last executing test programs: 14m28.843877844s ago: executing program 32 (id=477): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x20, 0x0, 0xfe, 0x8000}, {0x20, 0xfe, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 14m10.347754465s ago: executing program 33 (id=516): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a0300"/79], 0x0, 0x56}, 0x28) 12m40.618285366s ago: executing program 34 (id=689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 10m25.782781649s ago: executing program 35 (id=973): unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r1, 0x5409, 0x6) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 9m0.297102632s ago: executing program 36 (id=1122): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r3, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) 7m24.228875897s ago: executing program 37 (id=1290): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) r1 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 6m42.953907997s ago: executing program 38 (id=1358): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) io_setup(0xe, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x810) close_range(r1, 0xffffffffffffffff, 0x0) 4m53.471287586s ago: executing program 1 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r1, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x620b, 0x0, 0x40000}, 0x0) 4m52.350529087s ago: executing program 1 (id=1542): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x3}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 4m48.96167772s ago: executing program 1 (id=1544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="796112000000000000007e0000001d15ac45cac7d9fbd4486638a478751dc054cceef4423bbfce2349fa0731d463ff3ab34244f0cec0fa6e1ad1379bb4be855e80d1bae275f7bc90459f7080e73bc24fd05abdd71ae069f12cbcc193a329ae8bb18552eb4f09c2f300e9cf3cb786c3143ca6263b731bb860da49a9abcbf8024dadfcc67cb235c85be2e8043afeb97a1a59a0bed6c5c6f79d3e228a64ce5945563be73c7bb52351a4b7e017a8a056f65093cce95b8100118ae38a5b22c222cfe8c0a5fb2f1a798aa790abb18330f226a2c02fe385217e82491a4cf7b5890c0a731c3a1efad46c27ee10f4fd88"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 4m46.082247241s ago: executing program 1 (id=1547): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x4ac, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x480, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773819, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x1, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m44.045881392s ago: executing program 1 (id=1553): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 4m43.041361106s ago: executing program 1 (id=1557): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=0x1, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)}, {&(0x7f0000000600)="53000000d3dc15b8a2d51246344358de41e9f3cdf686423f58e390ab8044cce9b4d2ef3ca98d513d44a62ce86e18809bb5fbca463144246541727c14a3e9210d201e987a55b6cc228ae77063a784d8ff2a7e80c61e92", 0x56}], 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x5dfbd751, 0x401) 4m27.954556869s ago: executing program 39 (id=1557): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)=0x1, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)}, {&(0x7f0000000600)="53000000d3dc15b8a2d51246344358de41e9f3cdf686423f58e390ab8044cce9b4d2ef3ca98d513d44a62ce86e18809bb5fbca463144246541727c14a3e9210d201e987a55b6cc228ae77063a784d8ff2a7e80c61e92", 0x56}], 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x5dfbd751, 0x401) 3m36.793313466s ago: executing program 6 (id=1725): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) 3m36.323372873s ago: executing program 6 (id=1729): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m35.409158978s ago: executing program 6 (id=1732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e4}, 0x4880) 3m29.79725228s ago: executing program 6 (id=1747): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000058c0)={0x2020}, 0x2020) 3m28.035467544s ago: executing program 6 (id=1758): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0xee00, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xfffffff5, &(0x7f0000000140)=0x1) 3m25.125996576s ago: executing program 5 (id=1767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 3m24.235145177s ago: executing program 6 (id=1771): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000058c0)={0x2020}, 0x2020) 3m24.142811863s ago: executing program 5 (id=1772): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3m23.717634631s ago: executing program 5 (id=1775): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xfffffff9) sendmsg$inet_sctp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084"], 0x20, 0x404a055}, 0x0) 3m23.486978619s ago: executing program 5 (id=1778): capset(0x0, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000160033"], 0x19c}}, 0x40004) 3m22.953839222s ago: executing program 5 (id=1782): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x80, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x6, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 3m22.536334013s ago: executing program 5 (id=1786): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 3m7.37333229s ago: executing program 40 (id=1771): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000058c0)={0x2020}, 0x2020) 3m7.166635465s ago: executing program 41 (id=1786): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 1m42.238275488s ago: executing program 3 (id=2074): mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b86de) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x24000040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40080) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8000000", @ANYRES32=r5, @ANYBLOB="0c0099003b000000270000000800dc00cf370000a8008480a40000801a0001003cacf1e23baf356749d54c1f91b5867f0b6a9a8b53ba000014000680080003000004000008000000010000800a000500d9a6631c57aa00000a00050050505050505000000a000500b52ed771e80200000a0001000101010101010000080002000c0000000a00010002020202020200000800020007000000240006800800050000000000080002000d0000000800000008000000080000000d000000d999d53d925fe5e1ccfcad0fe87a6c5228b73e60452ad699ce5e299471a29f01b20dcf41783cdfb06b1b3f1e9d61eff5dcbd12773228e021a60370dba5c4d0564ca895f74fafcb1aa5fb2927ecff5bb1fc176f7b21db0c1c2e545c902d4e6252d829ee8be749a1ff3bb6d4d9a4770b383670cb8d328931898ec0715eaae4d88f4aa4d308ab9cf217067610be2c545d60148757104826d4a86839516ad1cd230a"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m41.799332698s ago: executing program 3 (id=2077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@delchain={0x38, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 1m39.623397962s ago: executing program 3 (id=2082): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x27, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x9, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xbff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x4, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x100, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x807fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x2000006, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x4, 0x100, 0x6, 0x10000, 0xf51, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x4173, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x4, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x1], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0x8, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x75) r5 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x29, 0x5, 0x7, 0x55, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x1, 0xffffff4b, 0x6}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f0000000e40)={{0x2, 0x2, 0x800, 0x6, 0x101}, &(0x7f0000000cc0)=[{}, {}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4bd0, &(0x7f00000000c0)={0x0, 0x43cf, 0x20, 0x3, 0x9f}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 1m37.919579741s ago: executing program 3 (id=2084): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x44}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 1m37.39337647s ago: executing program 3 (id=2086): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x44) 1m37.096207862s ago: executing program 3 (id=2088): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) setrlimit(0xc, &(0x7f00000000c0)={0x12, 0x4}) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, 0x0, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1m21.710646396s ago: executing program 42 (id=2088): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) setrlimit(0xc, &(0x7f00000000c0)={0x12, 0x4}) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, 0x0, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 39.977655084s ago: executing program 2 (id=2253): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000080a01010000000000000000020000090900010073797a300000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 39.611112072s ago: executing program 2 (id=2256): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0), 0x13f, 0x1}}, 0x20) 38.101523184s ago: executing program 2 (id=2259): unshare(0x62000000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 36.664329098s ago: executing program 2 (id=2267): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack_expect\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 28.020223731s ago: executing program 2 (id=2278): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 27.305702772s ago: executing program 2 (id=2283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r3, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) syz_genetlink_get_family_id$gtp(0x0, r5) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="796112000000000000007e0000001d15ac45cac7d9fbd4486638a478751dc054cceef4423bbfce2349fa0731d463ff3ab34244f0cec0fa6e1ad1379bb4be855e80d1bae275f7bc90459f7080e73bc24fd05abdd71ae069f12cbcc193a329ae8bb18552eb4f09c2f300e9cf3cb786c3143ca6263b731bb860da49a9abcbf8024dadfcc67cb235c85be2e8043afeb97a1a59a0bed6c5c6f79d3e228a64ce5945563be73c7bb52351a4b7e017a8a056f65093cce95b8100118ae38a5b22c222cfe8c0a5fb2f1a798aa790abb18330f226a2c02fe385217e82491a4cf7b5890c0a731c3a1efad46c27ee10f4fd88"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 12.064860452s ago: executing program 43 (id=2283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r3, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) syz_genetlink_get_family_id$gtp(0x0, r5) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="796112000000000000007e0000001d15ac45cac7d9fbd4486638a478751dc054cceef4423bbfce2349fa0731d463ff3ab34244f0cec0fa6e1ad1379bb4be855e80d1bae275f7bc90459f7080e73bc24fd05abdd71ae069f12cbcc193a329ae8bb18552eb4f09c2f300e9cf3cb786c3143ca6263b731bb860da49a9abcbf8024dadfcc67cb235c85be2e8043afeb97a1a59a0bed6c5c6f79d3e228a64ce5945563be73c7bb52351a4b7e017a8a056f65093cce95b8100118ae38a5b22c222cfe8c0a5fb2f1a798aa790abb18330f226a2c02fe385217e82491a4cf7b5890c0a731c3a1efad46c27ee10f4fd88"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 9.597140438s ago: executing program 8 (id=2328): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 8.936769743s ago: executing program 8 (id=2332): mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b86de) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x24000040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x3, 0xff, 0x9, 0x800}}, 0x1c}}, 0x40080) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8000000", @ANYRES32=r5, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 8.871179598s ago: executing program 7 (id=2333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x80) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0xffffffffffffffcc, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 8.608405157s ago: executing program 8 (id=2334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x1, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) 8.341715032s ago: executing program 7 (id=2336): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r4}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4c, 0x0, 0x0) ioctl(r6, 0x8936, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.897845875s ago: executing program 0 (id=2339): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000880)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="330520000a00160001007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76", 0x2a, 0x801, &(0x7f0000000000)={0x11, 0x894f, r1, 0x1, 0x5f, 0x6, @local}, 0x14) sendmsg$can_j1939(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r1, 0x0, {0x1, 0xf0, 0x1}, 0x1}, 0x18, &(0x7f0000000480)={&(0x7f00000003c0)="e1b89fff830444f2965bc0740af3dd4cbc4b4c6ff443acf04a186e4955bb307f7f45b621b267c53e96dabd1e1db6a61c03129d84d46f68d4c9befc0ecb41e5154770f7303d28222f5a4cf4dca1efa3757bce8544d5a2d2f531de07f70a9a79025e51e93c31a2aff2fd38ea84ffc6f0ad41e00d867decf5abf74715d188d99ed2df0f2bb1222af46be5f0317e30f78132985762f06dc7fc0fe422a276fbc2d73d78f603ae083e344c048fedc25a4c6f1c9c451a", 0xb3}, 0x1, 0x0, 0x0, 0x1}, 0x48041) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a3100"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYBLOB="374ebd3ef36e10360930d093491ca45a4ae82870b136ef74d0c8468d92ab829cc1ef02555d1c58da982601e74acfba449b237d08703d90e73e9d34a8dac9a50824671c6e9a21601a746f86582849db7bdeae684f1a058b12aabd739e59937f490cbee7b5065535698c851f90e25a18fcb0065661f4b2ce4b01cf9c5696d99a00074cb3ffa725dc6b192954ada1323d9062f13d38d15f4fdb38ce8ea16fedb7685cef0d8cccec795848d82dd8afaddae45131fa8ecdfa35a045198ca400886e3880599a8fa59fa9c6aed2d86eec657534ad43690b8900ac4bb16880088a837a1828e27d4bf7b24c49c0fb097958", @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x8040) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x21e72e76, @empty, 0xb}}, 0x3, 0x0, 0x318, 0x1, 0x24}, 0x9c) 7.052739565s ago: executing program 7 (id=2340): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.009285086s ago: executing program 4 (id=2342): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, 0x0, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x922, 0x12) 5.937932499s ago: executing program 9 (id=2343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100), 0x4) 5.814970775s ago: executing program 0 (id=2344): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x27, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x9, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xbff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x4, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x100, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x807fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x2000006, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x4, 0x100, 0x6, 0x10000, 0xf51, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x4173, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x4, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x1], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0x8, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r4, &(0x7f0000000040)=""/117, 0x75) r5 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x29, 0x5, 0x7, 0x55, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x1, 0xffffff4b, 0x6}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f0000000e40)={{0x2, 0x2, 0x800, 0x6, 0x101}, &(0x7f0000000cc0)=[{}, {}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4bd0, &(0x7f00000000c0)={0x0, 0x43cf, 0x20, 0x3, 0x9f}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 5.477535597s ago: executing program 9 (id=2345): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0xa14c18, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.435219556s ago: executing program 8 (id=2346): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) write$UHID_INPUT(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r0, 0x40000000) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$swradio(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) 5.03135129s ago: executing program 9 (id=2347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x0, 0x4, 0x10000}, 0x14}}, 0x810) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf6215"], 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x4) 4.882651146s ago: executing program 4 (id=2348): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x60bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x132}, @IFA_FLAGS={0x8, 0x8, 0x83}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.546170853s ago: executing program 4 (id=2349): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e4}, 0x4880) 4.525649676s ago: executing program 0 (id=2350): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x20, 0x0) 4.341405438s ago: executing program 9 (id=2351): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r4}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4c, 0x0, 0x0) ioctl(r6, 0x8936, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.121326885s ago: executing program 0 (id=2352): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.076679059s ago: executing program 7 (id=2353): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 2.866370657s ago: executing program 4 (id=2354): mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b86de) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x24000040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xfd, 0x3, 0xff, 0x9, 0x800}}, 0x1c}}, 0x40080) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8000000", @ANYRES32=r5, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2.556943545s ago: executing program 9 (id=2355): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200629000000a94b9f7c6841d00ccf403ae77d35b3020477a2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.32502789s ago: executing program 0 (id=2356): modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r4, 0x1) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f7", 0x90}], 0x1}], 0x1, 0x40800) modify_ldt$read(0x0, &(0x7f0000000140)=""/4126, 0x1051) 2.290925675s ago: executing program 7 (id=2357): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) read$FUSE(r0, 0x0, 0x0) 1.70566465s ago: executing program 8 (id=2358): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000000880)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="330520000a00160001007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76", 0x2a, 0x801, &(0x7f0000000000)={0x11, 0x894f, r1, 0x1, 0x5f, 0x6, @local}, 0x14) sendmsg$can_j1939(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r1, 0x0, {0x1, 0xf0, 0x1}, 0x1}, 0x18, &(0x7f0000000480)={&(0x7f00000003c0)="e1b89fff830444f2965bc0740af3dd4cbc4b4c6ff443acf04a186e4955bb307f7f45b621b267c53e96dabd1e1db6a61c03129d84d46f68d4c9befc0ecb41e5154770f7303d28222f5a4cf4dca1efa3757bce8544d5a2d2f531de07f70a9a79025e51e93c31a2aff2fd38ea84ffc6f0ad41e00d867decf5abf74715d188d99ed2df0f2bb1222af46be5f0317e30f78132985762f06dc7fc0fe422a276fbc2d73d78f603ae083e344c048fedc25a4c6f1c9c451a", 0xb3}, 0x1, 0x0, 0x0, 0x1}, 0x48041) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a3100"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYBLOB="374ebd3ef36e10360930d093491ca45a4ae82870b136ef74d0c8468d92ab829cc1ef02555d1c58da982601e74acfba449b237d08703d90e73e9d34a8dac9a50824671c6e9a21601a746f86582849db7bdeae684f1a058b12aabd739e59937f490cbee7b5065535698c851f90e25a18fcb0065661f4b2ce4b01cf9c5696d99a00074cb3ffa725dc6b192954ada1323d9062f13d38d15f4fdb38ce8ea16fedb7685cef0d8cccec795848d82dd8afaddae45131fa8ecdfa35a045198ca400886e3880599a8fa59fa9c6aed2d86eec657534ad43690b8900ac4bb16880088a837a1828e27d4bf7b24c49c0fb097958", @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x8040) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x21e72e76, @empty, 0xb}}, 0x3, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.601765835s ago: executing program 7 (id=2359): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0103000000000006000006241a00000002"], 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 1.599596897s ago: executing program 4 (id=2360): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x60bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x132}, @IFA_FLAGS={0x8, 0x8, 0x83}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 321.0566ms ago: executing program 0 (id=2361): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r3, &(0x7f00000004c0)={'syz0\x00', {0x27, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x9, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xbff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x6, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x4, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x100, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x807fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x2000006, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x4, 0x100, 0x6, 0x10000, 0xf51, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x4173, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x4, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x1], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0x8, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r4, &(0x7f0000000040)=""/117, 0x75) r5 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x29, 0x5, 0x7, 0x55, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x1, 0xffffff4b, 0x6}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f0000000e40)={{0x2, 0x2, 0x800, 0x6, 0x101}, &(0x7f0000000cc0)=[{}, {}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4bd0, &(0x7f00000000c0)={0x0, 0x43cf, 0x20, 0x3, 0x9f}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 142.970046ms ago: executing program 9 (id=2362): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_CREATE(r0, 0x5501) 15.371206ms ago: executing program 8 (id=2363): unshare(0x64000600) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 0s ago: executing program 4 (id=2364): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x7fff, 0x7ffe, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): rnaling mode [ 823.400902][ T226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.447595][ T226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.507783][T10048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.549522][T11695] EXT4-fs (loop3): 1 truncate cleaned up [ 823.573489][T11695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.734851][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.607443][T11702] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1455'. [ 824.618156][T11702] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1455'. [ 825.277510][T11709] fuse: Bad value for 'group_id' [ 825.293490][T11709] fuse: Bad value for 'group_id' [ 825.370716][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.406655][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.452967][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1457'. [ 825.556657][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1457'. [ 825.653270][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.660533][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.825317][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.832611][T10048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.909422][T10207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.895017][ T9644] Bluetooth: hci0: hardware error 0x07 [ 827.922307][T10207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.378190][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.463448][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.450803][T11753] 9pnet_virtio: no channels available for device syz [ 832.310830][ T9644] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 832.767024][T11759] loop9: detected capacity change from 0 to 512 [ 832.844474][T11759] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 832.930396][T11759] EXT4-fs (loop9): 1 truncate cleaned up [ 832.963640][T11759] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.069916][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.079073][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.447297][T11761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.491600][T11761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.003841][T11777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1471'. [ 835.034682][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1471'. [ 835.056467][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.176377][ T6235] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.418669][ T6235] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.874166][ T6235] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.930390][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.967537][ T6235] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.070905][ T5829] Bluetooth: hci1: hardware error 0x07 [ 837.301311][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 837.301340][ T30] audit: type=1326 audit(1775215107.057:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 838.473016][ T30] audit: type=1326 audit(1775215107.057:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 838.647045][ T30] audit: type=1326 audit(1775215108.217:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 839.044808][ T30] audit: type=1326 audit(1775215108.217:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 839.173509][T11823] 9pnet_virtio: no channels available for device syz [ 840.129158][ T30] audit: type=1326 audit(1775215108.217:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 840.326824][ T5829] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 841.095828][ T30] audit: type=1326 audit(1775215108.217:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 842.068779][ T30] audit: type=1326 audit(1775215108.227:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 843.091141][ T30] audit: type=1326 audit(1775215108.227:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 843.958062][ T30] audit: type=1326 audit(1775215108.227:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 843.980695][ T30] audit: type=1326 audit(1775215108.227:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 844.041162][ T30] audit: type=1326 audit(1775215108.227:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 844.064055][ T30] audit: type=1326 audit(1775215108.227:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 844.087030][ T30] audit: type=1326 audit(1775215108.227:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 844.109859][ T30] audit: type=1326 audit(1775215108.227:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 844.132813][ T30] audit: type=1326 audit(1775215108.227:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 844.156438][ T30] audit: type=1326 audit(1775215108.227:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f046139c582 code=0x7ffc0000 [ 844.264041][ T30] audit: type=1326 audit(1775215108.307:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.9.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f046139c582 code=0x7ffc0000 [ 844.790790][T11846] loop3: detected capacity change from 0 to 512 [ 844.862774][T11846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 844.971343][T11846] EXT4-fs (loop3): 1 truncate cleaned up [ 845.053198][T11846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.522784][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.026676][T11437] veth0_vlan: entered promiscuous mode [ 848.048413][T11437] veth1_vlan: entered promiscuous mode [ 848.089738][T11437] veth0_macvtap: entered promiscuous mode [ 848.142670][T11437] veth1_macvtap: entered promiscuous mode [ 848.177971][T11853] 9pnet_virtio: no channels available for device syz [ 848.512880][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.883855][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.733837][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.970289][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.008089][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.063459][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.331441][ T5829] Bluetooth: hci4: hardware error 0x07 [ 851.095715][ T9644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 851.106646][ T9644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 851.115696][ T9644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 851.124203][ T9644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 851.132509][ T9644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 851.289591][T11911] 9pnet_virtio: no channels available for device syz [ 852.952072][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 853.913664][ T5829] Bluetooth: hci6: command tx timeout [ 854.112377][T11915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1493'. [ 854.229974][T11911] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 854.239935][T11911] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 854.249743][T11911] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 856.021207][ T5829] Bluetooth: hci6: command tx timeout [ 856.995311][T11928] loop3: detected capacity change from 0 to 512 [ 857.029109][T11928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 857.141984][T11928] EXT4-fs (loop3): 1 truncate cleaned up [ 857.787363][T11928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.201367][ T9644] Bluetooth: hci6: command tx timeout [ 858.231632][T11935] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input13 [ 860.232106][ T9644] Bluetooth: hci6: command tx timeout [ 860.736786][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.040017][T11952] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 861.104026][T11952] cramfs: wrong magic [ 861.678343][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 861.678371][ T30] audit: type=1800 audit(1775215131.457:639): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1500" name="bus" dev="tmpfs" ino=1584 res=0 errno=0 [ 861.818996][ T30] audit: type=1326 audit(1775215131.567:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 861.975508][ T30] audit: type=1326 audit(1775215131.567:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 862.282971][ T30] audit: type=1326 audit(1775215131.567:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 862.388426][T10205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.409062][ T30] audit: type=1326 audit(1775215131.567:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 862.496199][ T30] audit: type=1326 audit(1775215131.567:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 863.083626][ T30] audit: type=1326 audit(1775215131.567:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 863.233414][T10205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.259864][ T30] audit: type=1326 audit(1775215131.567:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 863.389622][ T30] audit: type=1326 audit(1775215131.567:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 863.630760][ T30] audit: type=1326 audit(1775215131.567:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.9.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 864.564368][T11982] 9pnet_virtio: no channels available for device syz [ 864.850737][T10205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.857079][T11982] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 865.866615][T11982] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 865.876518][T11982] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 866.206215][T10205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.396699][T11906] chnl_net:caif_netlink_parms(): no params data found [ 866.748238][T12001] 9pnet_virtio: no channels available for device syz [ 869.133185][T12017] loop1: detected capacity change from 0 to 512 [ 869.144400][T12017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 869.195575][T12016] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input14 [ 869.247814][T12017] EXT4-fs (loop1): 1 truncate cleaned up [ 869.323129][T12017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.451605][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.458054][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.461759][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 870.313272][T11906] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.320474][T11906] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.396681][T11906] bridge_slave_0: entered allmulticast mode [ 870.434044][T11906] bridge_slave_0: entered promiscuous mode [ 870.494858][T11906] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.532688][T11906] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.540253][T11906] bridge_slave_1: entered allmulticast mode [ 870.674372][T11906] bridge_slave_1: entered promiscuous mode [ 870.891446][T12024] can0: slcan on ptm0. [ 871.751418][T12043] 9pnet_virtio: no channels available for device syz [ 872.148584][T11282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.203687][T10205] bridge_slave_1: left allmulticast mode [ 872.209399][T10205] bridge_slave_1: left promiscuous mode [ 872.224368][T12032] can0 (unregistered): slcan off ptm0. [ 872.261659][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.374190][T10205] bridge_slave_0: left allmulticast mode [ 872.379908][T10205] bridge_slave_0: left promiscuous mode [ 872.434435][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.820319][T12063] 9pnet_virtio: no channels available for device syz [ 874.084778][T10205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.097330][T10205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.108976][T10205] bond0 (unregistering): Released all slaves [ 874.146619][T12043] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 874.156988][T12043] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 874.166685][T12043] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 874.368612][T10205] hsr_slave_0: left promiscuous mode [ 874.375455][T10205] hsr_slave_1: left promiscuous mode [ 874.387441][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.432696][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.462811][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.489717][T10205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.534330][T10205] veth1_macvtap: left promiscuous mode [ 874.543673][T10205] veth0_macvtap: left promiscuous mode [ 874.549855][T10205] veth1_vlan: left promiscuous mode [ 874.559479][T10205] veth0_vlan: left promiscuous mode [ 875.878975][T10205] team0 (unregistering): Port device team_slave_1 removed [ 875.914939][T10205] team0 (unregistering): Port device team_slave_0 removed [ 876.317930][T12065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 876.334634][T12065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 876.371137][T12065] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 876.425919][T12065] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 876.479048][T12065] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 876.505379][T11906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.554627][T11906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.627024][T12065] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 876.662681][T12091] loop6: detected capacity change from 0 to 512 [ 876.726390][T12091] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 876.753031][T11906] team0: Port device team_slave_0 added [ 876.790334][T11906] team0: Port device team_slave_1 added [ 876.819697][T12091] EXT4-fs (loop6): 1 truncate cleaned up [ 876.856619][T12091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.053691][T11906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.084985][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.238755][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 877.238782][ T30] audit: type=1326 audit(1775215147.017:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 877.869716][T11906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.924252][T11906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.931525][ T30] audit: type=1326 audit(1775215147.057:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 877.931612][ T30] audit: type=1326 audit(1775215147.057:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 877.931685][ T30] audit: type=1326 audit(1775215147.057:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 878.086025][ T30] audit: type=1326 audit(1775215147.067:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 878.109005][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.109106][ T30] audit: type=1326 audit(1775215147.067:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 878.224076][T11906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.231082][ T30] audit: type=1326 audit(1775215147.637:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 878.314881][ T30] audit: type=1326 audit(1775215147.637:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 878.436460][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 878.443028][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 878.471069][ T5829] Bluetooth: hci6: command 0x0c1a tx timeout [ 878.540500][ T7692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.549341][T11906] hsr_slave_0: entered promiscuous mode [ 878.557351][T11906] hsr_slave_1: entered promiscuous mode [ 878.564665][ T30] audit: type=1326 audit(1775215147.787:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 878.587360][ T30] audit: type=1326 audit(1775215147.787:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 878.743107][T11906] debugfs: 'hsr0' already exists in 'hsr' [ 878.749021][T11906] Cannot create hsr debugfs directory [ 879.776973][T12129] overlayfs: missing 'lowerdir' [ 880.478721][ T9644] Bluetooth: hci2: command 0x0406 tx timeout [ 880.662632][ T9644] Bluetooth: hci6: command 0x0c1a tx timeout [ 880.917837][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1539'. [ 880.928436][T12140] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1539'. [ 881.628382][T12148] 9pnet_virtio: no channels available for device syz [ 882.771244][ T9644] Bluetooth: hci6: command 0x0c1a tx timeout [ 884.795832][ T9644] Bluetooth: hci6: command 0x0c1a tx timeout [ 887.638084][T12173] loop1: detected capacity change from 0 to 512 [ 887.766557][T12173] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 887.787449][T12176] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 887.852983][T12176] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 887.911616][T12173] EXT4-fs (loop1): 1 truncate cleaned up [ 887.930392][T12173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.377687][T12176] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.1546'. [ 889.080383][T11282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.605906][T11906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 892.388133][T11906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 892.790090][T11906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 892.862336][T11906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 893.660677][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1560'. [ 896.579434][T11906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.685617][T11906] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.725088][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.732397][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.824715][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.831993][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.075123][T11906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 897.451552][T12254] 9pnet_fd: Insufficient options for proto=fd [ 897.504634][T12256] loop9: detected capacity change from 0 to 512 [ 897.600120][T12256] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 897.732523][T12256] EXT4-fs (loop9): 1 truncate cleaned up [ 897.763111][T12256] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.933430][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.983537][T11906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.509871][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1576'. [ 900.609637][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1576'. [ 900.741412][T11906] veth0_vlan: entered promiscuous mode [ 901.606758][T12322] loop9: detected capacity change from 0 to 512 [ 901.681777][T12322] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 901.758973][T11906] veth1_vlan: entered promiscuous mode [ 901.987092][T12322] EXT4-fs (loop9): 1 truncate cleaned up [ 902.010314][T12322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.427167][T11906] veth0_macvtap: entered promiscuous mode [ 903.576289][T11906] veth1_macvtap: entered promiscuous mode [ 903.622391][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.649625][T12312] 9pnet_virtio: no channels available for device syz [ 903.736297][T11906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.807926][T11906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.932500][ T7337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.985238][ T7337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.041998][ T7337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.093420][ T7337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.660271][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.714398][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.826942][T12359] netlink: 'syz.3.1588': attribute type 29 has an invalid length. [ 904.929578][T12359] netlink: 'syz.3.1588': attribute type 29 has an invalid length. [ 904.997593][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.045184][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.598336][T12380] loop6: detected capacity change from 0 to 512 [ 906.715860][T12380] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 907.067957][T12380] EXT4-fs (loop6): 1 truncate cleaned up [ 907.367134][T12380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.383585][T11897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 907.405281][T11897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 907.414546][T11897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 907.426693][T11897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 907.437912][T11897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 908.152958][T12397] fuse: Bad value for 'fd' [ 909.521434][T11897] Bluetooth: hci5: command tx timeout [ 909.771144][T12392] 9pnet_virtio: no channels available for device syz [ 909.784401][ T7692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.294360][T12384] chnl_net:caif_netlink_parms(): no params data found [ 912.351360][T11897] Bluetooth: hci5: command tx timeout [ 913.179946][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.721210][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.764580][T12384] bridge_slave_0: entered allmulticast mode [ 913.800748][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 913.800774][ T30] audit: type=1326 audit(1775215183.577:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 913.874098][T12384] bridge_slave_0: entered promiscuous mode [ 913.897325][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.945120][ T30] audit: type=1326 audit(1775215183.627:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 913.951228][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.039538][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 914.078954][ T30] audit: type=1326 audit(1775215183.637:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 914.162703][ T30] audit: type=1326 audit(1775215183.637:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 914.247215][T12384] bridge_slave_1: entered allmulticast mode [ 914.281058][ T30] audit: type=1326 audit(1775215183.637:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 914.287898][T12384] bridge_slave_1: entered promiscuous mode [ 914.378014][T12458] loop9: detected capacity change from 0 to 512 [ 914.391410][T11897] Bluetooth: hci5: command tx timeout [ 914.416951][ T30] audit: type=1326 audit(1775215183.637:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 915.494077][ T30] audit: type=1326 audit(1775215183.637:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 915.518129][ T30] audit: type=1326 audit(1775215183.637:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 915.541861][T12458] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 916.153696][T12460] 9pnet_virtio: no channels available for device syz [ 916.171326][ T30] audit: type=1326 audit(1775215183.637:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 916.204436][ T30] audit: type=1326 audit(1775215183.637:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12441 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7879c819 code=0x7ffc0000 [ 916.241379][T12458] EXT4-fs (loop9): 1 truncate cleaned up [ 916.296340][T12458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.471411][T11897] Bluetooth: hci5: command tx timeout [ 919.494385][T12384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.647131][T12384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.735549][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.041409][T12384] team0: Port device team_slave_0 added [ 920.099133][T12384] team0: Port device team_slave_1 added [ 920.612538][T12384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.619740][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.312183][T12384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.354040][T12384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.697663][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.725259][T12384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.698496][T12506] loop6: detected capacity change from 0 to 1024 [ 924.760296][T12506] EXT4-fs: inline encryption not supported [ 925.707111][T12384] hsr_slave_0: entered promiscuous mode [ 925.721627][T12506] EXT4-fs (loop6): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 925.833234][T12384] hsr_slave_1: entered promiscuous mode [ 925.839813][T12384] debugfs: 'hsr0' already exists in 'hsr' [ 925.883346][T12384] Cannot create hsr debugfs directory [ 926.005447][T12506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.229812][T12524] loop3: detected capacity change from 0 to 512 [ 926.355898][T12524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 926.528464][T12524] EXT4-fs (loop3): 1 truncate cleaned up [ 926.543622][T12524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.574274][T12530] netlink: 592 bytes leftover after parsing attributes in process `syz.8.1630'. [ 927.978542][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.095698][T12384] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.352563][ T7692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.653471][T12384] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.927112][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 929.927140][ T30] audit: type=1326 audit(1775215199.697:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 929.956498][T12573] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1643'. [ 930.235743][ T30] audit: type=1326 audit(1775215199.697:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.259569][ T30] audit: type=1326 audit(1775215199.697:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.298327][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1640'. [ 930.333056][ T30] audit: type=1326 audit(1775215199.697:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.368493][ T30] audit: type=1326 audit(1775215199.697:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.391384][ T30] audit: type=1326 audit(1775215199.697:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.485031][ T30] audit: type=1326 audit(1775215199.697:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.555815][T12583] loop6: detected capacity change from 0 to 128 [ 930.662531][ T30] audit: type=1326 audit(1775215199.707:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.772332][ T30] audit: type=1326 audit(1775215199.707:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 930.776232][T12384] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.893948][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.906109][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.046733][ T30] audit: type=1326 audit(1775215199.707:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.8.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21c539c582 code=0x7ffc0000 [ 931.484097][T12384] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.610688][T12599] loop8: detected capacity change from 0 to 1024 [ 931.633588][T12599] EXT4-fs: inline encryption not supported [ 931.731240][T12599] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 931.837409][T12599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.380405][T12613] fuse: Bad value for 'fd' [ 934.084338][T12384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 934.148336][T12626] netlink: 592 bytes leftover after parsing attributes in process `syz.6.1657'. [ 934.173913][T12384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 934.241851][T12384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 934.283055][T12384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 934.606334][T12628] cgroup: fork rejected by pids controller in /syz3 [ 934.829222][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.928466][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.015188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.022465][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.064178][ T8673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.133174][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.140370][T10207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.618264][T12384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 936.437467][T12790] loop8: detected capacity change from 0 to 2048 [ 936.606535][T12790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.044481][ T8673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.298168][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.958733][T12883] loop9: detected capacity change from 0 to 1024 [ 939.048912][T12883] EXT4-fs: inline encryption not supported [ 939.096379][T12883] EXT4-fs (loop9): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 939.262124][T12883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.641761][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 939.652793][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 940.088054][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 940.179787][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 940.361090][ T6010] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 940.462642][T12384] veth0_vlan: entered promiscuous mode [ 940.521485][ T6010] usb 5-1: device descriptor read/64, error -71 [ 940.556372][T12384] veth1_vlan: entered promiscuous mode [ 941.633763][T12909] 9pnet_virtio: no channels available for device syz [ 942.726500][ T6010] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 943.618378][T12384] veth0_macvtap: entered promiscuous mode [ 943.650361][T12384] veth1_macvtap: entered promiscuous mode [ 943.665456][ T6010] usb 5-1: device descriptor read/64, error -71 [ 943.698022][T12384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.718025][T12384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.739918][T10207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.793068][ T6010] usb usb5-port1: attempt power cycle [ 943.873578][T10207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.961240][T10207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.970332][T10207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.324771][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.613288][ T6235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.657392][ T6235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.183843][T12948] 9pnet_virtio: no channels available for device syz [ 945.979504][ T7337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.061344][ T7337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.223713][T13059] loop6: detected capacity change from 0 to 128 [ 946.494366][T13066] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1694'. [ 946.796068][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 946.806999][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 946.816714][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 946.826302][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 946.897101][T13059] syz.6.1691: attempt to access beyond end of device [ 946.897101][T13059] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 946.985432][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1591'. [ 947.005217][T13059] buffer_io_error: 7 callbacks suppressed [ 947.005245][T13059] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 947.081598][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1591'. [ 947.121150][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 947.155592][T13059] syz.6.1691: attempt to access beyond end of device [ 947.155592][T13059] loop6: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 947.257978][T13059] Buffer I/O error on dev loop6, logical block 129, lost async page write [ 947.281682][ T24] usb 5-1: device descriptor read/64, error -71 [ 947.334113][T13059] syz.6.1691: attempt to access beyond end of device [ 947.334113][T13059] loop6: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 947.430408][T13059] Buffer I/O error on dev loop6, logical block 130, lost async page write [ 947.493446][T13059] syz.6.1691: attempt to access beyond end of device [ 947.493446][T13059] loop6: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 947.516313][T13177] loop8: detected capacity change from 0 to 1024 [ 947.565886][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 947.613274][T13059] Buffer I/O error on dev loop6, logical block 131, lost async page write [ 947.632946][T13177] EXT4-fs: inline encryption not supported [ 947.678380][T13177] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 947.692261][T13059] syz.6.1691: attempt to access beyond end of device [ 947.692261][T13059] loop6: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 947.744598][ T24] usb 5-1: device descriptor read/64, error -71 [ 947.814632][T13059] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 947.852554][T13177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.881532][T13059] syz.6.1691: attempt to access beyond end of device [ 947.881532][T13059] loop6: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 947.914829][ T24] usb usb5-port1: attempt power cycle [ 947.969475][T13059] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 948.051362][T13059] syz.6.1691: attempt to access beyond end of device [ 948.051362][T13059] loop6: rw=8390657, sector=134, nr_sectors = 1 limit=128 [ 948.516444][T13059] Buffer I/O error on dev loop6, logical block 134, lost async page write [ 948.774881][ T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 948.945986][ T24] usb 5-1: device descriptor read/8, error -71 [ 948.969871][T13059] syz.6.1691: attempt to access beyond end of device [ 948.969871][T13059] loop6: rw=8390657, sector=136, nr_sectors = 1 limit=128 [ 949.140254][T13059] Buffer I/O error on dev loop6, logical block 136, lost async page write [ 949.188260][T13059] syz.6.1691: attempt to access beyond end of device [ 949.188260][T13059] loop6: rw=8390657, sector=145, nr_sectors = 1 limit=128 [ 949.271627][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 949.317860][T13059] Buffer I/O error on dev loop6, logical block 145, lost async page write [ 949.373325][T13059] syz.6.1691: attempt to access beyond end of device [ 949.373325][T13059] loop6: rw=8390657, sector=146, nr_sectors = 1 limit=128 [ 949.391197][T13059] Buffer I/O error on dev loop6, logical block 146, lost async page write [ 949.471236][ T8673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.570457][ T24] usb 5-1: device descriptor read/8, error -71 [ 949.701458][ T24] usb usb5-port1: unable to enumerate USB device [ 949.844379][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0) [ 951.171324][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 951.171352][ T30] audit: type=1804 audit(1775215220.957:735): pid=13335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1710" name="/newroot/164/bus" dev="tmpfs" ino=917 res=1 errno=0 [ 951.230527][T13333] loop6: detected capacity change from 0 to 1024 [ 951.819237][T13333] EXT4-fs: inline encryption not supported [ 951.882106][T13333] EXT4-fs (loop6): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 951.943007][T13333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.340519][ T7692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.491143][T13321] kexec: Could not allocate control_code_buffer [ 953.842873][T13459] loop4: detected capacity change from 0 to 512 [ 953.901657][T13459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 954.044387][T13459] EXT4-fs (loop4): 1 truncate cleaned up [ 954.131137][T13459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.119263][T11906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.118383][T13493] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1724'. [ 956.245093][T13493] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1724'. [ 957.157125][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 957.250820][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 957.269662][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 957.296751][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 957.680772][T13522] loop8: detected capacity change from 0 to 512 [ 957.737409][T13522] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 957.816274][T13522] EXT4-fs (loop8): 1 truncate cleaned up [ 957.826852][T13522] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.099054][ T5886] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 958.139728][T13511] kexec: Could not allocate control_code_buffer [ 958.245741][ T5886] usb 5-1: device descriptor read/64, error -71 [ 958.808323][ T30] audit: type=1804 audit(1775215228.577:736): pid=13639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1733" name="/newroot/4/bus" dev="tmpfs" ino=41 res=1 errno=0 [ 958.891110][ T5886] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 959.070132][ T8673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.221068][ T5886] usb 5-1: device descriptor read/64, error -71 [ 959.352598][ T5886] usb usb5-port1: attempt power cycle [ 963.179725][T13775] 9p: Could not find request transport: fd0x0000000000000003 [ 963.533877][T13784] fuse: Bad value for 'fd' [ 963.613876][T13785] loop5: detected capacity change from 0 to 1024 [ 963.657787][T13785] EXT4-fs: inline encryption not supported [ 963.739623][T13785] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 963.824126][T13785] EXT4-fs error (device loop5): ext4_free_blocks:6723: comm syz.5.1748: Freeing blocks not in datazone - block = 0, count = 4096 [ 963.851501][T13785] loop5: lost filesystem error report for type 5 error -117 [ 963.861018][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 963.875100][ C1] EXT4-fs (loop5): initial error at time 1775215233: ext4_free_blocks:6723 [ 963.883809][ C1] EXT4-fs (loop5): last error at time 1775215233: ext4_free_blocks:6723 [ 963.904247][T13785] EXT4-fs (loop5): Remounting filesystem read-only [ 963.970003][T13785] EXT4-fs (loop5): 1 orphan inode deleted [ 963.981457][T10207] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 964.013493][T13785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.071137][T10207] Quota error (device loop5): write_blk: dquota write failed [ 964.078590][T10207] Quota error (device loop5): remove_free_dqentry: Can't write block (2) with free entries [ 964.167665][T10207] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 964.192003][T10207] Quota error (device loop5): write_blk: dquota write failed [ 964.219815][T10207] Quota error (device loop5): free_dqentry: Can't move quota data block (2) to free list [ 964.250927][T10207] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 964.301318][T10207] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 964.403648][T12384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.829089][T13780] kexec: Could not allocate control_code_buffer [ 965.000839][T13815] loop9: detected capacity change from 0 to 1024 [ 965.022384][T13815] EXT4-fs: inline encryption not supported [ 965.092107][T13815] EXT4-fs (loop9): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 965.219405][T13815] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.313617][T13818] tipc: Started in network mode [ 965.318554][T13818] tipc: Node identity c2f164c0efe, cluster identity 4711 [ 965.400731][T13818] tipc: Enabled bearer , priority 0 [ 965.512555][T13826] syzkaller0: entered promiscuous mode [ 965.518180][T13826] syzkaller0: entered allmulticast mode [ 965.583317][T13824] syzkaller0: entered promiscuous mode [ 965.614976][T13824] syzkaller0: entered allmulticast mode [ 966.106501][T13818] tipc: Resetting bearer [ 966.142899][T13816] tipc: Resetting bearer [ 966.384126][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.465268][T13816] tipc: Disabling bearer [ 966.900311][ T9] tipc: Node number set to 756114624 [ 966.907486][T13946] overlayfs: failed to resolve './file1': -2 [ 967.012106][ T30] audit: type=1804 audit(1775215236.737:737): pid=13946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1761" name="/newroot/140/bus/bus" dev="tmpfs" ino=807 res=1 errno=0 [ 967.650134][T13957] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1764'. [ 967.656504][T13955] loop5: detected capacity change from 0 to 512 [ 969.942010][T13999] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1778'. [ 970.252214][T14004] fuse: Invalid rootmode [ 971.430770][T13986] kexec: Could not allocate control_code_buffer [ 974.988585][T14157] fuse: Invalid rootmode [ 976.741550][T14273] batman_adv: batadv0: Adding interface: dummy0 [ 976.781962][T14273] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.944676][T14273] batman_adv: batadv0: Interface activated: dummy0 [ 977.047612][T14276] batadv0: mtu less than device minimum [ 977.131653][T14273] Set syz0 is full, maxelem 0 reached [ 977.184274][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.196639][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.208784][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.220877][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.233068][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.245263][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.257508][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.269579][T14276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 977.726713][T14285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1802'. [ 977.819528][T14285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1802'. [ 979.048386][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1807'. [ 979.663247][T14407] Device name cannot be null; rc = [-22] [ 979.721900][T14408] fuse: Bad value for 'rootmode' [ 986.555385][T14448] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1820'. [ 986.569148][ T9644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 986.681436][ T9644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 986.690376][ T9644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 986.699098][ T9644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.707505][ T9644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 986.969924][T11897] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 986.979538][T11897] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 986.989535][T11897] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 987.000070][T11897] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 987.088978][T11897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 989.013228][T11897] Bluetooth: hci1: command tx timeout [ 989.211090][T11897] Bluetooth: hci7: command tx timeout [ 990.230470][T14478] fuse: Bad value for 'rootmode' [ 990.954673][T14446] chnl_net:caif_netlink_parms(): no params data found [ 991.043738][T11897] Bluetooth: hci1: command tx timeout [ 991.273856][T11897] Bluetooth: hci7: command tx timeout [ 992.321763][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.328164][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.281518][T11897] Bluetooth: hci1: command tx timeout [ 993.351126][T11897] Bluetooth: hci7: command tx timeout [ 993.761549][T14608] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1833'. [ 994.134372][ T7337] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.197295][ T7337] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 994.230921][T14620] fuse: Bad value for 'rootmode' [ 994.626572][ T7337] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.641698][ T7337] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 994.750199][T14452] chnl_net:caif_netlink_parms(): no params data found [ 995.005464][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.021381][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.028965][T14446] bridge_slave_0: entered allmulticast mode [ 995.051214][T14446] bridge_slave_0: entered promiscuous mode [ 995.206559][ T7337] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.232758][ T7337] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 995.371206][T11897] Bluetooth: hci1: command tx timeout [ 995.431619][T11897] Bluetooth: hci7: command tx timeout [ 995.740731][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.748766][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.760638][T14446] bridge_slave_1: entered allmulticast mode [ 995.770569][T14446] bridge_slave_1: entered promiscuous mode [ 996.588171][ T7337] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.680948][ T7337] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 997.460163][T14666] fuse: Unknown parameter 'use00000000000000000000' [ 997.873402][T14446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.577288][T14446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.353582][T14777] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input15 [ 1001.586689][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 1003.386353][T14446] team0: Port device team_slave_0 added [ 1003.419663][T14446] team0: Port device team_slave_1 added [ 1004.816851][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.878494][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.926802][T14452] bridge_slave_0: entered allmulticast mode [ 1004.975310][T14452] bridge_slave_0: entered promiscuous mode [ 1005.043133][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.102689][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.180002][T14452] bridge_slave_1: entered allmulticast mode [ 1005.241628][T14452] bridge_slave_1: entered promiscuous mode [ 1005.330761][T14907] loop3: detected capacity change from 0 to 512 [ 1005.639320][T14907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.893176][T14446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.921431][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.002690][T14918] fuse: Unknown parameter 'use00000000000000000000' [ 1006.122920][T14446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.169608][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.282226][T14446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.331016][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.521249][T14446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.809753][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.554221][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.803938][ T9] IPVS: starting estimator thread 0... [ 1008.911222][T14955] IPVS: using max 21 ests per chain, 50400 per kthread [ 1009.271285][T14964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input16 [ 1009.732878][T14962] net_ratelimit: 11 callbacks suppressed [ 1009.732907][T14962] Set syz0 is full, maxelem 0 reached [ 1010.122362][T14452] team0: Port device team_slave_0 added [ 1010.222045][T14452] team0: Port device team_slave_1 added [ 1010.264371][T14960] batadv0: mtu less than device minimum [ 1010.302100][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.314326][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.326398][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.338476][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.350639][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.362689][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.374791][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.386793][T14960] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1010.763948][T14446] hsr_slave_0: entered promiscuous mode [ 1010.832300][T14446] hsr_slave_1: entered promiscuous mode [ 1010.869518][T14446] debugfs: 'hsr0' already exists in 'hsr' [ 1010.931236][T14446] Cannot create hsr debugfs directory [ 1010.937390][ T7337] bridge_slave_1: left allmulticast mode [ 1010.957686][ T7337] bridge_slave_1: left promiscuous mode [ 1010.988690][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.060537][ T7337] bridge_slave_0: left allmulticast mode [ 1011.271266][ T7337] bridge_slave_0: left promiscuous mode [ 1011.420411][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.034252][ T7337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.118931][ T7337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.180727][ T7337] bond0 (unregistering): Released all slaves [ 1013.280246][T14981] loop3: detected capacity change from 0 to 8192 [ 1013.675509][T14981] loop3: p1 p2 p4 [ 1014.473158][T14981] loop3: p4 size 262912 extends beyond EOD, truncated [ 1014.799142][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.861091][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.909671][T15105] loop9: detected capacity change from 0 to 4096 [ 1015.045606][T15105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.114641][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.311133][ T30] audit: type=1800 audit(2000000034.000:738): pid=15105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1877" name="file0" dev="loop9" ino=13 res=0 errno=0 [ 1015.883738][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.910415][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.947378][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.982604][T15118] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1879'. [ 1016.082286][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.495902][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1881'. [ 1017.166999][T14452] hsr_slave_0: entered promiscuous mode [ 1017.214722][T14452] hsr_slave_1: entered promiscuous mode [ 1017.269214][T14452] debugfs: 'hsr0' already exists in 'hsr' [ 1017.303315][T14452] Cannot create hsr debugfs directory [ 1017.670321][T15148] loop9: detected capacity change from 0 to 128 [ 1017.726094][T15148] msdos: Bad value for 'uid' [ 1017.754204][T15148] msdos: Bad value for 'uid' [ 1018.019695][ T7337] hsr_slave_0: left promiscuous mode [ 1018.137802][ T7337] hsr_slave_1: left promiscuous mode [ 1018.158532][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.251122][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.416339][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.465367][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.506890][T15151] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1891'. [ 1018.581874][ T7337] veth1_macvtap: left promiscuous mode [ 1018.628060][ T7337] veth0_macvtap: left promiscuous mode [ 1018.643588][T15155] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1891'. [ 1021.486475][ T7337] team0 (unregistering): Port device team_slave_1 removed [ 1021.529470][ T7337] team0 (unregistering): Port device team_slave_0 removed [ 1022.831349][T15175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.838957][T15175] batadv_slave_0: entered promiscuous mode [ 1022.873875][T15175] batadv_slave_0: entered allmulticast mode [ 1024.007061][ T30] audit: type=1326 audit(2000000042.690:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1024.074873][T15312] loop9: detected capacity change from 0 to 1024 [ 1024.113973][ T30] audit: type=1326 audit(2000000042.710:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1024.137294][ T30] audit: type=1326 audit(2000000042.790:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1025.170938][T15312] EXT4-fs: Ignoring removed orlov option [ 1025.225226][ T30] audit: type=1326 audit(2000000042.790:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1026.123351][ T30] audit: type=1326 audit(2000000042.790:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1026.939256][ T30] audit: type=1326 audit(2000000042.790:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1026.966914][ T30] audit: type=1326 audit(2000000042.790:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1026.968825][T15312] EXT4-fs: error -4 creating inode table initialization thread [ 1027.072928][T15312] EXT4-fs (loop9): mount failed [ 1027.145193][ T30] audit: type=1326 audit(2000000042.800:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.8.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1030.197614][T15450] loop3: detected capacity change from 0 to 4096 [ 1031.954509][T15450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.960806][ T43] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1033.237565][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.276994][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 1033.331201][ T43] usb 5-1: device descriptor read/64, error -71 [ 1033.908410][T15480] xt_hashlimit: size too large, truncated to 1048576 [ 1034.514980][ T7337] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.617968][T15502] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1034.694476][T15505] capability: warning: `syz.4.1940' uses 32-bit capabilities (legacy support in use) [ 1034.742873][T15505] program syz.4.1940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.918583][ T7337] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.298476][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 1035.635230][T15543] fuse: Bad value for 'fd' [ 1035.749504][ T7337] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.026997][ T7337] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.298956][T14446] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1036.315845][T15637] loop3: detected capacity change from 0 to 128 [ 1036.351699][T14446] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1036.352076][T15637] ext4: Unknown parameter 'noacl' [ 1036.483627][T14446] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1036.557305][T14446] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1036.640857][T15656] loop4: detected capacity change from 0 to 1024 [ 1036.684001][T15656] EXT4-fs: inline encryption not supported [ 1036.701984][T15656] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1036.784947][T15656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.805893][ T7337] bridge_slave_1: left allmulticast mode [ 1036.811976][ T7337] bridge_slave_1: left promiscuous mode [ 1036.823415][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.983877][T15757] fuse: Bad value for 'fd' [ 1037.133707][ T7337] bridge_slave_0: left allmulticast mode [ 1037.864320][ T7337] bridge_slave_0: left promiscuous mode [ 1037.870182][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.947880][T11906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.429416][T15895] fuse: Bad value for 'fd' [ 1039.672665][T15900] fuse: Unknown parameter 'grou00000000000000000000' [ 1039.718530][T15904] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1971'. [ 1039.744203][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1971'. [ 1039.768757][ T7337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.769494][T15903] loop9: detected capacity change from 0 to 1024 [ 1039.794290][T15903] EXT4-fs: inline encryption not supported [ 1039.821622][ T7337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.832070][T15903] EXT4-fs (loop9): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1039.850189][ T7337] bond0 (unregistering): Released all slaves [ 1040.021604][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1973'. [ 1040.029186][T15903] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.396809][T15888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1965'. [ 1040.452046][T15892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1965'. [ 1040.753887][T14452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1040.921809][ T7337] tipc: Left network mode [ 1041.031818][T14452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1041.150243][T14452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1041.526268][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.559906][T14452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.427999][T15933] fuse: Unknown parameter '0x0000000000000003' [ 1042.766986][T15942] fuse: Unknown parameter 'grou00000000000000000000' [ 1043.830357][T15948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1983'. [ 1043.875761][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 1044.020385][T15959] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1984'. [ 1044.046632][T15959] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1984'. [ 1044.254982][ T7337] hsr_slave_0: left promiscuous mode [ 1044.263793][ T7337] hsr_slave_1: left promiscuous mode [ 1044.267216][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.267251][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.288425][ T7337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.288463][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.328773][ T7337] veth1_macvtap: left promiscuous mode [ 1044.328840][ T7337] veth0_macvtap: left promiscuous mode [ 1045.345910][T15991] fuse: Unknown parameter 'grou00000000000000000000' [ 1045.820205][T15997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1045.851534][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1045.871084][ T24] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1045.930694][ T7337] team0 (unregistering): Port device team_slave_1 removed [ 1045.985390][ T7337] team0 (unregistering): Port device team_slave_0 removed [ 1046.041117][ T24] usb 10-1: device descriptor read/64, error -71 [ 1046.304789][ T24] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1046.381910][ T9644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1046.392807][ T9644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1046.401590][ T9644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1046.411102][ T9644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1046.428868][ T9644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1046.461115][ T24] usb 10-1: device descriptor read/64, error -71 [ 1046.571500][ T24] usb usb10-port1: attempt power cycle [ 1046.582435][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1996'. [ 1046.625214][T16007] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2000'. [ 1046.681400][T16008] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2000'. [ 1046.704787][ T9644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1046.717888][ T9644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1046.729577][ T9644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1046.739581][ T9644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1046.787801][ T9644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1046.999138][ T24] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1047.062649][ T24] usb 10-1: device descriptor read/8, error -71 [ 1047.491101][ T24] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1047.491132][ T30] audit: type=1326 audit(2000000066.180:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1047.533023][ T24] usb 10-1: device descriptor read/8, error -71 [ 1047.682353][ T24] usb usb10-port1: unable to enumerate USB device [ 1047.775696][ T30] audit: type=1326 audit(2000000066.180:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1047.875314][ T30] audit: type=1326 audit(2000000066.180:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1048.021545][ T30] audit: type=1326 audit(2000000066.180:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1048.077719][ T30] audit: type=1326 audit(2000000066.180:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1048.156628][ T30] audit: type=1326 audit(2000000066.180:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1048.241096][ T30] audit: type=1326 audit(2000000066.180:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1048.405261][ T30] audit: type=1326 audit(2000000066.180:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6525d9c819 code=0x7ffc0000 [ 1048.471130][ T9644] Bluetooth: hci4: command tx timeout [ 1048.516776][ T30] audit: type=1326 audit(2000000066.190:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6525d9c582 code=0x7ffc0000 [ 1048.656777][ T30] audit: type=1326 audit(2000000066.230:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6525d9c582 code=0x7ffc0000 [ 1048.872593][ T9644] Bluetooth: hci5: command tx timeout [ 1048.899220][T16039] can0: slcan on ttyS3. [ 1048.982426][T16046] fuse: Unknown parameter 'group_i00000000000000000000' [ 1049.321457][T16040] can0 (unregistered): slcan off ttyS3. [ 1049.368602][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 1049.401150][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2009'. [ 1050.023539][T16009] chnl_net:caif_netlink_parms(): no params data found [ 1050.199221][T16015] chnl_net:caif_netlink_parms(): no params data found [ 1050.644587][ T9644] Bluetooth: hci4: command tx timeout [ 1050.953286][ T9644] Bluetooth: hci5: command tx timeout [ 1051.419813][T16078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2015'. [ 1051.438341][T16079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2015'. [ 1051.595001][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.631363][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.638674][T16009] bridge_slave_0: entered allmulticast mode [ 1051.673216][T16009] bridge_slave_0: entered promiscuous mode [ 1051.710119][T16009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.731135][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.761383][T16009] bridge_slave_1: entered allmulticast mode [ 1051.783310][T16009] bridge_slave_1: entered promiscuous mode [ 1052.540759][T16015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.593657][T16015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.616570][T16015] bridge_slave_0: entered allmulticast mode [ 1052.638497][T16015] bridge_slave_0: entered promiscuous mode [ 1052.665684][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 1052.698166][T16009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.721809][ T9644] Bluetooth: hci4: command tx timeout [ 1052.752296][T16009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.802997][T16015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.810259][T16015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.901494][T16015] bridge_slave_1: entered allmulticast mode [ 1052.909879][T16015] bridge_slave_1: entered promiscuous mode [ 1053.032217][ T9644] Bluetooth: hci5: command tx timeout [ 1053.207369][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2019'. [ 1053.283973][T16009] team0: Port device team_slave_0 added [ 1053.561351][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 1053.570472][T16199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2020'. [ 1053.766487][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.772902][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.960652][T16015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.014604][T16009] team0: Port device team_slave_1 added [ 1054.373901][T16015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.645047][T16009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.665020][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.726553][T16009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.791513][ T9644] Bluetooth: hci4: command tx timeout [ 1054.836938][T16219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2026'. [ 1054.861384][T16223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2026'. [ 1054.886567][T16009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.907541][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.984459][T16009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.122186][ T9644] Bluetooth: hci5: command tx timeout [ 1055.162275][T16015] team0: Port device team_slave_0 added [ 1055.193666][T16015] team0: Port device team_slave_1 added [ 1055.381621][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2032'. [ 1055.399789][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2032'. [ 1055.483263][T16015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.526595][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.850668][T16015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.949822][T16015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.011524][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.177264][T16015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.372922][T16009] hsr_slave_0: entered promiscuous mode [ 1056.412127][T16009] hsr_slave_1: entered promiscuous mode [ 1056.418614][T16009] debugfs: 'hsr0' already exists in 'hsr' [ 1056.444794][T16009] Cannot create hsr debugfs directory [ 1057.028398][T16015] hsr_slave_0: entered promiscuous mode [ 1057.052692][T16015] hsr_slave_1: entered promiscuous mode [ 1057.062131][T16015] debugfs: 'hsr0' already exists in 'hsr' [ 1057.068009][T16015] Cannot create hsr debugfs directory [ 1057.129476][T16367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2041'. [ 1057.504807][ T7337] bridge_slave_1: left allmulticast mode [ 1057.531301][ T7337] bridge_slave_1: left promiscuous mode [ 1057.550068][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.583502][ T7337] bridge_slave_0: left allmulticast mode [ 1057.612919][ T7337] bridge_slave_0: left promiscuous mode [ 1057.644300][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.685221][ T7337] bridge_slave_1: left allmulticast mode [ 1057.702391][ T7337] bridge_slave_1: left promiscuous mode [ 1057.727332][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.763699][ T7337] bridge_slave_0: left allmulticast mode [ 1057.774513][ T7337] bridge_slave_0: left promiscuous mode [ 1057.787390][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.224787][ T7337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.258008][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1058.281412][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1058.331955][ T7337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.403990][ T7337] bond0 (unregistering): Released all slaves [ 1058.864157][ T7337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.881730][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 1058.931782][ T7337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.976459][ T7337] bond0 (unregistering): Released all slaves [ 1059.100292][T16374] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2042'. [ 1059.130313][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e9d000: rx timeout, send abort [ 1059.214592][T16375] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2042'. [ 1059.684987][ T7337] hsr_slave_0: left promiscuous mode [ 1059.713937][ T7337] hsr_slave_1: left promiscuous mode [ 1059.726466][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.781599][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.063429][ T7337] hsr_slave_0: left promiscuous mode [ 1060.130381][ T7337] hsr_slave_1: left promiscuous mode [ 1060.140238][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.185525][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.377548][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2051'. [ 1060.387196][T16519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2051'. [ 1061.012577][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2055'. [ 1061.041519][T16632] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2055'. [ 1061.726895][ T7337] team0 (unregistering): Port device team_slave_1 removed [ 1061.882587][T16640] 9pnet_virtio: no channels available for device syz [ 1062.558001][ T7337] team0 (unregistering): Port device team_slave_0 removed [ 1063.340085][ T7337] team0 (unregistering): Port device team_slave_1 removed [ 1063.383710][ T7337] team0 (unregistering): Port device team_slave_0 removed [ 1063.768509][T16640] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1063.778209][T16640] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1063.788033][T16640] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1066.309426][T16652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2059'. [ 1067.251068][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 1067.334777][T16663] hsr0: entered promiscuous mode [ 1069.987262][T16015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1070.238766][T16015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1070.452789][T16015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1070.489282][T17005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2071'. [ 1070.511853][T16015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1070.996885][T16009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1071.038350][T16009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1071.076822][T16009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1071.124213][T16009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1071.490568][T16015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.557475][T16015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.614192][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.621399][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.707037][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.714340][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.908522][T16009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.996215][T16009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.066587][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.073817][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.112797][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.119992][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.199959][T17043] loop9: detected capacity change from 0 to 1024 [ 1072.423551][T17043] EXT4-fs: inline encryption not supported [ 1072.694300][T17049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1072.706412][T17049] block device autoloading is deprecated and will be removed. [ 1073.228476][T17043] EXT4-fs (loop9): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1073.369868][T17043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.357226][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.140709][T16015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.496015][T17183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2084'. [ 1075.700906][T16009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.910504][T16015] veth0_vlan: entered promiscuous mode [ 1075.984608][T16015] veth1_vlan: entered promiscuous mode [ 1076.089867][T17195] net_ratelimit: 11 callbacks suppressed [ 1076.089896][T17195] Set syz0 is full, maxelem 0 reached [ 1076.162931][T16015] veth0_macvtap: entered promiscuous mode [ 1076.212241][T16015] veth1_macvtap: entered promiscuous mode [ 1076.493754][T16015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.810420][T17210] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1076.918764][T16015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.016633][ T6589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.061154][ T6589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.180661][ T6589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.225562][ T6589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.256624][T17317] loop8: detected capacity change from 0 to 1024 [ 1077.272089][T17317] EXT4-fs: inline encryption not supported [ 1077.285245][T17317] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1079.259431][T17317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.642233][T17320] 9pnet_virtio: no channels available for device syz [ 1079.929426][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.641243][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.718508][ T8673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.882460][ T6589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.911147][ T6589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.035387][T16009] veth0_vlan: entered promiscuous mode [ 1081.113296][T16009] veth1_vlan: entered promiscuous mode [ 1081.344929][T16009] veth0_macvtap: entered promiscuous mode [ 1081.446806][T17338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1817'. [ 1081.456235][T17338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1817'. [ 1082.185476][T16009] veth1_macvtap: entered promiscuous mode [ 1082.383468][T16009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.476060][T16009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.516141][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.757636][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.797002][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.828720][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.924690][T17363] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 1083.924690][T17363] program syz.8.2104 not setting count and/or reply_len properly [ 1085.405953][T10207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.368767][T10207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.782342][T17365] 9pnet_virtio: no channels available for device syz [ 1086.993729][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.010496][T17369] loop4: detected capacity change from 0 to 1024 [ 1087.027387][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.059110][T17369] EXT4-fs: inline encryption not supported [ 1087.201652][T17369] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1087.342010][T17369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.444415][T11906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.079610][T17389] fuse: Bad value for 'user_id' [ 1089.104337][T17389] fuse: Bad value for 'user_id' [ 1091.686865][T17419] loop4: detected capacity change from 0 to 1024 [ 1091.704663][T10048] bridge_slave_1: left allmulticast mode [ 1091.710372][T10048] bridge_slave_1: left promiscuous mode [ 1091.732511][T17419] EXT4-fs: inline encryption not supported [ 1091.794458][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.811368][T17419] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1091.948254][T10048] bridge_slave_0: left allmulticast mode [ 1092.017859][T10048] bridge_slave_0: left promiscuous mode [ 1092.020065][T17419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.073890][T11897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1092.091487][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.103406][T11897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1092.124547][T11897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1092.141666][T11897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1092.153950][T11897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1093.382428][T17435] 9pnet_virtio: no channels available for device syz [ 1093.744295][T17448] fuse: Bad value for 'fd' [ 1093.781294][T10048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.180171][T10048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.273370][T10048] bond0 (unregistering): Released all slaves [ 1094.374326][T17435] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1094.384214][T17435] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1094.394607][T17435] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1094.502455][T11897] Bluetooth: hci1: command tx timeout [ 1094.623515][T11906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.551169][T11897] Bluetooth: hci1: command tx timeout [ 1096.596485][T10048] hsr_slave_0: left promiscuous mode [ 1096.685469][T10048] hsr_slave_1: left promiscuous mode [ 1096.701535][T10048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.738919][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.603846][T10048] team0 (unregistering): Port device team_slave_1 removed [ 1097.692206][T10048] team0 (unregistering): Port device team_slave_0 removed [ 1098.478411][T17492] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2134'. [ 1098.635381][T11897] Bluetooth: hci1: command tx timeout [ 1098.850869][T17427] chnl_net:caif_netlink_parms(): no params data found [ 1098.942622][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2136'. [ 1099.645395][T17517] xt_hashlimit: size too large, truncated to 1048576 [ 1099.777458][T17518] syzkaller0: entered promiscuous mode [ 1099.795827][T17518] syzkaller0: entered allmulticast mode [ 1100.077362][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.112603][T17427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.156915][T17427] bridge_slave_0: entered allmulticast mode [ 1100.190378][T17427] bridge_slave_0: entered promiscuous mode [ 1100.261560][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.281311][T17427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.288776][T17427] bridge_slave_1: entered allmulticast mode [ 1100.363980][T17427] bridge_slave_1: entered promiscuous mode [ 1100.422589][T17510] 9pnet_virtio: no channels available for device syz [ 1100.711839][T11897] Bluetooth: hci1: command tx timeout [ 1101.103024][T17427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.117412][T17427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.055176][T17427] team0: Port device team_slave_0 added [ 1102.275339][T17427] team0: Port device team_slave_1 added [ 1102.777934][T10048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.316536][T10048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.643893][T10048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.727595][T17427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.779505][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.911176][T17427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.983698][T17427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.990751][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.171735][T17427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.348760][T10048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.634655][T17427] hsr_slave_0: entered promiscuous mode [ 1104.663192][T17427] hsr_slave_1: entered promiscuous mode [ 1104.700312][T17427] debugfs: 'hsr0' already exists in 'hsr' [ 1104.736244][T17427] Cannot create hsr debugfs directory [ 1105.652137][T17572] 9pnet_virtio: no channels available for device syz [ 1108.691297][T10048] bridge_slave_1: left allmulticast mode [ 1108.697092][T10048] bridge_slave_1: left promiscuous mode [ 1108.737243][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.860307][T10048] bridge_slave_0: left allmulticast mode [ 1108.874705][T10048] bridge_slave_0: left promiscuous mode [ 1108.905370][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.613584][T10048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.642521][T10048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.666612][T10048] bond0 (unregistering): Released all slaves [ 1110.375174][T17427] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.442523][T17621] 9pnet_virtio: no channels available for device syz [ 1110.488821][T17427] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.012111][T17427] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.074778][T17640] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2174'. [ 1112.968400][T17644] fuse: Bad value for 'fd' [ 1113.341306][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2177'. [ 1113.373406][T17427] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.844815][T10048] hsr_slave_0: left promiscuous mode [ 1113.924771][T10048] hsr_slave_1: left promiscuous mode [ 1113.974021][T10048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.003402][T10048] batadv0: mtu less than device minimum [ 1114.034855][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.047354][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.059307][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.071224][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.083015][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.094751][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.106590][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.118336][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.130269][T10048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.357457][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.399264][T10048] batman_adv: batadv0: Interface deactivated: dummy0 [ 1114.437143][T10048] batman_adv: batadv0: Removing interface: dummy0 [ 1114.510123][T10048] veth1_macvtap: left promiscuous mode [ 1114.529615][T10048] veth0_macvtap: left promiscuous mode [ 1114.909031][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2186'. [ 1115.211779][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.218165][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.349389][T10048] team0 (unregistering): Port device team_slave_1 removed [ 1115.417482][T10048] team0 (unregistering): Port device team_slave_0 removed [ 1115.602414][T17678] 9pnet_virtio: no channels available for device syz [ 1116.635178][T17690] fuse: Bad value for 'fd' [ 1116.748998][T17694] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2189'. [ 1117.108290][T17427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1117.315987][T17427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1117.435886][T17427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1118.179564][T17427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1118.874214][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 1118.960776][T17427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.080888][T17736] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.2200'. [ 1119.243731][T17427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.404345][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.411570][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.538853][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.546109][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.462162][T17749] 9pnet_virtio: no channels available for device syz [ 1123.961206][T17427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.012606][T17792] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.2214'. [ 1124.199032][T17427] veth0_vlan: entered promiscuous mode [ 1124.269155][T17427] veth1_vlan: entered promiscuous mode [ 1124.427078][T17427] veth0_macvtap: entered promiscuous mode [ 1124.478029][T17427] veth1_macvtap: entered promiscuous mode [ 1124.596324][T17427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.669403][T17427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.769388][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.962917][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.012612][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.084936][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.129929][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2219'. [ 1125.369455][T17817] 9pnet_virtio: no channels available for device syz [ 1125.768448][T17831] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2222'. [ 1126.645190][T17849] loop9: detected capacity change from 0 to 1024 [ 1126.714835][T17849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1126.752701][T17849] System zones: 0-1, 3-36 [ 1126.788428][T17849] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2228: bad orphan inode 134217728 [ 1126.839118][T17857] net_ratelimit: 10 callbacks suppressed [ 1126.839144][T17857] Set syz0 is full, maxelem 0 reached [ 1126.861143][T17849] loop9: lost filesystem error report for type 5 error -117 [ 1126.871015][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1126.885045][ C1] EXT4-fs (loop9): initial error at time 2000000145: ext4_orphan_get:1423 [ 1126.893625][ C1] EXT4-fs (loop9): last error at time 2000000145: ext4_orphan_get:1423 [ 1126.904606][T17849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.962931][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1126.967926][ T30] audit: type=1326 audit(2000000145.670:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1127.067520][ T30] audit: type=1326 audit(2000000145.670:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1127.172245][ T30] audit: type=1326 audit(2000000145.670:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1127.217220][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2230'. [ 1127.315507][ T30] audit: type=1326 audit(2000000145.670:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1127.438682][ T30] audit: type=1326 audit(2000000145.670:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1127.507487][ T9682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.733317][ T30] audit: type=1326 audit(2000000145.670:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1127.843795][ T30] audit: type=1326 audit(2000000145.670:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1127.949650][ T30] audit: type=1326 audit(2000000145.670:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1128.021127][ T30] audit: type=1326 audit(2000000145.670:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f21c539c819 code=0x7ffc0000 [ 1128.081091][ T30] audit: type=1326 audit(2000000145.670:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17852 comm="syz.8.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21c539c582 code=0x7ffc0000 [ 1128.194761][T17818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.407940][T10207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.435323][T10207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.653057][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.687206][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.925839][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2234'. [ 1129.330009][ T9] IPVS: starting estimator thread 0... [ 1129.441146][T17891] IPVS: using max 29 ests per chain, 69600 per kthread [ 1129.680013][T17897] netlink: 43 bytes leftover after parsing attributes in process `syz.9.2237'. [ 1131.112678][T17915] netlink: 'syz.9.2242': attribute type 34 has an invalid length. [ 1131.661522][T17920] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 1131.661522][T17920] program syz.8.2244 not setting count and/or reply_len properly [ 1131.993040][T17926] Set syz0 is full, maxelem 0 reached [ 1133.176470][T17946] loop0: detected capacity change from 0 to 1024 [ 1133.222393][T17946] EXT4-fs: inline encryption not supported [ 1133.260885][T17946] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1133.352200][T17946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.465052][T16015] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.486321][T17962] loop2: detected capacity change from 0 to 512 [ 1135.684013][T17982] Set syz0 is full, maxelem 0 reached [ 1135.989153][T17995] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 1135.989153][T17995] program syz.8.2263 not setting count and/or reply_len properly [ 1136.866379][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 1136.891115][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 1136.904526][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 1136.915884][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 1137.414067][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1137.561160][ T9] usb 1-1: device descriptor read/64, error -71 [ 1137.817044][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1137.885789][T18021] loop8: detected capacity change from 0 to 1024 [ 1138.099698][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1138.099725][ T30] audit: type=1326 audit(2000000156.800:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1138.140232][ T9] usb 1-1: device descriptor read/64, error -71 [ 1138.188238][T18021] EXT4-fs: inline encryption not supported [ 1138.246708][T18021] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1138.291141][ T30] audit: type=1326 audit(2000000156.840:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1138.325114][ T9] usb usb1-port1: attempt power cycle [ 1138.381273][T18021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.483935][ T30] audit: type=1326 audit(2000000156.840:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1138.628001][T18035] loop7: detected capacity change from 0 to 512 [ 1138.646146][ T30] audit: type=1326 audit(2000000156.850:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1138.703787][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1138.971817][ T9] usb 1-1: device descriptor read/8, error -71 [ 1139.005905][ T30] audit: type=1326 audit(2000000156.850:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1139.118323][ T30] audit: type=1326 audit(2000000156.850:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1139.321098][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1139.349252][ T30] audit: type=1326 audit(2000000156.850:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1139.402062][ T9] usb 1-1: device descriptor read/8, error -71 [ 1139.516121][ T30] audit: type=1326 audit(2000000156.850:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1139.581356][ T9] usb usb1-port1: unable to enumerate USB device [ 1139.666337][ T30] audit: type=1326 audit(2000000156.850:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1139.895575][ T30] audit: type=1326 audit(2000000156.850:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18016 comm="syz.9.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f046139c819 code=0x7ffc0000 [ 1140.572569][ T8673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.347590][T18056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 1144.978890][T18067] Set syz0 is full, maxelem 0 reached [ 1146.195164][T18093] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 1146.195164][T18093] program syz.4.2282 not setting count and/or reply_len properly [ 1146.493053][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2285'. [ 1146.515564][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2285'. [ 1146.528862][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2285'. [ 1146.539573][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2285'. [ 1146.925426][T18099] loop9: detected capacity change from 0 to 512 [ 1147.285959][T18094] 9pnet_virtio: no channels available for device syz [ 1148.441188][T18124] Set syz0 is full, maxelem 0 reached [ 1149.127895][T18123] loop7: detected capacity change from 0 to 8192 [ 1150.361040][T15112] loop7: p1 p2 p4 [ 1150.372149][T18126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.571499][T15112] loop7: p4 size 262912 extends beyond EOD, truncated [ 1152.564136][T18145] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18 [ 1153.401964][T18123] loop7: p1 p2 p4 [ 1153.565292][T18123] loop7: p4 size 262912 extends beyond EOD, truncated [ 1154.469758][T18168] loop7: detected capacity change from 0 to 512 [ 1154.488231][T15112] udevd[15112]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1154.534437][T18170] sg_write: data in/out 216/10 bytes for SCSI command 0x40-- guessing data in; [ 1154.534437][T18170] program syz.8.2300 not setting count and/or reply_len properly [ 1154.572308][T14455] udevd[14455]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1154.593493][T17724] udevd[17724]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1155.083002][T15112] udevd[15112]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1155.093354][T14455] udevd[14455]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1155.100884][T17724] udevd[17724]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1155.383822][T18183] Set syz0 is full, maxelem 0 reached [ 1155.619802][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2306'. [ 1155.629009][T18188] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2306'. [ 1157.049982][T18198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'. [ 1158.802761][T18226] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19 [ 1161.033387][T18247] Set syz0 is full, maxelem 0 reached [ 1163.083511][ T9644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1163.106275][ T9644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1163.115503][ T9644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1163.123848][ T9644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1163.132252][ T9644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1164.390694][T18295] fuse: Bad value for 'fd' [ 1164.871647][T18264] chnl_net:caif_netlink_parms(): no params data found [ 1165.192822][ T9644] Bluetooth: hci3: command tx timeout [ 1166.178222][T18328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1166.187811][T18328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1166.967289][T18264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.974541][T18264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.999981][T18264] bridge_slave_0: entered allmulticast mode [ 1167.059161][T18264] bridge_slave_0: entered promiscuous mode [ 1167.102343][T18264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.110259][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.202932][T18264] bridge_slave_1: entered allmulticast mode [ 1167.233270][T18264] bridge_slave_1: entered promiscuous mode [ 1167.271642][ T9644] Bluetooth: hci3: command tx timeout [ 1167.490204][T18264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.545119][T18349] input: syz0 as /devices/virtual/input/input20 [ 1167.615419][T18264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.807557][T18264] team0: Port device team_slave_0 added [ 1167.819964][T18264] team0: Port device team_slave_1 added [ 1167.885682][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1167.885712][ T30] audit: type=1804 audit(2000000186.590:827): pid=18357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2346" name="/newroot/283/bus/bus" dev="overlay" ino=1547 res=1 errno=0 [ 1167.927112][T18264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.947385][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.004910][T18264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.017201][ T30] audit: type=1804 audit(2000000186.710:828): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2346" name="/newroot/283/bus/bus" dev="overlay" ino=1547 res=1 errno=0 [ 1168.075435][T18264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.253249][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.332866][T18364] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2348'. [ 1168.354151][T18264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.441694][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2347'. [ 1168.715923][T18264] hsr_slave_0: entered promiscuous mode [ 1168.757997][T18264] hsr_slave_1: entered promiscuous mode [ 1168.805699][T18264] debugfs: 'hsr0' already exists in 'hsr' [ 1168.830279][T18264] Cannot create hsr debugfs directory [ 1169.421054][ T9644] Bluetooth: hci3: command tx timeout [ 1170.236124][T18391] input: syz1 as /devices/virtual/input/input21 [ 1170.681449][T18403] Set syz0 is full, maxelem 0 reached [ 1170.932973][ T9299] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1171.153277][ T6589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.194310][T18409] input: syz0 as /devices/virtual/input/input22 [ 1171.301922][ T9299] usb 10-1: Using ep0 maxpacket: 8 [ 1171.340521][ T9299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.380573][ T9299] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1171.420204][ T9299] usb 10-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1171.452521][ T9299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.505565][ T9299] usb 10-1: config 0 descriptor?? [ 1171.524786][ T9644] Bluetooth: hci3: command tx timeout [ 1171.538806][ T6589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.827001][T18424] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2358'. [ 1171.836320][T18424] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2358'. [ 1171.856936][T18422] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2360'. [ 1172.103751][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.161084][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.285751][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.393733][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.480056][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.536855][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.591336][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.621047][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.628282][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.665645][ T9299] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 1172.679815][ T9299] logitech 0003:046D:C294.000C: unbalanced collection at end of report description [ 1172.710914][ T9299] logitech 0003:046D:C294.000C: parse failed [ 1172.731292][ T9299] logitech 0003:046D:C294.000C: probe with driver logitech failed with error -22 [ 1172.782588][ T6589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.820513][ T9299] usb 10-1: USB disconnect, device number 7 [ 1172.858177][T18429] input: syz0 as /devices/virtual/input/input23 [ 1173.203978][T18433] input: syz1 as /devices/virtual/input/input24 [ 1173.292644][T18438] [ 1173.295008][T18438] ====================================================== [ 1173.302027][T18438] WARNING: possible circular locking dependency detected [ 1173.309059][T18438] syzkaller #0 Tainted: G L [ 1173.315052][T18438] ------------------------------------------------------ [ 1173.316427][T18440] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2363'. [ 1173.322068][T18438] syz.4.2364/18438 is trying to acquire lock: [ 1173.322089][T18438] ffff88801c6ada20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 1173.347207][T18438] [ 1173.347207][T18438] but task is already holding lock: [ 1173.354577][T18438] ffff8880272b8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1173.365937][T18438] [ 1173.365937][T18438] which lock already depends on the new lock. [ 1173.365937][T18438] [ 1173.376350][T18438] [ 1173.376350][T18438] the existing dependency chain (in reverse order) is: [ 1173.385375][T18438] [ 1173.385375][T18438] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 1173.394205][T18438] blk_alloc_queue+0x610/0x790 [ 1173.399529][T18438] blk_mq_alloc_queue+0x174/0x290 [ 1173.405076][T18438] __blk_mq_alloc_disk+0x29/0x120 [ 1173.410630][T18438] loop_add+0x498/0xb60 [ 1173.415345][T18438] loop_init+0x1d3/0x200 [ 1173.420144][T18438] do_one_initcall+0x11d/0x760 [ 1173.425454][T18438] kernel_init_freeable+0x6e5/0x7a0 [ 1173.431278][T18438] kernel_init+0x1f/0x1e0 [ 1173.436162][T18438] ret_from_fork+0x754/0xd80 [ 1173.441289][T18438] ret_from_fork_asm+0x1a/0x30 [ 1173.446604][T18438] [ 1173.446604][T18438] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1173.453854][T18438] fs_reclaim_acquire+0xc4/0x100 [ 1173.459355][T18438] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1173.465282][T18438] __kernfs_iattrs+0x126/0x400 [ 1173.470598][T18438] __kernfs_setattr+0x4d/0x3c0 [ 1173.475917][T18438] kernfs_iop_setattr+0xda/0x130 [ 1173.481420][T18438] notify_change+0xb25/0x1330 [ 1173.486649][T18438] do_truncate+0x1df/0x240 [ 1173.491620][T18438] path_openat+0x2a55/0x31a0 [ 1173.496773][T18438] do_file_open+0x20e/0x430 [ 1173.501844][T18438] do_sys_openat2+0x10d/0x1e0 [ 1173.507076][T18438] __x64_sys_openat+0x12d/0x210 [ 1173.512469][T18438] do_syscall_64+0x106/0xf80 [ 1173.517605][T18438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.524050][T18438] [ 1173.524050][T18438] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1173.532607][T18438] __lock_acquire+0x14b8/0x2630 [ 1173.538028][T18438] lock_acquire+0x1cf/0x380 [ 1173.543098][T18438] down_read+0x99/0x460 [ 1173.547802][T18438] kernfs_iop_getattr+0x9c/0xf0 [ 1173.553213][T18438] vfs_getattr_nosec+0x2d4/0x430 [ 1173.558714][T18438] vfs_getattr+0x4a/0x60 [ 1173.563495][T18438] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1173.570120][T18438] lo_ioctl+0x13aa/0x1bc0 [ 1173.574988][T18438] blkdev_ioctl+0x5ad/0x6f0 [ 1173.580032][T18438] __x64_sys_ioctl+0x18e/0x210 [ 1173.585499][T18438] do_syscall_64+0x106/0xf80 [ 1173.590629][T18438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.597043][T18438] [ 1173.597043][T18438] other info that might help us debug this: [ 1173.597043][T18438] [ 1173.601535][T18413] Bluetooth: hci5: command 0x0406 tx timeout [ 1173.607339][T18438] Chain exists of: [ 1173.607339][T18438] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 1173.607339][T18438] [ 1173.613387][T18412] Bluetooth: hci4: command 0x0406 tx timeout [ 1173.627756][T18438] Possible unsafe locking scenario: [ 1173.627756][T18438] [ 1173.627771][T18438] CPU0 CPU1 [ 1173.627781][T18438] ---- ---- [ 1173.627791][T18438] lock(&q->q_usage_counter(io)#23); [ 1173.657239][T18438] lock(fs_reclaim); [ 1173.663752][T18438] lock(&q->q_usage_counter(io)#23); [ 1173.671674][T18438] rlock(&root->kernfs_iattr_rwsem); [ 1173.677066][T18438] [ 1173.677066][T18438] *** DEADLOCK *** [ 1173.677066][T18438] [ 1173.685195][T18438] 3 locks held by syz.4.2364/18438: [ 1173.690388][T18438] #0: ffff8880273d7448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 1173.700621][T18438] #1: ffff8880272b8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1173.712361][T18438] #2: ffff8880272b8098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1173.724283][T18438] [ 1173.724283][T18438] stack backtrace: [ 1173.730204][T18438] CPU: 0 UID: 0 PID: 18438 Comm: syz.4.2364 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.730252][T18438] Tainted: [L]=SOFTLOCKUP [ 1173.730263][T18438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1173.730282][T18438] Call Trace: [ 1173.730293][T18438] [ 1173.730308][T18438] dump_stack_lvl+0x100/0x190 [ 1173.730377][T18438] print_circular_bug.cold+0x178/0x1c7 [ 1173.730430][T18438] check_noncircular+0x146/0x160 [ 1173.730483][T18438] __lock_acquire+0x14b8/0x2630 [ 1173.730539][T18438] lock_acquire+0x1cf/0x380 [ 1173.730587][T18438] ? kernfs_iop_getattr+0x9c/0xf0 [ 1173.730629][T18438] ? __pfx___might_resched+0x10/0x10 [ 1173.730664][T18438] down_read+0x99/0x460 [ 1173.730701][T18438] ? kernfs_iop_getattr+0x9c/0xf0 [ 1173.730738][T18438] ? find_held_lock+0x2b/0x80 [ 1173.730807][T18438] ? __pfx_down_read+0x10/0x10 [ 1173.730843][T18438] ? kernfs_root+0xee/0x2a0 [ 1173.730879][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.730923][T18438] kernfs_iop_getattr+0x9c/0xf0 [ 1173.730964][T18438] vfs_getattr_nosec+0x2d4/0x430 [ 1173.731027][T18438] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 1173.731070][T18438] vfs_getattr+0x4a/0x60 [ 1173.731129][T18438] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1173.731178][T18438] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 1173.731242][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.731283][T18438] lo_ioctl+0x13aa/0x1bc0 [ 1173.731333][T18438] ? __pfx_lo_ioctl+0x10/0x10 [ 1173.731379][T18438] ? tomoyo_path_number_perm+0x46d/0x580 [ 1173.731420][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.731474][T18438] ? kasan_quarantine_put+0x104/0x240 [ 1173.731514][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.731552][T18438] ? blk_get_meta_cap+0xd4/0x6c0 [ 1173.731598][T18438] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1173.731644][T18438] ? tomoyo_path_number_perm+0x28f/0x580 [ 1173.731680][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.731722][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.731759][T18438] ? blkdev_common_ioctl+0x515/0x2ba0 [ 1173.731809][T18438] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1173.731863][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.731900][T18438] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1173.731943][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.731980][T18438] ? do_vfs_ioctl+0x226/0x13e0 [ 1173.732018][T18438] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1173.732061][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.732106][T18438] ? find_held_lock+0x2b/0x80 [ 1173.732142][T18438] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1173.732181][T18438] ? __pfx_lo_ioctl+0x10/0x10 [ 1173.732227][T18438] blkdev_ioctl+0x5ad/0x6f0 [ 1173.732274][T18438] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1173.732323][T18438] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1173.732370][T18438] __x64_sys_ioctl+0x18e/0x210 [ 1173.732409][T18438] do_syscall_64+0x106/0xf80 [ 1173.732438][T18438] ? irqentry_exit+0x138/0x670 [ 1173.732470][T18438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.732502][T18438] RIP: 0033:0x7f6525d9c819 [ 1173.732531][T18438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.732567][T18438] RSP: 002b:00007f6526cf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.732603][T18438] RAX: ffffffffffffffda RBX: 00007f6526015fa0 RCX: 00007f6525d9c819 [ 1173.732627][T18438] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1173.732646][T18438] RBP: 00007f6525e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1173.732665][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.732683][T18438] R13: 00007f6526016038 R14: 00007f6526015fa0 R15: 00007fff46a0a008 [ 1173.732714][T18438] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1174.134481][ T6589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.444637][T18440] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1174.480743][T18440] 0ªî{X¹¦: entered allmulticast mode [ 1174.514875][T18440] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1175.053443][ T6589] bridge_slave_1: left allmulticast mode [ 1175.059188][ T6589] bridge_slave_1: left promiscuous mode [ 1175.081459][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.102389][ T6589] bridge_slave_0: left allmulticast mode [ 1175.108125][ T6589] bridge_slave_0: left promiscuous mode [ 1175.132115][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.330179][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.342412][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.355837][ T6589] bond0 (unregistering): Released all slaves [ 1175.768685][ T6589] hsr_slave_0: left promiscuous mode [ 1175.792494][ T6589] hsr_slave_1: left promiscuous mode [ 1175.798373][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.811339][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.831091][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.840440][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.856228][ T6589] veth1_macvtap: left promiscuous mode [ 1175.862767][ T6589] veth0_macvtap: left promiscuous mode [ 1175.868297][ T6589] veth1_vlan: left promiscuous mode [ 1175.874108][ T6589] veth0_vlan: left promiscuous mode [ 1176.070244][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 1176.088229][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 1176.452033][ T6589] IPVS: stop unused estimator thread 0... [ 1176.547370][ T6589] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.634837][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.644237][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.654839][ T6589] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.737772][ T6589] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.817528][ T6589] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.949037][ T6589] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.997296][ T6589] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.057413][ T6589] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.119315][ T6589] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.230867][ T6589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.304350][ T6589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.390917][ T6589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.463948][ T6589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.620477][ T6589] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.687691][ T6589] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.747225][ T6589] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.800941][ T6589] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.912463][ T6589] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.963855][ T6589] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.037228][ T6589] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.068606][ T6589] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.212725][ T6589] bridge_slave_1: left allmulticast mode [ 1178.218430][ T6589] bridge_slave_1: left promiscuous mode [ 1178.225695][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.242558][ T6589] bridge_slave_0: left allmulticast mode [ 1178.248268][ T6589] bridge_slave_0: left promiscuous mode [ 1178.255637][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.266639][ T6589] bridge_slave_1: left allmulticast mode [ 1178.272667][ T6589] bridge_slave_1: left promiscuous mode [ 1178.278358][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.287819][ T6589] bridge_slave_0: left allmulticast mode [ 1178.293588][ T6589] bridge_slave_0: left promiscuous mode [ 1178.299292][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.312313][ T6589] bridge_slave_1: left allmulticast mode [ 1178.317988][ T6589] bridge_slave_1: left promiscuous mode [ 1178.324004][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.335227][ T6589] bridge_slave_0: left allmulticast mode [ 1178.340933][ T6589] bridge_slave_0: left promiscuous mode [ 1178.347184][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.357271][ T6589] bridge_slave_1: left allmulticast mode [ 1178.363635][ T6589] bridge_slave_1: left promiscuous mode [ 1178.369653][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.382463][ T6589] bridge_slave_0: left allmulticast mode [ 1178.388124][ T6589] bridge_slave_0: left promiscuous mode [ 1178.394402][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.403810][ T6589] bridge_slave_1: left allmulticast mode [ 1178.409970][ T6589] bridge_slave_1: left promiscuous mode [ 1178.415972][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.424490][ T6589] bridge_slave_0: left allmulticast mode [ 1178.430195][ T6589] bridge_slave_0: left promiscuous mode [ 1178.436509][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.446595][ T6589] bridge_slave_1: left allmulticast mode [ 1178.452342][ T6589] bridge_slave_1: left promiscuous mode [ 1178.458045][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.466646][ T6589] bridge_slave_0: left allmulticast mode [ 1178.472445][ T6589] bridge_slave_0: left promiscuous mode [ 1178.478703][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.735118][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.745681][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.755960][ T6589] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1178.764661][ T6589] bond0 (unregistering): Released all slaves [ 1178.817552][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.828274][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.837996][ T6589] bond0 (unregistering): Released all slaves [ 1178.904103][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.914734][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.926197][ T6589] bond0 (unregistering): Released all slaves [ 1179.032624][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.043103][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.052967][ T6589] bond0 (unregistering): Released all slaves [ 1179.146355][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.156877][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.167126][ T6589] bond0 (unregistering): Released all slaves [ 1179.271464][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.282240][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.292362][ T6589] bond0 (unregistering): Released all slaves [ 1180.068178][ T6589] hsr_slave_0: left promiscuous mode [ 1180.074322][ T6589] hsr_slave_1: left promiscuous mode [ 1180.080138][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.087957][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.099508][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.110513][ T6589] hsr_slave_0: left promiscuous mode [ 1180.116367][ T6589] hsr_slave_1: left promiscuous mode [ 1180.122263][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.129863][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.140735][ T6589] hsr_slave_0: left promiscuous mode [ 1180.147628][ T6589] hsr_slave_1: left promiscuous mode [ 1180.154152][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.161640][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.169896][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.177602][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.187009][ T6589] hsr_slave_0: left promiscuous mode [ 1180.193031][ T6589] hsr_slave_1: left promiscuous mode [ 1180.199147][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.210717][ T6589] batadv0: mtu less than device minimum [ 1180.217203][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.228430][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.239534][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.250635][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.262013][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.273054][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.284118][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.295125][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.306219][ T6589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1180.326539][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.335050][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.354260][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.362126][ T6589] batman_adv: batadv0: Interface deactivated: dummy0 [ 1180.368813][ T6589] batman_adv: batadv0: Removing interface: dummy0 [ 1180.376851][ T6589] hsr_slave_0: left promiscuous mode [ 1180.382634][ T6589] hsr_slave_1: left promiscuous mode [ 1180.388464][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.395949][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.403888][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.411315][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.420062][ T6589] hsr_slave_0: left promiscuous mode [ 1180.426207][ T6589] hsr_slave_1: left promiscuous mode [ 1180.432870][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1180.452715][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.460466][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1180.479927][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.487598][ T6589] batman_adv: batadv0: Interface deactivated: dummy0 [ 1180.494332][ T6589] batman_adv: batadv0: Removing interface: dummy0 [ 1180.511608][ T6589] veth1_macvtap: left promiscuous mode [ 1180.517087][ T6589] veth0_macvtap: left promiscuous mode [ 1180.523530][ T6589] veth1_macvtap: left promiscuous mode [ 1180.529007][ T6589] veth0_macvtap: left promiscuous mode [ 1180.534571][ T6589] veth1_vlan: left promiscuous mode [ 1180.539808][ T6589] veth0_vlan: left promiscuous mode [ 1180.546354][ T6589] veth1_macvtap: left promiscuous mode [ 1180.552982][ T6589] veth0_macvtap: left promiscuous mode [ 1180.559239][ T6589] veth1_macvtap: left promiscuous mode [ 1180.564750][ T6589] veth0_macvtap: left promiscuous mode [ 1180.571187][ T6589] veth1_macvtap: left promiscuous mode [ 1180.576670][ T6589] veth0_macvtap: left promiscuous mode [ 1180.864783][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 1180.877417][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 1181.016258][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 1181.028299][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 1181.164055][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 1181.175810][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 1181.304144][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 1181.333139][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 1181.429271][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 1181.444157][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 1181.554283][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 1181.566241][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 1182.907849][ T6589] IPVS: stop unused estimator thread 0...