][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.246173][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.449109][ T6625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.496243][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.514075][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.585695][ T6625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.646417][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.679747][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.924735][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.068137][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.129050][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.302789][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.108067][ T6625] device hsr_slave_0 entered promiscuous mode [ 421.562951][ T6625] device hsr_slave_1 entered promiscuous mode [ 423.060042][ T6625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.089944][ T6625] Cannot create hsr debugfs directory [ 423.106160][ T6648] device hsr_slave_0 entered promiscuous mode [ 423.271162][ T6648] device hsr_slave_1 entered promiscuous mode [ 423.297517][ T6648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.312007][ T6648] Cannot create hsr debugfs directory [ 428.890362][ T6786] random: crng reseeded on system resumption [ 431.426122][ T26] audit: type=1326 audit(2000000090.360:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 432.071544][ T26] audit: type=1326 audit(2000000090.550:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 432.103582][ T26] audit: type=1326 audit(2000000090.570:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 432.137905][ T26] audit: type=1326 audit(2000000090.570:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 432.212194][ T26] audit: type=1326 audit(2000000090.570:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 432.349122][ T26] audit: type=1326 audit(2000000090.580:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 434.344516][ T26] audit: type=1326 audit(2000000090.580:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 434.639911][ T26] audit: type=1326 audit(2000000090.580:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 434.687002][ T26] audit: type=1326 audit(2000000090.580:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 434.712301][ T26] audit: type=1326 audit(2000000090.580:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.6.433" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b74f9e1d9 code=0x7ffc0000 [ 434.892287][ T6821] bridge0: port 3(netdevsim0) entered blocking state [ 434.899336][ T6821] bridge0: port 3(netdevsim0) entered disabled state [ 434.909087][ T6821] device netdevsim0 entered promiscuous mode [ 435.019584][ T6826] netlink: 'syz.5.436': attribute type 10 has an invalid length. [ 435.993769][ T6826] bridge0: port 3(netdevsim0) entered blocking state [ 436.000621][ T6826] bridge0: port 3(netdevsim0) entered forwarding state [ 436.007773][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.014948][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.022344][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.029446][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.074041][ T6826] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 436.462263][ T6835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.770627][ T6648] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 438.782235][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 438.782253][ T26] audit: type=1800 audit(2000000097.720:106): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.443" name="syzkaller0" dev="sda1" ino=2059 res=0 errno=0 [ 438.938576][ T6648] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 438.968926][ T11] device hsr_slave_0 left promiscuous mode [ 438.986022][ T11] device hsr_slave_1 left promiscuous mode [ 439.047184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.070794][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.094800][ T11] device bridge_slave_1 left promiscuous mode [ 439.134677][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.202151][ T11] device bridge_slave_0 left promiscuous mode [ 439.244708][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.444240][ T11] device hsr_slave_0 left promiscuous mode [ 439.515009][ T11] device hsr_slave_1 left promiscuous mode [ 439.544785][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.638734][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.727288][ T11] device bridge_slave_1 left promiscuous mode [ 439.787714][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.903295][ T11] device bridge_slave_0 left promiscuous mode [ 439.963639][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.970187][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.970957][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.267195][ T6864] loop6: detected capacity change from 0 to 8192 [ 442.357479][ T6869] loop3: detected capacity change from 0 to 256 [ 442.405589][ T6864] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 442.449932][ T6864] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 442.519809][ T6864] REISERFS (device loop6): using journaled data mode [ 442.567917][ T6864] reiserfs: using flush barriers [ 442.670451][ T6864] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 442.775793][ T6864] REISERFS (device loop6): checking transaction log (loop6) [ 442.807221][ T6864] REISERFS (device loop6): Using tea hash to sort names [ 442.860338][ T6864] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 442.949279][ T6864] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 443.391300][ T6873] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 443.429117][ T6873] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 443.461638][ T6873] overlayfs: upper fs needs to support d_type. [ 443.468670][ T6873] overlayfs: upper fs does not support tmpfile. [ 443.475935][ T6873] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 443.502199][ T6873] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 443.518323][ T6873] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 443.538363][ T6873] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 443.557429][ T6873] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 443.641195][ T6873] overlayfs: failed to set xattr on upper [ 443.647000][ T6873] overlayfs: ...falling back to index=off,metacopy=off. [ 443.915706][ T5406] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 443.961912][ T5406] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 444.680872][ T11] team0 (unregistering): Port device team_slave_1 removed [ 445.203530][ T26] audit: type=1800 audit(2000000104.140:107): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.449" name="file1" dev="loop3" ino=1048667 res=0 errno=0 [ 445.544369][ T11] team0 (unregistering): Port device team_slave_0 removed [ 445.838999][ T5406] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 446.855593][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.013253][ T6884] md: array md0 already has disks! [ 447.241366][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.792409][ T6892] input: syz0 as /devices/virtual/input/input7 [ 449.823705][ T6898] loop6: detected capacity change from 0 to 256 [ 449.891114][ T6898] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 449.891114][ T6898] [ 449.905367][ T6898] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 449.918766][ T6898] CIFS: Attempting to mount \\127.0.0.1\share [ 449.936675][ T6898] CIFS: VFS: Error connecting to socket. Aborting operation. [ 449.972387][ T6898] CIFS: VFS: cifs_mount failed w/return code = -111 [ 452.822626][ T6904] loop3: detected capacity change from 0 to 1024 [ 453.453097][ T11] bond0 (unregistering): Released all slaves [ 453.874107][ T11] team0 (unregistering): Port device team_slave_1 removed [ 453.936299][ T11] team0 (unregistering): Port device team_slave_0 removed [ 454.001320][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.118614][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.417394][ T6918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.854672][ T11] bond0 (unregistering): Released all slaves [ 456.336823][ T6648] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 456.461678][ T6648] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 456.476431][ T6924] Process accounting resumed [ 456.698133][ T6625] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 456.811605][ T6625] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 456.849519][ T6625] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 456.931329][ T6936] input: syz0 as /devices/virtual/input/input8 [ 457.618219][ T6625] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 457.731864][ T6930] loop3: detected capacity change from 0 to 8192 [ 458.731611][ T6930] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 458.829266][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.860494][ T6930] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 458.912653][ T6930] REISERFS (device loop3): using journaled data mode [ 458.956833][ T6930] reiserfs: using flush barriers [ 458.981198][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.022711][ T6930] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 459.050355][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.070588][ T6930] REISERFS (device loop3): checking transaction log (loop3) [ 459.089596][ T6930] REISERFS (device loop3): Using tea hash to sort names [ 459.108185][ T6930] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 459.126388][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.148262][ T6930] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 459.205215][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.224047][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.260214][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.267549][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.357733][ T6625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.381993][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.395285][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.423435][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.439801][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.447081][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.471906][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.531096][ T6625] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.550367][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.594241][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.612983][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.627446][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.648759][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.666780][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.679319][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.755004][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.794993][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.822940][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.841160][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.848374][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.012902][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.026562][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.034603][ T6943] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 460.049470][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.053774][ T6943] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 460.072691][ T6943] overlayfs: upper fs needs to support d_type. [ 460.075009][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.078992][ T6943] overlayfs: upper fs does not support tmpfile. [ 460.094550][ T6943] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 460.109414][ T6943] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 460.116657][ T6943] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 460.131304][ T6943] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 460.136243][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.146926][ T6943] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 460.152622][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.174495][ T6943] overlayfs: failed to set xattr on upper [ 460.180364][ T6943] overlayfs: ...falling back to index=off,metacopy=off. [ 460.205300][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.217876][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.320143][ T4281] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 460.346829][ T6648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.357985][ T4281] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 460.374316][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.401589][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.418731][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.444335][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.461422][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.470303][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.479705][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.488616][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.497339][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.507883][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.522182][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.533944][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.679189][ T6625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 461.855251][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.471'. [ 463.070333][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 463.178371][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.186730][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.208954][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.565818][ T6999] md: array md0 already has disks! [ 469.583536][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 469.602554][ T6999] md: could not open device unknown-block(1,0). [ 469.609200][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 469.618375][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.628667][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.636480][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 469.652056][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.660227][ T6999] md: error, md_import_device() returned -16 [ 470.201647][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.218808][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.230411][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.239419][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.250817][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 470.258180][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.082075][ T6998] chnl_net:caif_netlink_parms(): no params data found [ 471.815884][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 472.215160][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.222861][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.231485][ T6998] device bridge_slave_0 entered promiscuous mode [ 472.242445][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.250191][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.258522][ T6998] device bridge_slave_1 entered promiscuous mode [ 472.284833][ T6998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.297106][ T6998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.306649][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 472.501026][ T6998] team0: Port device team_slave_0 added [ 473.881022][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 474.359876][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 476.064436][ T6998] team0: Port device team_slave_1 added [ 476.153859][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 476.159451][ T7008] chnl_net:caif_netlink_parms(): no params data found [ 477.261733][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 477.423898][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.432884][ T7070] Mass Storage Function, version: 2009/09/11 [ 477.452492][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.485007][ T7070] LUN: removable file: (no medium) [ 477.583980][ T6998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.695989][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.719057][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.796581][ T6998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.199861][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 478.249613][ T6998] device hsr_slave_0 entered promiscuous mode [ 478.257642][ T6998] device hsr_slave_1 entered promiscuous mode [ 478.278108][ T6998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.300795][ T7072] xt_CT: No such helper "pptp" [ 478.333475][ T6998] Cannot create hsr debugfs directory [ 478.373853][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.390140][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.419022][ T7008] device bridge_slave_0 entered promiscuous mode [ 478.485099][ T7085] loop6: detected capacity change from 0 to 128 [ 478.522348][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.549954][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.584258][ T7008] device bridge_slave_1 entered promiscuous mode [ 478.643525][ T57] device hsr_slave_0 left promiscuous mode [ 478.671654][ T57] device hsr_slave_1 left promiscuous mode [ 478.700790][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.733835][ T7091] syz.6.492: attempt to access beyond end of device [ 478.733835][ T7091] loop6: rw=2049, sector=201, nr_sectors = 352 limit=128 [ 478.748127][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.769999][ T7093] loop3: detected capacity change from 0 to 128 [ 478.790176][ T57] device bridge_slave_1 left promiscuous mode [ 478.801173][ T7093] EXT4-fs (loop3): Test dummy encryption mode enabled [ 478.821067][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.840084][ T7085] syz.6.492: attempt to access beyond end of device [ 478.840084][ T7085] loop6: rw=524288, sector=201, nr_sectors = 256 limit=128 [ 478.843111][ T57] device bridge_slave_0 left promiscuous mode [ 478.861286][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.871959][ T7091] syz.6.492: attempt to access beyond end of device [ 478.871959][ T7091] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 478.888311][ T7093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 478.909508][ T7091] syz.6.492: attempt to access beyond end of device [ 478.909508][ T7091] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 478.914426][ T7093] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.952492][ T7084] syz.6.492: attempt to access beyond end of device [ 478.952492][ T7084] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 478.992207][ T7084] syz.6.492: attempt to access beyond end of device [ 478.992207][ T7084] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 479.050110][ T7091] syz.6.492: attempt to access beyond end of device [ 479.050110][ T7091] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 479.086411][ T7085] syz.6.492: attempt to access beyond end of device [ 479.086411][ T7085] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 479.133704][ T7091] syz.6.492: attempt to access beyond end of device [ 479.133704][ T7091] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 479.170044][ T7085] syz.6.492: attempt to access beyond end of device [ 479.170044][ T7085] loop6: rw=0, sector=201, nr_sectors = 8 limit=128 [ 479.369886][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 479.857405][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 481.115542][ T7111] loop6: detected capacity change from 0 to 4096 [ 481.722266][ T7124] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4717] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7124] [ 484.212192][ T7125] loop6: detected capacity change from 0 to 32768 [ 484.242918][ T57] team0 (unregistering): Port device team_slave_1 removed [ 484.369285][ T7125] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 484.753142][ T57] team0 (unregistering): Port device team_slave_0 removed [ 484.808097][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.021470][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.605082][ T7135] xt_CT: No such helper "pptp" [ 485.914963][ T7141] loop3: detected capacity change from 0 to 512 [ 485.961388][ T7141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 485.978824][ T7141] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.261831][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 487.283027][ T57] bond0 (unregistering): Released all slaves [ 487.315626][ T5406] ocfs2: Unmounting device (7,6) on (node local) [ 488.588674][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.799691][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.521758][ T7008] team0: Port device team_slave_0 added [ 490.641998][ T7008] team0: Port device team_slave_1 added [ 490.673094][ T7161] loop6: detected capacity change from 0 to 512 [ 490.729702][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.762878][ T7161] EXT4-fs (loop6): can't mount with commit=1048582, fs mounted w/o journal [ 490.795940][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.946569][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.131417][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.138519][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.318056][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.591597][ T7008] device hsr_slave_0 entered promiscuous mode [ 491.621727][ T7008] device hsr_slave_1 entered promiscuous mode [ 491.636046][ T7008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.673155][ T7008] Cannot create hsr debugfs directory [ 492.246624][ T7169] loop6: detected capacity change from 0 to 128 [ 493.023076][ T7169] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 493.032031][ T7169] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 493.403336][ T5406] EXT4-fs (loop6): unmounting filesystem. [ 495.182195][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880550dc800: rx timeout, send abort [ 495.774291][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880550dc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 496.363186][ T7196] loop6: detected capacity change from 0 to 16 [ 496.441826][ T7196] erofs: (device loop6): mounted with root inode @ nid 36. [ 496.481054][ T7196] netlink: 44 bytes leftover after parsing attributes in process `syz.6.513'. [ 496.876114][ T7201] 9pnet_virtio: no channels available for device syz [ 496.912525][ T7201] overlayfs: missing 'workdir' [ 499.354106][ T6998] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 499.436839][ T6998] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 499.460506][ T6998] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 499.653012][ T7225] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 499.653012][ T7225] [ 499.666810][ T7225] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 499.679652][ T7225] CIFS: Attempting to mount \\127.0.0.1\share [ 499.688511][ T7225] CIFS: VFS: Error connecting to socket. Aborting operation. [ 499.695986][ T7225] CIFS: VFS: cifs_mount failed w/return code = -111 [ 499.842760][ T6998] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 500.840318][ T7008] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 500.956788][ T7008] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 500.995972][ T7008] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 501.090422][ T7008] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 501.288914][ T57] device hsr_slave_0 left promiscuous mode [ 501.313278][ T57] device hsr_slave_1 left promiscuous mode [ 501.345554][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.410279][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.419187][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.481260][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.590984][ T57] device bridge_slave_1 left promiscuous mode [ 501.678904][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.781941][ T57] device bridge_slave_0 left promiscuous mode [ 501.818740][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.189645][ T7247] virtio-fs: tag not found [ 504.130602][ T57] team0 (unregistering): Port device team_slave_1 removed [ 504.364048][ T57] team0 (unregistering): Port device team_slave_0 removed [ 504.512226][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.756316][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.065660][ T57] bond0 (unregistering): Released all slaves [ 508.841859][ T6998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.975989][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 509.002654][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.084161][ T6998] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.136430][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.163771][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.356990][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.364235][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.356985][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.467125][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 511.557642][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.686937][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.694145][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.867510][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.983676][ T7008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.108600][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.286663][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.466101][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.611494][ T7008] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.265675][ T6998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.433906][ T6998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.474038][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 513.486289][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.776806][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 516.490681][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 516.610197][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.646105][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 516.730999][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.756941][ T7323] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 516.768035][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 516.844074][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.894597][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 516.929058][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.540'. [ 516.977342][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 517.014096][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.029500][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.036782][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.176416][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.254357][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.541'. [ 517.296107][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 517.520327][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.580406][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.587587][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.700163][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 518.827348][ T7008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 518.888424][ T7008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.153398][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.171705][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.610632][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 520.280248][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.354497][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.401053][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.431119][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 520.491630][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.520645][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 520.553499][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.730668][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.780767][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 520.802764][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.852830][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.900981][ T6998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.191135][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.551'. [ 526.253214][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.316948][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.162881][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.173748][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 527.186203][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 527.202542][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 527.210592][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 527.218536][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.854724][ T4334] libceph: connect (1)[c::]:6789 error -101 [ 527.865480][ T4334] libceph: mon0 (1)[c::]:6789 connect error [ 527.926016][ T7419] ceph: No mds server is up or the cluster is laggy [ 529.105121][ T7439] loop3: detected capacity change from 0 to 512 [ 529.135824][ T7439] EXT4-fs (loop3): can't mount with commit=1048582, fs mounted w/o journal [ 529.240145][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 531.177367][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.190439][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.199302][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.209603][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.218793][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 531.228080][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 531.330551][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 532.744458][ T7413] chnl_net:caif_netlink_parms(): no params data found [ 533.320168][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 533.409882][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 533.609299][ T4282] Bluetooth: hci0: Malformed LE Event: 0x1b [ 534.125419][ T7413] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.194251][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.328889][ T7413] device bridge_slave_0 entered promiscuous mode [ 534.338023][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.345320][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.363084][ T7413] device bridge_slave_1 entered promiscuous mode [ 534.509447][ T7413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.559159][ T7413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.417649][ T7495] No such timeout policy "syz1" [ 535.466989][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 536.594148][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 536.694073][ T7447] chnl_net:caif_netlink_parms(): no params data found [ 537.080218][ T7413] team0: Port device team_slave_0 added [ 537.447630][ T7413] team0: Port device team_slave_1 added [ 537.480021][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 538.390943][ T57] device hsr_slave_0 left promiscuous mode [ 538.458901][ T57] device hsr_slave_1 left promiscuous mode [ 538.542171][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.627253][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.716865][ T57] device bridge_slave_1 left promiscuous mode [ 538.775819][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.885442][ T57] device bridge_slave_0 left promiscuous mode [ 538.945617][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.560170][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 541.109173][ T57] team0 (unregistering): Port device team_slave_1 removed [ 541.327891][ T57] team0 (unregistering): Port device team_slave_0 removed [ 541.473796][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.532781][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.105679][ T57] bond0 (unregistering): Released all slaves [ 544.792353][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.799397][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.499932][ T7413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.646626][ T7413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.801195][ T7413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.935603][ T7413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.058138][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.580'. [ 547.326512][ T7413] device hsr_slave_0 entered promiscuous mode [ 547.390402][ T7413] device hsr_slave_1 entered promiscuous mode [ 547.640176][ T7413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.669817][ T7413] Cannot create hsr debugfs directory [ 547.675589][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.687045][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.792276][ T7447] device bridge_slave_0 entered promiscuous mode [ 548.163964][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.185835][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.299942][ T7447] device bridge_slave_1 entered promiscuous mode [ 548.579399][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.650307][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.816838][ T7447] team0: Port device team_slave_0 added [ 549.906567][ T7447] team0: Port device team_slave_1 added [ 557.708412][ T30] ------------[ cut here ]------------ [ 557.714782][ T30] WARNING: CPU: 0 PID: 30 at io_uring/io_uring.c:2892 io_ring_exit_work+0x329/0x760 [ 557.724289][ T30] Modules linked in: [ 557.728208][ T30] CPU: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 557.735654][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 557.745808][ T30] Workqueue: events_unbound io_ring_exit_work [ 557.751964][ T30] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 557.757724][ T30] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 7e 30 11 00 48 85 c0 75 40 e8 64 d4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 d4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 557.777514][ T30] RSP: 0018:ffffc90000a6fac0 EFLAGS: 00010293 [ 557.783659][ T30] RAX: ffffffff8a2b722b RBX: 1ffff1100503d003 RCX: ffff88801a24bc00 [ 557.791708][ T30] RDX: 0000000000000000 RSI: ffffffffffffff8b RDI: 0000000000000000 [ 557.799754][ T30] RBP: ffffc90000a6fc30 R08: ffffc90000a6fa47 R09: 1ffff9200014df48 [ 557.807786][ T30] R10: dffffc0000000000 R11: fffff5200014df49 R12: dffffc0000000000 [ 557.815852][ T30] R13: 0000000100006389 R14: 00000001000063fe R15: ffff8880281e8018 [ 557.823903][ T30] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 557.832908][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.839532][ T30] CR2: 0000000000000000 CR3: 000000000d68e000 CR4: 00000000003506f0 [ 557.847595][ T30] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 557.855656][ T30] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 557.863717][ T30] Call Trace: [ 557.867038][ T30] [ 557.870038][ T30] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 557.875909][ T30] ? _raw_spin_unlock+0x40/0x40 [ 557.880842][ T30] ? _raw_spin_unlock_irq+0x1f/0x40 [ 557.886095][ T30] ? process_one_work+0x7b4/0x1160 [ 557.891322][ T30] process_one_work+0x8ab/0x1160 [ 557.896349][ T30] ? worker_detach_from_pool+0x240/0x240 [ 557.902084][ T30] ? _raw_spin_lock_irq+0xb7/0xf0 [ 557.907197][ T30] ? _raw_spin_lock_irqsave+0x100/0x100 [ 557.912826][ T30] ? wq_worker_running+0x97/0x190 [ 557.917908][ T30] worker_thread+0xaf5/0x12a0 [ 557.922715][ T30] kthread+0x29d/0x330 [ 557.926847][ T30] ? worker_clr_flags+0x1a0/0x1a0 [ 557.931952][ T30] ? kthread_blkcg+0xd0/0xd0 [ 557.936590][ T30] ret_from_fork+0x1f/0x30 [ 557.941137][ T30] [ 557.944237][ T30] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 557.951568][ T30] CPU: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 557.958971][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 557.969059][ T30] Workqueue: events_unbound io_ring_exit_work [ 557.975157][ T30] Call Trace: [ 557.978470][ T30] [ 557.981434][ T30] dump_stack_lvl+0x188/0x24e [ 557.986142][ T30] ? memcpy+0x3c/0x60 [ 557.990155][ T30] ? show_regs_print_info+0x12/0x12 [ 557.995389][ T30] ? load_image+0x410/0x410 [ 557.999927][ T30] panic+0x2d3/0x710 [ 558.003865][ T30] ? bpf_jit_dump+0xd0/0xd0 [ 558.008407][ T30] ? ret_from_fork+0x1f/0x30 [ 558.013031][ T30] __warn+0x2f8/0x4f0 [ 558.017044][ T30] ? io_ring_exit_work+0x329/0x760 [ 558.022181][ T30] ? io_ring_exit_work+0x329/0x760 [ 558.027321][ T30] report_bug+0x2ba/0x4f0 [ 558.031686][ T30] ? io_ring_exit_work+0x329/0x760 [ 558.036831][ T30] handle_bug+0x3a/0x70 [ 558.041028][ T30] exc_invalid_op+0x16/0x40 [ 558.045555][ T30] asm_exc_invalid_op+0x16/0x20 [ 558.050523][ T30] RIP: 0010:io_ring_exit_work+0x329/0x760 [ 558.056266][ T30] Code: 89 fd 48 8b 7c 24 30 48 8b 74 24 08 e8 7e 30 11 00 48 85 c0 75 40 e8 64 d4 56 f7 4c 8b 7c 24 10 e9 1e fe ff ff e8 55 d4 56 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb c7 44 89 e9 80 e1 07 80 c1 [ 558.076160][ T30] RSP: 0018:ffffc90000a6fac0 EFLAGS: 00010293 [ 558.082254][ T30] RAX: ffffffff8a2b722b RBX: 1ffff1100503d003 RCX: ffff88801a24bc00 [ 558.090251][ T30] RDX: 0000000000000000 RSI: ffffffffffffff8b RDI: 0000000000000000 [ 558.098259][ T30] RBP: ffffc90000a6fc30 R08: ffffc90000a6fa47 R09: 1ffff9200014df48 [ 558.106273][ T30] R10: dffffc0000000000 R11: fffff5200014df49 R12: dffffc0000000000 [ 558.114292][ T30] R13: 0000000100006389 R14: 00000001000063fe R15: ffff8880281e8018 [ 558.122302][ T30] ? io_ring_exit_work+0x329/0x760 [ 558.127550][ T30] ? io_ring_ctx_wait_and_kill+0x2e0/0x2e0 [ 558.133410][ T30] ? _raw_spin_unlock+0x40/0x40 [ 558.138307][ T30] ? _raw_spin_unlock_irq+0x1f/0x40 [ 558.143550][ T30] ? process_one_work+0x7b4/0x1160 [ 558.148704][ T30] process_one_work+0x8ab/0x1160 [ 558.153689][ T30] ? worker_detach_from_pool+0x240/0x240 [ 558.159368][ T30] ? _raw_spin_lock_irq+0xb7/0xf0 [ 558.164439][ T30] ? _raw_spin_lock_irqsave+0x100/0x100 [ 558.170039][ T30] ? wq_worker_running+0x97/0x190 [ 558.175095][ T30] worker_thread+0xaf5/0x12a0 [ 558.179825][ T30] kthread+0x29d/0x330 [ 558.183936][ T30] ? worker_clr_flags+0x1a0/0x1a0 [ 558.189017][ T30] ? kthread_blkcg+0xd0/0xd0 [ 558.193645][ T30] ret_from_fork+0x1f/0x30 [ 558.198124][ T30] [ 558.201783][ T30] Kernel Offset: disabled [ 558.206240][ T30] Rebooting in 86400 seconds..