last executing test programs: 25m37.289377337s ago: executing program 32 (id=584): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @private1, 0x4}, 0x1c, 0x0}}], 0x1, 0x2004e000) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 23m14.660686953s ago: executing program 33 (id=1705): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 21m11.611878335s ago: executing program 34 (id=2317): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xd5, r0, 0x0, 0x0, 0x3, 0x0, 0x1, r0}]) 17m42.328417761s ago: executing program 35 (id=2818): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) r3 = epoll_create(0x61) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x60000005}) 17m42.268916013s ago: executing program 36 (id=2820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0xa) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)={[{@journal_ioprio}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") 17m42.191287705s ago: executing program 37 (id=2819): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000200)="1503", 0x2) write$ppp(r1, &(0x7f0000000080)="bbc4", 0x2) 17m41.776975384s ago: executing program 38 (id=2821): syz_open_procfs(0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) 15m53.96751085s ago: executing program 2 (id=2956): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0xb, 0x2010}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xd4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 15m37.637554196s ago: executing program 39 (id=2956): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0xb, 0x2010}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xd4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 15m37.333625323s ago: executing program 40 (id=2955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x30, 0x0) mq_notify(r5, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000940)=""/251, 0xfb}], 0x1) pread64(r3, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 14m52.983519766s ago: executing program 41 (id=3016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfff, 0x999, 0x7, 0x800, 0xfff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240408a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m55.860680508s ago: executing program 42 (id=3066): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x9, 0x800, 0x5, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]}) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) shmctl$IPC_RMID(0x0, 0x0) 12m52.882573143s ago: executing program 43 (id=3132): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = inotify_init() r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 12m30.919119975s ago: executing program 5 (id=3169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x148) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 12m29.642647735s ago: executing program 5 (id=3174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xf3, 0x7, 0x9, 0x1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0x80000000, 0x401}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe56, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 12m25.277580961s ago: executing program 5 (id=3179): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 12m19.674290617s ago: executing program 5 (id=3184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073153a00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x1}, 0xc) 12m4.834157126s ago: executing program 44 (id=3182): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) listen(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB], 0x16) 12m4.281434609s ago: executing program 45 (id=3184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073153a00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r4, 0x1}, 0xc) 10m9.646035394s ago: executing program 2 (id=3206): socket(0x23, 0xa, 0xb) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x1c) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x4880) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 10m1.663087277s ago: executing program 2 (id=3324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m46.549150723s ago: executing program 46 (id=3324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m7.173999326s ago: executing program 47 (id=3363): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22180, 0x38) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 7m29.027582292s ago: executing program 8 (id=3488): sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 7m25.542219646s ago: executing program 8 (id=3492): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x31}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m25.312080861s ago: executing program 8 (id=3493): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32], 0x50) pipe(&(0x7f00000000c0)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0xffffffffffffff65) unshare(0x600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 7m23.980945353s ago: executing program 8 (id=3494): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x7) write(r3, &(0x7f0000000240)="c6", 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000300)={[{@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x486, &(0x7f0000001080)="$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") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000400)) 7m22.968097138s ago: executing program 8 (id=3497): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) madvise(&(0x7f000076e000/0x2000)=nil, 0x2000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7m21.228582011s ago: executing program 8 (id=3499): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 7m4.450590036s ago: executing program 48 (id=3499): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 5m13.268085368s ago: executing program 6 (id=3628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) close(r3) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 5m4.260014896s ago: executing program 6 (id=3636): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x1, 0x3, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3"}) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r4 = shmat(r3, &(0x7f0000ff8000/0x4000)=nil, 0x5000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000240)={[{@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlateno}]}, 0x4, 0x354, &(0x7f0000000900)="$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") shmdt(r4) 4m59.197135588s ago: executing program 6 (id=3642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m56.445389785s ago: executing program 6 (id=3646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) syz_emit_ethernet(0x76, 0x0, 0x0) 4m49.314165497s ago: executing program 6 (id=3655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x200, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) msgget(0x3, 0x200) 4m44.214980201s ago: executing program 6 (id=3657): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}}, 0x0) 4m28.679183527s ago: executing program 49 (id=3657): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}}, 0x0) 4m21.715845345s ago: executing program 1 (id=3671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff3, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x0, 0x7, 0x1, 0x1, 0xc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m12.368834071s ago: executing program 1 (id=3681): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) 4m6.438078195s ago: executing program 1 (id=3689): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3m59.576319221s ago: executing program 1 (id=3697): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 3m54.382273647s ago: executing program 1 (id=3702): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 3m49.615528822s ago: executing program 1 (id=3706): socket$kcm(0x29, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x9, 0x2, 0x4) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x4b162cd8, 0x141) ioctl$FE_SET_PROPERTY(r3, 0x40086f52, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) 3m34.058159019s ago: executing program 50 (id=3706): socket$kcm(0x29, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x9, 0x2, 0x4) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x4b162cd8, 0x141) ioctl$FE_SET_PROPERTY(r3, 0x40086f52, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) 3m13.567139345s ago: executing program 9 (id=3745): socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, &(0x7f00000000c0)="86", 0x1) tkill(r2, 0xb) setrlimit(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), 0x0) 3m12.308393305s ago: executing program 9 (id=3747): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m10.793365712s ago: executing program 9 (id=3749): r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000002c0)={0x8, 0x8, {0x0}, {}, 0x9, 0x5}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000300)=r5) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 3m8.041688649s ago: executing program 9 (id=3752): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000240)={[{@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlateno}]}, 0x4, 0x354, &(0x7f0000000900)="$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") shmdt(0x0) 3m2.045287934s ago: executing program 9 (id=3757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) syz_emit_ethernet(0x76, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m58.686785225s ago: executing program 9 (id=3761): add_key(0x0, 0x0, &(0x7f0000000180)="6e0c9b6b38d8854d85727d43ce556eb22c5cb5fc81ee9f9941ba0c6c60c1ab528285e82284ed3c1478e8aea7dc02172e3a9755e16789af43f35444c503b905f0f48c295eead1cb90085023fb1d3546e33e6107011b1d3963eff1de242c4d51df88ffa9ef6dded54bd702fc891616a60466b0771476907653531caff22970069d23a621056e995789b2d6982d03f9c70ccf029dbb31868224a803744fe50b1497de47c94a58b49784ac42a2a16cb020fe53504bef26a4bc09df87bd132ff20d29544352f2ccc6ab2fb5ab1bbf820fec0af6b091e26d0f4af751a4ce", 0xdb, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2m43.60985504s ago: executing program 51 (id=3761): add_key(0x0, 0x0, &(0x7f0000000180)="6e0c9b6b38d8854d85727d43ce556eb22c5cb5fc81ee9f9941ba0c6c60c1ab528285e82284ed3c1478e8aea7dc02172e3a9755e16789af43f35444c503b905f0f48c295eead1cb90085023fb1d3546e33e6107011b1d3963eff1de242c4d51df88ffa9ef6dded54bd702fc891616a60466b0771476907653531caff22970069d23a621056e995789b2d6982d03f9c70ccf029dbb31868224a803744fe50b1497de47c94a58b49784ac42a2a16cb020fe53504bef26a4bc09df87bd132ff20d29544352f2ccc6ab2fb5ab1bbf820fec0af6b091e26d0f4af751a4ce", 0xdb, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m32.834832163s ago: executing program 4 (id=3854): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 1m31.938959525s ago: executing program 4 (id=3858): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.813586856s ago: executing program 4 (id=3864): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) fsopen(&(0x7f00000000c0)='udf\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='p:my_rrobe ./file0:0', 0x14) write(r0, &(0x7f0000000200)='p:my_rrobe ./file0:0', 0x14) listen(0xffffffffffffffff, 0x90004) 1m28.947925407s ago: executing program 4 (id=3868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56a7, &(0x7f0000000040)={0x0, 0x917b, 0xc000, 0x2, 0xc9}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m21.566410446s ago: executing program 4 (id=3873): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000000)={0x8000000000000000, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x1, 0x64, 0xe, 0x0, 0x3, 0xfc}, {0x3000, 0x200000, 0x0, 0x0, 0x0, 0xff, 0x80, 0x40, 0x6, 0x1, 0x4, 0x2}, {0x9000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x80a0000, 0xb000, 0x3, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x42}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0xee, 0x6, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {0xc000}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xc, 0x8000, 0x0, [0xdd41, 0x0, 0x4]}) 1m20.686367757s ago: executing program 5 (id=3773): preadv(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1m20.218530468s ago: executing program 4 (id=3878): mknod$loop(0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") sched_setattr(0x0, 0x0, 0x0) unshare(0x40000000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a89, 0xad70, 0x2, &(0x7f00000000c0)={[0x5a36]}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m16.692486514s ago: executing program 5 (id=3880): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_procfs(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000053f000/0x1000)=nil, 0x3f, 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x3, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r5, r5}, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={'sha256\x00'}}) 1m4.962025858s ago: executing program 52 (id=3878): mknod$loop(0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") sched_setattr(0x0, 0x0, 0x0) unshare(0x40000000) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a89, 0xad70, 0x2, &(0x7f00000000c0)={[0x5a36]}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m1.56835764s ago: executing program 53 (id=3880): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_procfs(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f000053f000/0x1000)=nil, 0x3f, 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x3, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r5, r5}, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={'sha256\x00'}}) 32.572864502s ago: executing program 3 (id=3924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd756, 0x3000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x2, 0x3fff, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc650, 0x40, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4014, {0x3c9, 0x0, 0xfffffffc, 0x80000000, 0x3, 0xfff}}) 31.194624825s ago: executing program 3 (id=3927): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 30.605680979s ago: executing program 3 (id=3928): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) capset(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x90000, 0x8f, 0x8, 0x7, 0xd, "de85ffdc52c3f369c74ecccb2413fb617757da"}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 26.379234821s ago: executing program 3 (id=3931): userfaultfd(0x80801) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='.\x00\x00'], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 25.059581443s ago: executing program 3 (id=3933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) sched_setaffinity(r2, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) 21.298498125s ago: executing program 0 (id=3935): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) 18.20296731s ago: executing program 3 (id=3936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 13.22821054s ago: executing program 0 (id=3943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000440)='./file0\x00', 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) execve(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x14000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 13.018348035s ago: executing program 2 (id=3889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'veth1_macvtap\x00', {}, 0xfffd}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x80000000000000a, 0x2, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="7a09b53669be5919a3e8", 0xa, 0xfffffffffffffffe) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 9.819943452s ago: executing program 0 (id=3948): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$inet(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 7.540095287s ago: executing program 2 (id=3952): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) 7.066944889s ago: executing program 0 (id=3953): r0 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x19, {0x3, 0xc82}, 0xb}, 0x1) 6.458829754s ago: executing program 2 (id=3956): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x2, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff30}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 5.676081583s ago: executing program 0 (id=3957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000400)={0x25b, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x0, 0x8}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, 0x4e20, 0x9, 0x4e24, 0x2, 0x2, 0x0, 0xa0, 0x4, 0x0, r8}, {0x3d46, 0x4, 0xfffffffffffffff7, 0x6, 0x80, 0x1, 0x98e, 0x5}, {0x8, 0xfffffffffffffff9, 0x0, 0x3}, 0x2, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3503, 0x0, 0x2, 0x5, 0xfae, 0x101, 0xc}}, 0xe4) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 4.276252067s ago: executing program 7 (id=3959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x2ce, 0x0, 0x1, r2}) 3.893277405s ago: executing program 7 (id=3960): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5cec, 0x2, 0x3432564e, 0x7, 0x0, [{0x0, 0xfffffffd}, {0xf, 0xe}, {0x7, 0x6c4}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x6}, {0x282}, {0x2, 0x8cb}], 0x8, 0x8, 0x1, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) 3.560051384s ago: executing program 7 (id=3961): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x200400d1}, 0x404c000) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2000) 3.066865166s ago: executing program 54 (id=3936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 2.995977927s ago: executing program 7 (id=3963): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x7, 0x36e, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 2.339302503s ago: executing program 7 (id=3964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0xfffffffffffffffe}, {0x40000001, 0x0, 0x8000000000000000}]}) 1.800531846s ago: executing program 7 (id=3965): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000300)="7a9c8e9a7940", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=3966): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) kernel console output (not intermixed with test programs): ms! [ 1091.289043][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.348588][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.391704][T17592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.505283][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.574439][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.618027][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.663176][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.702575][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.758184][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.806793][T17592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.955612][T17592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.009327][T17592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.018103][T17592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.079457][T17592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.125934][T15222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.152012][T15222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.458998][T15222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.485039][T15222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.552805][T15081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.567187][T15081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.136127][T17912] wg1: entered promiscuous mode [ 1098.151511][T17912] wg1: entered allmulticast mode [ 1102.658515][T17940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.786744][T17940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.956611][T17940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.076288][T17940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.643688][T18002] overlayfs: failed to clone upperpath [ 1116.048270][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.054731][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.156027][T18195] futex_wake_op: syz.9.3337 tries to shift op by 32; fix this program [ 1123.138237][T18207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1123.155751][T18207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1123.166009][T18207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1123.176003][T18207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1123.184857][T18207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1123.192693][T18207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1123.774495][T18206] chnl_net:caif_netlink_parms(): no params data found [ 1124.153842][T18206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.182470][T18206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.213681][T18206] bridge_slave_0: entered allmulticast mode [ 1124.230745][T18206] bridge_slave_0: entered promiscuous mode [ 1124.250554][T18206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.290083][T18206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.297395][T18206] bridge_slave_1: entered allmulticast mode [ 1124.330108][T18206] bridge_slave_1: entered promiscuous mode [ 1124.453913][T18206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.515916][T18206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.646646][T18206] team0: Port device team_slave_0 added [ 1124.876777][T18206] team0: Port device team_slave_1 added [ 1125.109494][T18206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.116615][T18206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.228850][T18206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.245836][T18207] Bluetooth: hci0: command tx timeout [ 1125.309850][T18206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.359205][T18206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.465101][T18206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.309408][T18207] Bluetooth: hci0: command tx timeout [ 1129.389349][T18207] Bluetooth: hci0: command tx timeout [ 1131.469356][T18207] Bluetooth: hci0: command tx timeout [ 1132.564283][T18206] hsr_slave_0: entered promiscuous mode [ 1132.619977][T18206] hsr_slave_1: entered promiscuous mode [ 1132.751467][T18206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1132.769866][T18206] Cannot create hsr debugfs directory [ 1135.407332][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3348'. [ 1135.501081][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3348'. [ 1135.766683][T18287] loop0: detected capacity change from 0 to 1024 [ 1135.950555][T18287] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1136.262991][T18287] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.3347: lblock 2 mapped to illegal pblock 2 (length 1) [ 1136.416887][T18287] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1136.437626][T18287] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.3347: lblock 0 mapped to illegal pblock 48 (length 1) [ 1136.483772][T18287] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1136.520707][T18287] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.3347: Failed to acquire dquot type 0 [ 1136.639888][T18287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1136.766329][T18287] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3347: mark_inode_dirty error [ 1136.879592][T18287] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1136.904649][T18287] EXT4-fs (loop0): 1 orphan inode deleted [ 1136.937883][T15222] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1136.977210][T18287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.015135][T15222] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1137.122430][T15222] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 1137.210468][T18287] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 1137.288227][T18287] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1137.300043][T18307] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1137.386378][T18287] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.275433][T18322] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14554] was attempted by " [ 1138.558937][T15081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.117427][T15081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.394118][T15081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.645183][T15081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.833946][T18207] Bluetooth: hci6: Malformed Event: 0x2f [ 1139.934117][T18206] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1139.995897][T18206] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1140.077794][T18206] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1140.180030][T18206] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1140.801096][T18343] tipc: Enabling of bearer rejected, failed to enable media [ 1141.562625][T18206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.863070][T18206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.313454][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.320760][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.545362][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.552704][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.105754][T18206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.741386][T18206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.687068][T18206] veth0_vlan: entered promiscuous mode [ 1150.754547][T18206] veth1_vlan: entered promiscuous mode [ 1150.884213][T18206] veth0_macvtap: entered promiscuous mode [ 1150.924250][T18206] veth1_macvtap: entered promiscuous mode [ 1151.005688][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.037364][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.079290][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.108467][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.138049][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.161895][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.201238][T18206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.242017][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.284137][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.325401][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.347617][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.376419][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.411048][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.441077][T18206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.481098][T18206] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.503596][T18206] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.539691][T18206] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.558786][T18206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.083437][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.148550][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.497970][T15222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.528262][T15222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.189830][T15081] hsr_slave_0: left promiscuous mode [ 1163.219024][T15081] hsr_slave_1: left promiscuous mode [ 1163.287449][T15081] bridge_slave_1: left allmulticast mode [ 1163.303934][T15081] bridge_slave_1: left promiscuous mode [ 1163.329804][T15081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.410109][T15081] bridge_slave_0: left allmulticast mode [ 1163.415943][T15081] bridge_slave_0: left promiscuous mode [ 1163.453705][T15403] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1163.468401][T15403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1163.486391][T15403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1163.508873][T15403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1163.518250][T15403] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1163.526384][T15403] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1163.577640][T15081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.039831][T15081] veth1_macvtap: left promiscuous mode [ 1164.045470][T15081] veth0_macvtap: left promiscuous mode [ 1164.070008][T15081] veth1_vlan: left promiscuous mode [ 1164.855276][T15081] veth0_vlan: left promiscuous mode [ 1165.630303][T15403] Bluetooth: hci3: command tx timeout [ 1167.723491][T18207] Bluetooth: hci3: command tx timeout [ 1169.312876][T18207] Bluetooth: hci1: command 0x0406 tx timeout [ 1169.335283][T15081] team0 (unregistering): Port device team_slave_1 removed [ 1169.632385][T15081] team0 (unregistering): Port device team_slave_0 removed [ 1169.776946][T15081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.817152][T15403] Bluetooth: hci3: command tx timeout [ 1169.970719][T15081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.143638][T15081] bond0 (unregistering): Released all slaves [ 1171.378883][T18511] tipc: Enabling of bearer rejected, failed to enable media [ 1171.910431][T15403] Bluetooth: hci3: command tx timeout [ 1174.352904][T18561] netlink: 'syz.8.3390': attribute type 1 has an invalid length. [ 1174.553624][T18563] netlink: 232 bytes leftover after parsing attributes in process `syz.8.3390'. [ 1174.740454][T18563] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.3390'. [ 1174.768928][T18564] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.3390'. [ 1177.484021][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.316870][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.702858][T18462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.971979][T18588] tipc: Enabled bearer , priority 0 [ 1179.143168][T18462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.214476][T18484] chnl_net:caif_netlink_parms(): no params data found [ 1179.257421][T18597] netlink: 'syz.9.3398': attribute type 1 has an invalid length. [ 1179.512527][T18599] veth3: entered allmulticast mode [ 1179.547031][T18599] bond0: (slave veth3): Enslaving as an active interface with a down link [ 1179.611466][T18595] bond0: (slave veth0_to_bond): making interface the new active one [ 1179.652169][T18595] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1179.727140][T18462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.808263][T18597] macvlan4: entered promiscuous mode [ 1179.850589][T18597] macvlan4: entered allmulticast mode [ 1179.861584][T18597] bond0: entered promiscuous mode [ 1179.909391][T18597] veth0_to_bond: entered promiscuous mode [ 1179.961443][T18597] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1180.009865][T18597] bond0: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1180.055669][T18597] bond0: left promiscuous mode [ 1180.071298][T18597] veth0_to_bond: left promiscuous mode [ 1180.494427][T18462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.679303][ T56] tipc: Node number set to 855553678 [ 1184.078954][T18484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.113769][T18484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.150724][T18484] bridge_slave_0: entered allmulticast mode [ 1184.209458][T18484] bridge_slave_0: entered promiscuous mode [ 1184.253901][T18484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.299997][T18484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.337935][T18484] bridge_slave_1: entered allmulticast mode [ 1184.376629][T18484] bridge_slave_1: entered promiscuous mode [ 1184.798356][T18484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.866653][T18484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.157695][T18484] team0: Port device team_slave_0 added [ 1185.198728][T18484] team0: Port device team_slave_1 added [ 1186.255620][T18484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.272435][T18484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.308390][T18484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.621738][T18484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.628857][T18484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.176693][T18484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.306994][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3410'. [ 1188.660775][T18484] hsr_slave_0: entered promiscuous mode [ 1188.700074][T18484] hsr_slave_1: entered promiscuous mode [ 1188.723226][T18484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.736605][T18484] Cannot create hsr debugfs directory [ 1195.903972][T18713] netlink: 'syz.6.3418': attribute type 1 has an invalid length. [ 1195.951618][T18712] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1196.418111][T18716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1196.430340][T18716] bond1: (slave bond2): making interface the new active one [ 1196.440956][T18716] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1197.522890][T18713] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1197.658353][T18462] hsr_slave_0: left promiscuous mode [ 1197.678679][T18462] hsr_slave_1: left promiscuous mode [ 1197.704409][T18462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.729983][T18462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.748589][T18462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.779898][T18462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.800983][T18462] bridge_slave_1: left allmulticast mode [ 1197.806793][T18462] bridge_slave_1: left promiscuous mode [ 1197.823446][T18462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.854123][T18462] bridge_slave_0: left allmulticast mode [ 1197.862044][T18462] bridge_slave_0: left promiscuous mode [ 1197.899670][T18462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.238354][T18462] veth1_macvtap: left promiscuous mode [ 1198.270437][T18462] veth0_macvtap: left promiscuous mode [ 1198.285632][T18462] veth1_vlan: left promiscuous mode [ 1198.315665][T18462] veth0_vlan: left promiscuous mode [ 1200.484619][T18462] team0 (unregistering): Port device team_slave_1 removed [ 1200.566663][T18462] team0 (unregistering): Port device team_slave_0 removed [ 1200.696650][T18462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.783779][T18462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.515948][T18462] bond0 (unregistering): Released all slaves [ 1201.666853][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3424'. [ 1202.003461][T18741] tipc: Started in network mode [ 1202.008871][T18741] tipc: Node identity 1270df089f39, cluster identity 4711 [ 1202.023076][T18741] tipc: Enabled bearer , priority 0 [ 1202.036448][T18742] syzkaller0: entered promiscuous mode [ 1202.055510][T18742] syzkaller0: entered allmulticast mode [ 1202.386067][T18742] tipc: Resetting bearer [ 1202.568235][T18742] tipc: Disabling bearer [ 1206.909393][T18806] IPv6: NLM_F_CREATE should be specified when creating new route [ 1207.324191][T18484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1207.370106][T18484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1207.930211][T18484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1208.082009][T18484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1208.779483][T18484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.342388][T18484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.567553][T18461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.574829][T18461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.680671][T18461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.687911][T18461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.521512][T18207] Bluetooth: hci0: command 0x0406 tx timeout [ 1212.656163][T18484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1213.088013][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3440'. [ 1218.112495][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3445'. [ 1218.713127][T18484] veth0_vlan: entered promiscuous mode [ 1219.282155][T18484] veth1_vlan: entered promiscuous mode [ 1219.366991][T18875] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3449'. [ 1220.522280][T18484] veth0_macvtap: entered promiscuous mode [ 1220.592581][T18484] veth1_macvtap: entered promiscuous mode [ 1220.735562][T18484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.799083][T18484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.854192][T18484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.878989][T18484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.903984][T18484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.926042][T18484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.945066][T18484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.033570][T18484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.082239][T18484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.102943][T18484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.150013][T18484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.196030][T18484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.233989][T18484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.302835][T18484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.401465][T18484] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.435913][T18484] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.483559][T18484] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.527456][T18484] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.952548][T18207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.966658][T18207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.976370][T18207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.985276][T18207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.995965][T18207] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1225.004132][T18207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1225.656864][T18903] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3453'. [ 1227.089479][T18207] Bluetooth: hci1: command tx timeout [ 1227.096582][T18903] bond0: entered allmulticast mode [ 1227.130262][T18903] bond_slave_0: entered allmulticast mode [ 1227.146956][T18903] bond_slave_1: entered allmulticast mode [ 1227.943775][T18461] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.124763][T18934] loop8: detected capacity change from 0 to 512 [ 1228.286604][T18934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1228.300281][T18934] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.462118][T18206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.483097][T18461] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.154766][T18207] Bluetooth: hci1: command tx timeout [ 1230.022200][T18461] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.880147][T18461] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.897235][T18961] Bluetooth: MGMT ver 1.22 [ 1231.058146][T18907] chnl_net:caif_netlink_parms(): no params data found [ 1231.229514][T18207] Bluetooth: hci1: command tx timeout [ 1231.692466][T18907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.722918][T18907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.761573][T18907] bridge_slave_0: entered allmulticast mode [ 1231.790654][T18907] bridge_slave_0: entered promiscuous mode [ 1231.845132][T18907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.871986][T18907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.914876][T18907] bridge_slave_1: entered allmulticast mode [ 1231.975211][T18907] bridge_slave_1: entered promiscuous mode [ 1232.157059][T18907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.247427][T18907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.309164][T15403] Bluetooth: hci1: command tx timeout [ 1234.331639][T18907] team0: Port device team_slave_0 added [ 1234.411298][T18907] team0: Port device team_slave_1 added [ 1234.605728][T18907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.662930][T18907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.819211][T18907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.886153][T18907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.162995][T18907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.688006][T18907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.670820][T18907] hsr_slave_0: entered promiscuous mode [ 1236.763194][T18907] hsr_slave_1: entered promiscuous mode [ 1238.935152][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.942074][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.953474][T19048] syzkaller0: entered promiscuous mode [ 1244.239292][T19048] syzkaller0: entered allmulticast mode [ 1244.681455][T19081] dns_resolver: Unsupported server list version (6) [ 1245.960535][T19080] netlink: 'syz.6.3467': attribute type 1 has an invalid length. [ 1246.279425][T18207] Bluetooth: hci0: command 0x0406 tx timeout [ 1247.218348][T18461] hsr_slave_0: left promiscuous mode [ 1248.433725][T18461] hsr_slave_1: left promiscuous mode [ 1251.974529][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.991731][T18461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.027130][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.061565][T18461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.090314][T18461] bridge_slave_1: left allmulticast mode [ 1252.116473][T18461] bridge_slave_1: left promiscuous mode [ 1252.139554][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.359570][T15403] Bluetooth: hci6: unexpected event for opcode 0x2010 [ 1252.801217][T18461] bridge_slave_0: left allmulticast mode [ 1252.817238][T18461] bridge_slave_0: left promiscuous mode [ 1252.847965][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.200779][T18461] veth1_macvtap: left promiscuous mode [ 1253.206415][T18461] veth0_macvtap: left promiscuous mode [ 1253.400833][T18461] veth1_vlan: left promiscuous mode [ 1253.487933][T18461] veth0_vlan: left promiscuous mode [ 1260.829464][T18207] Bluetooth: hci0: command 0x0406 tx timeout [ 1264.726682][T19194] loop8: detected capacity change from 0 to 512 [ 1264.805853][T19194] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1264.843223][T19194] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.3494: corrupted inode contents [ 1264.952177][T19194] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1265.008319][T19194] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #15: comm syz.8.3494: corrupted inode contents [ 1265.063335][T19194] EXT4-fs error (device loop8): ext4_evict_inode:302: inode #15: comm syz.8.3494: mark_inode_dirty error [ 1265.126407][T19194] EXT4-fs (loop8): 1 orphan inode deleted [ 1265.142614][T19194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1265.376057][T18206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.713055][T18461] team0 (unregistering): Port device team_slave_1 removed [ 1268.139159][T19220] atomic_op ffff888077b05998 conn xmit_atomic 0000000000000000 [ 1268.372707][T18461] team0 (unregistering): Port device team_slave_0 removed [ 1268.798150][T19215] syz.6.3501 (19215) used greatest stack depth: 19048 bytes left [ 1269.737602][T18461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.876553][T18461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.889000][T18461] bond0 (unregistering): Released all slaves [ 1271.216730][T19224] syzkaller0: entered promiscuous mode [ 1271.234544][T19224] syzkaller0: entered allmulticast mode [ 1284.616955][T19285] CIFS: Attempting to mount //127.0.0.1/share [ 1284.681371][T19285] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1284.737637][T19285] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1285.541863][T15403] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1285.560819][T15403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1285.577211][T15403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1285.589919][T15403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1285.604481][T15403] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1285.633330][T13979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1285.660192][T13979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1285.702726][T19295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1285.711573][T19295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1285.724371][T19295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1285.734047][T19295] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1285.741634][T19295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1287.712018][T19295] Bluetooth: hci3: command tx timeout [ 1287.789232][T19295] Bluetooth: hci4: command tx timeout [ 1287.875843][T19287] chnl_net:caif_netlink_parms(): no params data found [ 1288.228010][T19292] chnl_net:caif_netlink_parms(): no params data found [ 1288.548834][T19287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.569220][T19287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.576551][T19287] bridge_slave_0: entered allmulticast mode [ 1288.629565][T19287] bridge_slave_0: entered promiscuous mode [ 1288.717214][T19287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.739358][T19287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.764815][T19287] bridge_slave_1: entered allmulticast mode [ 1288.790829][T19287] bridge_slave_1: entered promiscuous mode [ 1288.931083][T19292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.938330][T19292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.986043][T19292] bridge_slave_0: entered allmulticast mode [ 1289.013151][T19292] bridge_slave_0: entered promiscuous mode [ 1289.043161][T19287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.090880][T19292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.098105][T19292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.129481][T19292] bridge_slave_1: entered allmulticast mode [ 1289.150688][T19292] bridge_slave_1: entered promiscuous mode [ 1289.190266][T19287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.385108][T19287] team0: Port device team_slave_0 added [ 1289.451532][T19287] team0: Port device team_slave_1 added [ 1289.522458][T19292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.789830][T19295] Bluetooth: hci3: command tx timeout [ 1289.869908][T19295] Bluetooth: hci4: command tx timeout [ 1291.869692][T19295] Bluetooth: hci3: command tx timeout [ 1291.949200][T19295] Bluetooth: hci4: command tx timeout [ 1293.949932][T19295] Bluetooth: hci3: command tx timeout [ 1294.029586][T19295] Bluetooth: hci4: command tx timeout [ 1295.043294][T19292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.114361][T19287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.149606][T19287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.185497][T19287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.323937][T19287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.363036][T19287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.490345][T19287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.565801][T19292] team0: Port device team_slave_0 added [ 1295.692033][T19292] team0: Port device team_slave_1 added [ 1295.983393][T19292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.036804][T19292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.170171][T19292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.222585][T19292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.253347][T19292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.366414][T19292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.483620][T19287] hsr_slave_0: entered promiscuous mode [ 1296.521727][T19287] hsr_slave_1: entered promiscuous mode [ 1296.545449][T19287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.579325][T19287] Cannot create hsr debugfs directory [ 1296.820201][T19292] hsr_slave_0: entered promiscuous mode [ 1296.843158][T19292] hsr_slave_1: entered promiscuous mode [ 1296.864834][T19292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.884229][T19292] Cannot create hsr debugfs directory [ 1301.133696][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.158633][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.295310][T18461] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.743163][T18461] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.951536][T18461] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.182382][T18461] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.917994][T18461] tipc: Left network mode [ 1303.529878][T19287] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1303.725664][T19287] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1303.784208][T19287] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1303.813421][T19287] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1304.666942][T19409] netlink: 'syz.9.3522': attribute type 1 has an invalid length. [ 1304.776836][T19410] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1304.809172][T19410] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1304.838386][T19410] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1304.867680][T19410] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1304.895913][T19410] bond3: (slave geneve3): making interface the new active one [ 1304.914232][T19410] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1305.091840][T19412] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3522'. [ 1305.113812][T19412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1305.226670][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3521'. [ 1305.752431][T19287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.878157][T19287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.510605][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.517905][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.535504][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.542851][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.586969][T19438] bond1: option mode: unable to set because the bond device has slaves [ 1307.638853][T19441] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1307.657099][T19441] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 1307.898453][T19292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1308.011702][T19292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1308.025701][T19292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1308.205687][T19292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1308.277870][T18461] hsr_slave_0: left promiscuous mode [ 1308.314290][T18461] hsr_slave_1: left promiscuous mode [ 1308.344579][T18461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.380384][T18461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.425437][T18461] bridge_slave_1: left allmulticast mode [ 1308.452202][T18461] bridge_slave_1: left promiscuous mode [ 1308.475930][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.517524][T18461] bridge_slave_0: left allmulticast mode [ 1308.533542][T18461] bridge_slave_0: left promiscuous mode [ 1308.551241][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.596940][T18461] hsr_slave_0: left promiscuous mode [ 1308.618673][T18461] hsr_slave_1: left promiscuous mode [ 1308.646215][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.665843][T18461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.687330][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.704968][T18461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.727332][T18461] bridge_slave_1: left allmulticast mode [ 1308.748910][T18461] bridge_slave_1: left promiscuous mode [ 1308.767399][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.871040][T18461] bridge_slave_0: left allmulticast mode [ 1308.876822][T18461] bridge_slave_0: left promiscuous mode [ 1308.894399][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.991741][T18461] veth1_macvtap: left promiscuous mode [ 1308.997369][T18461] veth0_macvtap: left promiscuous mode [ 1309.012102][T18461] veth1_vlan: left promiscuous mode [ 1309.023701][T18461] veth0_vlan: left promiscuous mode [ 1309.813772][T18461] team0 (unregistering): Port device team_slave_1 removed [ 1309.912969][T18461] team0 (unregistering): Port device team_slave_0 removed [ 1310.008900][T18461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.091921][T18461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.416750][T18461] bond0 (unregistering): Released all slaves [ 1312.799561][T18461] team0 (unregistering): Port device team_slave_1 removed [ 1312.947267][T18461] team0 (unregistering): Port device team_slave_0 removed [ 1313.102118][T18461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.118356][T18461] bond_slave_1 (unregistering): left allmulticast mode [ 1313.276573][T18461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.294860][T18461] bond_slave_0 (unregistering): left allmulticast mode [ 1314.507656][T18461] bond0 (unregistering): Released all slaves [ 1315.276486][T19292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.446980][T19292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.564053][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.571325][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.648291][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.655656][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.962958][T19292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1316.171267][T19287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.349775][T19292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.588677][T19292] veth0_vlan: entered promiscuous mode [ 1320.692018][T19292] veth1_vlan: entered promiscuous mode [ 1320.893825][T19292] veth0_macvtap: entered promiscuous mode [ 1320.953084][T19292] veth1_macvtap: entered promiscuous mode [ 1321.120338][T19292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.169604][T19292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.210035][T19292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.249284][T19292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.286611][T19292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.333425][T19292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.376458][T19292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.417380][T19292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.444545][T19292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.482916][T19292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.530249][T19287] veth0_vlan: entered promiscuous mode [ 1321.558715][T19292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.609272][T19292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.648729][T19292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.694312][T19292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.768485][T19287] veth1_vlan: entered promiscuous mode [ 1322.160662][T19287] veth0_macvtap: entered promiscuous mode [ 1322.209794][T15333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.217691][T15333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.275646][T19287] veth1_macvtap: entered promiscuous mode [ 1322.382902][T15333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.398722][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.426714][T15333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.459090][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.483957][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.520532][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.559345][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.595550][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.611057][T19287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.725816][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.776231][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.810589][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.861192][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.185524][T19287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.206807][T19287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.238930][T19287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.255191][T19287] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.294781][T19287] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.329405][T19287] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.782322][T19287] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.540027][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.594613][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.763066][T18379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.812233][T18379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.000495][T19544] tipc: Started in network mode [ 1326.035713][T19544] tipc: Node identity b608bbb74f, cluster identity 4711 [ 1326.062630][T19544] tipc: Enabled bearer , priority 0 [ 1326.083170][T19547] syzkaller0: entered promiscuous mode [ 1326.088713][T19547] syzkaller0: entered allmulticast mode [ 1326.140203][T19544] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1327.786560][T19551] tipc: Resetting bearer [ 1327.831365][T19542] tipc: Resetting bearer [ 1327.960523][T19550] syz.9.3542 (19550) used greatest stack depth: 17032 bytes left [ 1328.007262][T19542] tipc: Disabling bearer [ 1328.051339][ T5831] tipc: Node number set to 4178099127 [ 1328.077187][T19560] loop1: detected capacity change from 0 to 512 [ 1328.517007][T19560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1328.549486][T19560] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1329.372538][T19560] EXT4-fs (loop1): 1 truncate cleaned up [ 1329.381699][T19560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.707308][T19582] overlayfs: failed to clone lowerpath [ 1331.188314][T19594] loop7: detected capacity change from 0 to 128 [ 1331.251058][T19594] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1334.560292][T15333] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1335.991022][T19292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.401640][T19643] netlink: 'syz.9.3553': attribute type 12 has an invalid length. [ 1340.388373][T19663] loop7: detected capacity change from 0 to 1024 [ 1340.646455][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1340.696391][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1340.757072][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1340.810181][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1340.819503][ T28] audit: type=1800 audit(1786654391.231:1342): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3555" name="bus" dev="ramfs" ino=65659 res=0 errno=0 [ 1340.883457][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1340.937870][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.064379][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.112521][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.208371][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.256436][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.293112][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.319728][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.607825][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.629105][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.658021][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.678169][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.715482][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.740415][T19666] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.767497][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1341.788102][T19663] hfsplus: request for non-existent node 33423360 in B*Tree [ 1343.979654][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3564'. [ 1345.371984][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3565'. [ 1347.621854][T19717] sctp: [Deprecated]: syz.1.3566 (pid 19717) Use of int in max_burst socket option deprecated. [ 1347.621854][T19717] Use struct sctp_assoc_value instead [ 1352.598484][T19739] loop1: detected capacity change from 0 to 512 [ 1353.468760][T19739] EXT4-fs (loop1): 1 orphan inode deleted [ 1353.490324][T15081] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1353.527519][T19739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.570450][T15081] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 1354.203996][ T5814] IPVS: starting estimator thread 0... [ 1354.409172][T19770] IPVS: using max 16 ests per chain, 38400 per kthread [ 1356.538879][T19739] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.969730][T19292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.200191][T19815] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1361.828652][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.837396][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.951941][T19836] tipc: Enabling of bearer rejected, failed to enable media [ 1361.972296][T19837] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl818) [ 1362.058838][T19838] loop7: detected capacity change from 0 to 512 [ 1367.640743][T19817] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1368.499398][T19930] syzkaller0: entered promiscuous mode [ 1368.514808][T19930] syzkaller0: entered allmulticast mode [ 1387.662578][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880317a5c00: rx timeout, send abort [ 1387.671707][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880317a5c00: 0x30100: (3) A timeout occurred and this is the connection abort to close the session. [ 1387.686338][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880317a4c00: rx timeout, send abort [ 1387.790238][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3613'. [ 1388.194615][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880317a4c00: abort rx timeout. Force session deactivation [ 1391.986389][T20233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.994124][T20233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.418855][T20233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.530814][T20233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.161089][T20233] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.173383][T20233] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.185450][T20233] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.197116][T20233] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.245336][T18207] Bluetooth: hci3: command 0x0406 tx timeout [ 1410.255559][T18207] Bluetooth: hci4: command 0x0406 tx timeout [ 1413.284323][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3639'. [ 1418.375919][ T28] audit: type=1326 audit(1786654466.691:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.9.3651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6619e0d9 code=0x7fc00000 [ 1418.568185][ T28] audit: type=1326 audit(1786654466.891:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.9.3651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda6613f459 code=0x7fc00000 [ 1420.320420][T20496] loop7: detected capacity change from 0 to 8 [ 1421.106997][T20494] syzkaller0: entered promiscuous mode [ 1421.161658][T20494] syzkaller0: entered allmulticast mode [ 1424.097297][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.104203][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.489169][T20523] syzkaller0: entered promiscuous mode [ 1426.494721][T20523] syzkaller0: entered allmulticast mode [ 1440.585815][T15403] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1440.598521][T15403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1440.619702][T15403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1440.630912][T15403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1440.642857][T15403] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1440.659348][T15403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1441.297892][T20645] chnl_net:caif_netlink_parms(): no params data found [ 1441.592066][T20645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.612990][T20645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.637858][T20645] bridge_slave_0: entered allmulticast mode [ 1441.661044][T20645] bridge_slave_0: entered promiscuous mode [ 1441.688351][T20645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.715071][T20645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.747149][T20645] bridge_slave_1: entered allmulticast mode [ 1441.760757][T20645] bridge_slave_1: entered promiscuous mode [ 1441.891753][T20645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.930804][T20645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.083812][T20645] team0: Port device team_slave_0 added [ 1442.102310][T20645] team0: Port device team_slave_1 added [ 1442.749424][T19295] Bluetooth: hci0: command tx timeout [ 1444.829249][T19295] Bluetooth: hci0: command tx timeout [ 1446.911354][T19295] Bluetooth: hci0: command tx timeout [ 1446.936124][T20645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.978722][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.080084][T20645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.320347][T20645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.339326][T20645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.417073][T20645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.122226][T20690] xt_CT: No such helper "pptp" [ 1448.243491][T20645] hsr_slave_0: entered promiscuous mode [ 1448.405475][T20645] hsr_slave_1: entered promiscuous mode [ 1449.310302][T19295] Bluetooth: hci0: command tx timeout [ 1449.316730][T20707] loop7: detected capacity change from 0 to 128 [ 1449.400499][T20707] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1449.415555][T20707] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1449.434525][T20707] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1457.795215][T20739] loop1: detected capacity change from 0 to 512 [ 1457.820840][T20739] EXT4-fs: Ignoring removed bh option [ 1458.651503][T20739] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.3681: corrupted in-inode xattr: e_value size too large [ 1458.806299][T20739] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3681: couldn't read orphan inode 15 (err -117) [ 1458.945243][T20739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1459.082559][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3683'. [ 1459.165095][T20756] vlan2: entered allmulticast mode [ 1459.225766][T20756] bridge1: entered allmulticast mode [ 1459.535252][T20758] bridge1: port 1(erspan0) entered blocking state [ 1459.585003][T20758] bridge1: port 1(erspan0) entered disabled state [ 1459.611498][T20758] erspan0: entered allmulticast mode [ 1459.630524][T20758] erspan0: entered promiscuous mode [ 1461.017803][T20645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1461.894707][T19292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1461.917605][T20645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1462.085568][T20645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1462.580836][T20782] Cannot find add_set index 0 as target [ 1463.717257][T20645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1463.856329][T20785] netlink: 'syz.1.3689': attribute type 1 has an invalid length. [ 1466.988448][T20785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1467.051258][T20788] macvlan2: entered promiscuous mode [ 1467.089062][T20788] macvlan2: entered allmulticast mode [ 1467.112097][T20788] bond1: entered allmulticast mode [ 1467.137219][T20788] bond1: entered promiscuous mode [ 1467.170688][T20788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1467.244320][T20788] team0: Port device macvlan2 added [ 1467.443880][T20790] bond1: (slave ip6gretap1): making interface the new active one [ 1467.709371][T20790] ip6gretap1: entered promiscuous mode [ 1467.717111][T20790] ip6gretap1: entered allmulticast mode [ 1468.324452][T20790] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1468.705476][T20817] team0 (unregistering): Port device team_slave_0 removed [ 1468.737860][T20817] team0 (unregistering): Port device team_slave_1 removed [ 1469.318284][T20645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.425768][T20645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.499650][T15333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.506907][T15333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.635818][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.643076][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.542980][T20645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.796066][T20645] veth0_vlan: entered promiscuous mode [ 1470.892748][T20645] veth1_vlan: entered promiscuous mode [ 1471.303167][T20645] veth0_macvtap: entered promiscuous mode [ 1471.771335][T20645] veth1_macvtap: entered promiscuous mode [ 1471.884661][T20645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.912268][T20645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.944116][T20645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.999497][T20645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.049239][T20645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.112290][T20645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.166100][T20645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1472.245598][T20645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.285908][T20645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.334958][T20645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.389725][T20645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.428749][T20645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.489547][T20645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.542951][T20645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.618789][T20645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.672434][T20645] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.708100][T20645] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.739313][T20645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.951820][T20836] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1475.326095][T20898] loop1: detected capacity change from 0 to 512 [ 1475.501844][T20898] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.3702: iget: bad i_size value: 38620345925642 [ 1475.522108][T15222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.530511][T15222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.688684][T20898] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3702: couldn't read orphan inode 15 (err -117) [ 1475.786236][T20898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1478.976031][ T5905] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:14: bg 0: block 5: invalid block bitmap [ 1478.994504][T20903] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3704'. [ 1479.014423][ T5916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.052031][ T5916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.076725][ T5905] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1479.629879][ T5905] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1479.629879][ T5905] [ 1479.649929][ T5905] EXT4-fs (loop1): Total free blocks count 0 [ 1479.666247][ T5905] EXT4-fs (loop1): Free/Dirty block details [ 1479.676646][ T5905] EXT4-fs (loop1): free_blocks=0 [ 1479.684569][ T5905] EXT4-fs (loop1): dirty_blocks=2252 [ 1479.693727][ T5905] EXT4-fs (loop1): Block reservation details [ 1479.703567][ T5905] EXT4-fs (loop1): i_reserved_data_blocks=2252 [ 1479.848857][ T5899] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 200 with error 28 [ 1481.982279][T15333] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.442880][T15333] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.855821][T15333] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.077563][T15333] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.960555][T15333] tipc: Disabling bearer [ 1484.065157][T15333] tipc: Left network mode [ 1485.120032][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.126405][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.152533][T20935] CIFS: Attempting to mount //127.0.0.1/share [ 1485.159827][T20935] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1485.167302][T20935] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1486.952622][T15333] bond1: (slave gretap1): Releasing backup interface [ 1488.875258][T15333] hsr_slave_0: left promiscuous mode [ 1488.898613][T15333] hsr_slave_1: left promiscuous mode [ 1489.205751][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.238041][T15333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.295249][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.357670][T15333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.371679][T19295] Bluetooth: hci6: unexpected event for opcode 0x1408 [ 1489.425545][T15333] bridge_slave_1: left allmulticast mode [ 1489.461419][T15333] bridge_slave_1: left promiscuous mode [ 1489.502615][T15333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.570607][T15333] bridge_slave_0: left allmulticast mode [ 1489.613774][T15333] bridge_slave_0: left promiscuous mode [ 1489.655655][T15333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.916868][T15333] veth1_macvtap: left promiscuous mode [ 1489.941482][T15333] veth0_macvtap: left promiscuous mode [ 1489.966908][T15333] veth1_vlan: left promiscuous mode [ 1494.099248][T15333] veth0_vlan: left promiscuous mode [ 1495.591333][T15403] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1495.616518][T15403] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1495.625671][T15403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1495.636151][T15403] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1495.644197][T15403] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1495.652012][T15403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1496.001311][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ef3f400: rx timeout, send abort [ 1496.010248][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ef3f400: 0x30100: (3) A timeout occurred and this is the connection abort to close the session. [ 1497.709658][T19295] Bluetooth: hci1: command tx timeout [ 1501.655757][T19295] Bluetooth: hci1: command tx timeout [ 1501.820721][T15333] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1501.840371][T15333] bond2 (unregistering): Released all slaves [ 1501.877612][T15333] bond1 (unregistering): Released all slaves [ 1503.316551][T15333] team0 (unregistering): Port device team_slave_1 removed [ 1503.416255][T15333] team0 (unregistering): Port device team_slave_0 removed [ 1503.497784][T15333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.591082][T15333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.722652][T19295] Bluetooth: hci1: command tx timeout [ 1504.331084][T15333] bond0 (unregistering): Released all slaves [ 1504.504630][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3723'. [ 1504.735950][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3724'. [ 1505.221266][T21018] overlayfs: failed to clone upperpath [ 1505.794178][T19295] Bluetooth: hci1: command tx timeout [ 1506.786311][T20998] chnl_net:caif_netlink_parms(): no params data found [ 1508.265230][T15333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.681397][T15333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.914759][T15333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.221827][T20998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.234183][T20998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.259218][T20998] bridge_slave_0: entered allmulticast mode [ 1511.283865][T20998] bridge_slave_0: entered promiscuous mode [ 1511.321471][T20998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.328781][T20998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.826752][T20998] bridge_slave_1: entered allmulticast mode [ 1511.860638][T20998] bridge_slave_1: entered promiscuous mode [ 1512.091996][T15333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.149627][T21089] futex_wake_op: syz.7.3740 tries to shift op by -1; fix this program [ 1512.421817][T20998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.495942][T20998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.848081][T20998] team0: Port device team_slave_0 added [ 1512.961129][T20998] team0: Port device team_slave_1 added [ 1513.795521][T20998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.849591][T20998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.216768][T20998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.852583][T20998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.888079][T20998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.979975][T20286] libceph: connect (1)[c::]:6789 error -1 [ 1514.991180][T20998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.009342][T20286] libceph: mon0 (1)[c::]:6789 connect error [ 1515.028390][T21134] ceph: No mds server is up or the cluster is laggy [ 1515.280594][T20286] libceph: connect (1)[c::]:6789 error -1 [ 1515.290859][T20286] libceph: mon0 (1)[c::]:6789 connect error [ 1515.823776][T20283] libceph: connect (1)[c::]:6789 error -1 [ 1515.849371][T20283] libceph: mon0 (1)[c::]:6789 connect error [ 1516.018560][T20998] hsr_slave_0: entered promiscuous mode [ 1516.089595][T20998] hsr_slave_1: entered promiscuous mode [ 1516.168286][T20998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1516.199432][T20998] Cannot create hsr debugfs directory [ 1516.917078][T15333] bond1: (slave ip6gretap1): Releasing active interface [ 1517.236124][T15333] ip6gretap1 (unregistering): left allmulticast mode [ 1520.292026][T21170] syzkaller0: entered promiscuous mode [ 1520.318307][T21170] syzkaller0: entered allmulticast mode [ 1522.716179][ T28] audit: type=1326 audit(1786654571.731:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1523.956423][ T28] audit: type=1326 audit(1786654571.741:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.026888][ T28] audit: type=1326 audit(1786654571.841:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.105238][ T28] audit: type=1326 audit(1786654571.851:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.165556][ T28] audit: type=1326 audit(1786654571.861:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.197438][ T28] audit: type=1326 audit(1786654571.931:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.279294][T15333] hsr_slave_0: left promiscuous mode [ 1524.293813][ T28] audit: type=1326 audit(1786654571.951:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.328095][T15333] hsr_slave_1: left promiscuous mode [ 1524.372328][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.399208][T15333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1524.407175][ T28] audit: type=1326 audit(1786654571.961:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.442494][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1524.466608][T15333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1524.508390][ T28] audit: type=1326 audit(1786654572.021:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.512012][T15333] bridge_slave_1: left allmulticast mode [ 1524.548176][ T28] audit: type=1326 audit(1786654572.041:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21200 comm="syz.7.3753" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1524.635550][T15333] bridge_slave_1: left promiscuous mode [ 1524.645580][T15333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.674188][T15333] bridge_slave_0: left allmulticast mode [ 1524.686777][T15333] bridge_slave_0: left promiscuous mode [ 1524.705623][T15333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.922096][T15333] bond1: left allmulticast mode [ 1524.927039][T15333] bond1: left promiscuous mode [ 1525.030893][T15333] veth1_macvtap: left promiscuous mode [ 1525.049060][T15333] veth0_macvtap: left promiscuous mode [ 1525.054761][T15333] veth1_vlan: left promiscuous mode [ 1525.103378][T15333] veth0_vlan: left promiscuous mode [ 1529.380762][T15333] team0 (unregistering): Port device macvlan2 removed [ 1532.729801][T15333] bond1 (unregistering): Released all slaves [ 1537.709634][ T9722] IPVS: starting estimator thread 0... [ 1537.799768][T21258] IPVS: using max 16 ests per chain, 38400 per kthread [ 1538.076229][T15333] team0 (unregistering): Port device team_slave_1 removed [ 1538.708277][T15333] team0 (unregistering): Port device team_slave_0 removed [ 1539.811895][T15333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.105746][T15333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1544.424311][T15333] bond0 (unregistering): Released all slaves [ 1544.799689][T21276] tipc: Enabling of bearer rejected, failed to enable media [ 1546.134945][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.141605][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.073530][T15403] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1547.087536][T15403] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1547.143811][T15403] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1547.162122][T15403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1547.211975][T15403] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1547.219887][T15403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1547.978467][T21315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.311714][T19295] Bluetooth: hci2: command tx timeout [ 1551.167229][T21234] syz_tun (unregistering): left allmulticast mode [ 1551.505609][T19295] Bluetooth: hci2: command tx timeout [ 1553.559940][T19295] Bluetooth: hci2: command tx timeout [ 1554.427229][ T5916] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.503774][ T5916] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1554.607467][T20998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1554.728212][T21310] chnl_net:caif_netlink_parms(): no params data found [ 1559.239384][T19295] Bluetooth: hci2: command tx timeout [ 1559.426056][ T5916] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.440083][ T5916] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1560.174862][ T5916] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.277143][ T5916] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1560.597705][ T5916] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.618487][T15403] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1560.639538][T15403] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1560.648506][T15403] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1560.662368][T15403] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1560.670852][T15403] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1560.678250][T15403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1560.758758][ T5916] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1561.139116][ T9722] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1561.311229][T21310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.334105][T21310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.351147][T21310] bridge_slave_0: entered allmulticast mode [ 1561.405239][ T9722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1561.417560][T21310] bridge_slave_0: entered promiscuous mode [ 1561.456031][ T9722] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 1561.477368][ T9722] usb 4-1: config 64 has no interface number 0 [ 1561.498769][ T9722] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 1561.547552][ T9722] usb 4-1: config 64 interface 44 has no altsetting 0 [ 1561.654585][T21310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.713147][ T9722] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 1561.796073][T21310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.806362][ T9722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.919922][T21310] bridge_slave_1: entered allmulticast mode [ 1561.939178][ T9722] usb 4-1: Product: syz [ 1561.975533][T21310] bridge_slave_1: entered promiscuous mode [ 1562.081175][ T9722] usb 4-1: Manufacturer: syz [ 1562.087527][ T9722] usb 4-1: SerialNumber: syz [ 1562.665186][T21388] overlayfs: failed to clone upperpath [ 1562.751937][T15403] Bluetooth: hci4: command tx timeout [ 1562.950006][T21310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.005194][T21310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1563.279919][T21310] team0: Port device team_slave_0 added [ 1563.286907][ T5916] tipc: Disabling bearer [ 1563.300230][ T5916] tipc: Left network mode [ 1563.377365][T21310] team0: Port device team_slave_1 added [ 1563.746178][T21310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.769181][T21310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.861297][T21310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.979799][T21310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.014401][T21310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.087418][T21310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.434515][T21366] chnl_net:caif_netlink_parms(): no params data found [ 1564.530806][T21310] hsr_slave_0: entered promiscuous mode [ 1564.550326][T21310] hsr_slave_1: entered promiscuous mode [ 1564.575352][T21310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1564.603144][T21310] Cannot create hsr debugfs directory [ 1564.830443][T15403] Bluetooth: hci4: command tx timeout [ 1565.069190][ T5916] bridge3: port 1(erspan0) entered disabled state [ 1565.140271][ T5916] erspan0 (unregistering): left allmulticast mode [ 1565.146781][ T5916] erspan0 (unregistering): left promiscuous mode [ 1565.179301][ T5916] bridge3: port 1(erspan0) entered disabled state [ 1565.403703][T21366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.426762][T21366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.469567][T21366] bridge_slave_0: entered allmulticast mode [ 1565.477412][T21366] bridge_slave_0: entered promiscuous mode [ 1565.624009][T21366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.648849][T21366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.657180][T21366] bridge_slave_1: entered allmulticast mode [ 1565.689363][T21366] bridge_slave_1: entered promiscuous mode [ 1565.874418][T21366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.909144][T15403] Bluetooth: hci4: command tx timeout [ 1568.510607][ T9722] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 1568.630999][ T9722] usb 4-1: USB disconnect, device number 5 [ 1568.854418][T21366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.989937][T15403] Bluetooth: hci4: command tx timeout [ 1575.569604][T21366] team0: Port device team_slave_0 added [ 1576.119904][T21366] team0: Port device team_slave_1 added [ 1577.642733][T21477] syz.3.3793 (21477): drop_caches: 2 [ 1579.469756][T21366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.486578][T21366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.517800][T21366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.770556][T21366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.851550][T21366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.969717][T21366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.167364][ T5916] hsr_slave_0: left promiscuous mode [ 1583.174275][ T5916] hsr_slave_1: left promiscuous mode [ 1583.249256][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.273471][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.311332][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.339000][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.387745][ T5916] bridge_slave_1: left allmulticast mode [ 1583.418494][ T5916] bridge_slave_1: left promiscuous mode [ 1583.418801][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.450990][ T5916] bridge_slave_0: left allmulticast mode [ 1583.451014][ T5916] bridge_slave_0: left promiscuous mode [ 1583.451214][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.617326][ T5916] veth1_macvtap: left promiscuous mode [ 1584.617592][ T5916] veth0_macvtap: left promiscuous mode [ 1584.618034][ T5916] veth1_vlan: left promiscuous mode [ 1584.618165][ T5916] veth0_vlan: left promiscuous mode [ 1586.484931][T21493] tty tty27: ldisc open failed (-12), clearing slot 26 [ 1586.767118][ T5916] bond1 (unregistering): (slave macvlan4): Releasing active interface [ 1586.804108][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1586.804121][ T28] audit: type=1326 audit(1786654637.221:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1586.882261][ T28] audit: type=1326 audit(1786654637.221:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1586.908781][ T5916] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1586.994876][ T28] audit: type=1326 audit(1786654637.241:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1587.027519][ T28] audit: type=1326 audit(1786654637.241:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1587.061936][ T28] audit: type=1326 audit(1786654637.241:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1587.102094][ T28] audit: type=1326 audit(1786654637.241:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1587.134836][ T28] audit: type=1326 audit(1786654637.241:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1587.168763][ T28] audit: type=1326 audit(1786654637.241:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1587.202223][ T28] audit: type=1326 audit(1786654637.241:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.3.3799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe12c39e0d9 code=0x7ffc0000 [ 1589.569488][ T5916] bond3 (unregistering): Released all slaves [ 1589.692490][ T5916] bond0 (unregistering): (slave veth3): Releasing active interface [ 1589.722027][ T5916] bond0 (unregistering): (slave veth3): the permanent HWaddr of slave - 52:02:ce:a4:37:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1589.843124][ T5916] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1589.864504][ T5916] bond0 (unregistering): Released all slaves [ 1589.986263][ T5916] bond1 (unregistering): (slave .`): Releasing active interface [ 1590.002011][ T5916] bond1 (unregistering): Released all slaves [ 1590.656288][ T5916] bond2 (unregistering): Released all slaves [ 1590.897792][T21521] loop3: detected capacity change from 0 to 32768 [ 1591.019926][T21521] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1591.044008][T21521] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1591.055462][T21521] BTRFS info (device loop3): setting nodatasum [ 1591.064198][T21521] BTRFS info (device loop3): force zlib compression, level 3 [ 1591.075325][T21521] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1591.113123][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3807'. [ 1591.125546][T21521] BTRFS info (device loop3): use lzo compression, level 0 [ 1591.141737][T21521] BTRFS info (device loop3): turning on flush-on-commit [ 1591.209263][T21521] BTRFS info (device loop3): enabling auto defrag [ 1591.238553][T21521] BTRFS info (device loop3): max_inline at 4096 [ 1591.269493][T21521] BTRFS info (device loop3): using free space tree [ 1591.516527][T21521] BTRFS info (device loop3): enabling ssd optimizations [ 1591.866112][T20645] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1593.458801][ T5916] team0 (unregistering): Port device team_slave_1 removed [ 1593.660388][ T5916] team0 (unregistering): Port device team_slave_0 removed [ 1593.891851][ T5916] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.061125][ T5916] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.138503][ T5916] team0 (unregistering): Port device bridge0 removed [ 1595.234830][ T5916] .` (unregistering): Released all slaves [ 1595.702541][T21366] hsr_slave_0: entered promiscuous mode [ 1595.754891][T21366] hsr_slave_1: entered promiscuous mode [ 1595.781700][T21366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1595.818995][T21366] Cannot create hsr debugfs directory [ 1596.555289][T21310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1596.623373][T21310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1596.740733][T21310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1596.780305][T21556] loop3: detected capacity change from 0 to 32768 [ 1596.803402][T21310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1596.937407][T21556] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1596.965238][T21556] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 1596.988235][T21556] XFS (loop3): log mount failed [ 1597.082572][ T5916] IPVS: stop unused estimator thread 0... [ 1597.919108][ T9722] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1598.147014][ T9722] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1598.186420][T21310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.191310][ T9722] usb 4-1: config 0 has no interface number 0 [ 1598.263993][ T9722] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1598.284736][T21310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.290665][ T9722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.337269][ T9722] usb 4-1: Product: syz [ 1598.356770][ T9722] usb 4-1: Manufacturer: syz [ 1598.377246][ T9722] usb 4-1: SerialNumber: syz [ 1598.445530][ T9722] usb 4-1: config 0 descriptor?? [ 1598.497205][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.506565][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.653610][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.663455][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.831974][T21593] vxcan3: entered promiscuous mode [ 1598.866226][T21593] vxcan3: entered allmulticast mode [ 1599.279242][ T9722] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1599.322499][ T9722] asix: probe of 4-1:0.251 failed with error -524 [ 1599.580428][T21366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1599.615489][ T9722] usb 4-1: USB disconnect, device number 6 [ 1599.671282][T21366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1599.729023][T21366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1599.840961][T21366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1599.884720][ T5916] hsr_slave_0: left promiscuous mode [ 1599.907538][ T5916] hsr_slave_1: left promiscuous mode [ 1599.920228][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.930217][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.955744][ T5916] bridge_slave_1: left allmulticast mode [ 1599.976270][ T5916] bridge_slave_1: left promiscuous mode [ 1599.996714][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.021860][ T5916] bridge_slave_0: left allmulticast mode [ 1600.049456][ T5916] bridge_slave_0: left promiscuous mode [ 1600.069248][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.067646][ T5916] team0 (unregistering): Port device team_slave_1 removed [ 1601.279754][ T5916] team0 (unregistering): Port device team_slave_0 removed [ 1601.490799][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.648560][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.951387][ T5916] bond0 (unregistering): Released all slaves [ 1602.566316][T21366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.781296][T21366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.859928][T21646] loop3: detected capacity change from 0 to 512 [ 1602.862101][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.873646][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.026160][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.033520][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.196293][T21646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.213914][T21646] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.322060][T21310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1603.754207][T20645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.527290][T21366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.674572][T21366] veth0_vlan: entered promiscuous mode [ 1606.782821][T21366] veth1_vlan: entered promiscuous mode [ 1606.956734][T21366] veth0_macvtap: entered promiscuous mode [ 1607.162503][T19295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1607.189976][T19295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1607.208355][T19295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1607.236922][T19295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1607.245081][T19295] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1607.246525][T21366] veth1_macvtap: entered promiscuous mode [ 1607.263964][T19295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1607.332910][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.345163][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.357141][T21366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.368284][T21366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.379318][T21366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.392788][T21366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1607.433690][T21366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.443394][T21366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.471150][T21366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.489812][T21366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.569509][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.579603][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.673718][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.715332][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.784287][T21708] overlayfs: failed to clone upperpath [ 1609.050476][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.058372][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.228387][T21712] fuse: Bad value for 'fd' [ 1609.389757][T15403] Bluetooth: hci1: command tx timeout [ 1609.868343][T21695] chnl_net:caif_netlink_parms(): no params data found [ 1610.123775][T21723] loop4: detected capacity change from 0 to 1024 [ 1610.146615][T21723] EXT4-fs: Ignoring removed bh option [ 1610.223231][T21723] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1610.345331][T21723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.946302][T21695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.957321][T21695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.972519][T21695] bridge_slave_0: entered allmulticast mode [ 1610.980758][T21695] bridge_slave_0: entered promiscuous mode [ 1611.018658][T21695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.033097][T21695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.047269][T21695] bridge_slave_1: entered allmulticast mode [ 1611.065834][T21695] bridge_slave_1: entered promiscuous mode [ 1611.091477][ T5921] hsr_slave_0: left promiscuous mode [ 1611.103191][ T5921] hsr_slave_1: left promiscuous mode [ 1611.118108][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.134429][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.145899][ T5921] bridge_slave_1: left allmulticast mode [ 1611.163119][ T5921] bridge_slave_1: left promiscuous mode [ 1611.169401][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.182342][ T5921] bridge_slave_0: left allmulticast mode [ 1611.188169][ T5921] bridge_slave_0: left promiscuous mode [ 1611.198631][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.469356][T15403] Bluetooth: hci1: command tx timeout [ 1612.296800][ T5921] team0 (unregistering): Port device team_slave_1 removed [ 1612.424579][ T5921] team0 (unregistering): Port device team_slave_0 removed [ 1612.555302][ T5921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.806649][ T5921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.557522][T15403] Bluetooth: hci1: command tx timeout [ 1613.986238][ T5921] bond0 (unregistering): Released all slaves [ 1614.388071][T21366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.637040][T21695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.721670][T21695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.973017][T21695] team0: Port device team_slave_0 added [ 1615.009952][T21695] team0: Port device team_slave_1 added [ 1615.231702][T21695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.254558][T21695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.333187][T21695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.381660][T21695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.414799][T21695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1615.451756][T21695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.629314][T15403] Bluetooth: hci1: command tx timeout [ 1615.726965][T21695] hsr_slave_0: entered promiscuous mode [ 1615.752496][T21695] hsr_slave_1: entered promiscuous mode [ 1615.789342][T21695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1615.815301][T21695] Cannot create hsr debugfs directory [ 1616.434850][T21781] netlink: 'syz.7.3857': attribute type 4 has an invalid length. [ 1616.599407][T21781] netlink: 'syz.7.3857': attribute type 4 has an invalid length. [ 1617.245304][T21695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1617.277880][T21695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1617.322483][T21695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1617.347573][T21695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1617.659682][T21695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.738487][T21695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.798052][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.805305][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.917128][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.924466][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.527171][T21810] overlayfs: failed to clone upperpath [ 1618.593787][T21810] overlayfs: failed to clone upperpath [ 1618.939251][T21817] tipc: Failed to remove unknown binding: 66,0,0/4178099127:2174285337/2174285339 [ 1618.983768][T21817] tipc: Failed to remove unknown binding: 66,0,0/4178099127:2174285337/2174285338 [ 1619.036623][T21817] tipc: Failed to remove unknown binding: 66,0,0/4178099127:2174285337/2174285339 [ 1619.053132][T21695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.071571][T21817] tipc: Failed to remove unknown binding: 66,0,0/4178099127:2174285337/2174285338 [ 1620.483380][T21695] veth0_vlan: entered promiscuous mode [ 1620.558020][T21695] veth1_vlan: entered promiscuous mode [ 1620.717652][T21695] veth0_macvtap: entered promiscuous mode [ 1620.768405][T21695] veth1_macvtap: entered promiscuous mode [ 1620.897946][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1620.950852][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.999649][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1621.024676][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.058144][T21695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1621.100639][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.146943][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.199466][T21695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.239032][T21695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.278013][T21695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1621.336910][T21695] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.377418][T21695] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.423175][T21695] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.462633][T21695] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.746664][T21864] netlink: 'syz.7.3871': attribute type 4 has an invalid length. [ 1627.046861][ T5897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.103991][ T5897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.242082][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.286480][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.965853][T21912] loop4: detected capacity change from 0 to 512 [ 1632.056385][T21912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1632.307721][T21912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1632.407903][T21912] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.628212][T21952] overlayfs: missing 'lowerdir' [ 1634.317328][T21959] syz_tun: entered allmulticast mode [ 1634.561906][T21969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1643.811965][T19295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1643.826099][T19295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1643.835271][T19295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1643.843895][T19295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1643.854059][T19295] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1643.861935][T19295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1645.950830][T15403] Bluetooth: hci2: command tx timeout [ 1646.131816][ T28] audit: type=1326 audit(1786654696.541:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.259459][ T28] audit: type=1326 audit(1786654696.541:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.383663][ T28] audit: type=1326 audit(1786654696.581:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.518460][ T28] audit: type=1326 audit(1786654696.581:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.552490][ T28] audit: type=1326 audit(1786654696.591:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.688374][ T28] audit: type=1326 audit(1786654696.591:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.828680][ T28] audit: type=1326 audit(1786654696.591:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.854897][ T28] audit: type=1326 audit(1786654696.591:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1646.886196][ T28] audit: type=1326 audit(1786654696.591:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22041 comm="syz.7.3892" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efd0c99e0d9 code=0x7ffc0000 [ 1647.736833][T19295] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1647.751102][T19295] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1647.762150][T19295] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1647.771373][T19295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1647.779420][T19295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1647.789061][T19295] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1648.553829][T15403] Bluetooth: hci2: command tx timeout [ 1648.704280][T22028] chnl_net:caif_netlink_parms(): no params data found [ 1649.157738][T22028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.174078][T22028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.183171][T22028] bridge_slave_0: entered allmulticast mode [ 1649.204918][T22028] bridge_slave_0: entered promiscuous mode [ 1649.221132][T22028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.228454][T22028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.249353][T22028] bridge_slave_1: entered allmulticast mode [ 1649.269380][T22028] bridge_slave_1: entered promiscuous mode [ 1649.423149][T22028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.487658][T22028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.638353][T22064] chnl_net:caif_netlink_parms(): no params data found [ 1649.749075][T22028] team0: Port device team_slave_0 added [ 1649.836416][T22028] team0: Port device team_slave_1 added [ 1649.874612][T15403] Bluetooth: hci5: command tx timeout [ 1650.047398][T22028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1650.120126][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1650.147624][T22028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1650.172529][T22028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1650.207387][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1650.281129][T22028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1650.589847][T15403] Bluetooth: hci2: command tx timeout [ 1651.794067][T21912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.506111][T19295] Bluetooth: hci2: command tx timeout [ 1653.506114][T15403] Bluetooth: hci5: command tx timeout [ 1653.864850][T22064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.908291][T22064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.950008][T22064] bridge_slave_0: entered allmulticast mode [ 1653.957293][T22064] bridge_slave_0: entered promiscuous mode [ 1654.036688][T22064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.059007][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.084518][T22064] bridge_slave_1: entered allmulticast mode [ 1654.122148][T22064] bridge_slave_1: entered promiscuous mode [ 1654.237223][T22028] hsr_slave_0: entered promiscuous mode [ 1654.289592][T22028] hsr_slave_1: entered promiscuous mode [ 1654.339306][T22028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1654.346940][T22028] Cannot create hsr debugfs directory [ 1654.463929][T22064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.570572][T22064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.839309][T22064] team0: Port device team_slave_0 added [ 1654.933625][T22064] team0: Port device team_slave_1 added [ 1655.137479][T22064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.167677][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.265944][T22064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.366790][T22064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.394195][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.503521][T22064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.549366][T15403] Bluetooth: hci5: command tx timeout [ 1655.948320][T22064] hsr_slave_0: entered promiscuous mode [ 1656.489515][T22064] hsr_slave_1: entered promiscuous mode [ 1657.146468][T22064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1657.200271][T22064] Cannot create hsr debugfs directory [ 1657.629204][T15403] Bluetooth: hci5: command tx timeout [ 1660.740551][T22028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1660.833555][T22028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1660.965619][T22028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1661.271912][T22028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1662.455742][T22199] fuse: Bad value for 'fd' [ 1664.780414][T15403] Bluetooth: hci3: unexpected event for opcode 0x100c [ 1665.027513][ T5905] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.351553][T22220] Bluetooth: MGMT ver 1.22 [ 1665.357325][T22220] Bluetooth: hci0: load_link_keys: too big key_count value 16384 [ 1666.374530][ T5905] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.812753][ T5905] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.182404][ T5905] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.354535][T22028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.633827][T22028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.742151][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.749426][T15222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.832859][T22064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1667.885793][T22064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1667.987589][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.994844][ T5921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.073696][T22064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1668.121359][T22064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1668.349746][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3917'. [ 1668.527312][T22251] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3917'. [ 1669.017787][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.029593][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.455380][T22028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.502210][T22064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.018023][T22064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.211997][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.219339][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.482718][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.489985][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.684707][T22028] veth0_vlan: entered promiscuous mode [ 1672.816776][ T5905] hsr_slave_0: left promiscuous mode [ 1672.875268][ T5905] hsr_slave_1: left promiscuous mode [ 1672.957822][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1672.999183][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.050859][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.058386][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1673.151012][ T5905] bridge_slave_1: left allmulticast mode [ 1673.164203][ T5905] bridge_slave_1: left promiscuous mode [ 1673.196779][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.310354][ T5905] bridge_slave_0: left allmulticast mode [ 1673.316087][ T5905] bridge_slave_0: left promiscuous mode [ 1673.380086][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.669207][ T5905] veth1_macvtap: left promiscuous mode [ 1673.693147][ T5905] veth0_macvtap: left promiscuous mode [ 1673.729417][ T5905] veth1_vlan: left promiscuous mode [ 1673.734840][ T5905] veth0_vlan: left promiscuous mode [ 1677.563528][T22319] 9pnet_fd: p9_fd_create_tcp (22319): problem connecting socket to 127.0.0.1 [ 1677.576629][T22319] 9pnet_fd: p9_fd_create_tcp (22319): problem connecting socket to 127.0.0.1 [ 1677.593549][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1677.783356][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1677.958431][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.980812][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3928'. [ 1678.118366][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.403261][ T5905] bond0 (unregistering): Released all slaves [ 1679.772500][T22064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1679.815613][T22064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1680.510983][T22064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.681765][T22064] veth0_vlan: entered promiscuous mode [ 1680.725596][T22064] veth1_vlan: entered promiscuous mode [ 1680.889081][T22064] veth0_macvtap: entered promiscuous mode [ 1680.917989][T22064] veth1_macvtap: entered promiscuous mode [ 1680.993942][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.021125][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.063465][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.102962][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.134619][T22064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.175187][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.223331][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.247590][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.272072][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.315877][T22064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.354284][T22064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.385564][T22064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.399911][T22064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.408663][T22064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.731567][T22028] veth1_vlan: entered promiscuous mode [ 1681.862520][T15333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.932130][T15333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.250509][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1682.257605][ T5921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.297358][ T5921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.700786][T22028] veth0_macvtap: entered promiscuous mode [ 1682.786510][T22028] veth1_macvtap: entered promiscuous mode [ 1683.003303][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.051525][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.102916][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.154606][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.209002][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1683.291322][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.348594][T22028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.401655][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.436045][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.470120][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.507884][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.538339][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.577795][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.612584][T22028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.675655][T22028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.716892][T22028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.740130][T22028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.767842][T22028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.029327][T22407] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3934'. [ 1690.139627][T22407] ip6gre1: entered promiscuous mode [ 1690.161752][T22407] ip6gre1: entered allmulticast mode [ 1690.259852][T22411] netlink: 'syz.7.3934': attribute type 6 has an invalid length. [ 1690.282597][T22411] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3934'. [ 1692.025751][ T5905] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.136983][ T5905] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.242619][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.281061][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.461206][ T5905] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.540162][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.598758][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.721558][ T5905] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.681634][T14638] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1699.965960][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1700.022122][T22487] syz_tun: entered allmulticast mode [ 1700.045777][T14638] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1700.214167][T22485] syz_tun: left allmulticast mode [ 1700.951356][ T5905] hsr_slave_0: left promiscuous mode [ 1701.059532][ T5905] hsr_slave_1: left promiscuous mode [ 1701.139360][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1701.166545][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.212531][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1701.240373][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.286260][ T5905] bridge_slave_1: left allmulticast mode [ 1701.305037][ T5905] bridge_slave_1: left promiscuous mode [ 1701.322299][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.347807][ T5905] bridge_slave_0: left allmulticast mode [ 1701.357331][ T5905] bridge_slave_0: left promiscuous mode [ 1701.377995][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.659745][T15403] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 1701.738710][ T5905] veth1_macvtap: left promiscuous mode [ 1701.769642][ T5905] veth0_macvtap: left promiscuous mode [ 1701.775396][ T5905] veth1_vlan: left promiscuous mode [ 1701.819305][ T5905] veth0_vlan: left promiscuous mode [ 1703.100629][T22526] loop2: detected capacity change from 0 to 4096 [ 1707.806881][T19295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1707.827237][T19295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1707.837967][T19295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1707.850347][T19295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1707.858154][T19295] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1707.866570][T19295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1708.689190][T22554] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1708.701188][T22554] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1708.709664][T22554] CPU: 0 PID: 22554 Comm: syz.0.3966 Not tainted syzkaller #0 [ 1708.717195][T22554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1708.727299][T22554] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 1708.732891][T22554] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 78 4d cb fa eb 0c e8 71 4d cb fa eb 05 e8 6a 4d cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 d0 23 fb 4d 8b 36 4c 89 f7 e8 [ 1708.752570][T22554] RSP: 0018:ffffc90003a57850 EFLAGS: 00010246 [ 1708.758843][T22554] RAX: 0000000000000000 RBX: ffff88807e6ac050 RCX: 0000000000080000 [ 1708.766854][T22554] RDX: ffffc9001dbfe000 RSI: 0000000000003ecc RDI: 0000000000003ecd [ 1708.774906][T22554] RBP: ffff8880258a0000 R08: ffff88802b998000 R09: 0000000000000004 [ 1708.783000][T22554] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 1708.790998][T22554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1708.799022][T22554] FS: 00007f99d51ca6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1708.807990][T22554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1708.814604][T22554] CR2: 00007f99d4387240 CR3: 000000002d6fc000 CR4: 00000000003506f0 [ 1708.822609][T22554] Call Trace: [ 1708.825995][T22554] [ 1708.829016][T22554] ? dummy_pullup+0x120/0x120 [ 1708.833801][T22554] gadget_bind_driver+0x390/0x770 [ 1708.838876][T22554] ? gadget_match_driver+0x130/0x130 [ 1708.844198][T22554] really_probe+0x247/0xae0 [ 1708.848847][T22554] ? pm_runtime_barrier+0x14b/0x1c0 [ 1708.854093][T22554] __driver_probe_device+0x1f5/0x390 [ 1708.859406][T22554] driver_probe_device+0x4f/0x420 [ 1708.864598][T22554] __driver_attach+0x444/0x6d0 [ 1708.869416][T22554] bus_for_each_dev+0x235/0x2b0 [ 1708.874327][T22554] ? driver_attach+0x50/0x50 [ 1708.878978][T22554] ? bus_remove_file+0x140/0x140 [ 1708.883955][T22554] ? do_raw_spin_unlock+0x121/0x230 [ 1708.889245][T22554] bus_add_driver+0x340/0x630 [ 1708.893970][T22554] driver_register+0x23a/0x310 [ 1708.898860][T22554] usb_gadget_register_driver_owner+0xf9/0x270 [ 1708.905059][T22554] raw_ioctl+0x1613/0x3d80 [ 1708.909599][T22554] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1708.915282][T22554] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1708.920944][T22554] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1708.926423][T22554] ? sched_clock_cpu+0x75/0x430 [ 1708.931291][T22554] ? make_qualifier+0x260/0x260 [ 1708.936188][T22554] ? __fget_files+0x28/0x460 [ 1708.940863][T22554] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1708.945837][T22554] ? security_file_ioctl+0x80/0xa0 [ 1708.950999][T22554] ? make_qualifier+0x260/0x260 [ 1708.955876][T22554] __se_sys_ioctl+0xfd/0x170 [ 1708.960509][T22554] do_syscall_64+0x55/0xb0 [ 1708.964977][T22554] ? clear_bhb_loop+0x40/0x90 [ 1708.969755][T22554] ? clear_bhb_loop+0x40/0x90 [ 1708.974465][T22554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.980389][T22554] RIP: 0033:0x7f99d439dd6b [ 1708.984837][T22554] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1709.004474][T22554] RSP: 002b:00007f99d51c7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.012920][T22554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f99d439dd6b [ 1709.020914][T22554] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1709.028903][T22554] RBP: 00007f99d51c8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1709.036895][T22554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1709.044924][T22554] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 1709.052941][T22554] [ 1709.055984][T22554] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1709.333514][T22526] NILFS (loop2): error -4 creating segctord thread [ 1709.939053][T22554] ---[ end trace 0000000000000000 ]--- [ 1709.948913][T22554] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 1709.955147][T22554] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 78 4d cb fa eb 0c e8 71 4d cb fa eb 05 e8 6a 4d cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 d0 23 fb 4d 8b 36 4c 89 f7 e8 [ 1709.975232][T19295] Bluetooth: hci1: command tx timeout [ 1710.038869][T22554] RSP: 0018:ffffc90003a57850 EFLAGS: 00010246 [ 1710.045845][T22554] RAX: 0000000000000000 RBX: ffff88807e6ac050 RCX: 0000000000080000 [ 1710.076680][T22554] RDX: ffffc9001dbfe000 RSI: 0000000000003ecc RDI: 0000000000003ecd [ 1710.094629][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1710.108973][T22554] RBP: ffff8880258a0000 R08: ffff88802b998000 R09: 0000000000000004 [ 1710.117913][T22554] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 1710.141282][T22554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1710.150686][T22554] FS: 00007f99d51ca6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1710.160886][T22554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1710.168248][T22554] CR2: 00007f99d4387240 CR3: 000000002d6fc000 CR4: 00000000003506f0 [ 1710.177936][T22554] Kernel panic - not syncing: Fatal exception [ 1710.184655][T22554] Kernel Offset: disabled [ 1710.189002][T22554] Rebooting in 86400 seconds..