last executing test programs: 27m4.730796955s ago: executing program 0 (id=15): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000100)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000440)=""/235, 0xeb) 27m4.277556592s ago: executing program 0 (id=18): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100007a982a08cd0ca310a223010203170902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="40fc08"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 27m0.842107615s ago: executing program 0 (id=32): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0xfd, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) unshare(0x2c020400) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 27m0.209967193s ago: executing program 0 (id=37): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file2\x00', 0x4008, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64], 0x1, 0x2b2, &(0x7f0000000840)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000540), 0x1, 0x4a1, &(0x7f0000000000)="$eJzs3c1rXOUaAPBnZpq0SXNvP+7l0vaCLVSoHzSTD6SJunGlLgpiwY1Cjck01kwyITOpTegi1V0XLkRREBfu/Qvc2JVFENe6FxdS0RpBBWHknJmJ+Zo4aJqBnN8PTuc9H53nfTM8L++855w5AWTWmeSfXMRARHwZEUcaqxsPONN4Wb13YzJZclGvX/ohlx6XrLcObf2/wxGxkhSORjz/dMQrua1xq0vLMxPlcmmhuV6szc4Xq0vL56/OTkyXpktzw2MXxsfHhkZHxnetrbfeeu3WxU+e7f34lzfv3nn7s0+Tag00961vx25qNL0njm3a/uT9CNYFhYg4EBF93a4If0vy+f0nIs6m+X8kCumnCWRBvV6v/14/2G73Sh3Yt/LpGDiXH4yIRjmfHxxsjOH/G/35cqVae/RKZXFuqjFWPho9+StXy6Wh5neFo9GTS9aHG8P9tfWRTeujEekY+J1CX7o+OFkpT+1tVwdscnhT/v9caOQ/kBG+8kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q+Z9NzFi8lSb93/PnVtaXGmcu38VKk6Mzi7ODk4WVmYH5yuVKbTe3Zm/+r9ypXK/PBjsXi9WCtVa8Xq0vLl2criXO1yel//5VLPnrQK6MSx07e/zkXEyuN96ZLobe6Tq7C/1eu56PY9yEB3FLrdAQFdY+oPsst3fGCbn+jd4FC7HfO7Xxdgb+S7XQGga86ddP4Pssr8P2SX+X/ILmN8wPw/ZI/5f8iugTbP//rXumd3DUXEvyPiq0LPwdazvoD9IP9drjn+P3fkwYHNe3tzv6anCHoj4vUPLr13faJWWxhOtv+4tr32fnP7SDfqD3SqlaetPAYAsmv13o3J1rKXcb9/qnERwtb4B5pzk4fSc5T9q7kN1yrkdunahZWbEXFiu/i55vPOG2c++lcLW+Ifb77mGm+R1vdA+tz0vYl/cl38B9bFP/WP/yqQDbeT/mdou/zLpzkda/m3sf8Z2KVrJ9r3f/m1/q/Qpv873WGMVz9849u28W9GnNo2fiveoTTW5vhJ3c51GP/uSy/8r92++keN99kufktSKtZm54vVpeXz6e/ITZfmhscujI+PDY2OjBfTOepia6Z6qydOfHFnp/b3t4m/U/uTbQ932P7f/v/5i2d2iP/Q2e0//+M7xO+LiEc6jP/TyDcvt9uXxJ9q0/78DvGTbaMdxq+++8zBDg8FAPZAdWl5ZqJcLi0oKCgorBW63TMB99ufSd/tmgAAAAAAAAAAAACd2ovLibvdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/eCPAAAA//9M99Zf") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(0x0, 0x109042, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$UHID_INPUT2(r0, &(0x7f00000002c0)=ANY=[], 0x90) 26m59.641590586s ago: executing program 0 (id=40): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@delchain={0x44, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x6253}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4000) 26m59.130893726s ago: executing program 0 (id=41): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) mlock2(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0) 26m58.716860391s ago: executing program 32 (id=41): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) mlock2(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0) 25m56.059714622s ago: executing program 5 (id=217): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000001180)=""/4096, 0x1000) 25m54.212407752s ago: executing program 5 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 25m53.188202142s ago: executing program 5 (id=223): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r2, 0x3, 0x80000}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1d7) 25m50.942557305s ago: executing program 5 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 25m48.787899663s ago: executing program 5 (id=229): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c01000010000104024000000000ffff00", @ANYRES32=0x0, @ANYBLOB="88d1010000000000d800128009000100766c616e00000000c80002800c00020008000000000000004c0004800c00010084000000030000000c00010000000000ffffffff0c00010005000000060000000c00010085ffffff080000000c00010002000000ff0f00000c000100ff030000ff0f0000400003804300010000000000c0ffffff0c00010007000000000000000c00010009000000040000000c00010005000000090000000c0001008100000006000000060005008100000006000500810000001c000480e2fc010006000000000000000c000100f40000000700000014000300766c616e30"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001ec0)="ac", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000"], 0x10}}], 0x2, 0xb54141090fcea62d) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x23, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m43.658818126s ago: executing program 5 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) openat$dir(0xffffffffffffff9c, 0x0, 0x2c1, 0x1c8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') statfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)=""/16) 25m28.548475551s ago: executing program 33 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x288, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) openat$dir(0xffffffffffffff9c, 0x0, 0x2c1, 0x1c8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') statfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)=""/16) 22m19.126905919s ago: executing program 6 (id=540): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) 22m17.146784106s ago: executing program 6 (id=542): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) 22m12.067035717s ago: executing program 6 (id=547): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 22m5.146824247s ago: executing program 6 (id=552): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 21m58.16357638s ago: executing program 6 (id=561): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 21m56.175220338s ago: executing program 6 (id=562): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 21m40.116725149s ago: executing program 34 (id=562): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 21m6.980730242s ago: executing program 3 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 21m0.216916412s ago: executing program 3 (id=604): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 20m58.517192283s ago: executing program 3 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 20m56.152269173s ago: executing program 3 (id=610): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 20m51.752987813s ago: executing program 3 (id=613): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 20m49.978013338s ago: executing program 3 (id=614): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20m34.868556213s ago: executing program 35 (id=614): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19m32.840523627s ago: executing program 4 (id=686): r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) waitid(0x1, r0, 0x0, 0x4, 0x0) 19m31.823762097s ago: executing program 4 (id=688): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) 19m27.112562875s ago: executing program 4 (id=691): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) 19m17.178814434s ago: executing program 4 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fsopen(0x0, 0x1) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) dup(0xffffffffffffffff) 19m13.292715844s ago: executing program 4 (id=697): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) 19m10.618619793s ago: executing program 4 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18m52.316185186s ago: executing program 36 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19.141130602s ago: executing program 1 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x7fffffff, 0x2, 0xe7c1, 0xffffffff, 0x1, 0x401, 0x2, 0x10001, 0xb1c, 0x401, 0x9, 0xfffffffc, 0xfffffffa, 0x401, 0x2, 0x8, 0x1, 0xe71, 0x2, 0x7, 0xffffffff, 0x22}}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x3c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x3c}}, 0x4000054) getpid() stat(&(0x7f0000001080)='./file0\x00', &(0x7f0000000300)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==") truncate(&(0x7f0000002540)='./file2\x00', 0xe) getpid() setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f00000003c0)='./file3\x00', 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)) 15.504274877s ago: executing program 1 (id=1707): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[], 0x50) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r3, &(0x7f0000000900), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r7 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 14.099577539s ago: executing program 8 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x7fffffff, 0x2, 0xe7c1, 0xffffffff, 0x1, 0x401, 0x2, 0x10001, 0xb1c, 0x401, 0x9, 0xfffffffc, 0xfffffffa, 0x401, 0x2, 0x8, 0x1, 0xe71, 0x2, 0x7, 0xffffffff, 0x22}}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x3c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x3c}}, 0x4000054) getpid() stat(&(0x7f0000001080)='./file0\x00', &(0x7f0000000300)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)) 11.006482591s ago: executing program 1 (id=1712): syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd97}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r3, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0xab4e, 0xfffffffffffffffd}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000084000000000100000100000000000000", @ANYRES8, @ANYBLOB="00e078010000fdfffffffffffffff65f5f"], 0x50) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r5, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x1009, 0x8, 0x14, "4cb8b910acda715e64ee57062d59a56f2584c4"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000440)={&(0x7f00004a2000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/248, 0xf8, 0x0, 0x0}, &(0x7f0000000480)=0x40) 10.17895754s ago: executing program 1 (id=1713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[], 0x50) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x4e, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r7 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 10.112235524s ago: executing program 8 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200892, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000140)='\x90\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x184) pwritev2(r6, 0x0, 0x0, 0x3, 0xfffffffc, 0x0) 8.846751929s ago: executing program 8 (id=1715): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) write$P9_RGETATTR(r5, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.493341738s ago: executing program 8 (id=1716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 7.345408187s ago: executing program 2 (id=1717): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x8744}], 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) prctl$PR_MCE_KILL_GET(0x22) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 6.257536371s ago: executing program 2 (id=1718): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000"], 0x18}, 0x0) 6.032725244s ago: executing program 1 (id=1719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 5.754191761s ago: executing program 8 (id=1720): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r1}) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0xffffffffffffffff, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.404359121s ago: executing program 2 (id=1721): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) write$P9_RGETATTR(r5, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.839522174s ago: executing program 2 (id=1722): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x8744}], 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) prctl$PR_MCE_KILL_GET(0x22) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.113339905s ago: executing program 1 (id=1723): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x3c6a3005, 0x4) keyctl$link(0x8, r1, r0) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1.974022394s ago: executing program 2 (id=1724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 70.898635ms ago: executing program 2 (id=1725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x7fffffff, 0x2, 0xe7c1, 0xffffffff, 0x1, 0x401, 0x2, 0x10001, 0xb1c, 0x401, 0x9, 0xfffffffc, 0xfffffffa, 0x401, 0x2, 0x8, 0x1, 0xe71, 0x2, 0x7, 0xffffffff, 0x22}}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x3c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x3c}}, 0x4000054) getpid() stat(&(0x7f0000001080)='./file0\x00', &(0x7f0000000300)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) getpid() stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)) 0s ago: executing program 8 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x99, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1000000000000, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40000000003, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x800000000000000, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x10, 0x0, 0x870f, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9]}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000c80), 0x0}, 0x20) io_uring_setup(0x5f48, &(0x7f00000001c0)={0x0, 0x0, 0x2}) kernel console output (not intermixed with test programs): de [ 1303.232185][T11699] loop2: detected capacity change from 0 to 256 [ 1303.304208][ T5694] device hsr_slave_1 left promiscuous mode [ 1303.465269][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.503471][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.523240][ T5694] device bridge_slave_1 left promiscuous mode [ 1303.529542][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.646590][ T5694] device bridge_slave_0 left promiscuous mode [ 1303.656951][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.447745][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1306.750249][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1306.791202][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.975585][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.643157][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.649531][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.818960][ T5694] bond0 (unregistering): Released all slaves [ 1311.945743][T11746] loop1: detected capacity change from 0 to 16 [ 1311.953802][T11746] erofs: (device loop1): mounted with root inode @ nid 36. [ 1312.509674][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1312.589861][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1312.668524][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.724786][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.107513][ T5694] bond0 (unregistering): Released all slaves [ 1313.352325][T11753] loop2: detected capacity change from 0 to 256 [ 1314.434097][T11516] device hsr_slave_0 entered promiscuous mode [ 1314.548026][T11516] device hsr_slave_1 entered promiscuous mode [ 1314.801633][T11516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.966416][T11516] Cannot create hsr debugfs directory [ 1317.898490][T10287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1317.909423][T10287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1317.920781][T10287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.947356][T10287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1319.471753][T10287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1319.483282][T10287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1321.532859][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 1321.985615][T11775] chnl_net:caif_netlink_parms(): no params data found [ 1322.322944][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.330134][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.364202][T11775] device bridge_slave_0 entered promiscuous mode [ 1323.490920][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.513575][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.539971][T11775] device bridge_slave_1 entered promiscuous mode [ 1323.612664][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 1323.628050][T11516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1325.269402][T11516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1325.287455][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.336206][T11516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1325.356359][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.402905][T11516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1325.489130][T11775] team0: Port device team_slave_0 added [ 1325.694107][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 1326.494726][T11775] team0: Port device team_slave_1 added [ 1326.775871][T11831] loop8: detected capacity change from 0 to 256 [ 1327.049450][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.358234][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.467819][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.481869][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.512950][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.625701][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.810911][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 1327.857714][T11516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.869490][T11775] device hsr_slave_0 entered promiscuous mode [ 1327.936201][T11840] loop1: detected capacity change from 0 to 16 [ 1327.950775][T11840] erofs: (device loop1): mounted with root inode @ nid 36. [ 1328.136906][T11775] device hsr_slave_1 entered promiscuous mode [ 1328.814931][T11775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1328.873599][T11775] Cannot create hsr debugfs directory [ 1328.941431][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1328.979963][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1330.649394][T11848] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1331.207789][T11516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.221548][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1331.239464][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1334.423221][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.430409][ T9882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.513058][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1336.043276][T11882] loop8: detected capacity change from 0 to 256 [ 1338.913779][T11904] loop2: detected capacity change from 0 to 16 [ 1338.932340][T11904] erofs: (device loop2): mounted with root inode @ nid 36. [ 1338.947000][T11904] syz.2.1310: attempt to access beyond end of device [ 1338.947000][T11904] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1338.961745][T11904] syz.2.1310: attempt to access beyond end of device [ 1338.961745][T11904] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1338.979193][T11904] syz.2.1310: attempt to access beyond end of device [ 1338.979193][T11904] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1338.995461][T11903] syz.2.1310: attempt to access beyond end of device [ 1338.995461][T11903] loop2: rw=524288, sector=1342178944, nr_sectors = 16 limit=16 [ 1339.009952][T11903] syz.2.1310: attempt to access beyond end of device [ 1339.009952][T11903] loop2: rw=0, sector=1342178952, nr_sectors = 8 limit=16 [ 1339.013326][ T26] audit: type=1800 audit(1771024667.368:177): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1310" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1339.024194][T11903] syz.2.1310: attempt to access beyond end of device [ 1339.024194][T11903] loop2: rw=0, sector=1342178952, nr_sectors = 8 limit=16 [ 1339.058740][T11903] syz.2.1310: attempt to access beyond end of device [ 1339.058740][T11903] loop2: rw=0, sector=1342178952, nr_sectors = 8 limit=16 [ 1339.072737][T11903] syz.2.1310: attempt to access beyond end of device [ 1339.072737][T11903] loop2: rw=0, sector=1342178952, nr_sectors = 8 limit=16 [ 1339.533168][ T26] audit: type=1800 audit(1771024667.388:178): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1310" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1340.004464][T11775] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1340.109016][ T5694] device hsr_slave_0 left promiscuous mode [ 1340.161768][ T5694] device hsr_slave_1 left promiscuous mode [ 1340.275907][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.428782][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.442843][ T5694] device bridge_slave_1 left promiscuous mode [ 1340.450413][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.543820][ T5694] device bridge_slave_0 left promiscuous mode [ 1340.553709][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.968370][T10287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1340.988192][T10287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1341.003219][T10287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1341.013786][T10287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1341.049851][T10287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1341.068245][T10287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.787881][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1341.890997][T11940] loop2: detected capacity change from 0 to 16 [ 1341.920533][T11940] erofs: (device loop2): mounted with root inode @ nid 36. [ 1341.936069][T11940] syz.2.1315: attempt to access beyond end of device [ 1341.936069][T11940] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1341.950744][T11940] syz.2.1315: attempt to access beyond end of device [ 1341.950744][T11940] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1341.973474][ T26] audit: type=1800 audit(1771024670.358:179): pid=11940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1315" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1342.044855][ T26] audit: type=1800 audit(1771024670.358:180): pid=11940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1315" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1342.113459][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1342.227685][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.340267][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.134340][T10287] Bluetooth: hci2: command 0x0409 tx timeout [ 1343.669085][ T5694] bond0 (unregistering): Released all slaves [ 1343.720615][T11952] loop2: detected capacity change from 0 to 256 [ 1345.852526][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 1346.213803][T11775] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1346.437760][T11775] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1346.469063][T11775] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1347.010570][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.667456][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1347.872442][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1347.901334][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.932906][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 1347.986129][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1348.046301][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1348.093127][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.100358][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.161291][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1348.243433][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1348.403518][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1348.438458][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.445741][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.543038][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1348.578649][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1348.898017][T11922] chnl_net:caif_netlink_parms(): no params data found [ 1349.013267][T11994] loop2: detected capacity change from 0 to 16 [ 1349.374013][T11994] erofs: (device loop2): mounted with root inode @ nid 36. [ 1349.388640][T11994] bio_check_eod: 6 callbacks suppressed [ 1349.388679][T11994] syz.2.1324: attempt to access beyond end of device [ 1349.388679][T11994] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1349.408827][T11994] syz.2.1324: attempt to access beyond end of device [ 1349.408827][T11994] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1349.426455][T11994] syz.2.1324: attempt to access beyond end of device [ 1349.426455][T11994] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1349.445073][T11993] syz.2.1324: attempt to access beyond end of device [ 1349.445073][T11993] loop2: rw=524288, sector=1342180968, nr_sectors = 16 limit=16 [ 1349.459477][T11993] syz.2.1324: attempt to access beyond end of device [ 1349.459477][T11993] loop2: rw=0, sector=1342180976, nr_sectors = 8 limit=16 [ 1349.473840][T11993] syz.2.1324: attempt to access beyond end of device [ 1349.473840][T11993] loop2: rw=0, sector=1342180976, nr_sectors = 8 limit=16 [ 1349.488352][T11993] syz.2.1324: attempt to access beyond end of device [ 1349.488352][T11993] loop2: rw=0, sector=1342180976, nr_sectors = 8 limit=16 [ 1349.494577][ T26] audit: type=1800 audit(1771024677.818:181): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1349.503233][T11993] syz.2.1324: attempt to access beyond end of device [ 1349.503233][T11993] loop2: rw=0, sector=1342180976, nr_sectors = 8 limit=16 [ 1349.604499][ T26] audit: type=1800 audit(1771024677.828:182): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1349.709888][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1349.737747][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1351.333937][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 1351.406131][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1351.453315][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1351.509193][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1351.541523][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1351.570575][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1351.603166][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1351.627778][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1351.701808][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1351.906895][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.953181][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.961529][T11922] device bridge_slave_0 entered promiscuous mode [ 1352.380586][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.541542][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.586245][T11922] device bridge_slave_1 entered promiscuous mode [ 1352.840904][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.891676][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.070575][T11922] team0: Port device team_slave_0 added [ 1354.774841][T11922] team0: Port device team_slave_1 added [ 1355.063784][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.070816][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.208562][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.287964][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.309355][T12029] loop8: detected capacity change from 0 to 256 [ 1355.452813][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.752081][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.014912][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.032806][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1356.052845][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1356.295602][T11922] device hsr_slave_0 entered promiscuous mode [ 1356.327250][T11922] device hsr_slave_1 entered promiscuous mode [ 1357.902785][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1357.940954][T11922] Cannot create hsr debugfs directory [ 1361.352562][T12069] loop2: detected capacity change from 0 to 256 [ 1361.427941][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1361.463464][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1363.587287][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1363.707992][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1363.785650][T11775] device veth0_vlan entered promiscuous mode [ 1363.961061][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1363.983382][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1363.997151][T11775] device veth1_vlan entered promiscuous mode [ 1366.681164][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1366.704371][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.741981][T11775] device veth0_macvtap entered promiscuous mode [ 1366.877032][ T5694] device hsr_slave_0 left promiscuous mode [ 1366.897180][ T5694] device hsr_slave_1 left promiscuous mode [ 1366.992896][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.033580][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.075388][ T5694] device bridge_slave_1 left promiscuous mode [ 1367.091942][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.703972][T12111] loop8: detected capacity change from 0 to 16 [ 1368.009503][T12111] erofs: (device loop8): mounted with root inode @ nid 36. [ 1368.020505][T12111] syz.8.1337: attempt to access beyond end of device [ 1368.020505][T12111] loop8: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1368.034927][T12111] syz.8.1337: attempt to access beyond end of device [ 1368.034927][T12111] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1368.050713][T12111] syz.8.1337: attempt to access beyond end of device [ 1368.050713][T12111] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1368.066823][ T26] audit: type=1800 audit(1771024696.448:183): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1337" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1368.088232][T12110] syz.8.1337: attempt to access beyond end of device [ 1368.088232][T12110] loop8: rw=524288, sector=1342181328, nr_sectors = 16 limit=16 [ 1368.102676][T12110] syz.8.1337: attempt to access beyond end of device [ 1368.102676][T12110] loop8: rw=0, sector=1342181336, nr_sectors = 8 limit=16 [ 1368.116596][T12110] syz.8.1337: attempt to access beyond end of device [ 1368.116596][T12110] loop8: rw=0, sector=1342181336, nr_sectors = 8 limit=16 [ 1368.131063][T12110] syz.8.1337: attempt to access beyond end of device [ 1368.131063][T12110] loop8: rw=0, sector=1342181336, nr_sectors = 8 limit=16 [ 1368.145250][T12110] syz.8.1337: attempt to access beyond end of device [ 1368.145250][T12110] loop8: rw=0, sector=1342181336, nr_sectors = 8 limit=16 [ 1368.233619][ T5694] device bridge_slave_0 left promiscuous mode [ 1368.239926][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.258595][ T26] audit: type=1800 audit(1771024696.458:184): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1337" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1370.161523][T12119] loop8: detected capacity change from 0 to 256 [ 1372.102227][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.128285][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.619743][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1372.923767][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1373.249442][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.485667][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.676879][T12135] binder: 12133:12135 ioctl 4018620d 0 returned -22 [ 1377.516783][T12144] loop2: detected capacity change from 0 to 256 [ 1379.813683][ T5694] bond0 (unregistering): Released all slaves [ 1379.838959][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1379.850804][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1379.860389][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1379.869833][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1379.880237][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1379.888140][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1381.707754][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1381.795241][T11922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1381.876353][T11922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1381.942050][T10287] Bluetooth: hci5: command 0x0409 tx timeout [ 1382.006062][T11922] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1382.135218][T11922] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1382.749126][T11922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.902313][T11922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.104664][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1383.116955][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1383.564455][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1383.578910][T12188] loop1: detected capacity change from 0 to 16 [ 1383.587415][T12188] erofs: (device loop1): mounted with root inode @ nid 36. [ 1383.597569][T12188] syz.1.1351: attempt to access beyond end of device [ 1383.597569][T12188] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1383.611918][T12188] syz.1.1351: attempt to access beyond end of device [ 1383.611918][T12188] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1383.624552][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1383.636522][T12188] syz.1.1351: attempt to access beyond end of device [ 1383.636522][T12188] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1383.636878][ T26] audit: type=1800 audit(1771024712.018:185): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1351" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1383.787238][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.794485][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.851703][ T26] audit: type=1800 audit(1771024712.048:186): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1351" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1383.934625][T12194] loop2: detected capacity change from 0 to 16 [ 1383.946834][T12194] erofs: (device loop2): mounted with root inode @ nid 36. [ 1383.956970][T12194] syz.2.1353: attempt to access beyond end of device [ 1383.956970][T12194] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1383.971612][T12194] syz.2.1353: attempt to access beyond end of device [ 1383.971612][T12194] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1383.988049][T12194] syz.2.1353: attempt to access beyond end of device [ 1383.988049][T12194] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1384.004640][T12193] syz.2.1353: attempt to access beyond end of device [ 1384.004640][T12193] loop2: rw=524288, sector=1342179024, nr_sectors = 16 limit=16 [ 1384.019127][T12193] syz.2.1353: attempt to access beyond end of device [ 1384.019127][T12193] loop2: rw=0, sector=1342179032, nr_sectors = 8 limit=16 [ 1384.021693][T10287] Bluetooth: hci5: command 0x041b tx timeout [ 1384.032978][T12193] syz.2.1353: attempt to access beyond end of device [ 1384.032978][T12193] loop2: rw=0, sector=1342179032, nr_sectors = 8 limit=16 [ 1384.033312][T12193] syz.2.1353: attempt to access beyond end of device [ 1384.033312][T12193] loop2: rw=0, sector=1342179032, nr_sectors = 8 limit=16 [ 1384.089408][ T26] audit: type=1800 audit(1771024712.378:187): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1353" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1384.118848][ T26] audit: type=1800 audit(1771024712.398:188): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1353" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1384.148343][T12153] chnl_net:caif_netlink_parms(): no params data found [ 1384.315356][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1384.343380][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1384.541460][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1384.617120][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.624504][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.015858][T12200] loop2: detected capacity change from 0 to 256 [ 1385.067618][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1385.254006][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1385.283716][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1385.361428][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1385.377804][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1385.430116][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.457964][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.522593][T12153] device bridge_slave_0 entered promiscuous mode [ 1385.565521][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1385.586466][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1385.621730][T11922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1385.658130][T11922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1385.706559][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.715958][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.267930][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 1387.299685][T12153] device bridge_slave_1 entered promiscuous mode [ 1389.052839][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1389.074225][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1389.108316][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1389.151701][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1389.183377][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1389.292775][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 1389.417528][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.501023][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.850548][T12153] team0: Port device team_slave_0 added [ 1389.951634][T12153] team0: Port device team_slave_1 added [ 1390.078450][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.100895][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.222684][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.326137][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.355380][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.774180][T12237] loop2: detected capacity change from 0 to 256 [ 1390.855053][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.467894][T12244] loop1: detected capacity change from 0 to 256 [ 1391.549009][T12153] device hsr_slave_0 entered promiscuous mode [ 1391.639239][T12153] device hsr_slave_1 entered promiscuous mode [ 1391.834352][T12153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1391.842117][T12153] Cannot create hsr debugfs directory [ 1392.790509][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1392.829731][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1392.896111][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.490294][T10287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1402.501762][T10287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1402.510606][T10287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1402.519374][T10287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1402.529129][T10287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1402.548606][T10287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1402.778427][ T5694] device hsr_slave_0 left promiscuous mode [ 1402.809826][ T5694] device hsr_slave_1 left promiscuous mode [ 1402.883800][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.952069][T12343] loop8: detected capacity change from 0 to 16 [ 1402.960003][T12343] erofs: (device loop8): mounted with root inode @ nid 36. [ 1402.970403][T12343] bio_check_eod: 1 callbacks suppressed [ 1402.970419][T12343] syz.8.1375: attempt to access beyond end of device [ 1402.970419][T12343] loop8: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1402.990635][T12343] syz.8.1375: attempt to access beyond end of device [ 1402.990635][T12343] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1403.006995][T12343] syz.8.1375: attempt to access beyond end of device [ 1403.006995][T12343] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1403.024474][ T26] audit: type=1800 audit(1771024731.398:189): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1375" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1403.098602][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.116528][ T5694] device bridge_slave_1 left promiscuous mode [ 1403.126082][ T26] audit: type=1800 audit(1771024731.418:190): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1375" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1403.186333][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.620505][ T5694] device bridge_slave_0 left promiscuous mode [ 1403.685946][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.874737][T12366] loop2: detected capacity change from 0 to 256 [ 1404.054825][ T5694] device veth0_macvtap left promiscuous mode [ 1404.061703][ T5694] device veth1_vlan left promiscuous mode [ 1405.610171][T10287] Bluetooth: hci2: command 0x0409 tx timeout [ 1405.783660][ T5694] device veth0_vlan left promiscuous mode [ 1407.692808][T10287] Bluetooth: hci2: command 0x041b tx timeout [ 1409.772819][T10287] Bluetooth: hci2: command 0x040f tx timeout [ 1411.721931][T12392] loop1: detected capacity change from 0 to 16 [ 1411.729921][T12392] erofs: (device loop1): mounted with root inode @ nid 36. [ 1411.740545][T12392] syz.1.1383: attempt to access beyond end of device [ 1411.740545][T12392] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1411.755331][T12392] syz.1.1383: attempt to access beyond end of device [ 1411.755331][T12392] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1411.771490][T12392] syz.1.1383: attempt to access beyond end of device [ 1411.771490][T12392] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1411.792982][ T26] audit: type=1800 audit(1771024740.168:191): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1383" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1411.825355][T12395] loop8: detected capacity change from 0 to 256 [ 1411.918183][T10287] Bluetooth: hci2: command 0x0419 tx timeout [ 1412.022788][ T26] audit: type=1800 audit(1771024740.178:192): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1383" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1414.250989][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1414.384720][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1414.811750][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.869802][T12408] loop2: detected capacity change from 0 to 256 [ 1415.594179][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.549506][T12422] loop1: detected capacity change from 0 to 256 [ 1417.984874][T12424] loop2: detected capacity change from 0 to 16 [ 1418.015650][T12424] erofs: (device loop2): mounted with root inode @ nid 36. [ 1418.039885][T12424] syz.2.1388: attempt to access beyond end of device [ 1418.039885][T12424] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1418.055016][T12424] syz.2.1388: attempt to access beyond end of device [ 1418.055016][T12424] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1418.069349][ T26] audit: type=1800 audit(1771024746.458:193): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1388" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1418.125422][T12424] syz.2.1388: attempt to access beyond end of device [ 1418.125422][T12424] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1418.287901][ T26] audit: type=1800 audit(1771024746.528:194): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1388" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1419.416535][T12431] loop1: detected capacity change from 0 to 256 [ 1419.454717][ T5694] bond0 (unregistering): Released all slaves [ 1423.943880][T12153] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1423.974163][T12153] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1424.037268][T12153] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1424.070583][T12153] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1424.820083][T12338] chnl_net:caif_netlink_parms(): no params data found [ 1425.845666][T12458] loop2: detected capacity change from 0 to 16 [ 1425.859439][T12458] erofs: (device loop2): mounted with root inode @ nid 36. [ 1425.869024][T12458] syz.2.1395: attempt to access beyond end of device [ 1425.869024][T12458] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1425.884672][T12458] syz.2.1395: attempt to access beyond end of device [ 1425.884672][T12458] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1425.898746][ T26] audit: type=1800 audit(1771024754.288:195): pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1395" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1425.923840][T12458] syz.2.1395: attempt to access beyond end of device [ 1425.923840][T12458] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1426.036720][ T26] audit: type=1800 audit(1771024754.328:196): pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1395" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1426.404447][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.698079][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1426.710175][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1427.236578][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.844172][T12338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.862608][T12338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.882613][T12338] device bridge_slave_0 entered promiscuous mode [ 1427.907910][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1427.917901][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1427.927012][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.934227][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.975482][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1428.713023][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1430.312796][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.320076][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.379552][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1430.642651][T12338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.649794][T12338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.674505][T12338] device bridge_slave_1 entered promiscuous mode [ 1433.135489][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.141946][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.575379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1434.613156][T12338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.684094][T12338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.713769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1434.786492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1434.873339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1434.959995][T12338] team0: Port device team_slave_0 added [ 1435.042549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1435.155039][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1435.180269][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1435.267828][T12505] loop8: detected capacity change from 0 to 16 [ 1435.327601][T12505] erofs: (device loop8): mounted with root inode @ nid 36. [ 1436.160869][T12338] team0: Port device team_slave_1 added [ 1436.217100][T12504] syz.8.1405: attempt to access beyond end of device [ 1436.217100][T12504] loop8: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1436.232190][T12504] syz.8.1405: attempt to access beyond end of device [ 1436.232190][T12504] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1436.247638][T12504] syz.8.1405: attempt to access beyond end of device [ 1436.247638][T12504] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1436.247977][ T26] audit: type=1800 audit(1771024764.648:197): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1405" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1436.293248][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1436.305265][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1436.411506][ T26] audit: type=1800 audit(1771024764.658:198): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1405" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1437.012906][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1437.068815][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1437.107151][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1437.177001][T12338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.550089][T12338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.768403][T12514] loop2: detected capacity change from 0 to 256 [ 1437.802994][T12338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.386260][T12338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.402618][T12338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.482576][T12338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.665655][T12338] device hsr_slave_0 entered promiscuous mode [ 1438.695952][T12338] device hsr_slave_1 entered promiscuous mode [ 1438.741479][T12338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1438.759537][T12338] Cannot create hsr debugfs directory [ 1439.687389][ T5694] device hsr_slave_0 left promiscuous mode [ 1439.719071][ T5694] device hsr_slave_1 left promiscuous mode [ 1439.739718][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.769866][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.788748][ T5694] device bridge_slave_1 left promiscuous mode [ 1439.842784][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.862136][ T5694] device bridge_slave_0 left promiscuous mode [ 1439.880004][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.834267][T12551] loop2: detected capacity change from 0 to 16 [ 1441.841701][T12551] erofs: (device loop2): mounted with root inode @ nid 36. [ 1442.233371][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1442.246444][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1442.255166][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1442.268265][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1442.276270][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1442.287460][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1443.125477][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1443.301587][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1443.473557][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.671562][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.838931][T12572] loop8: detected capacity change from 0 to 256 [ 1445.649545][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 1448.152520][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1449.130094][T12594] loop1: detected capacity change from 0 to 256 [ 1450.172752][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1452.015025][ T5694] bond0 (unregistering): Released all slaves [ 1452.252784][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1452.358510][T12602] loop1: detected capacity change from 0 to 256 [ 1452.502826][T12338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1452.525306][T12338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1452.795597][T12338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1452.838687][T12338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1454.065743][T12338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.118059][T12555] chnl_net:caif_netlink_parms(): no params data found [ 1454.177787][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1454.193371][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1454.234272][T12629] loop1: detected capacity change from 0 to 16 [ 1454.302582][T12629] erofs: (device loop1): mounted with root inode @ nid 36. [ 1454.447188][T12338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.673405][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1454.715140][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1454.773313][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.780484][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.839605][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1454.870171][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1454.933043][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.940293][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.999346][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1455.013259][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1455.208884][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1455.447183][T12641] loop2: detected capacity change from 0 to 16 [ 1455.471094][T12641] erofs: (device loop2): mounted with root inode @ nid 36. [ 1455.511419][T12641] syz.2.1426: attempt to access beyond end of device [ 1455.511419][T12641] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1455.511493][T12641] syz.2.1426: attempt to access beyond end of device [ 1455.511493][T12641] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1455.512110][ T26] audit: type=1800 audit(1771024783.898:199): pid=12641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1426" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1455.535500][T12555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.535569][T12555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.536659][T12555] device bridge_slave_0 entered promiscuous mode [ 1455.539213][T12555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.539332][T12555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.540390][T12555] device bridge_slave_1 entered promiscuous mode [ 1455.559207][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1455.560890][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1455.561755][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1455.570397][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1455.571095][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1455.572039][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1455.577503][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1455.583800][T12641] syz.2.1426: attempt to access beyond end of device [ 1455.583800][T12641] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1455.592674][ T26] audit: type=1800 audit(1771024783.978:200): pid=12641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1426" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1455.597656][T12555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.600126][T12555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.605768][T12338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1455.606553][T12338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1455.692088][T12649] loop8: detected capacity change from 0 to 16 [ 1455.762452][T12649] erofs: (device loop8): mounted with root inode @ nid 36. [ 1455.769415][T12649] syz.8.1430: attempt to access beyond end of device [ 1455.769415][T12649] loop8: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1455.769511][T12649] syz.8.1430: attempt to access beyond end of device [ 1455.769511][T12649] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1455.771698][T12649] syz.8.1430: attempt to access beyond end of device [ 1455.771698][T12649] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1455.774492][T12648] syz.8.1430: attempt to access beyond end of device [ 1455.774492][T12648] loop8: rw=524288, sector=1342178896, nr_sectors = 16 limit=16 [ 1455.774554][T12648] syz.8.1430: attempt to access beyond end of device [ 1455.774554][T12648] loop8: rw=0, sector=1342178904, nr_sectors = 8 limit=16 [ 1455.774690][T12648] syz.8.1430: attempt to access beyond end of device [ 1455.774690][T12648] loop8: rw=0, sector=1342178904, nr_sectors = 8 limit=16 [ 1455.774816][T12648] syz.8.1430: attempt to access beyond end of device [ 1455.774816][T12648] loop8: rw=0, sector=1342178904, nr_sectors = 8 limit=16 [ 1455.775075][ T26] audit: type=1800 audit(1771024784.158:201): pid=12649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1430" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1455.775117][ T26] audit: type=1800 audit(1771024784.158:202): pid=12649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1430" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1455.838466][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1455.839208][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1455.965369][T12555] team0: Port device team_slave_0 added [ 1456.242014][T12555] team0: Port device team_slave_1 added [ 1457.947709][T12555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.947735][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.947763][T12555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.950053][T12555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.950069][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.950096][T12555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.339861][T12555] device hsr_slave_0 entered promiscuous mode [ 1458.343313][T12555] device hsr_slave_1 entered promiscuous mode [ 1458.343988][T12555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1458.344110][T12555] Cannot create hsr debugfs directory [ 1458.718691][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1458.718859][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1458.776589][T12338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.461498][T12555] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1464.499517][T12555] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1464.580012][T12555] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1464.603618][T10287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1464.685873][T12711] loop2: detected capacity change from 0 to 16 [ 1464.698510][T10287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1464.725127][T12711] erofs: (device loop2): mounted with root inode @ nid 36. [ 1464.739170][T12711] bio_check_eod: 1 callbacks suppressed [ 1464.739209][T12711] syz.2.1438: attempt to access beyond end of device [ 1464.739209][T12711] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1464.759513][T12711] syz.2.1438: attempt to access beyond end of device [ 1464.759513][T12711] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1464.777244][T12711] syz.2.1438: attempt to access beyond end of device [ 1464.777244][T12711] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1464.794180][T12708] syz.2.1438: attempt to access beyond end of device [ 1464.794180][T12708] loop2: rw=524288, sector=1342179072, nr_sectors = 16 limit=16 [ 1464.808614][T12708] syz.2.1438: attempt to access beyond end of device [ 1464.808614][T12708] loop2: rw=0, sector=1342179080, nr_sectors = 8 limit=16 [ 1464.815909][ T26] audit: type=1800 audit(1771024793.168:203): pid=12711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1438" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1464.823225][T12708] syz.2.1438: attempt to access beyond end of device [ 1464.823225][T12708] loop2: rw=0, sector=1342179080, nr_sectors = 8 limit=16 [ 1464.852934][T10287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1464.856225][T12708] syz.2.1438: attempt to access beyond end of device [ 1464.856225][T12708] loop2: rw=0, sector=1342179080, nr_sectors = 8 limit=16 [ 1464.876602][T12708] syz.2.1438: attempt to access beyond end of device [ 1464.876602][T12708] loop2: rw=0, sector=1342179080, nr_sectors = 8 limit=16 [ 1464.923697][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1464.933268][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1464.940914][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1464.973609][ T26] audit: type=1800 audit(1771024793.178:204): pid=12711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1438" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1465.075497][T12555] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1465.475426][T12721] loop1: detected capacity change from 0 to 16 [ 1465.494964][T12721] erofs: (device loop1): mounted with root inode @ nid 36. [ 1465.509767][T12721] syz.1.1439: attempt to access beyond end of device [ 1465.509767][T12721] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1465.524405][T12721] syz.1.1439: attempt to access beyond end of device [ 1465.524405][T12721] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1465.543356][ T26] audit: type=1800 audit(1771024793.938:205): pid=12721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1439" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1466.972537][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 1467.238606][ T26] audit: type=1800 audit(1771024793.938:206): pid=12721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1439" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1469.062809][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1469.249428][ T5694] device hsr_slave_0 left promiscuous mode [ 1469.315732][ T5694] device hsr_slave_1 left promiscuous mode [ 1469.433120][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.451133][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.475826][ T5694] device bridge_slave_1 left promiscuous mode [ 1469.492436][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.530629][ T5694] device bridge_slave_0 left promiscuous mode [ 1469.547808][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.134177][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1471.724517][T12778] loop2: detected capacity change from 0 to 256 [ 1472.401200][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1474.066021][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1474.613180][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1475.611889][T12796] loop2: detected capacity change from 0 to 512 [ 1475.654006][T12796] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1475.719036][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.923042][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.627089][ T5694] bond0 (unregistering): Released all slaves [ 1481.137885][T12555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.309846][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1481.398633][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1481.707424][T12555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.944568][T12706] chnl_net:caif_netlink_parms(): no params data found [ 1482.413349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1482.463645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1482.573552][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.580717][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.942308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1482.967380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1482.969171][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.969301][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.429945][T12861] loop1: detected capacity change from 0 to 512 [ 1483.543505][T12861] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1484.405153][T12867] binder_alloc: 12865: binder_alloc_buf, no vma [ 1484.441681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1484.450814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1484.459854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1484.508859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1485.060707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1485.245016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1485.512104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1485.526252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1485.547922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1485.562256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1485.583771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1485.610357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1487.962039][T12706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.043356][T12706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.051800][T12706] device bridge_slave_0 entered promiscuous mode [ 1488.062621][T12706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.069858][T12706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.088246][T12897] binder: BINDER_SET_CONTEXT_MGR already set [ 1488.100085][T12706] device bridge_slave_1 entered promiscuous mode [ 1488.162710][T12897] binder: 12894:12897 ioctl 4018620d 200000000040 returned -16 [ 1488.282057][T12706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.430225][T12902] loop1: detected capacity change from 0 to 512 [ 1488.468566][T12902] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1488.561139][T12706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.338938][T12706] team0: Port device team_slave_0 added [ 1489.828517][T12706] team0: Port device team_slave_1 added [ 1489.952774][T12706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.047546][T12706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.565627][T12706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.385463][T12706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.215011][T12706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.472561][T12706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.166248][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1493.747822][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1494.266587][T12706] device hsr_slave_0 entered promiscuous mode [ 1494.519259][T12706] device hsr_slave_1 entered promiscuous mode [ 1494.552708][T12706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1494.561117][T12706] Cannot create hsr debugfs directory [ 1494.586914][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.660269][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.683882][T12555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.087818][T12958] binder: BINDER_SET_CONTEXT_MGR already set [ 1496.104318][T12958] binder: 12957:12958 ioctl 4018620d 200000000040 returned -16 [ 1497.497443][T12976] loop1: detected capacity change from 0 to 256 [ 1498.512889][T12988] loop2: detected capacity change from 0 to 16 [ 1498.526516][T12988] erofs: (device loop2): mounted with root inode @ nid 36. [ 1498.536796][T12988] bio_check_eod: 6 callbacks suppressed [ 1498.536813][T12988] syz.2.1485: attempt to access beyond end of device [ 1498.536813][T12988] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1498.556795][T12988] syz.2.1485: attempt to access beyond end of device [ 1498.556795][T12988] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1498.572993][T12988] syz.2.1485: attempt to access beyond end of device [ 1498.572993][T12988] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1498.587379][ T26] audit: type=1800 audit(1771024826.958:207): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1485" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1498.608896][T12986] syz.2.1485: attempt to access beyond end of device [ 1498.608896][T12986] loop2: rw=524288, sector=1342179888, nr_sectors = 16 limit=16 [ 1498.623537][T12986] syz.2.1485: attempt to access beyond end of device [ 1498.623537][T12986] loop2: rw=0, sector=1342179896, nr_sectors = 8 limit=16 [ 1498.637913][T12986] syz.2.1485: attempt to access beyond end of device [ 1498.637913][T12986] loop2: rw=0, sector=1342179896, nr_sectors = 8 limit=16 [ 1498.651946][T12986] syz.2.1485: attempt to access beyond end of device [ 1498.651946][T12986] loop2: rw=0, sector=1342179896, nr_sectors = 8 limit=16 [ 1498.665956][T12986] syz.2.1485: attempt to access beyond end of device [ 1498.665956][T12986] loop2: rw=0, sector=1342179896, nr_sectors = 8 limit=16 [ 1498.800427][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1498.816400][ T26] audit: type=1800 audit(1771024826.978:208): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1485" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1498.850660][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1499.702303][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1499.764096][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1499.783822][T12998] loop2: detected capacity change from 0 to 512 [ 1499.827840][T12998] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1499.960338][T12555] device veth0_vlan entered promiscuous mode [ 1500.006157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1500.051702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1500.253731][T13001] loop1: detected capacity change from 0 to 256 [ 1501.752799][T13008] loop2: detected capacity change from 0 to 256 [ 1502.209464][T13011] loop8: detected capacity change from 0 to 512 [ 1502.235960][ T5694] device hsr_slave_0 left promiscuous mode [ 1502.268535][ T5694] device hsr_slave_1 left promiscuous mode [ 1502.270834][T13011] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1502.331947][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.371998][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.403325][ T5694] device bridge_slave_1 left promiscuous mode [ 1502.409630][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.463699][ T5694] device bridge_slave_0 left promiscuous mode [ 1502.470041][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.195750][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1503.207836][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1503.216509][T10287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1503.239890][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1503.249749][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1503.257509][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1503.516097][T13023] loop8: detected capacity change from 0 to 512 [ 1503.553727][T13023] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1505.119252][T13041] loop8: detected capacity change from 0 to 512 [ 1505.173722][T13041] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1505.294106][T10287] Bluetooth: hci5: command 0x0409 tx timeout [ 1505.556685][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1506.281165][T13051] loop8: detected capacity change from 0 to 512 [ 1506.311786][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1506.335323][T13051] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1506.400768][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.513606][T13053] loop2: detected capacity change from 0 to 16 [ 1506.528736][T13053] erofs: (device loop2): mounted with root inode @ nid 36. [ 1506.543383][T13053] syz.2.1500: attempt to access beyond end of device [ 1506.543383][T13053] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1506.557970][T13053] syz.2.1500: attempt to access beyond end of device [ 1506.557970][T13053] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1506.575827][T13053] syz.2.1500: attempt to access beyond end of device [ 1506.575827][T13053] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1506.592951][T13052] syz.2.1500: attempt to access beyond end of device [ 1506.592951][T13052] loop2: rw=524288, sector=1342178704, nr_sectors = 16 limit=16 [ 1506.607539][T13052] syz.2.1500: attempt to access beyond end of device [ 1506.607539][T13052] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1506.621419][T13052] syz.2.1500: attempt to access beyond end of device [ 1506.621419][T13052] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1506.629098][ T26] audit: type=1800 audit(1771024834.968:209): pid=13053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1500" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1506.636657][T13052] syz.2.1500: attempt to access beyond end of device [ 1506.636657][T13052] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1506.669368][T13052] syz.2.1500: attempt to access beyond end of device [ 1506.669368][T13052] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1506.808383][ T26] audit: type=1800 audit(1771024834.988:210): pid=13053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1500" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1506.971221][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.463951][T10287] Bluetooth: hci5: command 0x041b tx timeout [ 1509.532528][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 1510.912631][T13077] loop8: detected capacity change from 0 to 16 [ 1510.924555][T13077] erofs: (device loop8): mounted with root inode @ nid 36. [ 1510.938288][T13077] syz.8.1506: attempt to access beyond end of device [ 1510.938288][T13077] loop8: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1510.953100][T13077] syz.8.1506: attempt to access beyond end of device [ 1510.953100][T13077] loop8: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1511.000465][ T26] audit: type=1800 audit(1771024839.368:211): pid=13077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1506" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1511.052503][ T26] audit: type=1800 audit(1771024839.368:212): pid=13077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1506" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 1511.922380][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 1512.970756][T13089] loop2: detected capacity change from 0 to 256 [ 1512.985553][T13091] loop1: detected capacity change from 0 to 512 [ 1512.993917][T13091] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1512.997093][ T5694] bond0 (unregistering): Released all slaves [ 1515.016647][T12706] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1516.626144][T12706] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1516.686554][T12706] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1517.324348][T12706] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1519.525926][T12706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.629485][T12706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.683036][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1519.699396][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1519.804121][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1519.826987][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1519.926691][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.933982][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.012976][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1520.063019][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1520.138899][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.146305][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.256727][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1520.339118][T13017] chnl_net:caif_netlink_parms(): no params data found [ 1520.431476][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1520.474080][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1520.535681][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1520.575085][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1520.615352][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1521.002050][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1521.049497][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1521.240053][T12706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1521.279361][T12706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1521.357657][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1521.393267][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.416300][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1521.473163][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.509000][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1522.966664][T13017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.012560][T13017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.048833][T13017] device bridge_slave_0 entered promiscuous mode [ 1523.147491][T13017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.156073][T13017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.184141][T13017] device bridge_slave_1 entered promiscuous mode [ 1523.313858][T13017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.353499][T13017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.421088][T13017] team0: Port device team_slave_0 added [ 1523.455044][T13017] team0: Port device team_slave_1 added [ 1523.628054][T13017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.638438][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.673855][T13017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.730417][T13017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.737929][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.765126][T13017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.850877][T13017] device hsr_slave_0 entered promiscuous mode [ 1523.859046][T13017] device hsr_slave_1 entered promiscuous mode [ 1523.866013][T13017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1523.874874][T13017] Cannot create hsr debugfs directory [ 1525.191781][ T5694] device hsr_slave_0 left promiscuous mode [ 1525.252454][ T5694] device hsr_slave_1 left promiscuous mode [ 1525.314279][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.393082][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.409492][ T5694] device bridge_slave_1 left promiscuous mode [ 1525.428197][T13191] loop1: detected capacity change from 0 to 512 [ 1525.454076][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.774394][T13191] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1526.808980][ T5694] device bridge_slave_0 left promiscuous mode [ 1526.834896][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.961877][T13196] loop8: detected capacity change from 0 to 512 [ 1526.969787][T13196] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1527.122530][ T5694] device veth0_vlan left promiscuous mode [ 1528.209490][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1528.220082][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1528.229681][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1528.395800][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1528.409928][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1528.417797][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1529.211523][T13213] loop8: detected capacity change from 0 to 256 [ 1530.787427][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1530.932893][T13221] loop1: detected capacity change from 0 to 256 [ 1532.523284][T13230] loop2: detected capacity change from 0 to 512 [ 1532.530600][T13230] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1532.868420][T13232] loop8: detected capacity change from 0 to 256 [ 1532.892685][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1534.897875][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1535.034571][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1535.136270][T13240] loop1: detected capacity change from 0 to 512 [ 1535.144451][T13240] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1535.253053][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1536.383017][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.178326][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1537.374784][T13248] loop2: detected capacity change from 0 to 256 [ 1537.591015][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.630345][ T5694] bond0 (unregistering): Released all slaves [ 1541.772568][T13278] loop2: detected capacity change from 0 to 256 [ 1541.850981][T13017] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1542.420897][T13017] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1542.446424][T13017] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1542.489591][T13017] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1545.071712][T13204] chnl_net:caif_netlink_parms(): no params data found [ 1545.692554][T13017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.767116][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1545.767723][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1545.780478][T13017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.787368][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1545.788029][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1545.788424][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.788680][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.794314][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1546.145349][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1546.173692][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1546.205323][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.212509][ T5653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.403559][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1546.413348][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1547.679914][T13204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.722871][T13204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.731168][T13204] device bridge_slave_0 entered promiscuous mode [ 1547.769069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1547.811956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1547.928708][T13204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.946605][T13204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.957574][T13336] loop1: detected capacity change from 0 to 512 [ 1547.968176][T13204] device bridge_slave_1 entered promiscuous mode [ 1547.977111][T13336] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1548.001791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1548.022233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1548.051537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1548.081391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1548.117365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1549.009444][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1549.053325][T12791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1549.934436][T13017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1549.979693][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.014437][T13350] loop1: detected capacity change from 0 to 256 [ 1550.044626][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.669758][T13204] team0: Port device team_slave_0 added [ 1550.709116][T13204] team0: Port device team_slave_1 added [ 1550.849769][T13204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.892803][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1551.082530][T13204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.233530][T13204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.247323][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1551.366041][T13204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.397321][T13204] device hsr_slave_0 entered promiscuous mode [ 1553.481208][T13204] device hsr_slave_1 entered promiscuous mode [ 1553.592612][T13204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1553.600272][T13204] Cannot create hsr debugfs directory [ 1554.398863][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1554.424334][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1555.172890][T13017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.678077][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.687900][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1560.228841][ T5694] device hsr_slave_0 left promiscuous mode [ 1560.340738][ T5694] device hsr_slave_1 left promiscuous mode [ 1560.358630][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.423239][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.443294][ T5694] device bridge_slave_1 left promiscuous mode [ 1560.449624][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.525132][ T5694] device bridge_slave_0 left promiscuous mode [ 1560.531838][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.787746][T13424] binder_alloc: 13422: binder_alloc_buf, no vma [ 1562.314780][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1562.461915][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1563.532860][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.617371][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.896263][ T5694] bond0 (unregistering): Released all slaves [ 1567.293892][T13204] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1567.314580][T13204] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1567.329231][T13204] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1567.335280][T13204] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1567.765412][T13204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.637588][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1569.042834][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1569.118823][T13204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.214466][T10287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1569.225433][T10287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1569.236185][T10287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1569.246264][T10287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1569.329229][T10287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1569.359905][T10287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1569.363700][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1569.465738][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1569.660013][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.667240][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.813070][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1569.946340][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1570.066658][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1570.342925][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.342998][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.644497][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1570.647380][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1570.648319][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1570.678092][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1570.885438][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1570.905425][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1570.906239][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1571.009276][T13498] loop1: detected capacity change from 0 to 16 [ 1571.027385][T13498] erofs: (device loop1): mounted with root inode @ nid 36. [ 1571.034197][T13498] bio_check_eod: 6 callbacks suppressed [ 1571.034237][T13498] syz.1.1572: attempt to access beyond end of device [ 1571.034237][T13498] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1571.034306][T13498] syz.1.1572: attempt to access beyond end of device [ 1571.034306][T13498] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1571.036468][T13498] syz.1.1572: attempt to access beyond end of device [ 1571.036468][T13498] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1571.037258][ T26] audit: type=1800 audit(1771024899.428:213): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1572" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1571.037303][ T26] audit: type=1800 audit(1771024899.428:214): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1572" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1571.038651][T13497] syz.1.1572: attempt to access beyond end of device [ 1571.038651][T13497] loop1: rw=524288, sector=1342178288, nr_sectors = 16 limit=16 [ 1571.038713][T13497] syz.1.1572: attempt to access beyond end of device [ 1571.038713][T13497] loop1: rw=0, sector=1342178296, nr_sectors = 8 limit=16 [ 1571.038838][T13497] syz.1.1572: attempt to access beyond end of device [ 1571.038838][T13497] loop1: rw=0, sector=1342178296, nr_sectors = 8 limit=16 [ 1571.038973][T13497] syz.1.1572: attempt to access beyond end of device [ 1571.038973][T13497] loop1: rw=0, sector=1342178296, nr_sectors = 8 limit=16 [ 1571.039090][T13497] syz.1.1572: attempt to access beyond end of device [ 1571.039090][T13497] loop1: rw=0, sector=1342178296, nr_sectors = 8 limit=16 [ 1571.075773][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1571.076430][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1571.130980][T13204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1571.267999][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1571.285981][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1571.286641][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1571.453100][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 1574.662360][T10287] Bluetooth: hci3: command 0x041b tx timeout [ 1576.006844][T13482] chnl_net:caif_netlink_parms(): no params data found [ 1576.537144][T13482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.544827][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.593577][T13482] device bridge_slave_0 entered promiscuous mode [ 1576.696601][T13482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.733187][T10287] Bluetooth: hci3: command 0x040f tx timeout [ 1576.772799][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.876673][T13542] loop1: detected capacity change from 0 to 16 [ 1577.479511][T13542] erofs: (device loop1): mounted with root inode @ nid 36. [ 1577.671918][T13539] syz.1.1579: attempt to access beyond end of device [ 1577.671918][T13539] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1577.686307][T13539] syz.1.1579: attempt to access beyond end of device [ 1577.686307][T13539] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1577.710063][T13539] syz.1.1579: attempt to access beyond end of device [ 1577.710063][T13539] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1577.775881][ T26] audit: type=1800 audit(1771024906.098:215): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1579" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1578.013146][T13482] device bridge_slave_1 entered promiscuous mode [ 1578.119218][ T26] audit: type=1800 audit(1771024906.118:216): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1579" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1578.209124][T13482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.234042][T13482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.298286][T13482] team0: Port device team_slave_0 added [ 1578.386080][T13482] team0: Port device team_slave_1 added [ 1578.421765][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1578.452271][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1578.813076][T10287] Bluetooth: hci3: command 0x0419 tx timeout [ 1580.649015][T13204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.861101][T13482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.913164][T13482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.999366][T13482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.104381][T13482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.111416][T13482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.248977][T13482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.086798][T13482] device hsr_slave_0 entered promiscuous mode [ 1582.149545][T13482] device hsr_slave_1 entered promiscuous mode [ 1582.202455][T13482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1582.210110][T13482] Cannot create hsr debugfs directory [ 1585.299483][ T5694] device hsr_slave_0 left promiscuous mode [ 1585.325746][ T5694] device hsr_slave_1 left promiscuous mode [ 1585.353802][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.399027][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.411880][ T5694] device bridge_slave_1 left promiscuous mode [ 1585.419611][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.428909][ T5694] device bridge_slave_0 left promiscuous mode [ 1585.441542][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.771234][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1585.829698][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1585.890106][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.950192][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.326465][ T5694] bond0 (unregistering): Released all slaves [ 1588.635636][T13482] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1588.726411][T13482] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1589.315035][T13482] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1589.331683][T13482] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1590.163621][T10287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1590.166984][T10287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1590.167970][T10287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1590.169655][T10287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1590.170207][T10287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1590.170484][T10287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1590.500914][T13482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.171293][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1591.171780][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1591.174995][T13482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.178490][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1591.179074][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1591.179466][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.179524][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.180335][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1591.221269][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1591.221984][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1591.223084][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.223138][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.405620][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1591.406651][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1591.407900][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1591.409375][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1591.410130][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1591.410934][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1591.412138][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1591.438896][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1591.439700][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1591.493619][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1591.494450][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1591.537390][T13482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1591.629981][T13655] chnl_net:caif_netlink_parms(): no params data found [ 1593.361413][T10287] Bluetooth: hci2: command 0x0409 tx timeout [ 1593.683281][T13681] loop8: detected capacity change from 0 to 128 [ 1595.073048][T13683] loop2: detected capacity change from 0 to 16 [ 1595.100037][T13683] erofs: (device loop2): mounted with root inode @ nid 36. [ 1595.113190][T13683] syz.2.1597: attempt to access beyond end of device [ 1595.113190][T13683] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1595.127804][T13683] syz.2.1597: attempt to access beyond end of device [ 1595.127804][T13683] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1595.146209][T13683] syz.2.1597: attempt to access beyond end of device [ 1595.146209][T13683] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1595.146434][ T26] audit: type=1800 audit(1771024923.538:217): pid=13683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1597" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1595.372566][T10287] Bluetooth: hci2: command 0x041b tx timeout [ 1595.549276][ T26] audit: type=1800 audit(1771024923.558:218): pid=13683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1597" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1595.675280][T13655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.732481][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.740638][T13655] device bridge_slave_0 entered promiscuous mode [ 1596.140272][T13655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.162614][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.205597][T13655] device bridge_slave_1 entered promiscuous mode [ 1596.448202][T13680] syz.8.1595 (13680) used greatest stack depth: 18096 bytes left [ 1596.792891][T13655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.820187][T13655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.453106][T10287] Bluetooth: hci2: command 0x040f tx timeout [ 1598.225559][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1598.411198][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1599.343214][T13482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.534757][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1599.887052][T13655] team0: Port device team_slave_0 added [ 1599.901941][T13655] team0: Port device team_slave_1 added [ 1599.930799][T13655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1599.938371][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1599.972629][T13655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1600.007050][T13733] loop2: detected capacity change from 0 to 128 [ 1600.022524][T13655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1600.029645][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1600.232082][T13733] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1600.240851][T13733] FAT-fs (loop2): Filesystem has been set read-only [ 1601.002509][T13655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.043572][T13736] loop8: detected capacity change from 0 to 512 [ 1601.055793][T13736] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1602.476501][T13655] device hsr_slave_0 entered promiscuous mode [ 1603.001201][ T4271] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1603.065543][T13655] device hsr_slave_1 entered promiscuous mode [ 1603.169169][T13655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1603.211372][T13655] Cannot create hsr debugfs directory [ 1603.338108][T13759] binder: 13757:13759 ioctl 4018620d 0 returned -22 [ 1605.161420][ T5694] device hsr_slave_0 left promiscuous mode [ 1605.169061][ T5694] device hsr_slave_1 left promiscuous mode [ 1605.176081][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.193088][ T5694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.706262][ T5694] device bridge_slave_1 left promiscuous mode [ 1606.731850][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.879981][ T5694] device bridge_slave_0 left promiscuous mode [ 1606.922969][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.738473][ T5694] team0 (unregistering): Port device team_slave_1 removed [ 1610.930153][ T5694] team0 (unregistering): Port device team_slave_0 removed [ 1612.204693][T13813] binder: 13809:13813 ioctl 4018620d 0 returned -22 [ 1613.332888][ T5694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.608183][ T5694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.456129][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.462785][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.100454][ T5694] bond0 (unregistering): Released all slaves [ 1625.266244][T13655] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1625.294014][T13655] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1625.322860][T13655] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1625.336649][T13655] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1625.578474][T13872] loop8: detected capacity change from 0 to 128 [ 1625.639219][T13872] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1625.647577][T13872] FAT-fs (loop8): Filesystem has been set read-only [ 1628.554269][T10278] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1628.794815][T13655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.224063][T13655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.312485][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1629.378964][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1629.559375][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1629.589438][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1629.600327][T10287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1629.611915][T10287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1629.628312][T10287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1629.643237][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.650460][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.681526][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1630.182330][T13907] loop2: detected capacity change from 0 to 128 [ 1631.098153][T10287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1631.135053][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1631.136506][T13903] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1631.150325][T13903] FAT-fs (loop2): Filesystem has been set read-only [ 1631.151186][T10287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1631.176105][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1631.190834][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1631.201336][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.209194][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.230751][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1631.372818][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1632.482948][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1632.496891][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1632.510504][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1632.522131][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1632.532933][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1632.994683][ T4271] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1633.148379][T13922] loop8: detected capacity change from 0 to 128 [ 1633.191986][T13922] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1633.200424][T13922] FAT-fs (loop8): Filesystem has been set read-only [ 1633.244143][T10287] Bluetooth: hci3: command 0x0409 tx timeout [ 1633.639485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1633.671562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1633.718556][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1633.773774][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1634.432019][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1635.293047][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1635.703146][T10278] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1636.707219][T13899] chnl_net:caif_netlink_parms(): no params data found [ 1637.022038][T13948] loop8: detected capacity change from 0 to 512 [ 1637.107360][T13948] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1637.408939][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1638.911802][T13655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.995927][ T5694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1639.012623][ T5694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1639.291840][T13899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.302475][T13899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.316043][T13899] device bridge_slave_0 entered promiscuous mode [ 1639.749820][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1640.238361][ T4360] device hsr_slave_0 left promiscuous mode [ 1640.596973][T13979] loop2: detected capacity change from 0 to 128 [ 1640.650286][T13979] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1640.658517][T13979] FAT-fs (loop2): Filesystem has been set read-only [ 1641.320373][ T4360] device hsr_slave_1 left promiscuous mode [ 1641.337088][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.366054][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.375766][ T4360] device bridge_slave_1 left promiscuous mode [ 1641.382075][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.391990][ T4360] device bridge_slave_0 left promiscuous mode [ 1641.408725][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.648989][T13985] loop1: detected capacity change from 0 to 128 [ 1641.696559][T13985] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1641.704821][T13985] FAT-fs (loop1): Filesystem has been set read-only [ 1642.845959][ T4360] team0 (unregistering): Port device team_slave_1 removed [ 1643.839543][ T4360] team0 (unregistering): Port device team_slave_0 removed [ 1643.912675][ T4360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.003888][ T4360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.534805][ T4360] bond0 (unregistering): Released all slaves [ 1644.720429][T13899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.732560][T13899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.752587][T13899] device bridge_slave_1 entered promiscuous mode [ 1644.776000][T13978] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1644.786218][T13978] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1644.795979][T13978] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1644.847470][T13899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.885741][ T4271] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1644.895212][T13984] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1644.905107][T13984] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1644.915660][T13984] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1644.917504][T13899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.022799][ T4277] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1645.078637][T13899] team0: Port device team_slave_0 added [ 1645.161684][T13899] team0: Port device team_slave_1 added [ 1645.276660][T13998] binder: BINDER_SET_CONTEXT_MGR already set [ 1645.283083][T13998] binder: 13994:13998 ioctl 4018620d 200000000040 returned -16 [ 1646.724117][T13899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.724145][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.724782][T13899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.727447][T13899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.727462][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.727486][T13899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.977957][T13899] device hsr_slave_0 entered promiscuous mode [ 1646.992786][T13899] device hsr_slave_1 entered promiscuous mode [ 1647.042599][T13899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1647.042639][T13899] Cannot create hsr debugfs directory [ 1651.398166][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1651.410669][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1652.749664][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1652.764898][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1652.774252][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1652.844741][T14043] loop2: detected capacity change from 0 to 128 [ 1652.867436][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1652.919520][T14043] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1652.927717][T14043] FAT-fs (loop2): Filesystem has been set read-only [ 1653.032839][T13899] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1653.131328][T13899] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1653.177750][T13899] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1654.158297][T13899] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1654.237180][ T4271] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1655.102510][T10287] Bluetooth: hci2: command 0x0409 tx timeout [ 1655.830090][T14070] binder: 14068:14070 ioctl c0306201 0 returned -14 [ 1656.528689][T14075] loop1: detected capacity change from 0 to 128 [ 1656.747523][T14075] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1656.747600][T14075] FAT-fs (loop1): Filesystem has been set read-only [ 1657.239623][T10287] Bluetooth: hci2: command 0x041b tx timeout [ 1657.770073][T13899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1657.821583][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1657.831868][ T5334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1659.003358][ T4277] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1659.135315][T13899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.224020][T13899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1659.242556][T13899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1659.292366][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1660.820630][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1660.936547][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1660.982889][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.990118][ T9882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.032732][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1661.072598][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1661.092532][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.099705][ T9882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.161966][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1661.197856][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1661.220459][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1661.259456][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1661.290498][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1661.372564][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1661.467492][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1661.494237][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1661.528031][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1662.685459][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1662.790136][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1662.838126][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1662.846575][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1662.873858][ T9882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1662.907593][T14038] chnl_net:caif_netlink_parms(): no params data found [ 1664.409962][T14129] binder: 14121:14129 ioctl c0306201 0 returned -14 [ 1664.421776][T14129] binder: BINDER_SET_CONTEXT_MGR already set [ 1664.445576][T14129] binder: 14121:14129 ioctl 4018620d 200000000040 returned -16 [ 1665.773504][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1665.797224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1665.820818][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.835790][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.860409][T14038] device bridge_slave_0 entered promiscuous mode [ 1666.036755][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.064690][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.114722][T14038] device bridge_slave_1 entered promiscuous mode [ 1666.772912][T13899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.796121][ T4360] device hsr_slave_0 left promiscuous mode [ 1666.816485][ T4360] device hsr_slave_1 left promiscuous mode [ 1666.851187][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.870695][ T4360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.922887][ T4360] device bridge_slave_1 left promiscuous mode [ 1666.939946][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.076125][ T4360] device bridge_slave_0 left promiscuous mode [ 1667.105586][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.123872][T14166] loop8: detected capacity change from 0 to 512 [ 1668.252329][T14166] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1671.374197][T14186] binder: 14184:14186 ioctl c0306201 0 returned -14 [ 1671.656791][ T4360] team0 (unregistering): Port device team_slave_1 removed [ 1672.144155][ T4360] team0 (unregistering): Port device team_slave_0 removed [ 1672.206490][ T4360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.270557][ T4360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.727228][T14192] loop2: detected capacity change from 0 to 16 [ 1672.815453][T14192] erofs: (device loop2): mounted with root inode @ nid 36. [ 1677.370201][ T4360] bond0 (unregistering): Released all slaves [ 1677.555875][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.578900][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.648210][T14201] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1677.657997][T14201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1677.667837][T14201] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1679.813085][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.819477][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.989551][T14038] team0: Port device team_slave_0 added [ 1680.161453][T14038] team0: Port device team_slave_1 added [ 1680.322062][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.475055][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.569342][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.607450][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.615152][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.697021][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.190663][T14038] device hsr_slave_0 entered promiscuous mode [ 1682.828198][T14038] device hsr_slave_1 entered promiscuous mode [ 1682.852630][T14038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1682.880662][T14038] Cannot create hsr debugfs directory [ 1683.078409][T14248] loop8: detected capacity change from 0 to 128 [ 1684.032577][T14245] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1684.040661][T14245] FAT-fs (loop8): Filesystem has been set read-only [ 1684.200639][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1684.260501][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1684.412598][T13899] device veth0_vlan entered promiscuous mode [ 1684.450198][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1684.513122][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1684.569324][T13899] device veth1_vlan entered promiscuous mode [ 1684.606813][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1684.633128][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1684.684904][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1686.639280][T10278] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1688.909395][T14311] loop1: detected capacity change from 0 to 128 [ 1690.606338][T14308] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1690.614497][T14308] FAT-fs (loop1): Filesystem has been set read-only [ 1692.072086][ T4277] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 1692.219479][T14329] loop2: detected capacity change from 0 to 16 [ 1692.877203][T14329] erofs: (device loop2): mounted with root inode @ nid 36. [ 1692.893344][T14329] syz.2.1706: attempt to access beyond end of device [ 1692.893344][T14329] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1692.908080][T14329] syz.2.1706: attempt to access beyond end of device [ 1692.908080][T14329] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1692.925867][T14329] syz.2.1706: attempt to access beyond end of device [ 1692.925867][T14329] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1693.016470][ T26] audit: type=1800 audit(1771025021.319:219): pid=14329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1706" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1693.136954][ T26] audit: type=1800 audit(1771025021.329:220): pid=14329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1706" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1694.067547][T14344] loop2: detected capacity change from 0 to 128 [ 1695.039123][T14343] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1695.047339][T14343] FAT-fs (loop2): Filesystem has been set read-only [ 1695.818931][T14348] loop8: detected capacity change from 0 to 128 [ 1695.906516][T14348] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1695.914771][T14348] FAT-fs (loop8): Filesystem has been set read-only [ 1696.451674][T14038] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1696.549402][ T4271] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1696.558587][T14038] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1696.666909][T14038] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1696.681837][T14038] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1697.478195][T10278] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 1697.598340][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.629400][T10287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1697.641418][T10287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1697.708687][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.725677][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1697.739767][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1697.765107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1697.780379][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1697.789668][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.796884][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.811146][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1697.820453][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1697.835419][T10287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1697.846754][T10287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1697.856096][T10287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1697.863655][T10287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1697.879479][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.886758][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.970843][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1698.783354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1698.828847][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1699.932383][T10287] Bluetooth: hci3: command 0x0409 tx timeout [ 1700.174477][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1700.204008][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1700.267426][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1700.297873][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1700.316978][T11213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1700.931425][T14392] loop2: detected capacity change from 0 to 2048 [ 1701.071147][T14392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1701.451554][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1701.461145][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1701.535801][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1701.615226][T13502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1701.846983][T14038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1701.958148][T14400] loop8: detected capacity change from 0 to 128 [ 1702.034688][T14400] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1702.092496][T10287] Bluetooth: hci3: command 0x041b tx timeout [ 1702.338590][T14400] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1702.425912][T14400] ext2 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1704.354421][T14420] loop2: detected capacity change from 0 to 2048 [ 1704.383722][T10287] Bluetooth: hci3: command 0x040f tx timeout [ 1704.470482][T14420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1707.337564][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1707.635716][T10278] EXT4-fs (loop8): unmounting filesystem. [ 1707.835298][ T9882] device hsr_slave_0 left promiscuous mode [ 1707.951757][ T9882] device hsr_slave_1 left promiscuous mode [ 1707.963374][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.003008][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.033299][ T9882] device bridge_slave_1 left promiscuous mode [ 1708.039625][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.113671][ T9882] device bridge_slave_0 left promiscuous mode [ 1708.119990][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.126000][ T9882] device veth1_vlan left promiscuous mode [ 1709.142400][ T9882] device veth0_vlan left promiscuous mode [ 1709.858187][T14447] loop1: detected capacity change from 0 to 128 [ 1709.924626][T14447] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1710.000284][T14447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1710.026417][T14447] ext2 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1710.283851][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 1710.556642][T14460] loop2: detected capacity change from 0 to 128 [ 1710.890834][T14460] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1710.899268][T14460] FAT-fs (loop2): Filesystem has been set read-only [ 1712.631643][ T9882] team0 (unregistering): Port device team_slave_1 removed [ 1712.715222][ T9882] team0 (unregistering): Port device team_slave_0 removed [ 1712.793890][ T9882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.869364][ T9882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.979319][ T9882] bond0 (unregistering): Released all slaves [ 1714.146427][T14365] chnl_net:caif_netlink_parms(): no params data found [ 1714.162982][T14459] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1714.172467][T14459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1714.182074][T14459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1714.247142][ T4271] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 1714.500705][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.542371][T14365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.550730][T14365] device bridge_slave_0 entered promiscuous mode [ 1714.574713][T14365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.581965][T14365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.590385][T14365] device bridge_slave_1 entered promiscuous mode [ 1714.663137][T14365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.702004][T14365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.836001][T14365] team0: Port device team_slave_0 added [ 1714.877494][T14365] team0: Port device team_slave_1 added [ 1715.089292][T14365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.112339][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.177546][T14365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.204491][T14365] batman_adv: batadv0: Adding interface: batadv_slave_1 SYZFAIL: repeatedly failed to execute the program proc=7 req=573 state=1 status=9 (errno 11: Resource temporarily unavailable) [ 1715.211596][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.306519][T14365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.393409][ T9882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.506003][ T9882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.640476][ T9882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.790467][ T9882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.002390][ T9882] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.102967][ T9882] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.201794][ T9882] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.291317][ T9882] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.479788][ T9882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.491237][ T9882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1717.586851][ T9882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.603999][ T9882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1717.685962][ T9882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.697095][ T9882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1717.773353][ T9882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.785047][ T9882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1721.049870][ T9882] device hsr_slave_0 left promiscuous mode [ 1721.057438][ T9882] device hsr_slave_1 left promiscuous mode [ 1721.065948][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.078187][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.086013][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.098306][ T9882] device bridge_slave_1 left promiscuous mode [ 1721.104925][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.118135][ T9882] device hsr_slave_0 left promiscuous mode [ 1721.124931][ T9882] device hsr_slave_1 left promiscuous mode [ 1721.131638][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.139795][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.148782][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.156896][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.165759][ T9882] device bridge_slave_1 left promiscuous mode [ 1721.172071][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.181052][ T9882] device bridge_slave_0 left promiscuous mode [ 1721.187558][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.204758][ T9882] device hsr_slave_0 left promiscuous mode [ 1721.211269][ T9882] device hsr_slave_1 left promiscuous mode [ 1721.225152][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1721.238582][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.246895][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1721.260682][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.269218][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.284327][ T9882] device bridge_slave_0 left promiscuous mode [ 1721.290630][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.310794][ T9882] device hsr_slave_0 left promiscuous mode [ 1721.320762][ T9882] device hsr_slave_1 left promiscuous mode [ 1721.329852][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.341217][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1721.351821][ T9882] device bridge_slave_1 left promiscuous mode [ 1721.361535][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.377173][ T9882] device bridge_slave_0 left promiscuous mode [ 1721.385692][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.518980][ T9882] device veth1_macvtap left promiscuous mode [ 1721.528006][ T9882] device veth0_macvtap left promiscuous mode [ 1721.537165][ T9882] device veth1_vlan left promiscuous mode [ 1721.543193][ T9882] device veth0_vlan left promiscuous mode [ 1721.550812][ T9882] device veth1_macvtap left promiscuous mode [ 1721.557389][ T9882] device veth0_macvtap left promiscuous mode [ 1721.565764][ T9882] device veth1_vlan left promiscuous mode [ 1721.571653][ T9882] device veth0_vlan left promiscuous mode [ 1721.583046][ T9882] device veth1_macvtap left promiscuous mode [ 1721.589160][ T9882] device veth0_macvtap left promiscuous mode [ 1721.600125][ T9882] device veth1_vlan left promiscuous mode [ 1721.608849][ T9882] device veth0_vlan left promiscuous mode [ 1722.582461][ T9882] team0 (unregistering): Port device team_slave_1 removed [ 1722.640353][ T9882] team0 (unregistering): Port device team_slave_0 removed [ 1722.704608][ T9882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.761148][ T9882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.142763][ T9882] bond0 (unregistering): Released all slaves [ 1723.795658][ T9882] team0 (unregistering): Port device team_slave_1 removed [ 1723.848976][ T9882] team0 (unregistering): Port device team_slave_0 removed [ 1723.903307][ T9882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.961469][ T9882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.401762][ T9882] bond0 (unregistering): Released all slaves [ 1724.539743][ T9882] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1724.766101][ T9882] bond1 (unregistering): Released all slaves