last executing test programs: 15m59.775540167s ago: executing program 32 (id=58): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf74152323428a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"}) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r2 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x20, 0xd6e}}) 14m20.685633932s ago: executing program 33 (id=200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x160341) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}}, 0xb8}}, 0x0) 9m31.233997163s ago: executing program 34 (id=1060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e921", 0x38}], 0x1}, 0x0) r4 = dup3(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) unshare(0x28020480) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r6 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x64, 0xfffa, 0x1, 0x3, 0x8, 0x1, "f7c8e021625a09a97869916e8b0666e954ad522bf608b0013dba3550e0478d8058b2a7fc4998ff6866bdb8bc70cb2c3d35b020d040bf04a090436f97441c176e1b9052ccd7dcf45ecb718715a0a282e317e018bccc8824cc30d21246daa5c46cada3a154"}}, 0x17c) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x7, 0x0, 0xa0) 8m44.198910351s ago: executing program 35 (id=1162): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) setpriority(0x2, 0x0, 0x6) 8m25.778881389s ago: executing program 36 (id=1194): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)}}], 0x2, 0x4004851) setsockopt(r3, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$fuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000380)={0x78, 0x0, 0x0, [{0x5, 0x4, 0x1, 0x6, '&'}, {0x4, 0x1eeb97fe, 0x4, 0x9, 'bpf\x00'}, {0x5, 0x8000000000000001, 0xa, 0x5, '{\xa9[^&@,{}!'}]}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000004c80)={0x2020}, 0x2020) 7m32.476199835s ago: executing program 4 (id=1285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f0000000600)="25d7196c03045396b9eff73fd17da70f06ce5bfec85065ea50846a932bfe75f83496bb2831c866b2f8601c4d622d2cc39cd1f443e2118c00d0cda7ebd3d2cf0cb3da5966775762a7532c", 0x4a, 0x8014, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000001780)='<', 0x1, 0x805, 0x0, 0x0) 7m30.325373356s ago: executing program 4 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2], 0x64}}, 0x0) 7m27.09537252s ago: executing program 4 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x801, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) 7m24.404652797s ago: executing program 4 (id=1292): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 7m22.094661784s ago: executing program 4 (id=1296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f0000000600)="25d7196c03045396b9eff73fd17da70f06ce5bfec85065ea50846a932bfe75f83496bb2831c866b2f8601c4d622d2cc39cd1f443e2118c00d0cda7ebd3d2cf0cb3da5966775762a7532c", 0x4a, 0x8014, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000001780)='<', 0x1, 0x805, 0x0, 0x0) 7m20.913904006s ago: executing program 4 (id=1298): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x3, 0xe90, 0x19}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x10, 0x0, 0x160}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$revoke(0x3, r4) syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xee) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x330, 0x20a, 0x278, 0x330, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa395e046d7c8e944613a407abbf4ed3e800000000000000082a850e79009e2905d2f98ba18f91f3c93686e9bee067f4e77d9ad6623805004100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9528c46178ed5f9192dae000e579c80eca35a58dc47d1d5e4ff6e216c724e88c70244858700", 0x28, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x8}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x5, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x2) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x4, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) 7m5.793275649s ago: executing program 2 (id=1311): syz_open_dev$vcsa(0x0, 0x4, 0x8040) r0 = syz_open_dev$vcsa(0x0, 0xe, 0x202) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) writev(r0, &(0x7f0000000180), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$radio(&(0x7f00000001c0), 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000) 7m5.054372971s ago: executing program 37 (id=1298): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x3, 0xe90, 0x19}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x10, 0x0, 0x160}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$revoke(0x3, r4) syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xee) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x330, 0x20a, 0x278, 0x330, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa395e046d7c8e944613a407abbf4ed3e800000000000000082a850e79009e2905d2f98ba18f91f3c93686e9bee067f4e77d9ad6623805004100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9528c46178ed5f9192dae000e579c80eca35a58dc47d1d5e4ff6e216c724e88c70244858700", 0x28, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x8}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x5, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x2) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x4, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) 6m59.964242849s ago: executing program 2 (id=1316): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000014c0)=@req={0x10000, 0x7, 0xfffff001, 0x7f}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6m58.078693537s ago: executing program 2 (id=1317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 6m56.941448974s ago: executing program 2 (id=1318): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6m55.58132326s ago: executing program 2 (id=1320): r0 = gettid() r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m54.093417896s ago: executing program 2 (id=1321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x10000000b4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$negate(0xd, 0x0, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804175000000000000109022400010000c04009040000010300000009"], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r6 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r6, 0x40084149, &(0x7f0000000000)) 6m37.832151271s ago: executing program 38 (id=1321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x10000000b4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$negate(0xd, 0x0, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804175000000000000109022400010000c04009040000010300000009"], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r6 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r6, 0x40084149, &(0x7f0000000000)) 6m28.718123914s ago: executing program 39 (id=1324): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4m3.449415673s ago: executing program 5 (id=1426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 4m0.500979756s ago: executing program 5 (id=1430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = openat$vicodec1(0xffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xff, 0x0, 0x6}}]}}, 0x12) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x1, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x7, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x84, 0x8, 0x3, 0xa, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xd, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x3, 0x6, 0x10], 0x8}}, 0xffff0001}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0xa0440, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000200)=0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "ad25dda89a2d6247", "a2d292ffdfbb62a9a753a534ebf222dc", "975c82f5", "56eb855e20aa8db9"}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000001c0), 0x4) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @echo}}}}, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xf8, 0x6, "891de30604d153cedafd202227378b64379018b14d6196a0b8e33a04c80c91e7bfc6897fef9eece2a3b71e4b23ee1d83868e4fd85b51031328b7502a78bb488a6bb0c4b41e489f9617be228c8c81613be5a8aad2545f37719d29b01c7877edee0e407893297607a052d89d84943c02ba44b1d9cc71effc6409d07931c05764eba7548b06063342b5b209f5bd8d2570645973340a1afa7d1c3ca0b950ce3b9ba5e28752245f9df7bb0e76efd3840374b23abe51c4c30d12de9d490dcf78009f97e16debc4834707fa8da1556640ee36d5ef2b91747591c68d7912cd6cb2722c5aa48f3aa6413c2c58b1cfa51dc613c02a825e2b70"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x68, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x25c24fc8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5bca52c3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4faa387f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4383ce30}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe350}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x27, 0x6, "ef8e1044d255ea11e7c3da79ce157f0ee657837dec61aa4a2f822ce87b86691ec5a9ae"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x64, 0x6, "90efee97af8d7fab36564a829ea0d0f90fbe8e97ab45c765e4a3e2bf0d8f6bfed6bc4c9b10dc95acd757927f6d701234ccd8d5019f9aab55fdf6e86db2f26ce2662eb6ef888d4b74b1d9fb1afb721f7c40c56c87221f8baa04e81cf5ddb89ec3"}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0x6, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x210, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "910015c90350a319cd83b3885e887058800d4b444af79f801b50bd6068511c26354d1ee3d36178e50f8ed295f0b555db26fe6b9dee84b49dae20c9202bf21092ee09dd96325fa99ea7c773912018dd047c9590ad1cd523a8e31bd6b8760e4b7cce898ded9946c9e1427b5daf7908e76d6ef9b27b3cad11c67d0bf3fce0918e0cff885d521f967c1452acbc8a6c7a797895dce270a139c5222f07f3bbcc8a133aac8a53720115e95f9237b09474477ecc3b9f1702af43a919ccce5ff305ac703c505e0ca2436dc23455837d414e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xf5, 0x6, "d552642121e8b4fed6fbd2a6092f050006425bc39763e955c3ab325cf8130ab0ed0ff00f37a0043e1172d02d172b8713349004b79aff309878b909d3e1261128791c09d3e1a2e54880356143275fab923424db2f6f71547abc652a287022c5ee5aca4472f0234f49041ebf0999a403ffd06f0c4d22e737ea1c794c8c3a145023f8d55619a4f742348d1fbed46bec041a911a8f588fc7476f051628f26d6c0b5f3dd2b721f305af11b0d53cc243fc6b021b3452ddf79496d145bdaf60bcc72bd6d8cb864353a4fbe25b544a0be0110bfc25e29b1ba62175580e3312c611b77675dda7380580eab686feee802e1594c1d4e1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0xc4, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x97, 0x8, "6b2198aad30db514db263ab06b28d9e5ab62ac47bcf8e381469639231366832da1d00e791265a345bb0d14087c815bfd45c8a7bea44f3b9e773959d9f4ded6e4a71afee48f6f72d7dc86744217df6da3e8735db23b0a131987755d5f8ae336031499725cf03bb5ba9da4d7d5fc92945d6e3d204db9251293f1ee8810f09222513974eef0d075d7d5429a07dd48499309cbdac1"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x584}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) close_range(r1, r1, 0x0) 3m59.634537956s ago: executing program 5 (id=1435): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r5, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r6, 0x0, 0x0, 0x12141, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000000)={0x0, 0x7079, 0x8, 0x3, 0xa}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m55.935536758s ago: executing program 5 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_usb_connect(0x0, 0x63, &(0x7f0000000200)=ANY=[@ANYBLOB="120100005e05b14021040203e845000000010902"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x44040, 0x0) 3m49.492433603s ago: executing program 5 (id=1448): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x368}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m48.718234727s ago: executing program 5 (id=1453): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) connect$netlink(r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) 3m33.277972985s ago: executing program 40 (id=1453): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) connect$netlink(r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) 3m20.489553059s ago: executing program 1 (id=1513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = openat$vicodec1(0xffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xff, 0x0, 0x6}}]}}, 0x12) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x1, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x7, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x84, 0x8, 0x3, 0xa, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xd, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x3, 0x6, 0x10], 0x8}}, 0xffff0001}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0xa0440, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r3, 0x4004510f, &(0x7f0000000200)=0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "ad25dda89a2d6247", "a2d292ffdfbb62a9a753a534ebf222dc", "975c82f5", "56eb855e20aa8db9"}, 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0), 0x4) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @echo}}}}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xf8, 0x6, "891de30604d153cedafd202227378b64379018b14d6196a0b8e33a04c80c91e7bfc6897fef9eece2a3b71e4b23ee1d83868e4fd85b51031328b7502a78bb488a6bb0c4b41e489f9617be228c8c81613be5a8aad2545f37719d29b01c7877edee0e407893297607a052d89d84943c02ba44b1d9cc71effc6409d07931c05764eba7548b06063342b5b209f5bd8d2570645973340a1afa7d1c3ca0b950ce3b9ba5e28752245f9df7bb0e76efd3840374b23abe51c4c30d12de9d490dcf78009f97e16debc4834707fa8da1556640ee36d5ef2b91747591c68d7912cd6cb2722c5aa48f3aa6413c2c58b1cfa51dc613c02a825e2b70"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x68, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x25c24fc8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5bca52c3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4faa387f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4383ce30}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe350}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x27, 0x6, "ef8e1044d255ea11e7c3da79ce157f0ee657837dec61aa4a2f822ce87b86691ec5a9ae"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x64, 0x6, "90efee97af8d7fab36564a829ea0d0f90fbe8e97ab45c765e4a3e2bf0d8f6bfed6bc4c9b10dc95acd757927f6d701234ccd8d5019f9aab55fdf6e86db2f26ce2662eb6ef888d4b74b1d9fb1afb721f7c40c56c87221f8baa04e81cf5ddb89ec3"}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0x6, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x210, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "910015c90350a319cd83b3885e887058800d4b444af79f801b50bd6068511c26354d1ee3d36178e50f8ed295f0b555db26fe6b9dee84b49dae20c9202bf21092ee09dd96325fa99ea7c773912018dd047c9590ad1cd523a8e31bd6b8760e4b7cce898ded9946c9e1427b5daf7908e76d6ef9b27b3cad11c67d0bf3fce0918e0cff885d521f967c1452acbc8a6c7a797895dce270a139c5222f07f3bbcc8a133aac8a53720115e95f9237b09474477ecc3b9f1702af43a919ccce5ff305ac703c505e0ca2436dc23455837d414e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xf5, 0x6, "d552642121e8b4fed6fbd2a6092f050006425bc39763e955c3ab325cf8130ab0ed0ff00f37a0043e1172d02d172b8713349004b79aff309878b909d3e1261128791c09d3e1a2e54880356143275fab923424db2f6f71547abc652a287022c5ee5aca4472f0234f49041ebf0999a403ffd06f0c4d22e737ea1c794c8c3a145023f8d55619a4f742348d1fbed46bec041a911a8f588fc7476f051628f26d6c0b5f3dd2b721f305af11b0d53cc243fc6b021b3452ddf79496d145bdaf60bcc72bd6d8cb864353a4fbe25b544a0be0110bfc25e29b1ba62175580e3312c611b77675dda7380580eab686feee802e1594c1d4e1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0xc4, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x97, 0x8, "6b2198aad30db514db263ab06b28d9e5ab62ac47bcf8e381469639231366832da1d00e791265a345bb0d14087c815bfd45c8a7bea44f3b9e773959d9f4ded6e4a71afee48f6f72d7dc86744217df6da3e8735db23b0a131987755d5f8ae336031499725cf03bb5ba9da4d7d5fc92945d6e3d204db9251293f1ee8810f09222513974eef0d075d7d5429a07dd48499309cbdac1"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x584}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) close_range(r2, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x37}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 3m19.352886571s ago: executing program 1 (id=1515): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x200) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) pwrite64(r2, &(0x7f0000000000)="11", 0x1, 0x4) 3m17.951732671s ago: executing program 1 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_RANDOM_ADDR={{0x8}, 0xc}}}, 0x7) 3m14.324771914s ago: executing program 1 (id=1526): socket$xdp(0x2c, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa6181, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$revoke(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/114}, {&(0x7f00000004c0)=""/225}], 0x0, &(0x7f0000000600)=""/231}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2}, {&(0x7f0000000780)=""/203}, {&(0x7f0000002480)=""/4096}, {&(0x7f0000000880)}, {&(0x7f0000000880)=""/41}, {&(0x7f0000000900)=""/232}, {&(0x7f0000000a00)=""/32}, {&(0x7f0000000a40)=""/47}], 0x0, &(0x7f0000000b00)=""/234}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/125}]}, 0xc}], 0x24, 0x60010020, 0x0) 3m10.056448595s ago: executing program 1 (id=1530): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$netlink(0x10, 0x3, 0x0) ptrace$getregset(0x4205, r1, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000c40341906079ee20102030109025ea0f3"], 0x0) 3m6.925131346s ago: executing program 1 (id=1534): syz_open_pts(0xffffffffffffffff, 0x290982) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000001) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000680)=""/95, 0x5f}, 0x100) socket$kcm(0x21, 0x2, 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) 3m2.816877007s ago: executing program 8 (id=1538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x13, 0x6, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x31863}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 2m59.302309792s ago: executing program 8 (id=1539): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/114}, {&(0x7f00000004c0)=""/225}], 0x0, &(0x7f0000000600)=""/231}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2}, {&(0x7f0000000780)=""/203}, {&(0x7f0000002480)=""/4096}, {&(0x7f0000000880)}, {&(0x7f0000000880)=""/41}, {&(0x7f0000000900)=""/232}, {&(0x7f0000000a00)=""/32}, {&(0x7f0000000a40)=""/47}], 0x0, &(0x7f0000000b00)=""/234}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/125}]}, 0xc}], 0x24, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2m58.2825059s ago: executing program 8 (id=1542): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000)) chdir(0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 2m54.42757783s ago: executing program 8 (id=1545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x1004}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000000c0)="bc1a75676456edbbfc788a5afb01c6332a87ab6065a0c50428a3218c6cfcd179765a9e6ae1babcb28fc7f2d70b1e5c031501eb9d0aeda7e459ca376737f06594d17baf6a10dd3c7d4f31e88ba4f35f6bf9b8e543", 0x54}, {&(0x7f00000002c0)="3fd928774f1e7b006a37737000e743ab4c7c0fe9f7a405454ebfeeee1ef475b3ea97c43cd4e149469dab9fa027da3f4d6aaaa664f3d83b0b51cfbf1f1bd86a305b0eb370762897536169c71cc12a32680ae53bf1533988eee6982cee6820479ca540a54684ef81d0ffde114640206e4a1563dbd731e3942b4b8d8837155262a4b437c926fa0c3c498bf4efc2ade80426d22086b74b15e768a1d2e902cf23b8d5d8306b01eb3b54766720918328c72dd7ef93228a858ffe983b4a2f3a306a1d35b1ba3af7eafa0e8cbab0866db12a", 0xce}, {&(0x7f0000001780)="27c27874ec93bc84bb2e03fa7022d88594d7cba6eb1ccc1d95d04914304dee3678cfc7461cf98ee731579bf65f5d784ba300d2b2c822da2c269db5b8f45e4f106dddb534cc983e4a2d9fb93ded044c72f83443661526989ec3cd", 0x5a}, {&(0x7f0000000540)="092fe0e73e5abfd8628d591d4cee47bea9011d4264a82f5b7616aeb56510c0036705e871c1e5a6ea02dcce26835a956a5a4376fec945839deecc513e3628d7fd9a2ef4bd6ed305a47cdd711316be2c51fa3051f35e552d5397dce824194b1722eee4e0f352e52f2272744a59529633936893e2e1ffca984de58a6e6f3b15f6b08e6372a9ae77d6066a4fcc4711d933f78996288bc265e838fe3bff34121b5d46b2704f6c3135cfa3f57e3be83fbe356b844ebf2096c9cd469106fd2f84bd4e9f9a4d4a02a6bf004c4d196cbc2e5bcdb439838a4721f0ef90e361e628e9af47", 0xdf}, {&(0x7f0000000180)="2b1393c831ca55d119fa0d4fe72bb77dc9ac587ac022", 0x16}, {&(0x7f0000000640)="146407f12e53981eeda89f53439fcadcd860e201763f742899cd81d850a7a16682949c0dc2bf133891b2658f7206c292bd9e5db5c549b6c4d65fe0d91c9dec739362583bdfb0f7ef159ff01fc2ea5876f8a229011308ecfeb4dd8aab70d4d8ec25838de6c4a45b991910207f60bba1c124166c85a010d47c0de2ba0576be17b4f09fd785b4636772f32740eb0698fbed4a476cf98adb", 0x96}, {&(0x7f0000000700)="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", 0x291}], 0x7}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) 2m51.461207876s ago: executing program 41 (id=1534): syz_open_pts(0xffffffffffffffff, 0x290982) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000001) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000680)=""/95, 0x5f}, 0x100) socket$kcm(0x21, 0x2, 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) 2m49.769268079s ago: executing program 8 (id=1551): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/114}, {&(0x7f00000004c0)=""/225}], 0x0, &(0x7f0000000600)=""/231}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2}, {&(0x7f0000000780)=""/203}, {&(0x7f0000002480)=""/4096}, {&(0x7f0000000880)}, {&(0x7f0000000880)=""/41}, {&(0x7f0000000900)=""/232}, {&(0x7f0000000a00)=""/32}, {&(0x7f0000000a40)=""/47}], 0x0, &(0x7f0000000b00)=""/234}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/125}]}, 0xc}], 0x24, 0x60010020, 0x0) 2m47.996092521s ago: executing program 8 (id=1554): r0 = epoll_create1(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 2m32.592691272s ago: executing program 42 (id=1554): r0 = epoll_create1(0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 2m6.236284078s ago: executing program 0 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 2m1.661063758s ago: executing program 0 (id=1604): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = memfd_secret(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) dup3(r4, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1m57.564218047s ago: executing program 0 (id=1609): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m54.955939662s ago: executing program 0 (id=1612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xa, 0x6}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m48.670462705s ago: executing program 0 (id=1616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1m47.581046003s ago: executing program 0 (id=1619): r0 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1m33.629549459s ago: executing program 3 (id=1649): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$netlink(0x10, 0x3, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0xffdd) 1m32.711652635s ago: executing program 3 (id=1651): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/114}, {&(0x7f00000004c0)=""/225}], 0x0, &(0x7f0000000600)=""/231}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2}, {&(0x7f0000000780)=""/203}, {&(0x7f0000002480)=""/4096}, {&(0x7f0000000880)}, {&(0x7f0000000880)=""/41}, {&(0x7f0000000900)=""/232}, {&(0x7f0000000a00)=""/32}, {&(0x7f0000000a40)=""/47}], 0x0, &(0x7f0000000b00)=""/234}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/125}]}, 0xc}], 0x24, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1m31.753620444s ago: executing program 43 (id=1619): r0 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1m31.422091099s ago: executing program 3 (id=1655): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 1m30.081450636s ago: executing program 3 (id=1657): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000480)={0xb83, 0x0, 'client1\x00', 0x80000004, "a59a30c38c2b425b", "df7feec7ee912651257de4bb310a59bae3a17fb2339a2a6725e06ea332a2a6e8", 0x9, 0x80000001}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m27.642996542s ago: executing program 3 (id=1659): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x40030000000000}, 0x0) 1m26.257471777s ago: executing program 3 (id=1661): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40c4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1m10.660555361s ago: executing program 44 (id=1661): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40c4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 1m7.52784662s ago: executing program 6 (id=1677): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000480)={0xb83, 0x0, 'client1\x00', 0x80000004, "a59a30c38c2b425b", "df7feec7ee912651257de4bb310a59bae3a17fb2339a2a6725e06ea332a2a6e8", 0x9, 0x80000001}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m6.372941917s ago: executing program 6 (id=1679): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 1m0.446804186s ago: executing program 6 (id=1682): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)=""/114}, {&(0x7f00000004c0)=""/225}], 0x0, &(0x7f0000000600)=""/231}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2}, {&(0x7f0000000780)=""/203}, {&(0x7f0000002480)=""/4096}, {&(0x7f0000000880)}, {&(0x7f0000000880)=""/41}, {&(0x7f0000000900)=""/232}, {&(0x7f0000000a00)=""/32}, {&(0x7f0000000a40)=""/47}], 0x0, &(0x7f0000000b00)=""/234}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/125}]}, 0xc}], 0x24, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 58.577741373s ago: executing program 6 (id=1685): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 57.815642954s ago: executing program 6 (id=1686): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000480)={0xb83, 0x0, 'client1\x00', 0x80000004, "a59a30c38c2b425b", "df7feec7ee912651257de4bb310a59bae3a17fb2339a2a6725e06ea332a2a6e8", 0x9, 0x80000001}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 56.388487739s ago: executing program 6 (id=1688): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, 0x0, 0x0}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x80801) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 40.425115406s ago: executing program 45 (id=1688): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, 0x0, 0x0}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x80801) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 10.918325074s ago: executing program 7 (id=1709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x7a0b, @local, @loopback}}}}, 0x3e) 9.717174221s ago: executing program 9 (id=1711): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$eJzs3b1v004YwPHnnKRNf636c19QJcZCJSYEZUEsRah/BAMgShOkqlGR2iJRFipmhNh42RjYmBELI3sFM4KJib3djO45O3WpfU6aNm7g+5ESufHd+TnbsZ+L5J4A+GfdWPz+7spP+zIiFamIyDWRQETqIlUROSMz9YdrmyubrWbD11BFa9iXEVfTHCqzvNbMqmrraY1YaP+qylj6M5yMKIqiH18r/jL/9y0clES//RkCkeH426nr632P7GRslx1Aycye7MkjGS87DgBAuez9v+YSf3ufH4vz9yAQmYtv+wN2//dnrXv9C+RUSt3/dZQVGXt8dZeZ/fGeDuHs+iAZJXpazF0zJC6RPJBgmqJRpcYSjNxfaTUvLj9oNQJ5KguxVLFpfW+4UzdREO2sJ9gMxX3Poz0OarYP8znxTx1liy+7D6VtNzI75o4J5Y002vlfNdI9okcq1LjDdgUX/6X8FkftmzFaKqeXE7qRs/EW5OP7DnpZzx6RtOOcSE7dJ+7DMInzxZCn1qQc/FnB9e5yfu+01lRmrfmCWtPpWvGVMz6b82seXU63/2Cem5tmVn7JB1lM5f+B3dtzWiDZ7Z4gjZaMzwxvf6paMuwgsKCj8NGpmnftM7knV2V8Y+vx6lKr1VzvdOHTty4KH9fC67duodJLO0nPD62qSq8RRsOu6ZPaCb1H2MlCcsL08eAmx6TvZ1TJC9JzOxUZltXkmnlsgcWHY3t1qeWWshOlkV6uSzhFUpfHmVtlB4My2GuIceM/zeRdVndd19mvf6h5ek2y8vSoqHFt8dXtHTd8SI0N9pPVSX3/r6sR3Gj+CC7VB++Y69wFkfOeLX4+2GwYx/mXMIvyRe7y+z8AAAAAAAAAAAAAAAAAAMCgKXwwYDda39iKH2854pMhJXcRAAAAAAAAAAAAAAAAAAAAAICB55v/V+fILJj/N3kyIH/+39R/9S6e/3fBNpQz/69/kloAXfsdAAD//7rQb18=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x7, 0x1}}, 0x30) 8.932432874s ago: executing program 9 (id=1712): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 8.931884212s ago: executing program 7 (id=1713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) write$FUSE_LSEEK(r2, &(0x7f0000000600)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) close_range(r0, r2, 0x0) 7.932018252s ago: executing program 7 (id=1714): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r0}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000180)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(0xffffffffffffffff, &(0x7f0000000000)=""/237, 0xed) 7.395612501s ago: executing program 9 (id=1715): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x80, 0x3, 0x196}, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0xa2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0xa000000a}) finit_module(r1, 0x0, 0x3) 7.116905003s ago: executing program 7 (id=1716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001500)="b2", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b|', 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000700)="2dc7", 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000800)="ce90", 0x2}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f00000015c0)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000005c0)='X;', 0x2}, {&(0x7f0000001c80)=')', 0x1}, {&(0x7f00000002c0)="f2", 0x1}, {0x0}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000014c0)='\x00', 0x1}, {&(0x7f0000001540)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x3}}], 0x4, 0x4000000) 6.510153471s ago: executing program 7 (id=1717): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) 5.743141604s ago: executing program 9 (id=1718): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.44037203s ago: executing program 9 (id=1719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.109927414s ago: executing program 7 (id=1720): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xd, 0x6f5, &(0x7f0000001f80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) 0s ago: executing program 9 (id=1721): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x80882) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r0, 0x7fffffff, &(0x7f0000000500)=[{&(0x7f0000000580)="96", 0x1}], 0x1, 0x10, 0x1, {0x2}}) io_uring_enter(r1, 0x847ba, 0x0, 0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): 10521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 926.497386][ T35] IPVS: stop unused estimator thread 0... [ 926.866305][T10549] hsr_slave_0: entered promiscuous mode [ 926.880965][T10549] hsr_slave_1: entered promiscuous mode [ 926.890118][T10549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.898201][T10549] Cannot create hsr debugfs directory [ 926.915843][T10528] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 927.033187][T10528] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 927.308278][T10528] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 927.487069][T10528] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 927.774205][T10497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.368373][T10503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.556068][ T35] bridge_slave_1: left allmulticast mode [ 928.562445][ T35] bridge_slave_1: left promiscuous mode [ 928.569197][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.647017][ T35] bridge_slave_0: left allmulticast mode [ 928.655151][ T35] bridge_slave_0: left promiscuous mode [ 928.667320][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.204452][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.253305][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.276857][ T35] bond0 (unregistering): Released all slaves [ 929.578147][ T35] hsr_slave_0: left promiscuous mode [ 929.612342][ T35] hsr_slave_1: left promiscuous mode [ 929.620485][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.675683][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.762818][ T35] veth1_vlan: left promiscuous mode [ 929.768544][ T35] veth0_vlan: left promiscuous mode [ 930.489539][ T35] team0 (unregistering): Port device team_slave_1 removed [ 930.517490][ T35] team0 (unregistering): Port device team_slave_0 removed [ 931.134049][T10521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.537297][T10521] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.765977][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.773746][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.968554][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.976433][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.137627][T10528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.319116][T10549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 932.436256][T10549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 932.473632][T10549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 932.609913][T10503] veth0_vlan: entered promiscuous mode [ 932.623811][T10528] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.633008][T10549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 932.711159][T10497] veth0_vlan: entered promiscuous mode [ 932.760964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.768766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.803484][T10503] veth1_vlan: entered promiscuous mode [ 932.867768][T10497] veth1_vlan: entered promiscuous mode [ 932.953437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.961099][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.388871][T10497] veth0_macvtap: entered promiscuous mode [ 933.427287][T10503] veth0_macvtap: entered promiscuous mode [ 933.496975][T10497] veth1_macvtap: entered promiscuous mode [ 933.557384][T10503] veth1_macvtap: entered promiscuous mode [ 933.726230][T10497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.868257][T10497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.890529][T10503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.005319][T10503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.033663][T10497] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.043013][T10497] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.052214][T10497] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.061276][T10497] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.157417][T10503] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.166853][T10503] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.176187][T10503] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.186490][T10503] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.448084][T10549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.714542][T10549] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.829485][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.837286][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.949284][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.957084][ T8702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.622129][T10521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.930382][T10528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.284977][T10521] veth0_vlan: entered promiscuous mode [ 936.420045][T10521] veth1_vlan: entered promiscuous mode [ 936.935846][T10521] veth0_macvtap: entered promiscuous mode [ 937.036811][T10521] veth1_macvtap: entered promiscuous mode [ 937.207115][T10521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.338366][T10521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.466417][T10521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.475773][T10521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.485143][T10521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.494962][T10521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.085384][T10549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.789930][T10549] veth0_vlan: entered promiscuous mode [ 938.979378][T10549] veth1_vlan: entered promiscuous mode [ 939.485733][T10549] veth0_macvtap: entered promiscuous mode [ 939.599858][T10549] veth1_macvtap: entered promiscuous mode [ 939.827682][T10528] veth0_vlan: entered promiscuous mode [ 940.001087][T10528] veth1_vlan: entered promiscuous mode [ 940.051444][T10549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.156821][T10549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.416657][T10549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.428443][T10549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.441273][T10549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.450582][T10549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.504365][T10528] veth0_macvtap: entered promiscuous mode [ 940.671455][T10528] veth1_macvtap: entered promiscuous mode [ 940.674778][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 940.709104][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 940.725941][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 940.749227][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 940.761538][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.389360][T10528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.600907][T10528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.722356][T10528] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.731531][T10528] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.740863][T10528] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.750173][T10528] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.227174][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 942.273901][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 942.285026][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 942.347570][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 942.359308][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 942.863850][ T49] Bluetooth: hci2: command tx timeout [ 943.351016][T10660] chnl_net:caif_netlink_parms(): no params data found [ 944.329886][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.587572][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.714204][ T49] Bluetooth: hci3: command tx timeout [ 944.858149][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.903240][ T49] Bluetooth: hci2: command tx timeout [ 945.099595][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.459382][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.470933][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.480660][T10660] bridge_slave_0: entered allmulticast mode [ 945.491795][T10660] bridge_slave_0: entered promiscuous mode [ 945.507555][T10675] chnl_net:caif_netlink_parms(): no params data found [ 945.631612][T10660] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.639545][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.647786][T10660] bridge_slave_1: entered allmulticast mode [ 945.658012][T10660] bridge_slave_1: entered promiscuous mode [ 946.391605][ T12] bridge_slave_1: left allmulticast mode [ 946.398695][ T12] bridge_slave_1: left promiscuous mode [ 946.407227][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.449434][ T12] bridge_slave_0: left allmulticast mode [ 946.456640][ T12] bridge_slave_0: left promiscuous mode [ 946.463721][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.773877][ T49] Bluetooth: hci3: command tx timeout [ 946.995367][ T49] Bluetooth: hci2: command tx timeout [ 947.017388][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.050642][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.067854][ T12] bond0 (unregistering): Released all slaves [ 947.111262][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.215468][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.619608][ T12] hsr_slave_0: left promiscuous mode [ 947.662265][ T12] hsr_slave_1: left promiscuous mode [ 947.670534][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.680113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.747263][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.757022][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.871457][ T12] veth1_macvtap: left promiscuous mode [ 947.877555][ T12] veth0_macvtap: left promiscuous mode [ 947.883820][ T12] veth1_vlan: left promiscuous mode [ 947.889503][ T12] veth0_vlan: left promiscuous mode [ 948.735979][ T12] team0 (unregistering): Port device team_slave_1 removed [ 948.825662][ T49] Bluetooth: hci3: command tx timeout [ 948.844917][ T12] team0 (unregistering): Port device team_slave_0 removed [ 949.062688][ T49] Bluetooth: hci2: command tx timeout [ 949.376290][T10660] team0: Port device team_slave_0 added [ 949.537355][T10660] team0: Port device team_slave_1 added [ 949.973300][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 950.000718][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 950.063306][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 950.127314][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.135833][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 950.135822][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.136157][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.273036][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 950.399078][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.406630][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.435424][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.464093][T10675] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.471749][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.479890][T10675] bridge_slave_0: entered allmulticast mode [ 950.490426][T10675] bridge_slave_0: entered promiscuous mode [ 950.688376][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.696524][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.707277][T10675] bridge_slave_1: entered allmulticast mode [ 950.717226][T10675] bridge_slave_1: entered promiscuous mode [ 950.913305][ T49] Bluetooth: hci3: command tx timeout [ 951.260250][T10660] hsr_slave_0: entered promiscuous mode [ 951.271348][T10660] hsr_slave_1: entered promiscuous mode [ 951.511068][T10675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.798765][T10675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.847869][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.119062][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.368335][ T49] Bluetooth: hci5: command tx timeout [ 952.397656][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.492804][T10675] team0: Port device team_slave_0 added [ 952.543799][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.680080][T10675] team0: Port device team_slave_1 added [ 952.733473][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.741652][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.438067][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.446424][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.484063][T10675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.491331][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.519252][T10675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.835518][T10675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.843215][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.869951][T10675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.994830][ T12] bridge_slave_1: left allmulticast mode [ 954.000806][ T12] bridge_slave_1: left promiscuous mode [ 954.007851][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.143086][ T12] bridge_slave_0: left allmulticast mode [ 954.149064][ T12] bridge_slave_0: left promiscuous mode [ 954.156338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.462303][ T49] Bluetooth: hci5: command tx timeout [ 954.491270][T10782] overlayfs: failed to resolve './file2': -2 [ 954.665859][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.743489][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.839670][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.874517][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.883702][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.919407][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 954.993342][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.028196][ T12] bond0 (unregistering): Released all slaves [ 955.364346][T10748] chnl_net:caif_netlink_parms(): no params data found [ 955.442104][ T12] hsr_slave_0: left promiscuous mode [ 955.464660][ T12] hsr_slave_1: left promiscuous mode [ 955.474606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.482658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.512427][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.520380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.586326][ T12] veth1_macvtap: left promiscuous mode [ 955.595553][ T12] veth0_macvtap: left promiscuous mode [ 955.601579][ T12] veth1_vlan: left promiscuous mode [ 955.609982][ T12] veth0_vlan: left promiscuous mode [ 956.388969][ T12] team0 (unregistering): Port device team_slave_1 removed [ 956.457485][ T12] team0 (unregistering): Port device team_slave_0 removed [ 956.502596][ T49] Bluetooth: hci5: command tx timeout [ 957.113653][ T49] Bluetooth: hci4: command tx timeout [ 957.465189][ T30] audit: type=1326 audit(1753531948.722:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9d658e9a9 code=0x0 [ 957.532874][T10675] hsr_slave_0: entered promiscuous mode [ 957.543861][T10675] hsr_slave_1: entered promiscuous mode [ 957.553220][T10675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.561102][T10675] Cannot create hsr debugfs directory [ 958.401046][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.589609][ T49] Bluetooth: hci5: command tx timeout [ 958.593919][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.712695][T10660] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 958.870196][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.043498][T10660] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 959.143367][ T49] Bluetooth: hci4: command tx timeout [ 959.186785][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.350467][T10660] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 959.531113][T10748] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.538966][T10748] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.547176][T10748] bridge_slave_0: entered allmulticast mode [ 959.558084][T10748] bridge_slave_0: entered promiscuous mode [ 959.692701][T10660] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 959.747422][T10748] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.756497][T10748] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.764742][T10748] bridge_slave_1: entered allmulticast mode [ 959.774902][T10748] bridge_slave_1: entered promiscuous mode [ 959.846868][T10813] loop1: detected capacity change from 0 to 512 [ 959.869129][T10813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 960.032053][T10813] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1330: invalid indirect mapped block 83886080 (level 1) [ 960.057402][T10813] EXT4-fs (loop1): Remounting filesystem read-only [ 960.069565][T10813] EXT4-fs (loop1): 1 orphan inode deleted [ 960.076015][T10813] EXT4-fs (loop1): 1 truncate cleaned up [ 960.084885][T10813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.252972][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.304576][T10549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.456018][T10783] chnl_net:caif_netlink_parms(): no params data found [ 960.547751][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.633128][T10748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.860528][T10748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.413676][ T49] Bluetooth: hci4: command tx timeout [ 961.459873][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.633748][ T49] Bluetooth: hci4: command tx timeout [ 965.133703][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.168782][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 965.218872][T10748] team0: Port device team_slave_0 added [ 965.328017][T10748] team0: Port device team_slave_1 added [ 965.764176][T10748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.771383][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.804905][T10748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.076341][T10748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.083889][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.110688][T10748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.195149][ T12] bridge_slave_1: left allmulticast mode [ 966.201134][ T12] bridge_slave_1: left promiscuous mode [ 966.208376][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.227132][ T12] bridge_slave_0: left allmulticast mode [ 966.233249][ T12] bridge_slave_0: left promiscuous mode [ 966.240009][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.318256][ T12] bridge_slave_1: left allmulticast mode [ 966.324474][ T12] bridge_slave_1: left promiscuous mode [ 966.331279][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.411189][ T12] bridge_slave_0: left allmulticast mode [ 966.417533][ T12] bridge_slave_0: left promiscuous mode [ 966.427240][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.103285][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.110086][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.224305][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.294906][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.329256][ T12] bond0 (unregistering): Released all slaves [ 967.894079][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.936432][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.977719][ T12] bond0 (unregistering): Released all slaves [ 968.298191][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.511335][T10675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 969.612563][ T12] hsr_slave_0: left promiscuous mode [ 969.661606][ T12] hsr_slave_1: left promiscuous mode [ 969.670514][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.678722][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.767132][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.775475][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.915206][ T12] hsr_slave_0: left promiscuous mode [ 969.962750][ T12] hsr_slave_1: left promiscuous mode [ 969.971222][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.980124][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.047727][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.057295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.243979][ T12] veth1_macvtap: left promiscuous mode [ 970.249832][ T12] veth0_macvtap: left promiscuous mode [ 970.256993][ T12] veth1_vlan: left promiscuous mode [ 970.267534][ T12] veth0_vlan: left promiscuous mode [ 970.350776][ T12] veth1_macvtap: left promiscuous mode [ 970.357417][ T12] veth0_macvtap: left promiscuous mode [ 970.363828][ T12] veth1_vlan: left promiscuous mode [ 970.369480][ T12] veth0_vlan: left promiscuous mode [ 971.810053][ T12] team0 (unregistering): Port device team_slave_1 removed [ 971.925620][ T12] team0 (unregistering): Port device team_slave_0 removed [ 972.765269][ T12] team0 (unregistering): Port device team_slave_1 removed [ 972.797507][ T12] team0 (unregistering): Port device team_slave_0 removed [ 973.277915][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.285718][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.293774][T10783] bridge_slave_0: entered allmulticast mode [ 973.303545][T10783] bridge_slave_0: entered promiscuous mode [ 973.352884][T10675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 973.531305][T10870] loop1: detected capacity change from 0 to 512 [ 973.563205][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.570876][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.578840][T10783] bridge_slave_1: entered allmulticast mode [ 973.589938][T10783] bridge_slave_1: entered promiscuous mode [ 973.610119][T10675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 973.633056][T10870] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 973.688951][T10870] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1337: invalid indirect mapped block 83886080 (level 1) [ 973.750034][T10870] EXT4-fs (loop1): Remounting filesystem read-only [ 973.761740][T10870] EXT4-fs (loop1): 1 orphan inode deleted [ 973.768077][T10870] EXT4-fs (loop1): 1 truncate cleaned up [ 973.778549][T10870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.816835][T10748] hsr_slave_0: entered promiscuous mode [ 973.827407][T10748] hsr_slave_1: entered promiscuous mode [ 973.839678][T10748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 973.847725][T10748] Cannot create hsr debugfs directory [ 973.898793][T10549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.908120][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.987783][T10675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 974.072025][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.079671][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.103916][T10783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.364716][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.372565][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.412878][T10783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.825870][T10783] team0: Port device team_slave_0 added [ 974.953045][T10783] team0: Port device team_slave_1 added [ 975.239763][T10783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.247570][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.274459][T10783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.576825][T10783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.584296][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.611098][T10783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.307500][T10783] hsr_slave_0: entered promiscuous mode [ 976.319779][T10783] hsr_slave_1: entered promiscuous mode [ 976.329227][T10783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 976.337343][T10783] Cannot create hsr debugfs directory [ 977.792714][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.227078][T10675] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.459231][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.467014][T10308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.591570][T10748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 978.711676][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.719607][T10308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.869026][T10748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 979.052439][T10748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 979.381776][T10748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 980.010606][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.423059][ T30] audit: type=1800 audit(1753531971.682:149): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1342" name="bus" dev="overlay" ino=110 res=0 errno=0 [ 980.788679][T10783] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 981.096813][T10783] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 981.127905][T10783] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 981.194858][T10783] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 981.760794][T10920] loop1: detected capacity change from 0 to 1024 [ 981.844931][T10920] EXT4-fs: Ignoring removed orlov option [ 982.036685][T10748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.108790][T10748] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.135160][T10920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.206099][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.213837][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.230259][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.238019][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.440234][T10920] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1343: Abort forced by user [ 982.473295][T10920] EXT4-fs (loop1): Remounting filesystem read-only [ 982.480399][T10920] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 982.658039][T10675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.969583][T10549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.983321][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.246730][T10783] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.400082][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.407893][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.555775][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.563556][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.678856][T10937] loop1: detected capacity change from 0 to 512 [ 983.802937][T10937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 983.947646][T10937] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1344: invalid indirect mapped block 83886080 (level 1) [ 983.999251][T10660] veth0_vlan: entered promiscuous mode [ 984.081092][T10937] EXT4-fs (loop1): Remounting filesystem read-only [ 984.121236][T10937] EXT4-fs (loop1): 1 orphan inode deleted [ 984.127718][T10937] EXT4-fs (loop1): 1 truncate cleaned up [ 984.136242][T10937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.251795][T10660] veth1_vlan: entered promiscuous mode [ 984.648642][T10549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.808950][T10660] veth0_macvtap: entered promiscuous mode [ 984.890263][T10660] veth1_macvtap: entered promiscuous mode [ 985.175539][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.295620][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.357228][T10748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.487767][T10660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.497246][T10660] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.507281][T10660] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.516488][T10660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.119310][T10748] veth0_vlan: entered promiscuous mode [ 986.340071][T10748] veth1_vlan: entered promiscuous mode [ 986.639297][T10675] veth0_vlan: entered promiscuous mode [ 986.771694][T10675] veth1_vlan: entered promiscuous mode [ 986.928943][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.005957][T10748] veth0_macvtap: entered promiscuous mode [ 987.089709][T10748] veth1_macvtap: entered promiscuous mode [ 987.262338][T10675] veth0_macvtap: entered promiscuous mode [ 987.338913][T10748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.406293][T10675] veth1_macvtap: entered promiscuous mode [ 987.469229][T10748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.643258][T10748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.653503][T10748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.663371][T10748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.672783][T10748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.754506][T10675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.849160][T10675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.983743][T10675] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.996118][T10675] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.005508][T10675] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.014761][T10675] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.631710][T10783] veth0_vlan: entered promiscuous mode [ 990.735348][T10783] veth1_vlan: entered promiscuous mode [ 991.089900][T10783] veth0_macvtap: entered promiscuous mode [ 991.193443][T10783] veth1_macvtap: entered promiscuous mode [ 991.418279][T10783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.554550][T10783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.641247][T10783] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.654480][T10783] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.664674][T10783] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.673950][T10783] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.854778][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.863216][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.166319][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.174998][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.470918][T11056] loop1: detected capacity change from 0 to 512 [ 995.585786][T11056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 995.717363][T11056] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1351: invalid indirect mapped block 83886080 (level 1) [ 995.758008][T11056] EXT4-fs (loop1): Remounting filesystem read-only [ 995.832839][T11056] EXT4-fs (loop1): 1 orphan inode deleted [ 995.838902][T11056] EXT4-fs (loop1): 1 truncate cleaned up [ 995.847571][T11056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.363782][T10549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.935135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.943977][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.132736][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.141000][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.480058][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.489066][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.565975][ T4071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.578101][ T4071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.041222][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 1001.112773][T11109] input: syz1 as /devices/virtual/input/input9 [ 1001.389807][T11111] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1359'. [ 1003.937873][T10308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.949220][T10308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.338231][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.347216][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.644152][T11152] netlink: 27 bytes leftover after parsing attributes in process `syz.8.1371'. [ 1005.587731][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 1010.044935][T11178] sctp: failed to load transform for md5: -2 [ 1012.568238][T11205] loop8: detected capacity change from 0 to 512 [ 1012.711343][T11205] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1012.976195][T11205] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1384: invalid indirect mapped block 83886080 (level 1) [ 1013.029814][ T9694] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1013.175227][T11205] EXT4-fs (loop8): Remounting filesystem read-only [ 1013.240281][T11205] EXT4-fs (loop8): 1 orphan inode deleted [ 1013.247113][T11205] EXT4-fs (loop8): 1 truncate cleaned up [ 1013.256797][T11205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.332695][ T9694] usb 4-1: Using ep0 maxpacket: 16 [ 1013.378834][ T9694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.394291][ T9694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.404827][ T9694] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1013.418317][ T9694] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1013.428125][ T9694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.938139][ T9694] usb 4-1: config 0 descriptor?? [ 1014.612757][T10660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.634168][ T9694] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 1014.690678][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.707413][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.715214][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.723154][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.730844][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.739089][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.747037][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.755001][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.762776][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1014.770783][ T9694] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 1016.181622][ T9694] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input10 [ 1017.845184][ T9694] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1019.099004][ T9694] usb 4-1: USB disconnect, device number 9 [ 1022.081718][T11253] loop5: detected capacity change from 0 to 512 [ 1022.162623][T11253] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1022.449533][T11253] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1399: invalid indirect mapped block 83886080 (level 1) [ 1022.514646][T11253] EXT4-fs (loop5): Remounting filesystem read-only [ 1022.612486][T11253] EXT4-fs (loop5): 1 orphan inode deleted [ 1022.618750][T11253] EXT4-fs (loop5): 1 truncate cleaned up [ 1022.627552][T11253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.845479][T11251] fido_id[11251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1023.162593][T11257] sctp: failed to load transform for md5: -2 [ 1023.392468][T10675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.801680][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.808602][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1031.054990][T11320] sctp: failed to load transform for md5: -2 [ 1035.627960][ T30] audit: type=1800 audit(1753532026.532:150): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1427" name="bus" dev="overlay" ino=91 res=0 errno=0 [ 1041.305468][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1042.332780][ T9694] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1042.666318][ T9694] usb 6-1: config 0 has no interfaces? [ 1042.672478][ T9694] usb 6-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 1042.682229][ T9694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.981291][ T9694] usb 6-1: config 0 descriptor?? [ 1047.034963][T10085] usb 6-1: USB disconnect, device number 4 [ 1048.355306][T11426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1053.629717][T11458] sctp: failed to load transform for md5: -2 [ 1054.532430][ T9694] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1054.792286][ T9694] usb 4-1: config index 0 descriptor too short (expected 41054, got 18) [ 1054.801023][ T9694] usb 4-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1054.810555][ T9694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.821520][ T9694] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1054.964688][ T9694] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1054.975133][ T9694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.983805][ T9694] usb 4-1: Product: syz [ 1054.988266][ T9694] usb 4-1: Manufacturer: syz [ 1054.993337][ T9694] usb 4-1: SerialNumber: syz [ 1055.132379][ T9694] usb 4-1: config 0 descriptor?? [ 1055.396538][ T9694] usb 4-1: USB disconnect, device number 10 [ 1061.295329][ T5813] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1061.323101][ T9694] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1061.564896][ T9694] usb 9-1: config index 0 descriptor too short (expected 41054, got 18) [ 1061.574162][ T9694] usb 9-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1061.583488][ T9694] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.598284][ T9694] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1061.983501][ T9694] usb 9-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1061.993626][ T9694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.005620][ T9694] usb 9-1: Product: syz [ 1062.010101][ T9694] usb 9-1: Manufacturer: syz [ 1062.016320][ T9694] usb 9-1: SerialNumber: syz [ 1062.380675][ T9694] usb 9-1: config 0 descriptor?? [ 1062.683361][ T5863] usb 9-1: USB disconnect, device number 2 [ 1062.948394][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.957784][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.553775][ T9498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1065.573537][ T9498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1065.598511][ T9498] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1065.665414][ T9498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1065.698905][ T9498] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1065.913951][ T9498] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1066.492194][ T9498] Bluetooth: hci2: command 0x0406 tx timeout [ 1066.498565][ T9498] Bluetooth: hci3: command 0x0406 tx timeout [ 1067.572713][ T5863] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1067.782343][ T5813] Bluetooth: hci0: command tx timeout [ 1067.878922][ T5863] usb 10-1: config index 0 descriptor too short (expected 41054, got 18) [ 1067.888193][ T5863] usb 10-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1067.897800][ T5863] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.908498][ T5863] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1068.078567][T11575] chnl_net:caif_netlink_parms(): no params data found [ 1068.155121][ T5863] usb 10-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1068.164903][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.173653][ T5863] usb 10-1: Product: syz [ 1068.178194][ T5863] usb 10-1: Manufacturer: syz [ 1068.184148][ T5863] usb 10-1: SerialNumber: syz [ 1068.399819][ T5863] usb 10-1: config 0 descriptor?? [ 1068.622495][ T5863] usb 10-1: USB disconnect, device number 2 [ 1069.635162][ T4292] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1069.863683][ T5813] Bluetooth: hci0: command tx timeout [ 1070.513696][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'. [ 1070.549529][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.558997][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.567598][T11575] bridge_slave_0: entered allmulticast mode [ 1070.578121][T11575] bridge_slave_0: entered promiscuous mode [ 1070.827720][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.839885][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.848199][T11575] bridge_slave_1: entered allmulticast mode [ 1070.858393][T11575] bridge_slave_1: entered promiscuous mode [ 1071.568051][ T4086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.724522][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.843697][ T4086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.943453][ T5813] Bluetooth: hci0: command tx timeout [ 1071.944854][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.077783][ T4086] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.741415][T11630] syz.3.1502 (11630): drop_caches: 2 [ 1072.826689][ T4086] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.847412][ T5813] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 1072.989015][T11575] team0: Port device team_slave_0 added [ 1073.076069][T11575] team0: Port device team_slave_1 added [ 1073.523208][ T5863] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1073.704858][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.713606][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.740821][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.842220][ T5863] usb 10-1: config index 0 descriptor too short (expected 41054, got 18) [ 1073.851368][ T5863] usb 10-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1073.860921][ T5863] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.871574][ T5863] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1074.023175][ T5813] Bluetooth: hci0: command tx timeout [ 1074.139748][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.147309][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.174282][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.263051][ T5863] usb 10-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1074.273046][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.281462][ T5863] usb 10-1: Product: syz [ 1074.286261][ T5863] usb 10-1: Manufacturer: syz [ 1074.294876][ T5863] usb 10-1: SerialNumber: syz [ 1074.328252][ T4086] bridge_slave_1: left allmulticast mode [ 1074.334477][ T4086] bridge_slave_1: left promiscuous mode [ 1074.341321][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.378890][ T5863] usb 10-1: config 0 descriptor?? [ 1074.409897][ T4086] bridge_slave_0: left allmulticast mode [ 1074.416290][ T4086] bridge_slave_0: left promiscuous mode [ 1074.423298][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.656162][T10085] usb 10-1: USB disconnect, device number 3 [ 1075.266396][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.364391][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.424654][ T4086] bond0 (unregistering): Released all slaves [ 1076.086162][T11575] hsr_slave_0: entered promiscuous mode [ 1076.096840][T11575] hsr_slave_1: entered promiscuous mode [ 1076.106170][T11575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1076.114171][T11575] Cannot create hsr debugfs directory [ 1076.822569][ T5813] Bluetooth: hci5: command 0x0406 tx timeout [ 1077.502908][ T4086] hsr_slave_0: left promiscuous mode [ 1077.561363][ T4086] hsr_slave_1: left promiscuous mode [ 1077.576607][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.584654][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.684460][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.692812][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.932342][ T4086] veth1_macvtap: left promiscuous mode [ 1077.938331][ T4086] veth0_macvtap: left promiscuous mode [ 1077.944852][ T4086] veth1_vlan: left promiscuous mode [ 1077.950555][ T4086] veth0_vlan: left promiscuous mode [ 1078.505437][T11679] binder: 11676:11679 ioctl 4018620d 0 returned -22 [ 1079.388216][T11679] syz.3.1516 (11679): drop_caches: 2 [ 1080.274609][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 1080.400985][ T5813] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1080.420508][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 1083.784875][T11707] loop3: detected capacity change from 0 to 64 [ 1083.891470][T11707] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1085.530009][T11575] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1086.032915][T11575] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1086.710440][T11575] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1086.817535][T11575] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1087.228275][T11725] binder: 11721:11725 ioctl 4018620d 0 returned -22 [ 1087.807129][ T1616] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1087.890017][T11722] loop8: detected capacity change from 0 to 4096 [ 1088.099230][ T1616] usb 2-1: config index 0 descriptor too short (expected 41054, got 18) [ 1088.122768][ T1616] usb 2-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1088.134268][ T1616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.145955][ T1616] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1088.358848][ T1616] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1088.369351][ T1616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.377969][ T1616] usb 2-1: Product: syz [ 1088.382536][ T1616] usb 2-1: Manufacturer: syz [ 1088.387477][ T1616] usb 2-1: SerialNumber: syz [ 1088.568272][ T1616] usb 2-1: config 0 descriptor?? [ 1088.967699][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.309620][ T1616] usb 2-1: USB disconnect, device number 2 [ 1089.461135][T11725] syz.3.1529 (11725): drop_caches: 2 [ 1089.551101][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.729667][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.737460][ T4071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.887486][ T4071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.895270][ T4071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.984059][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.990837][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1091.317451][T10085] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1091.535624][T10085] usb 4-1: config index 0 descriptor too short (expected 41054, got 18) [ 1091.546015][T10085] usb 4-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1091.555619][T10085] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.566275][T10085] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1091.745102][T10085] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1091.755854][T10085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.764810][T10085] usb 4-1: Product: syz [ 1091.769265][T10085] usb 4-1: Manufacturer: syz [ 1091.774342][T10085] usb 4-1: SerialNumber: syz [ 1091.906372][T10085] usb 4-1: config 0 descriptor?? [ 1092.136811][ T1680] usb 4-1: USB disconnect, device number 11 [ 1093.812824][ T5813] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 1094.106470][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.465642][T11793] loop8: detected capacity change from 0 to 512 [ 1099.621562][T11793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.636131][T11793] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.729540][T11797] binder: 11794:11797 ioctl 4018620d 0 returned -22 [ 1102.485997][T10660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.261963][T11575] veth0_vlan: entered promiscuous mode [ 1103.639896][T11575] veth1_vlan: entered promiscuous mode [ 1103.790352][T11797] syz.3.1543 (11797): drop_caches: 2 [ 1104.419471][T11575] veth0_macvtap: entered promiscuous mode [ 1104.507370][T11575] veth1_macvtap: entered promiscuous mode [ 1104.778326][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.950351][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.043128][T10085] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1105.054367][T11575] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.063856][T11575] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.073827][T11575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.083055][T11575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.351385][T10085] usb 10-1: config index 0 descriptor too short (expected 41054, got 18) [ 1105.360433][T10085] usb 10-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1105.369817][T10085] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.380673][T10085] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1105.665863][T10085] usb 10-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1105.675558][T10085] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.684102][T10085] usb 10-1: Product: syz [ 1105.688582][T10085] usb 10-1: Manufacturer: syz [ 1105.693613][T10085] usb 10-1: SerialNumber: syz [ 1105.825335][T10085] usb 10-1: config 0 descriptor?? [ 1107.333157][T10523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1107.355334][T10523] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1107.369844][T10523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1107.397127][T10523] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1107.408969][T10523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1107.653569][T10085] usb 10-1: USB disconnect, device number 4 [ 1109.263974][T11830] chnl_net:caif_netlink_parms(): no params data found [ 1109.558436][T10523] Bluetooth: hci3: command tx timeout [ 1111.574626][T11872] binder: BINDER_SET_CONTEXT_MGR already set [ 1111.580952][T11872] binder: 11870:11872 ioctl 4018620d 2000000001c0 returned -16 [ 1111.678189][T10523] Bluetooth: hci3: command tx timeout [ 1111.814070][T11830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.821749][T11830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.829959][T11830] bridge_slave_0: entered allmulticast mode [ 1111.840887][T11830] bridge_slave_0: entered promiscuous mode [ 1112.149192][T11830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.156813][T11830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.164882][T11830] bridge_slave_1: entered allmulticast mode [ 1112.173834][T11830] bridge_slave_1: entered promiscuous mode [ 1113.090649][T11830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.211505][T11830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.280384][T11872] syz.9.1556 (11872): drop_caches: 2 [ 1113.696818][T11830] team0: Port device team_slave_0 added [ 1113.732105][T10523] Bluetooth: hci3: command tx timeout [ 1113.772990][T11830] team0: Port device team_slave_1 added [ 1114.394866][T11830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.403002][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.433296][T11830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.189238][T11830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.196764][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.238504][T11830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.789281][T10523] Bluetooth: hci3: command tx timeout [ 1115.925017][T11830] hsr_slave_0: entered promiscuous mode [ 1115.935873][T11830] hsr_slave_1: entered promiscuous mode [ 1115.947691][T11830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.955775][T11830] Cannot create hsr debugfs directory [ 1117.259065][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.268264][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.748410][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.757242][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.077074][T11830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1119.214498][T11830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1119.373619][T11830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1119.545749][T11830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1120.963098][T10085] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1121.180831][T11830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.288361][T10085] usb 7-1: config index 0 descriptor too short (expected 41054, got 18) [ 1121.304608][T10085] usb 7-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1121.317652][T10085] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.345571][T10085] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1121.420737][T11830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.505095][T10085] usb 7-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1121.515225][T10085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.523818][T10085] usb 7-1: Product: syz [ 1121.528263][T10085] usb 7-1: Manufacturer: syz [ 1121.533577][T10085] usb 7-1: SerialNumber: syz [ 1121.577855][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.585639][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.664057][T10085] usb 7-1: config 0 descriptor?? [ 1121.752899][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.760563][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.601446][T11934] binder: BINDER_SET_CONTEXT_MGR already set [ 1123.608989][T11934] binder: 11932:11934 ioctl 4018620d 2000000001c0 returned -16 [ 1123.634721][ T1616] usb 7-1: USB disconnect, device number 2 [ 1123.903260][T11934] syz.3.1565 (11934): drop_caches: 2 [ 1125.363074][ T30] audit: type=1326 audit(1753532372.645:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.421380][T11830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.532235][ T30] audit: type=1326 audit(1753532372.695:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.555877][ T30] audit: type=1326 audit(1753532372.695:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.578951][ T30] audit: type=1326 audit(1753532372.695:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.603707][ T30] audit: type=1326 audit(1753532372.695:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.641717][ T30] audit: type=1326 audit(1753532372.735:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.665056][ T30] audit: type=1326 audit(1753532372.735:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.688822][ T30] audit: type=1326 audit(1753532372.735:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.715304][ T30] audit: type=1326 audit(1753532372.755:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1125.739100][ T30] audit: type=1326 audit(1753532372.755:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.3.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4558e9a9 code=0x7ffc0000 [ 1126.442998][T11830] veth0_vlan: entered promiscuous mode [ 1126.528542][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1126.538477][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.549716][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1126.565244][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1126.577139][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1126.638015][T11830] veth1_vlan: entered promiscuous mode [ 1127.059159][T11830] veth0_macvtap: entered promiscuous mode [ 1127.345951][T11830] veth1_macvtap: entered promiscuous mode [ 1127.957326][T11830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.108833][T11830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.242692][T11830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.252035][T11830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.263696][T11830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.274337][T11830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.534938][T10085] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1128.664028][ T5813] Bluetooth: hci1: command tx timeout [ 1128.803696][T10085] usb 4-1: config index 0 descriptor too short (expected 41054, got 18) [ 1128.812783][T10085] usb 4-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 1128.822530][T10085] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.833138][T10085] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 1128.877002][T11976] binder: BINDER_SET_CONTEXT_MGR already set [ 1128.883723][T11976] binder: 11974:11976 ioctl 4018620d 2000000001c0 returned -16 [ 1129.102832][T10085] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 1129.112643][T10085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.121052][T10085] usb 4-1: Product: syz [ 1129.125797][T10085] usb 4-1: Manufacturer: syz [ 1129.130690][T10085] usb 4-1: SerialNumber: syz [ 1129.307699][T10085] usb 4-1: config 0 descriptor?? [ 1129.373778][T11976] syz.9.1577 (11976): drop_caches: 2 [ 1130.184079][T11950] chnl_net:caif_netlink_parms(): no params data found [ 1130.743083][ T5813] Bluetooth: hci1: command tx timeout [ 1131.207637][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1579'. [ 1131.442564][ T1680] usb 4-1: USB disconnect, device number 12 [ 1132.832415][T10523] Bluetooth: hci1: command tx timeout [ 1133.000216][T10523] Bluetooth: hci4: command 0x0406 tx timeout [ 1134.902171][ T5813] Bluetooth: hci1: command tx timeout [ 1138.417138][T11950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.426784][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.435107][T11950] bridge_slave_0: entered allmulticast mode [ 1138.445486][T11950] bridge_slave_0: entered promiscuous mode [ 1138.557889][T11950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.565938][T11950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.574475][T11950] bridge_slave_1: entered allmulticast mode [ 1138.584516][T11950] bridge_slave_1: entered promiscuous mode [ 1139.054915][T11950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.277820][T11950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.069688][T12029] binder: 12028:12029 ioctl c0306201 0 returned -14 [ 1140.096303][T11950] team0: Port device team_slave_0 added [ 1140.218501][T11950] team0: Port device team_slave_1 added [ 1140.317578][T12034] loop3: detected capacity change from 0 to 512 [ 1140.517667][T12029] syz.9.1588 (12029): drop_caches: 2 [ 1140.529752][T12034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.554226][T12034] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.648177][T11950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.655630][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.682933][T11950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.058184][T11950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.065603][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.092580][T11950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.467067][T10748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.569118][T11950] hsr_slave_0: entered promiscuous mode [ 1143.578631][T11950] hsr_slave_1: entered promiscuous mode [ 1143.586864][T11950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.595339][T11950] Cannot create hsr debugfs directory [ 1143.660510][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1590'. [ 1143.727139][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1591'. [ 1143.889604][T12049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1144.209677][T12049] vlan2: entered promiscuous mode [ 1144.215243][T12049] bond1: entered promiscuous mode [ 1144.221284][T12049] vlan2: entered allmulticast mode [ 1144.234647][T12049] bond1: entered allmulticast mode [ 1145.043895][T12053] gretap1: entered promiscuous mode [ 1145.059787][T12053] gretap1: entered allmulticast mode [ 1145.070960][T12053] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1147.321693][T12068] loop3: detected capacity change from 0 to 512 [ 1147.582859][T12068] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1596: iget: bad i_size value: 360287970189639690 [ 1147.692243][T12068] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1596: couldn't read orphan inode 15 (err -117) [ 1147.804099][T12068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.823967][T12068] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.034080][T12068] EXT4-fs (loop3): shut down requested (1) [ 1148.623797][ T4086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.635023][ T4086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.934078][T10748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.161092][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.169687][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.484451][T12084] loop6: detected capacity change from 0 to 512 [ 1149.700535][T12086] binder: 12085:12086 ioctl c0306201 0 returned -14 [ 1149.735459][T12084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.748976][T12084] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.789001][T11950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1150.069181][T11950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1151.558766][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.565967][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.774856][T12086] syz.3.1599 (12086): drop_caches: 2 [ 1152.497744][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1601'. [ 1152.513556][T11575] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.529935][T11950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1152.709771][T11950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1153.510646][T12101] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1153.522326][T12101] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1156.014349][ T9694] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1156.322369][ T9694] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.333152][ T9694] usb 7-1: config 0 has no interfaces? [ 1156.338978][ T9694] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1156.348923][ T9694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.661202][ T9694] usb 7-1: config 0 descriptor?? [ 1156.688548][ T4086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.765175][T10085] usb 7-1: USB disconnect, device number 3 [ 1159.227111][ T4086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.784948][ T4086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.323453][ T4086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.761086][T11950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.062860][ T4086] bridge_slave_1: left allmulticast mode [ 1162.068818][ T4086] bridge_slave_1: left promiscuous mode [ 1162.077827][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.096373][ T4086] bridge_slave_0: left allmulticast mode [ 1162.102568][ T4086] bridge_slave_0: left promiscuous mode [ 1162.109287][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.498545][T12139] loop9: detected capacity change from 0 to 512 [ 1163.052733][T12141] random: crng reseeded on system resumption [ 1163.099045][T12141] Restarting kernel threads ... [ 1163.105568][T12141] Done restarting kernel threads. [ 1163.121579][T12141] Unrecognized hibernate image header format! [ 1163.128211][T12141] PM: hibernation: Image mismatch: architecture specific data [ 1164.979490][T12143] binder: 12142:12143 ioctl c0306201 0 returned -14 [ 1165.110442][T12139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.130391][T12139] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1165.499847][T12143] syz.0.1612 (12143): drop_caches: 2 [ 1165.557143][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.008394][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1614'. [ 1167.483219][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.888043][ T4086] bond0 (unregistering): Released all slaves [ 1168.104650][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.192818][T11950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.329513][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.337477][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.522943][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.530647][ T4133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.204092][ T4086] hsr_slave_0: left promiscuous mode [ 1169.293522][ T4086] hsr_slave_1: left promiscuous mode [ 1169.317735][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.330956][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.510946][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.524000][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.660859][ T4086] veth1_macvtap: left promiscuous mode [ 1169.666963][ T4086] veth0_macvtap: left promiscuous mode [ 1169.673510][ T4086] veth1_vlan: left promiscuous mode [ 1169.679150][ T4086] veth0_vlan: left promiscuous mode [ 1171.404543][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 1171.478732][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 1172.026097][T12186] loop3: detected capacity change from 0 to 512 [ 1172.042332][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1172.304098][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1172.358741][ T24] usb 10-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 1172.371132][ T24] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1172.384829][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1172.397052][ T24] usb 10-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1172.408547][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.616203][ T24] usb 10-1: config 0 descriptor?? [ 1172.790039][T12186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.808104][T12186] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.164730][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 1173.171694][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1174.016636][ T24] usb 10-1: USB disconnect, device number 5 [ 1176.618434][T10748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.427804][T11950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.340923][T12240] loop3: detected capacity change from 0 to 256 [ 1179.471369][T12240] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1179.482956][T12240] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1179.639376][T12240] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1180.088474][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1180.088566][ T30] audit: type=1800 audit(1753532427.355:167): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1636" name="file1" dev="loop3" ino=1048654 res=0 errno=0 [ 1180.690028][T12251] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1181.581343][T11950] veth0_vlan: entered promiscuous mode [ 1181.725212][T11950] veth1_vlan: entered promiscuous mode [ 1182.183455][T11950] veth0_macvtap: entered promiscuous mode [ 1182.268629][ T4133] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.418109][T11950] veth1_macvtap: entered promiscuous mode [ 1182.517661][ T4133] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.782480][ T4133] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.010325][ T4133] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.164201][T11950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.305361][T11950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.671221][T11950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.680695][T11950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.689973][T11950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.699273][T11950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.785279][ T4133] bridge_slave_1: left allmulticast mode [ 1183.791385][ T4133] bridge_slave_1: left promiscuous mode [ 1183.798477][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.911349][ T4133] bridge_slave_0: left allmulticast mode [ 1183.917877][ T4133] bridge_slave_0: left promiscuous mode [ 1183.924858][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.701058][T12286] loop6: detected capacity change from 0 to 256 [ 1184.776537][T12286] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1184.791673][T12286] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1184.900995][ T4133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.031481][T12286] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1185.078683][ T4133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.130227][ T4133] bond0 (unregistering): Released all slaves [ 1185.262663][ T30] audit: type=1800 audit(1753532432.545:168): pid=12286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1650" name="file1" dev="loop6" ino=1048655 res=0 errno=0 [ 1186.069759][T12297] loop9: detected capacity change from 0 to 512 [ 1186.526550][T12297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.539954][T12297] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.789279][ T4133] hsr_slave_0: left promiscuous mode [ 1187.581925][ T4133] hsr_slave_1: left promiscuous mode [ 1187.590014][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.598387][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.708223][ T4133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.716303][ T4133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.528980][ T4133] veth1_macvtap: left promiscuous mode [ 1188.536045][ T4133] veth0_macvtap: left promiscuous mode [ 1188.542415][ T4133] veth1_vlan: left promiscuous mode [ 1188.548040][ T4133] veth0_vlan: left promiscuous mode [ 1189.012922][ T9498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1189.146036][ T9498] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1189.412972][ T9498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1189.465034][ T9498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1189.510364][T11564] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1189.532799][ T9498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1189.654543][T11564] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1189.663260][T11564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1189.742786][ T9498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1189.867699][ T9498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1191.386675][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.872115][ T1680] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1192.114948][ T9498] Bluetooth: hci2: command tx timeout [ 1192.140261][ T1680] usb 4-1: config 0 has no interfaces? [ 1192.178940][ T1680] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1192.189376][ T1680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.198494][ T1680] usb 4-1: Product: syz [ 1192.203019][ T1680] usb 4-1: Manufacturer: syz [ 1192.207883][ T1680] usb 4-1: SerialNumber: syz [ 1192.360557][T12336] loop9: detected capacity change from 0 to 512 [ 1192.364895][ T1680] usb 4-1: config 0 descriptor?? [ 1192.382476][ T9498] Bluetooth: hci6: command tx timeout [ 1192.485081][ T4133] team0 (unregistering): Port device team_slave_1 removed [ 1192.620638][ T4133] team0 (unregistering): Port device team_slave_0 removed [ 1192.675878][T12336] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.689300][T12336] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.232127][ T9498] Bluetooth: hci2: command tx timeout [ 1194.628681][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.645173][ T9498] Bluetooth: hci6: command tx timeout [ 1195.423292][T10308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.798404][T10308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.071652][T10308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.279610][T11564] Bluetooth: hci2: command tx timeout [ 1196.464773][T10308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.662204][T11564] Bluetooth: hci6: command tx timeout [ 1196.743795][T12312] chnl_net:caif_netlink_parms(): no params data found [ 1196.955150][T12361] loop9: detected capacity change from 0 to 256 [ 1197.247686][T12361] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1197.258844][T12361] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1197.447776][T12361] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1197.507052][T10308] bridge_slave_1: left allmulticast mode [ 1197.514733][T10308] bridge_slave_1: left promiscuous mode [ 1197.521114][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.659094][T10308] bridge_slave_0: left allmulticast mode [ 1197.667791][T10308] bridge_slave_0: left promiscuous mode [ 1197.674988][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.732389][ T30] audit: type=1800 audit(1753532444.985:169): pid=12361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1664" name="file1" dev="loop9" ino=1048656 res=0 errno=0 [ 1198.359269][T11564] Bluetooth: hci2: command tx timeout [ 1198.757198][T11564] Bluetooth: hci6: command tx timeout [ 1198.982879][T10308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.027366][T10308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.079722][T10308] bond0 (unregistering): Released all slaves [ 1199.183325][T12372] loop6: detected capacity change from 0 to 512 [ 1199.354234][T12315] chnl_net:caif_netlink_parms(): no params data found [ 1199.452584][T10308] hsr_slave_0: left promiscuous mode [ 1199.507351][T10308] hsr_slave_1: left promiscuous mode [ 1199.515097][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.527510][T10308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.572786][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.580774][T10308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.594590][T12372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.607902][T12372] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.620211][T10308] veth1_macvtap: left promiscuous mode [ 1199.632144][T10308] veth0_macvtap: left promiscuous mode [ 1199.638175][T10308] veth1_vlan: left promiscuous mode [ 1199.644608][T10308] veth0_vlan: left promiscuous mode [ 1201.027117][T11575] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.731012][T10308] team0 (unregistering): Port device team_slave_1 removed [ 1201.801605][T10308] team0 (unregistering): Port device team_slave_0 removed [ 1201.962443][T12382] loop6: detected capacity change from 0 to 512 [ 1202.739652][T12383] loop9: detected capacity change from 0 to 40427 [ 1202.772790][T12383] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1202.780966][T12383] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1202.814162][T12383] F2FS-fs (loop9): invalid crc value [ 1203.038724][T12382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.053101][T12382] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.404287][T12383] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1203.411690][T12383] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1204.263407][T12394] syz.9.1671: attempt to access beyond end of device [ 1204.263407][T12394] loop9: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 1204.992558][T11575] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.087468][T10308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.322071][T10308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.905840][T10308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.086990][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.096282][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.105622][T12312] bridge_slave_0: entered allmulticast mode [ 1206.114502][T12312] bridge_slave_0: entered promiscuous mode [ 1206.198504][T10308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.335354][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.343295][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.351044][T12312] bridge_slave_1: entered allmulticast mode [ 1206.360994][T12312] bridge_slave_1: entered promiscuous mode [ 1206.899057][T12410] loop6: detected capacity change from 0 to 256 [ 1206.970209][T12410] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1206.981973][T12410] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1207.076876][T12410] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1207.238087][ T30] audit: type=1800 audit(1753532454.515:170): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1675" name="file1" dev="loop6" ino=1048657 res=0 errno=0 [ 1207.334938][T10308] bridge_slave_1: left allmulticast mode [ 1207.341141][T10308] bridge_slave_1: left promiscuous mode [ 1207.348358][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.364371][T10308] bridge_slave_0: left allmulticast mode [ 1207.372899][T10308] bridge_slave_0: left promiscuous mode [ 1207.379668][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.343275][ T9498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1208.393804][ T9498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1208.443729][ T9498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1208.602945][ T9498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1208.654717][ T9498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1208.814787][T10308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.904728][T10308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.930305][T10308] bond0 (unregistering): Released all slaves [ 1209.070267][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.284082][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.475830][T12315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.483790][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.491639][T12315] bridge_slave_0: entered allmulticast mode [ 1209.501538][T12315] bridge_slave_0: entered promiscuous mode [ 1209.928907][T12315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.940429][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.948842][T12315] bridge_slave_1: entered allmulticast mode [ 1209.958790][T12315] bridge_slave_1: entered promiscuous mode [ 1210.263854][T12427] loop9: detected capacity change from 0 to 512 [ 1210.354093][T12312] team0: Port device team_slave_0 added [ 1210.485436][T12427] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.499034][T12427] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.596809][T12312] team0: Port device team_slave_1 added [ 1210.756049][T10308] hsr_slave_0: left promiscuous mode [ 1211.204533][T10308] hsr_slave_1: left promiscuous mode [ 1211.213078][T11564] Bluetooth: hci1: command tx timeout [ 1211.213707][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.229303][T10308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.074576][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.081349][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.105776][T10308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.119109][T10308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.166806][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.177538][T10308] veth1_macvtap: left promiscuous mode [ 1213.183553][T10308] veth0_macvtap: left promiscuous mode [ 1213.189543][T10308] veth1_vlan: left promiscuous mode [ 1213.195303][T10308] veth0_vlan: left promiscuous mode [ 1213.250332][T11564] Bluetooth: hci1: command tx timeout [ 1214.754355][T10308] team0 (unregistering): Port device team_slave_1 removed [ 1214.853357][T10308] team0 (unregistering): Port device team_slave_0 removed [ 1215.085096][T12449] loop9: detected capacity change from 0 to 512 [ 1215.231038][T12315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.303179][T11564] Bluetooth: hci1: command tx timeout [ 1215.594366][T12438] pim6reg: entered allmulticast mode [ 1215.615839][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.623373][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.651091][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.669233][T12449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.682728][T12449] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.701251][T12440] pim6reg: left allmulticast mode [ 1215.795457][T12315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.852589][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.859999][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.887550][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.043421][T12315] team0: Port device team_slave_0 added [ 1217.068925][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.403447][T11564] Bluetooth: hci1: command tx timeout [ 1217.410486][T12315] team0: Port device team_slave_1 added [ 1217.566330][T12463] loop9: detected capacity change from 0 to 256 [ 1217.608048][T12463] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1217.619926][T12463] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1217.741052][T12463] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1217.865500][ T30] audit: type=1800 audit(1753532465.155:171): pid=12463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1683" name="file1" dev="loop9" ino=1048658 res=0 errno=0 [ 1217.939908][T12312] hsr_slave_0: entered promiscuous mode [ 1217.956772][T12312] hsr_slave_1: entered promiscuous mode [ 1218.038143][ T5863] usb 4-1: USB disconnect, device number 13 [ 1218.201340][T12417] chnl_net:caif_netlink_parms(): no params data found [ 1218.266824][ T4086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.417366][T12315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.424793][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.452211][T12315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.545283][T12466] loop6: detected capacity change from 0 to 128 [ 1218.581204][T12466] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1218.728286][ T4086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.872060][T12315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.883159][T12315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.912457][T12315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.002706][ T4086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.024295][ T58] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1219.488320][T12476] loop9: detected capacity change from 0 to 512 [ 1219.498819][ T4086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.645612][T12476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.659094][T12476] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.330694][T12315] hsr_slave_0: entered promiscuous mode [ 1220.341383][T12315] hsr_slave_1: entered promiscuous mode [ 1220.350666][T12315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.358728][T12315] Cannot create hsr debugfs directory [ 1221.067158][ T4086] bridge_slave_1: left allmulticast mode [ 1221.073916][ T4086] bridge_slave_1: left promiscuous mode [ 1221.080627][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.178964][ T4086] bridge_slave_0: left allmulticast mode [ 1221.185276][ T4086] bridge_slave_0: left promiscuous mode [ 1221.192946][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.252795][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.832860][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.413841][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.408390][ T4086] bond0 (unregistering): Released all slaves [ 1224.907843][T12502] mkiss: ax0: crc mode is auto. [ 1225.505407][T12417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.512958][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.520705][T12417] bridge_slave_0: entered allmulticast mode [ 1225.530051][T12417] bridge_slave_0: entered promiscuous mode [ 1225.702539][ T4086] hsr_slave_0: left promiscuous mode [ 1225.756984][ T4086] hsr_slave_1: left promiscuous mode [ 1225.765218][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.773358][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.825557][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.833479][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.900530][ T4086] veth1_macvtap: left promiscuous mode [ 1225.906472][ T4086] veth0_macvtap: left promiscuous mode [ 1225.912690][ T4086] veth1_vlan: left promiscuous mode [ 1225.918334][ T4086] veth0_vlan: left promiscuous mode [ 1225.928732][T12507] loop9: detected capacity change from 0 to 256 [ 1226.215658][T12507] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1226.226790][T12507] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1226.327775][T12507] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1227.064763][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 1227.134100][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 1227.427715][T12417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.435504][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.443518][T12417] bridge_slave_1: entered allmulticast mode [ 1227.453252][T12417] bridge_slave_1: entered promiscuous mode [ 1228.613892][T12417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.982463][T12417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.363791][T12417] team0: Port device team_slave_0 added [ 1229.413579][T12417] team0: Port device team_slave_1 added [ 1229.476165][T12312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1229.692088][T12312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1229.789728][T12417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.797370][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.824046][T12417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.837462][T12312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1229.900271][T12312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1230.110367][T12417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.117967][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.144966][T12417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.408560][T12524] loop9: detected capacity change from 0 to 512 [ 1230.748844][T12315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1230.777651][T12524] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.791453][T12524] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.832835][T12417] hsr_slave_0: entered promiscuous mode [ 1230.842470][T12417] hsr_slave_1: entered promiscuous mode [ 1230.850592][T12417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1230.858655][T12417] Cannot create hsr debugfs directory [ 1231.454431][T12315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1231.515706][T12315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1231.606486][T12315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1232.030100][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.831526][T12535] loop9: detected capacity change from 0 to 2048 [ 1232.928471][T12535] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1233.054922][T12538] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1234.037628][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.175291][T12315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.185571][T12417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1234.214305][T12417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1234.298867][T12417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1234.407416][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.479403][T12417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1234.562844][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.570332][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.702052][T12315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.728695][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.736510][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.967128][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.975117][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.999930][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.007499][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.231012][T12312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1235.243193][T12312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.570069][T12315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1236.325080][T12417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.653298][T12417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.809536][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.817294][T11773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.981820][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.989461][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.246094][T12417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1238.075635][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.341622][ T9498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1238.355298][ T9498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1238.372557][ T9498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1238.445035][ T9498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1238.488385][ T9498] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1238.540926][T12315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.990348][T12312] veth0_vlan: entered promiscuous mode [ 1239.135450][T12312] veth1_vlan: entered promiscuous mode [ 1239.644497][T12312] veth0_macvtap: entered promiscuous mode [ 1239.825523][T12417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.921207][T12312] veth1_macvtap: entered promiscuous mode [ 1240.170099][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.285708][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.424978][T12312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.437474][T12312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.446834][T12312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.456123][T12312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.584307][ T9498] Bluetooth: hci3: command tx timeout [ 1240.602930][T12563] chnl_net:caif_netlink_parms(): no params data found [ 1241.801038][ T4086] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.923271][ T4086] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.108298][ T4086] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.318692][ T4086] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.493196][T12315] veth0_vlan: entered promiscuous mode [ 1242.662199][ T9498] Bluetooth: hci3: command tx timeout [ 1242.776166][T12563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.784063][T12563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.792383][T12563] bridge_slave_0: entered allmulticast mode [ 1242.863165][T12563] bridge_slave_0: entered promiscuous mode [ 1242.953499][T12315] veth1_vlan: entered promiscuous mode [ 1243.018757][T12563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.026792][T12563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.035110][T12563] bridge_slave_1: entered allmulticast mode [ 1243.045386][T12563] bridge_slave_1: entered promiscuous mode [ 1243.107127][ T4086] bridge_slave_1: left allmulticast mode [ 1243.113468][ T4086] bridge_slave_1: left promiscuous mode [ 1243.120197][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.169262][ T4086] bridge_slave_0: left allmulticast mode [ 1243.175579][ T4086] bridge_slave_0: left promiscuous mode [ 1243.183544][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.850007][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.903584][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.927922][ T4086] bond0 (unregistering): Released all slaves [ 1244.328898][T12563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.469228][T12563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.742664][ T9498] Bluetooth: hci3: command tx timeout [ 1244.889304][T12417] veth0_vlan: entered promiscuous mode [ 1244.932446][T12563] team0: Port device team_slave_0 added [ 1245.042388][ T4086] hsr_slave_0: left promiscuous mode [ 1245.073967][ T4086] hsr_slave_1: left promiscuous mode [ 1245.082325][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.090139][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.137334][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.146649][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.204954][ T4086] veth1_macvtap: left promiscuous mode [ 1245.210818][ T4086] veth0_macvtap: left promiscuous mode [ 1245.217538][ T4086] veth1_vlan: left promiscuous mode [ 1245.223547][ T4086] veth0_vlan: left promiscuous mode [ 1245.920294][T11564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1245.930950][T11564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1245.949768][T11564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1245.973937][T11564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1245.987506][T11564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1246.398459][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 1246.458463][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 1246.832942][T11564] Bluetooth: hci3: command tx timeout [ 1247.017570][T12563] team0: Port device team_slave_1 added [ 1247.038019][T12417] veth1_vlan: entered promiscuous mode [ 1247.114284][ T9498] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1247.141601][ T9498] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1247.151374][ T9498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1247.254104][ T9498] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1247.276654][ T9498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1247.277324][T12563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.291260][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.318080][T12563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.542411][T12563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.550249][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.577023][T12563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.845489][T12417] veth0_macvtap: entered promiscuous mode [ 1247.910340][T12417] veth1_macvtap: entered promiscuous mode [ 1248.192131][T11564] Bluetooth: hci0: command tx timeout [ 1248.635633][T12563] hsr_slave_0: entered promiscuous mode [ 1248.645427][T12563] hsr_slave_1: entered promiscuous mode [ 1248.654343][T12563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.670155][T12563] Cannot create hsr debugfs directory [ 1248.757342][T12417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.452045][T12417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.565608][T11564] Bluetooth: hci5: command tx timeout [ 1249.761338][T12417] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.771027][T12417] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.780968][T12417] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.790549][T12417] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.286541][T11564] Bluetooth: hci0: command tx timeout [ 1250.975869][T12614] chnl_net:caif_netlink_parms(): no params data found [ 1251.635678][T11564] Bluetooth: hci5: command tx timeout [ 1252.342405][T11564] Bluetooth: hci0: command tx timeout [ 1252.742452][T12620] chnl_net:caif_netlink_parms(): no params data found [ 1253.704454][T11564] Bluetooth: hci5: command tx timeout [ 1253.747600][T12563] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1253.841338][T12563] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1253.907215][T12563] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1254.089401][T12563] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1254.430794][T11564] Bluetooth: hci0: command tx timeout [ 1255.473988][T12614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.481658][T12614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.489807][T12614] bridge_slave_0: entered allmulticast mode [ 1255.504901][T12614] bridge_slave_0: entered promiscuous mode [ 1255.633177][T12620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.641486][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.649752][T12620] bridge_slave_0: entered allmulticast mode [ 1255.659695][T12620] bridge_slave_0: entered promiscuous mode [ 1255.674964][T12614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.682786][T12614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.690660][T12614] bridge_slave_1: entered allmulticast mode [ 1255.700893][T12614] bridge_slave_1: entered promiscuous mode [ 1255.782388][T11564] Bluetooth: hci5: command tx timeout [ 1255.796286][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.906008][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.913856][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.922174][T12620] bridge_slave_1: entered allmulticast mode [ 1255.933256][T12620] bridge_slave_1: entered promiscuous mode [ 1256.099037][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.366928][T12614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.413191][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.466331][T12620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.525518][T12614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.566781][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.707845][T12620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.988994][T12614] team0: Port device team_slave_0 added [ 1257.061197][T12620] team0: Port device team_slave_0 added [ 1257.080247][T12614] team0: Port device team_slave_1 added [ 1257.417184][T12620] team0: Port device team_slave_1 added [ 1257.691302][T12614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.699402][T12614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.727575][T12614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.917402][ T58] bridge_slave_1: left allmulticast mode [ 1257.924897][ T58] bridge_slave_1: left promiscuous mode [ 1257.931539][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.043582][ T58] bridge_slave_0: left allmulticast mode [ 1258.049558][ T58] bridge_slave_0: left promiscuous mode [ 1258.056661][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.803255][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.844762][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.888875][ T58] bond0 (unregistering): Released all slaves [ 1258.996334][T12614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.003879][T12614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.031134][T12614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.077084][T12620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.084456][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.112236][T12620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.379629][T12620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.388239][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.415789][T12620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.548544][T12614] hsr_slave_0: entered promiscuous mode [ 1259.559206][T12614] hsr_slave_1: entered promiscuous mode [ 1259.568426][T12614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.576401][T12614] Cannot create hsr debugfs directory [ 1259.648618][ T58] hsr_slave_0: left promiscuous mode [ 1259.673534][ T58] hsr_slave_1: left promiscuous mode [ 1259.681981][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.689799][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.728375][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.737201][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.837719][ T58] veth1_macvtap: left promiscuous mode [ 1259.844938][ T58] veth0_macvtap: left promiscuous mode [ 1259.850954][ T58] veth1_vlan: left promiscuous mode [ 1259.856843][ T58] veth0_vlan: left promiscuous mode [ 1260.096525][T12695] loop9: detected capacity change from 0 to 512 [ 1260.333147][T12695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1260.347464][T12695] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.066364][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1261.174654][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1261.568854][T12563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.104749][T10783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.358552][T12620] hsr_slave_0: entered promiscuous mode [ 1262.369128][T12620] hsr_slave_1: entered promiscuous mode [ 1262.445374][T12563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.736946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.744659][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.030121][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.037864][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.638757][ T4086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.647387][ T4086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.288455][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.298009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.450840][ T58] bridge_slave_1: left allmulticast mode [ 1264.456941][ T58] bridge_slave_1: left promiscuous mode [ 1264.464113][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.528970][ T58] bridge_slave_0: left allmulticast mode [ 1264.535678][ T58] bridge_slave_0: left promiscuous mode [ 1264.542702][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.938019][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.989457][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.013518][ T58] bond0 (unregistering): Released all slaves [ 1265.159478][T12725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.170462][T12725] batadv_slave_0: entered promiscuous mode [ 1265.497323][ T58] hsr_slave_0: left promiscuous mode [ 1265.532162][ T58] hsr_slave_1: left promiscuous mode [ 1265.540513][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.605673][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.712854][ T58] veth1_vlan: left promiscuous mode [ 1265.718557][ T58] veth0_vlan: left promiscuous mode [ 1266.796726][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1266.839427][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1267.481058][T12751] loop9: detected capacity change from 0 to 64 [ 1268.104887][T12614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1268.135136][T10783] hfs: node 4:3 still has 1 user(s)! [ 1268.223817][T12614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1268.385044][T12614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1268.444976][T12614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1268.786413][T12563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.131426][T12620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1269.266621][T12620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1269.353733][T12620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1269.424314][T12620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1270.175476][T12614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.409721][T12614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.517281][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.525092][T11773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.686544][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.694410][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.096560][T12620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.632443][T12620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.933340][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.940989][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.183486][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.191135][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.278089][T12563] veth0_vlan: entered promiscuous mode [ 1273.423127][T12563] veth1_vlan: entered promiscuous mode [ 1273.868122][T12563] veth0_macvtap: entered promiscuous mode [ 1273.990808][T12563] veth1_macvtap: entered promiscuous mode [ 1274.307940][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.315372][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.324876][T12563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.477607][T12563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.922940][T12563] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.938489][T12563] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.948637][T12563] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.999728][T12563] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.417132][T12614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.512173][T12809] loop7: detected capacity change from 0 to 1024 [ 1277.707723][T12809] ===================================================== [ 1277.716710][T12809] BUG: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1277.725872][T12809] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1277.731849][T12809] __hfsplus_brec_find+0x271/0x840 [ 1277.737231][T12809] hfsplus_brec_find+0x4df/0x9f0 [ 1277.742666][T12809] hfsplus_delete_all_attrs+0x255/0x420 [ 1277.748489][T12809] hfsplus_delete_cat+0x1302/0x13d0 [ 1277.754211][T12809] hfsplus_unlink+0x526/0xd70 [ 1277.760318][T12809] vfs_unlink+0x616/0xab0 [ 1277.765177][T12809] do_unlinkat+0x6e6/0xe50 [ 1277.769843][T12809] __x64_sys_unlinkat+0x1a5/0x210 [ 1277.775286][T12809] x64_sys_call+0x2be5/0x3db0 [ 1277.780303][T12809] do_syscall_64+0xd9/0x210 [ 1277.786018][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.792379][T12809] [ 1277.794853][T12809] Uninit was created at: [ 1277.799500][T12809] __kmalloc_noprof+0x95f/0x1310 [ 1277.806411][T12809] hfsplus_find_init+0x90/0x1d0 [ 1277.811534][T12809] hfsplus_delete_all_attrs+0xc0/0x420 [ 1277.817699][T12809] hfsplus_delete_cat+0x1302/0x13d0 [ 1277.823353][T12809] hfsplus_unlink+0x526/0xd70 [ 1277.828253][T12809] vfs_unlink+0x616/0xab0 [ 1277.832955][T12809] do_unlinkat+0x6e6/0xe50 [ 1277.837605][T12809] __x64_sys_unlinkat+0x1a5/0x210 [ 1277.843004][T12809] x64_sys_call+0x2be5/0x3db0 [ 1277.847961][T12809] do_syscall_64+0xd9/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1277.852859][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.859688][T12809] [ 1277.862488][T12809] CPU: 1 UID: 0 PID: 12809 Comm: syz.7.1720 Tainted: G W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(none) [ 1277.876655][T12809] Tainted: [W]=WARN [ 1277.880628][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1277.892516][T12809] ===================================================== [ 1277.899645][T12809] Disabling lock debugging due to kernel taint [ 1277.906209][T12809] Kernel panic - not syncing: kmsan.panic set ... [ 1277.912865][T12809] CPU: 1 UID: 0 PID: 12809 Comm: syz.7.1720 Tainted: G B W 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(none) [ 1277.926956][T12809] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1277.932146][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1277.942420][T12809] Call Trace: [ 1277.945873][T12809] [ 1277.948966][T12809] __dump_stack+0x26/0x30 [ 1277.953573][T12809] dump_stack_lvl+0x53/0x270 [ 1277.958466][T12809] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1277.964572][T12809] dump_stack+0x1e/0x25 [ 1277.969003][T12809] panic+0x4bd/0xd50 [ 1277.973222][T12809] kmsan_report+0x31c/0x320 [ 1277.977975][T12809] ? __msan_warning+0x1b/0x30 [ 1277.982885][T12809] ? hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1277.988900][T12809] ? __hfsplus_brec_find+0x271/0x840 [ 1277.994462][T12809] ? hfsplus_brec_find+0x4df/0x9f0 [ 1277.999838][T12809] ? hfsplus_delete_all_attrs+0x255/0x420 [ 1278.005852][T12809] ? hfsplus_delete_cat+0x1302/0x13d0 [ 1278.011530][T12809] ? hfsplus_unlink+0x526/0xd70 [ 1278.016620][T12809] ? vfs_unlink+0x616/0xab0 [ 1278.021362][T12809] ? do_unlinkat+0x6e6/0xe50 [ 1278.026192][T12809] ? __x64_sys_unlinkat+0x1a5/0x210 [ 1278.031641][T12809] ? x64_sys_call+0x2be5/0x3db0 [ 1278.036782][T12809] ? do_syscall_64+0xd9/0x210 [ 1278.041700][T12809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.048049][T12809] ? kmsan_get_metadata+0xfb/0x160 [ 1278.053401][T12809] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1278.059457][T12809] ? kmsan_get_metadata+0xfb/0x160 [ 1278.064807][T12809] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1278.071380][T12809] ? kmsan_get_metadata+0xfb/0x160 [ 1278.076719][T12809] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1278.083267][T12809] ? kmsan_get_metadata+0xfb/0x160 [ 1278.088607][T12809] __msan_warning+0x1b/0x30 [ 1278.093310][T12809] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 1278.099113][T12809] __hfsplus_brec_find+0x271/0x840 [ 1278.104452][T12809] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 1278.110817][T12809] hfsplus_brec_find+0x4df/0x9f0 [ 1278.116005][T12809] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 1278.122362][T12809] hfsplus_delete_all_attrs+0x255/0x420 [ 1278.128182][T12809] hfsplus_delete_cat+0x1302/0x13d0 [ 1278.133704][T12809] hfsplus_unlink+0x526/0xd70 [ 1278.138604][T12809] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1278.144674][T12809] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1278.150769][T12809] ? __pfx_hfsplus_unlink+0x10/0x10 [ 1278.156189][T12809] vfs_unlink+0x616/0xab0 [ 1278.160763][T12809] do_unlinkat+0x6e6/0xe50 [ 1278.165426][T12809] __x64_sys_unlinkat+0x1a5/0x210 [ 1278.170856][T12809] x64_sys_call+0x2be5/0x3db0 [ 1278.175801][T12809] do_syscall_64+0xd9/0x210 [ 1278.180524][T12809] ? irqentry_exit+0x16/0x60 [ 1278.185318][T12809] ? clear_bhb_loop+0x40/0x90 [ 1278.190233][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.196375][T12809] RIP: 0033:0x7f2928d8e9a9 [ 1278.200971][T12809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.220820][T12809] RSP: 002b:00007f2929c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1278.229467][T12809] RAX: ffffffffffffffda RBX: 00007f2928fb5fa0 RCX: 00007f2928d8e9a9 [ 1278.237628][T12809] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1278.245798][T12809] RBP: 00007f2928e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1278.253944][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.262103][T12809] R13: 0000000000000000 R14: 00007f2928fb5fa0 R15: 00007ffd42b93bf8 [ 1278.270345][T12809] [ 1278.273884][T12809] Kernel Offset: disabled [ 1278.278360][T12809] Rebooting in 86400 seconds..